Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft
File: ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft (raw, json)
Hash identifier: Uyat7wWSzrKUhSa3LlnZa1hBFFjBzmPh1uVX6c2aAPE=
Subject key identifier: AC:54:9D:28:49:61:DE:38:EE:D1:75:C0:0D:A5:CB:36:C1:E5:5C:18
Authority key identifier: 66:83:A9:6C:F5:11:A6:79:19:D9:00:F3:FC:93:40:99:34:1F:87:D8
Certificate issuer: /CN=6683a96cf511a67919d900f3fc934099341f87d8
Certificate serial: 019A4D075A3678621D62843C34E9995901A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft
Manifest number: 0EEB
Signing time: Tue 04 Nov 2025 04:01:58 +0000
Manifest this update: Tue 04 Nov 2025 04:01:58 +0000
Manifest next update: Wed 05 Nov 2025 04:01:58 +0000
Files and hashes: 1: ZoOpbPURpnkZ2QDz_JNAmTQfh9g.crl (hash: cOGHf7RbKDBkSoJEhUjnwFwYrFY3SpYHVlo9lLzvyJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:5a:36:78:62:1d:62:84:3c:34:e9:99:59:01:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6683a96cf511a67919d900f3fc934099341f87d8
Validity
Not Before: Nov 4 04:01:58 2025 GMT
Not After : Nov 5 04:01:58 2025 GMT
Subject: CN=ac549d284961de38eed175c00da5cb36c1e55c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cb:8c:f3:72:e9:38:b6:33:c0:18:fa:8d:3a:
3d:09:9b:36:74:20:04:5e:11:8e:a3:ef:d4:d3:79:
05:31:dd:8d:84:87:ba:a6:12:84:84:81:75:1a:e7:
0d:ba:1e:92:24:88:68:0d:f9:7e:f6:56:f5:62:1f:
6a:ea:e5:79:d5:b1:70:e9:be:46:f3:74:e6:ff:8d:
bc:22:3d:ec:98:d4:54:7c:bb:10:f0:87:18:71:4e:
8d:7d:c3:4d:c6:2f:f1:45:77:d4:8e:b2:62:3b:e0:
3a:61:a7:b5:4e:c8:3d:86:58:1e:30:02:f7:1f:49:
b5:dc:b7:a8:e8:bb:14:46:14:95:d5:1b:43:92:10:
7c:9d:9b:39:e8:6f:95:90:ed:b2:c4:d5:ff:59:00:
9b:cc:11:bb:a6:44:41:4d:89:c7:95:03:4a:ba:7d:
0a:ab:5e:c2:6b:94:7d:26:df:5d:6c:c6:13:fd:06:
fb:34:ac:52:c8:cc:b7:ed:1f:53:c4:18:0d:16:df:
64:24:2b:e8:76:c8:c5:06:75:ce:9c:74:00:27:0d:
01:f8:d7:8c:2b:cf:7f:72:7a:25:34:be:77:61:9b:
7e:9c:fb:a4:b2:0c:27:45:de:45:67:ca:18:fd:d7:
60:0a:45:39:0f:29:e2:f4:48:0b:50:8a:4e:aa:61:
46:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:54:9D:28:49:61:DE:38:EE:D1:75:C0:0D:A5:CB:36:C1:E5:5C:18
X509v3 Authority Key Identifier:
keyid:66:83:A9:6C:F5:11:A6:79:19:D9:00:F3:FC:93:40:99:34:1F:87:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:28:ef:b4:ee:e7:83:49:74:88:f3:83:82:a5:2c:4e:a9:aa:
54:3e:79:77:74:4b:2e:e6:f8:17:33:94:d0:41:dc:e7:db:5d:
25:5b:17:3b:7b:8d:75:19:d4:a9:c9:35:2d:8e:4a:c8:06:71:
6c:e5:74:cc:00:db:bf:df:59:f6:84:2c:3c:f1:27:84:b3:d6:
d6:00:f6:9e:62:18:e0:25:26:df:ed:36:dd:d4:53:f6:8c:b3:
9c:63:76:21:ed:94:ad:21:6a:61:05:ab:03:bd:c9:c3:3a:ba:
40:ba:b2:5b:40:c1:9a:03:72:f6:5a:b8:7d:fd:55:96:ee:05:
0a:8f:e9:5f:92:0e:d1:a4:49:5a:23:cf:a7:0d:6f:e0:47:7a:
0b:12:36:74:0c:8d:de:25:b8:9a:60:eb:fc:29:ad:7c:9d:1c:
e2:f5:12:81:9b:6f:ca:53:6e:19:a3:d5:f8:8c:50:51:21:a9:
53:a6:1c:0e:41:6d:c4:aa:b3:02:95:ee:66:33:70:cf:a2:c6:
e5:94:d7:f2:73:b6:76:02:f0:f1:f9:20:fe:60:af:6f:6d:3a:
44:ba:23:0c:9a:7c:80:64:74:d1:01:df:44:89:14:6b:54:f9:
36:42:69:cc:0d:40:2b:29:25:e2:3a:80:48:92:2e:88:49:65:
6d:be:ab:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:59 2025 by rpki-client