Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
File: z_-U05EdBEp2YYbXaqSgkTbYnXw.mft (raw, json)
Hash identifier: YiwRKTqjJVP89TI5bdMiOjrYQnrbA63qnN6ZFHj8bxo=
Subject key identifier: 7B:36:10:08:FC:A7:CE:3A:26:F3:A2:5B:AE:B3:84:CD:7B:C4:08:03
Authority key identifier: CF:FF:94:D3:91:1D:04:4A:76:61:86:D7:6A:A4:A0:91:36:D8:9D:7C
Certificate issuer: /CN=cfff94d3911d044a766186d76aa4a09136d89d7c
Certificate serial: 019A4D06CA515C54B88D27DCE15F462EDA5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
Manifest number: 1099
Signing time: Tue 04 Nov 2025 04:01:21 +0000
Manifest this update: Tue 04 Nov 2025 04:01:21 +0000
Manifest next update: Wed 05 Nov 2025 04:01:21 +0000
Files and hashes: 1: z_-U05EdBEp2YYbXaqSgkTbYnXw.crl (hash: 8Ker2kfGmStbYW015O3wFZDum3ZPSNR4c093KUleJmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:ca:51:5c:54:b8:8d:27:dc:e1:5f:46:2e:da:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfff94d3911d044a766186d76aa4a09136d89d7c
Validity
Not Before: Nov 4 04:01:21 2025 GMT
Not After : Nov 5 04:01:21 2025 GMT
Subject: CN=7b361008fca7ce3a26f3a25baeb384cd7bc40803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fe:a9:72:51:46:4a:6f:31:d2:09:7c:e4:9d:
df:8a:b2:53:95:39:d8:c8:03:86:41:6e:f6:63:0f:
5e:cf:c0:6c:7e:28:a1:c0:87:55:53:f0:1b:d9:d2:
79:5b:f5:dc:94:65:7b:6c:ac:25:c5:e0:5b:ce:f6:
3a:0e:2b:66:e6:1c:89:a0:0e:fb:29:ea:c6:55:f1:
a6:57:ba:a0:9a:72:85:07:dc:26:4f:3d:13:89:5f:
ac:76:04:5f:46:97:42:09:18:3a:e8:84:ca:57:7a:
39:ab:69:9d:e9:cf:d6:a1:2f:e0:d7:f6:36:76:4d:
e1:6c:0e:7a:44:4a:32:0e:67:ec:28:eb:94:bf:85:
bd:91:90:8a:7f:8e:c6:8a:4e:09:ee:85:22:aa:b5:
38:9e:35:54:43:49:ff:18:80:a4:ce:64:4e:b7:00:
9e:c8:38:65:bf:32:01:5d:13:84:05:6c:8c:cf:8d:
00:0a:ce:e8:d9:b0:5d:7c:0e:1e:f8:68:f8:4d:f6:
61:f2:de:7f:4a:3d:b3:a4:77:1b:fd:9f:4c:11:cf:
53:98:21:e4:f4:4d:6d:ea:b7:36:4c:a2:2d:6d:a1:
48:f9:71:71:ca:5e:f1:24:ea:9f:05:d0:b3:f7:f5:
e3:89:a4:02:a8:f3:2c:dd:3f:96:6f:ab:1e:50:bd:
4b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:36:10:08:FC:A7:CE:3A:26:F3:A2:5B:AE:B3:84:CD:7B:C4:08:03
X509v3 Authority Key Identifier:
keyid:CF:FF:94:D3:91:1D:04:4A:76:61:86:D7:6A:A4:A0:91:36:D8:9D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ab:c4:a0:53:de:08:81:fe:5e:ef:8a:10:9f:21:7a:36:e1:
e7:ee:9b:e3:07:03:41:24:d4:c2:e7:03:ec:b4:d0:ee:c2:5a:
87:c8:15:2c:38:e0:c0:64:26:05:39:4f:6e:fe:39:32:5a:7f:
f5:f4:da:b1:c1:a1:4a:b6:33:db:35:ab:e6:18:15:9b:3b:d1:
88:2d:34:f6:7b:6b:bb:cb:d6:37:a4:5c:ca:eb:ab:85:9e:73:
fb:cc:c4:2e:9d:86:43:2a:6f:8a:7c:ee:78:24:91:97:fb:26:
dd:02:40:00:23:98:34:e2:ff:0e:7c:25:c6:ab:7d:23:62:09:
11:5b:25:79:05:60:7e:30:02:c8:83:6c:55:e5:9b:2c:c1:0b:
7c:94:3b:bd:77:6b:60:70:f6:3c:7d:88:7d:dc:ae:74:e2:16:
ea:4f:10:69:b9:1f:ae:1e:83:a0:bf:a1:db:6b:cc:48:39:5f:
67:da:fe:5b:7b:f8:dc:ff:69:19:4b:79:38:6c:40:46:5b:c9:
0d:69:8e:79:19:6b:92:c4:d3:c2:14:d3:3c:61:46:a4:50:c3:
78:97:a7:0a:f4:c2:b5:75:5a:88:24:e2:23:05:34:72:f4:79:
1f:ae:df:4f:e2:3b:3a:5a:01:b5:91:7d:1e:d5:62:bc:45:b4:
51:c0:87:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:46 2025 by rpki-client