Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft
File: Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft (raw, json)
Hash identifier: QBk9IlasRbqHq8UetAG80jzKrg/Nfy9eQNd7L/eCDlQ=
Subject key identifier: EA:55:8C:8A:6B:5B:5E:69:14:27:BD:56:55:F7:FC:E2:06:4A:84:FE
Authority key identifier: 67:9B:D7:8E:38:19:77:0C:11:6E:57:7B:AC:FA:D1:99:33:92:BD:B8
Certificate issuer: /CN=679bd78e3819770c116e577bacfad1993392bdb8
Certificate serial: 019A4DE1625B001430B6F5C868B5BD2E1BB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5vXjjgZdwwRbld7rPrRmTOSvbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft
Manifest number: 116B
Signing time: Tue 04 Nov 2025 08:00:07 +0000
Manifest this update: Tue 04 Nov 2025 08:00:07 +0000
Manifest next update: Wed 05 Nov 2025 08:00:07 +0000
Files and hashes: 1: Z5vXjjgZdwwRbld7rPrRmTOSvbg.crl (hash: I/C6UWwi5+9dQQJUdMN0n8czN/3cbRiONN7kW9o9jKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5vXjjgZdwwRbld7rPrRmTOSvbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:62:5b:00:14:30:b6:f5:c8:68:b5:bd:2e:1b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679bd78e3819770c116e577bacfad1993392bdb8
Validity
Not Before: Nov 4 08:00:07 2025 GMT
Not After : Nov 5 08:00:07 2025 GMT
Subject: CN=ea558c8a6b5b5e691427bd5655f7fce2064a84fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6d:66:f1:a5:89:ba:31:6d:4c:46:36:d5:f1:
99:23:af:85:5c:44:d8:b2:45:3a:ad:27:ff:af:71:
52:d7:2a:1e:d0:ca:d1:9d:93:21:17:38:b6:a8:1b:
eb:cd:a6:26:44:b1:0a:89:e8:d1:da:91:67:74:de:
b6:16:20:d4:dd:42:34:72:6d:08:fb:f4:c1:57:ad:
aa:49:ba:27:d7:57:fb:73:29:91:28:41:44:e6:78:
03:f8:28:c7:f2:03:0b:04:84:be:0c:29:2a:c6:21:
69:ab:ae:1e:f0:7d:68:1c:4e:4c:64:6b:27:b1:1c:
fd:6a:a6:76:fc:e1:2a:19:b4:41:5b:d4:6c:c5:fd:
23:c1:65:b2:20:ff:cf:29:bf:48:d4:21:55:ca:1e:
41:06:b4:20:be:97:11:09:55:38:5d:a6:c6:83:2d:
b8:1c:75:b0:22:9b:a2:e8:48:11:e1:33:68:a5:58:
1e:42:17:63:52:73:42:5e:57:5b:08:49:71:23:22:
9c:b7:88:5a:31:48:2e:4c:bf:23:24:f0:b5:3a:11:
e6:15:be:b6:7a:4c:8f:0f:9e:ea:fc:61:59:f4:66:
f5:8d:7d:da:99:75:45:d6:5b:fa:d8:13:ce:77:bc:
fe:0e:50:ac:41:78:bd:3d:78:a4:4e:68:61:0e:8f:
1a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:55:8C:8A:6B:5B:5E:69:14:27:BD:56:55:F7:FC:E2:06:4A:84:FE
X509v3 Authority Key Identifier:
keyid:67:9B:D7:8E:38:19:77:0C:11:6E:57:7B:AC:FA:D1:99:33:92:BD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5vXjjgZdwwRbld7rPrRmTOSvbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c2:34:9d:64:68:ca:bd:fa:9c:e7:73:b0:15:dc:bf:0b:50:
d1:5d:8c:c0:26:f5:4d:c2:46:1c:42:7e:24:c1:ad:e0:fa:76:
8d:41:82:f3:4c:1a:4e:48:14:b4:61:5a:81:5d:df:ea:1d:c0:
ca:04:eb:20:3b:43:a3:32:03:33:00:d0:0f:45:22:87:d1:e8:
8e:4a:71:23:1c:5f:84:0b:5b:d0:7b:dd:05:cf:51:85:70:01:
4e:f6:5b:40:fd:c2:50:2a:96:96:b8:eb:33:05:70:bf:8b:51:
7e:d6:4c:81:c2:4f:2a:14:19:11:21:26:4d:a2:56:f6:96:43:
92:6a:63:2b:82:c2:30:72:27:bd:69:81:9e:11:a3:38:a0:68:
37:9b:a2:30:02:86:c3:2f:95:a8:36:dd:f1:69:b3:42:f9:bf:
1e:78:f9:f3:9e:5d:63:55:9e:c8:84:5c:a4:09:a6:3d:40:39:
d5:2c:d6:a3:1f:c0:7f:01:35:46:16:c4:20:5d:3e:c5:59:19:
15:3d:ea:26:1d:bb:17:06:36:94:e5:8e:a9:51:c7:c6:28:66:
d2:61:1e:d2:b1:06:0e:66:e3:48:6e:a8:7b:4c:03:1a:f2:30:
d3:8c:e9:00:68:22:82:a9:d6:83:8f:01:8f:44:1f:14:b1:23:
d0:6a:5f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:46 2025 by rpki-client