Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft
File: zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft (raw, json)
Hash identifier: +sFqzFqYCAPCxmFhz7yYcLLzRdhgZGzUlUUKJ6y1fTg=
Subject key identifier: 68:DB:68:C4:C1:17:04:90:65:25:B9:43:DC:00:7B:CC:45:5D:F0:D8
Authority key identifier: CF:2E:3D:1F:FF:9B:D5:47:9A:13:30:F8:8F:A2:EC:07:C0:EA:EC:49
Certificate issuer: /CN=cf2e3d1fff9bd5479a1330f88fa2ec07c0eaec49
Certificate serial: 019A4E4F7B13F7493EEC50C754996341DEED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft
Manifest number: 09E9
Signing time: Tue 04 Nov 2025 10:00:22 +0000
Manifest this update: Tue 04 Nov 2025 10:00:22 +0000
Manifest next update: Wed 05 Nov 2025 10:00:22 +0000
Files and hashes: 1: zy49H_-b1UeaEzD4j6LsB8Dq7Ek.crl (hash: 6vKItxYocUNnMqXRvInRT8llXZ9yDdM/COjdDQ3u41g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft
rsync://rpki.ripe.net/repository/DEFAULT/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:7b:13:f7:49:3e:ec:50:c7:54:99:63:41:de:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2e3d1fff9bd5479a1330f88fa2ec07c0eaec49
Validity
Not Before: Nov 4 10:00:22 2025 GMT
Not After : Nov 5 10:00:22 2025 GMT
Subject: CN=68db68c4c11704906525b943dc007bcc455df0d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:3f:9e:38:31:98:be:70:d4:9e:1d:b8:a0:f7:
bb:ce:ec:23:a3:67:71:5c:29:1d:d5:e3:ba:37:1e:
41:96:98:89:19:90:7e:5e:b3:47:d3:56:47:d3:cf:
a4:3c:67:0f:47:1b:e7:3c:d0:4d:6c:07:84:db:cd:
ae:ee:af:cb:e1:c0:34:f1:b4:38:ba:5d:69:b9:ee:
bb:19:ad:11:0e:e3:5d:c1:73:03:70:7b:76:13:95:
04:55:16:c3:95:e9:bd:2a:ff:a5:d9:02:a7:ca:74:
e0:85:69:0c:70:c5:a8:a6:ae:31:f4:e2:a0:d4:02:
b7:68:d1:d1:d3:60:b4:e5:4f:fb:21:a4:db:68:c7:
cc:1f:de:04:67:13:c0:1a:75:b0:67:33:75:98:a4:
5b:cb:b0:1a:1b:45:26:f9:8f:3b:74:77:d4:c5:8e:
0f:cd:e4:97:c9:d8:c3:4e:6e:ab:90:0f:2d:c2:4a:
ad:8b:d3:de:29:18:55:0b:12:7a:ee:92:1c:77:78:
7b:1a:65:8a:1c:29:fb:fc:01:0e:a9:70:c7:f3:fe:
40:78:64:03:38:f6:8e:7d:0d:e6:00:53:5f:ef:0e:
4c:2b:f9:2f:a0:be:77:86:5a:b1:f4:15:a6:61:4b:
28:a5:33:b2:92:0e:cd:7d:a1:c9:d6:86:ed:ce:fe:
b7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DB:68:C4:C1:17:04:90:65:25:B9:43:DC:00:7B:CC:45:5D:F0:D8
X509v3 Authority Key Identifier:
keyid:CF:2E:3D:1F:FF:9B:D5:47:9A:13:30:F8:8F:A2:EC:07:C0:EA:EC:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:a1:81:b5:3e:82:a3:fc:8f:c3:d7:75:60:6b:5d:b0:8a:d8:
bd:fe:35:4a:e5:35:ae:7d:ae:eb:32:da:fe:06:fb:32:9e:a7:
a6:6d:b1:34:dd:b7:4e:56:7b:3a:fd:15:f1:b0:59:d1:ef:b1:
f9:12:d4:ed:d2:34:37:e7:0a:b2:ff:0e:5f:a1:e0:58:58:8f:
e1:24:a7:98:32:ed:ee:56:e4:ce:8a:6b:c2:0b:b4:dd:48:2f:
55:21:23:07:00:b4:e9:30:7f:f0:d8:78:da:33:b2:7b:54:5e:
c8:2b:2e:7f:72:14:a3:b6:06:c7:9f:94:3f:80:a2:33:9e:d7:
4c:32:ce:ed:0b:0f:c0:9c:fa:2d:2a:5d:90:75:75:34:45:fa:
80:15:3a:ff:d3:38:26:5a:c3:ee:65:d9:a6:38:b0:6c:2f:09:
b3:14:2d:e4:2f:9f:9e:3f:84:9b:dd:49:93:2a:37:72:f4:49:
b6:70:cc:c4:04:b3:62:3b:54:39:23:7e:ca:07:7b:29:0f:0e:
c9:b7:0e:db:05:11:fb:49:4a:c9:c5:74:7e:3a:89:00:fb:a0:
13:bb:ed:cc:66:8f:4a:a5:bf:d8:7e:cd:6f:96:47:64:5a:2a:
73:9d:8c:90:77:87:3d:d4:f6:6e:ac:c9:2e:0e:31:b7:a2:b5:
fb:37:a6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:13 2025 by rpki-client