Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft
File: ZZM7eU5VgCwQRah18DOqDKdKD74.mft (raw, json)
Hash identifier: mm7h85YMJQ4ji0UyaF6/Ggqu/5xHMQV47Au5uuDomCU=
Subject key identifier: 50:B5:4C:B1:50:E2:11:84:B1:DA:B9:EC:0C:6B:D8:2C:E7:5B:16:11
Authority key identifier: 65:93:3B:79:4E:55:80:2C:10:45:A8:75:F0:33:AA:0C:A7:4A:0F:BE
Certificate issuer: /CN=65933b794e55802c1045a875f033aa0ca74a0fbe
Certificate serial: 019A4DE21C09A23949040DC7E26E964662DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZM7eU5VgCwQRah18DOqDKdKD74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft
Manifest number: 1473
Signing time: Tue 04 Nov 2025 08:00:55 +0000
Manifest this update: Tue 04 Nov 2025 08:00:55 +0000
Manifest next update: Wed 05 Nov 2025 08:00:55 +0000
Files and hashes: 1: ZZM7eU5VgCwQRah18DOqDKdKD74.crl (hash: CWDRFz3S3nRtCo2tdAnYFUMeM3DHo2VaijEXjmO7ueE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZM7eU5VgCwQRah18DOqDKdKD74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:1c:09:a2:39:49:04:0d:c7:e2:6e:96:46:62:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65933b794e55802c1045a875f033aa0ca74a0fbe
Validity
Not Before: Nov 4 08:00:55 2025 GMT
Not After : Nov 5 08:00:55 2025 GMT
Subject: CN=50b54cb150e21184b1dab9ec0c6bd82ce75b1611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0d:3a:b7:3c:e5:26:c2:91:68:3c:40:a8:ad:
05:35:15:fa:5f:8b:5f:5e:35:57:c8:7a:fd:7c:c0:
c3:f4:7c:01:d9:8c:94:33:79:22:2a:aa:86:d0:c5:
5f:dc:50:b5:10:e9:b7:ff:03:da:7f:8b:c0:10:e9:
5a:bc:93:0a:52:e5:91:ed:8e:d2:38:69:f8:02:6e:
95:dd:9b:e5:55:72:62:69:3e:dd:ad:03:72:fc:22:
e8:93:4c:f7:40:37:da:d0:92:b1:c9:b5:13:2b:2e:
62:99:42:ed:38:30:28:24:92:d6:e8:4e:54:56:92:
e1:b4:82:b4:e5:bc:fa:a8:50:06:97:b3:57:cb:bd:
09:8e:06:37:3d:a0:8a:ff:27:3f:65:7a:3f:fb:5f:
b8:3d:72:5f:cc:67:33:b1:be:6f:3b:02:d1:64:37:
21:b0:b4:2b:7d:c1:b5:84:10:c1:c6:5e:8d:9a:ba:
e4:8b:9a:f0:c3:8b:99:c9:e2:52:bb:d9:15:4c:b3:
28:ad:dc:ee:89:5f:c6:1e:fa:8e:da:f6:ca:ef:44:
79:5f:e4:3f:1f:45:ae:dc:22:a5:e7:b8:32:49:6a:
03:6e:65:3e:56:42:20:cf:93:e1:3e:43:c1:0b:5e:
6b:1c:86:d1:2e:bb:0a:76:00:d5:68:19:39:f9:6c:
1a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B5:4C:B1:50:E2:11:84:B1:DA:B9:EC:0C:6B:D8:2C:E7:5B:16:11
X509v3 Authority Key Identifier:
keyid:65:93:3B:79:4E:55:80:2C:10:45:A8:75:F0:33:AA:0C:A7:4A:0F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZM7eU5VgCwQRah18DOqDKdKD74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:95:a4:ef:03:8f:20:80:32:d4:d0:3e:bf:da:0e:5b:ad:f3:
e7:52:73:2d:a8:63:94:e1:8a:a5:91:b3:75:8e:e2:d3:49:da:
f6:a3:aa:f0:4e:0b:ad:cd:0c:93:85:1e:26:db:1a:b3:ac:33:
87:60:f0:99:71:64:de:35:b8:69:fb:fe:5f:59:7a:99:80:1e:
7e:e4:ed:cd:55:ae:57:26:81:6b:74:bc:83:8f:b8:32:56:90:
14:56:46:d3:66:3e:be:4d:d7:87:be:76:f5:a5:de:20:2a:f7:
3d:d1:af:c3:b0:08:89:43:f2:9e:33:ca:c8:39:dd:cd:b4:20:
c6:6c:1d:bb:dd:9e:c4:33:8d:c1:d6:05:b5:f1:fd:6d:76:ae:
9f:cd:7b:e4:43:b3:83:5c:51:78:47:e4:3e:32:99:2c:1b:1e:
f0:23:69:8f:1f:e4:ce:15:80:18:1f:63:d3:87:76:c7:3a:ce:
f6:b0:03:85:f6:91:c3:10:b4:2a:b5:49:0f:b1:76:cf:4d:18:
a2:51:6c:d0:36:03:d1:b7:b4:0e:6b:0d:95:1a:b9:ab:d8:02:
45:42:6a:4b:c2:95:79:c6:c2:31:07:41:f5:3b:10:ff:11:13:
c5:76:eb:a4:ba:f2:cf:85:a7:62:fc:a6:df:a1:fd:d4:c8:68:
d0:4b:f5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:45 2025 by rpki-client