Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
File: zeICwBqCkO6VMl06Tzf_QOmWSPo.mft (raw, json)
Hash identifier: YVZuyPtujHJUWOXi+H6qMOjXNDMJYDA2+tKXf7flwGQ=
Subject key identifier: B6:F3:8E:D5:C2:1D:BB:3E:A4:FC:A3:5B:79:27:EC:FC:31:E9:72:7D
Authority key identifier: CD:E2:02:C0:1A:82:90:EE:95:32:5D:3A:4F:37:FF:40:E9:96:48:FA
Certificate issuer: /CN=cde202c01a8290ee95325d3a4f37ff40e99648fa
Certificate serial: 019A4EF523331FC845DBEA5ECC3A2A1BC137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
Manifest number: 1064
Signing time: Tue 04 Nov 2025 13:01:19 +0000
Manifest this update: Tue 04 Nov 2025 13:01:19 +0000
Manifest next update: Wed 05 Nov 2025 13:01:19 +0000
Files and hashes: 1: zeICwBqCkO6VMl06Tzf_QOmWSPo.crl (hash: y1/Krz8VSa8MFnvidAEcmn9d5EjAfTwzO65E232R248=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:23:33:1f:c8:45:db:ea:5e:cc:3a:2a:1b:c1:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cde202c01a8290ee95325d3a4f37ff40e99648fa
Validity
Not Before: Nov 4 13:01:19 2025 GMT
Not After : Nov 5 13:01:19 2025 GMT
Subject: CN=b6f38ed5c21dbb3ea4fca35b7927ecfc31e9727d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3b:8e:8c:75:dd:01:3e:1c:5a:11:51:c5:65:
44:bf:05:f4:48:d6:b9:23:4e:f4:30:03:44:c4:9e:
8e:a6:81:57:5a:bf:58:e0:78:d6:a5:6b:ea:41:cd:
6f:5b:94:c5:ad:5e:1f:65:9d:c0:ba:3d:8f:ee:44:
1a:d0:bf:e0:2f:b6:a3:f8:ae:7a:bc:ee:f6:30:94:
6f:b8:72:28:a5:92:02:43:b3:a0:fc:6c:ff:61:5b:
63:db:9c:be:16:dc:16:28:28:a1:64:fa:74:e6:37:
6a:23:62:c8:f4:a4:c5:9f:c6:76:87:43:59:61:5b:
55:f2:79:32:82:e4:90:e9:0d:c8:49:95:21:45:92:
c4:3f:20:47:6c:6a:cf:e5:3f:42:38:91:33:16:02:
8b:77:a9:73:65:63:d7:f2:71:18:58:39:25:94:42:
31:8a:36:ce:77:e3:6e:14:0a:13:91:ad:7c:ef:03:
42:c8:3f:a9:f0:bb:a6:37:d0:7c:59:d5:9c:4b:ed:
f8:2e:f8:4f:29:65:a4:a9:46:88:d7:89:06:bb:93:
91:7d:b1:9d:c6:73:c6:f0:de:1a:95:27:86:e4:f6:
21:57:25:94:af:ed:bc:9c:4a:31:75:dc:21:54:f9:
f7:e9:19:50:83:30:02:8a:2e:52:d5:e9:6a:a5:55:
e7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F3:8E:D5:C2:1D:BB:3E:A4:FC:A3:5B:79:27:EC:FC:31:E9:72:7D
X509v3 Authority Key Identifier:
keyid:CD:E2:02:C0:1A:82:90:EE:95:32:5D:3A:4F:37:FF:40:E9:96:48:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:2f:7b:71:c5:cf:2c:2e:1d:96:08:76:fd:4b:f4:10:cc:48:
5d:59:d8:1d:73:d9:96:24:a0:48:92:5a:e3:fc:4b:9e:a6:59:
f3:a3:3e:2b:4a:ee:06:10:68:85:83:15:2b:f0:b8:36:50:99:
89:82:ad:50:f6:dc:5b:10:e1:ce:5d:50:c2:de:e0:21:4c:ec:
87:5d:95:c0:8a:28:d6:8b:57:36:c2:d4:c5:8d:22:96:04:c4:
be:fb:6b:f4:66:47:c5:14:56:98:3f:06:71:aa:88:ae:4e:89:
d6:71:ca:10:47:b5:6a:3d:e1:08:7c:60:96:a9:1c:cf:5f:75:
28:19:1d:15:c3:cd:9c:b6:6c:08:16:ec:a5:5d:45:66:84:bf:
d6:35:8f:94:3d:3b:f7:37:39:5e:d2:13:37:0b:14:2b:f1:49:
39:76:30:d7:81:f4:c4:33:e5:79:ef:ef:2f:33:93:a6:98:ad:
25:58:1f:6f:3e:e7:1b:f2:d3:aa:9b:3e:ac:d9:c8:af:60:a9:
2b:c0:f4:a3:9a:5a:1c:bc:cb:66:74:0f:0c:7a:f0:83:0b:42:
47:c3:49:cd:35:77:6e:c3:1d:e1:3c:f6:d5:95:2f:1f:8e:58:
7a:ef:dd:73:3e:f3:14:63:39:50:39:cd:87:7c:aa:b3:71:5d:
eb:55:e7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:04:55 2025 by rpki-client