
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft
File:                     ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft (raw, json)
Hash identifier:          6PFuO4k8Sjs/QlesNVbDQzjG3vUpxLVrMdn92Iiqu4c=
Subject key identifier:   2A:5D:40:96:4A:A9:9F:98:C3:7B:3E:20:C0:75:B5:5B:D8:C0:45:70
Authority key identifier: 64:E1:14:4E:DC:8C:7B:B2:DD:E5:2B:EC:1E:2F:D8:E7:AF:13:B1:DD
Certificate issuer:       /CN=64e1144edc8c7bb2dde52bec1e2fd8e7af13b1dd
Certificate serial:       019A4C97BA7E852828B2D6079527340FFC3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft
Manifest number:          0441
Signing time:             Tue 04 Nov 2025 02:00:03 +0000
Manifest this update:     Tue 04 Nov 2025 02:00:03 +0000
Manifest next update:     Wed 05 Nov 2025 02:00:03 +0000
Files and hashes:         1: ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.crl (hash: BIMWD8XfHzFqfPRKwKxYhlmJTPXRjVI5of9tHxEfKWU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 02:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4c:97:ba:7e:85:28:28:b2:d6:07:95:27:34:0f:fc:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64e1144edc8c7bb2dde52bec1e2fd8e7af13b1dd
        Validity
            Not Before: Nov  4 02:00:03 2025 GMT
            Not After : Nov  5 02:00:03 2025 GMT
        Subject: CN=2a5d40964aa99f98c37b3e20c075b55bd8c04570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:07:9c:c6:28:90:24:d3:a0:64:37:db:88:b3:
                    79:9e:9d:be:f5:1c:de:2e:e5:f3:04:28:c2:e3:d3:
                    66:1c:bf:76:7d:2d:71:f1:95:14:98:a0:d2:ea:34:
                    01:b7:c4:f6:fc:74:3c:43:cb:78:45:38:17:8d:42:
                    03:a5:15:6e:89:3a:70:7a:67:d0:35:af:96:d5:69:
                    55:73:1d:6e:86:d7:a2:24:30:24:1c:03:ad:f3:1f:
                    f5:03:ac:17:0f:b2:c8:4c:cf:98:23:28:40:ef:5c:
                    fc:d5:7f:c8:90:4a:c3:6f:48:a3:8e:9a:03:8a:01:
                    b1:8e:d7:f7:74:93:db:60:8b:04:09:7f:47:98:25:
                    e5:48:e3:b9:d8:57:98:3c:43:c4:df:32:f0:a6:76:
                    e4:4f:de:2f:46:05:aa:ca:e8:69:a4:0d:e8:b9:fd:
                    ba:af:fd:21:d7:c0:ba:2a:d0:8b:3d:96:3d:51:d6:
                    87:18:2f:5e:59:d4:53:c9:5f:5b:94:97:ed:05:9c:
                    ff:9f:b6:37:d0:98:a6:0c:14:8d:8a:1f:0b:b1:0c:
                    9b:83:f5:e6:7c:ec:07:e2:5d:49:61:0b:96:69:b6:
                    81:ad:22:a1:2b:cd:f2:80:2a:32:8e:bf:c3:0d:e9:
                    32:16:d9:00:53:ad:38:36:9a:62:0f:af:d7:91:ac:
                    cc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:5D:40:96:4A:A9:9F:98:C3:7B:3E:20:C0:75:B5:5B:D8:C0:45:70
            X509v3 Authority Key Identifier:
                keyid:64:E1:14:4E:DC:8C:7B:B2:DD:E5:2B:EC:1E:2F:D8:E7:AF:13:B1:DD
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         89:52:37:4d:29:b1:43:74:9d:6b:78:ef:83:52:73:99:1c:26:
         55:70:8b:93:35:48:c3:c2:4d:27:ed:32:b4:02:22:5d:c3:4c:
         c4:23:9e:7b:b3:8e:ff:98:f0:d0:a5:61:89:ef:50:1e:b5:4d:
         b1:6a:00:dd:84:0f:ac:2a:b3:6b:3f:b3:19:b1:23:75:a8:23:
         be:8c:79:25:85:70:64:0d:fd:c1:e3:c8:0e:be:cc:e1:c3:0f:
         da:3f:7e:2e:db:a8:55:d9:c5:53:c0:1a:b8:c1:59:97:5c:34:
         36:e5:e5:ca:f2:4d:06:2c:3e:28:4a:12:15:f2:de:76:4a:2c:
         0b:a7:d9:58:d1:dd:3d:75:b7:67:5c:87:7e:56:66:fd:c8:8c:
         74:2a:14:f5:b8:e0:68:34:e4:fe:54:d3:c5:93:71:d9:ff:69:
         85:47:34:1b:7c:49:b6:4b:8f:5c:bf:95:e4:0b:fa:9c:8d:5c:
         e8:10:7e:0f:e8:88:4d:1a:58:d5:15:36:aa:47:21:fd:ed:59:
         07:89:df:21:45:14:64:ad:14:7b:e6:c5:96:b9:08:62:49:74:
         3d:76:42:6b:31:5c:78:cf:30:7e:2c:0f:ff:33:fa:5f:ec:ba:
         d7:80:19:87:e4:61:41:25:fb:c4:e8:20:ae:5c:4e:68:cd:98:
         49:d8:9f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 10:51:05 2025 by rpki-client