Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
File: Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft (raw, json)
Hash identifier: /IERPf1JcB2uLoUuqb98V07cb4ErHhyHaLtOgPE2wxY=
Subject key identifier: 85:58:83:6B:EF:B6:2E:CC:21:52:7E:0E:7C:02:31:47:5A:EB:6C:24
Authority key identifier: 66:2F:BF:09:AE:68:86:EC:7D:D5:86:B4:A3:4B:1D:C9:73:7E:87:7D
Certificate issuer: /CN=662fbf09ae6886ec7dd586b4a34b1dc9737e877d
Certificate serial: 019A522C6B1406E475F4D56C7971B5E7EC5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zi-_Ca5ohux91Ya0o0sdyXN-h30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
Manifest number: 152C
Signing time: Wed 05 Nov 2025 04:00:33 +0000
Manifest this update: Wed 05 Nov 2025 04:00:33 +0000
Manifest next update: Thu 06 Nov 2025 04:00:33 +0000
Files and hashes: 1: Zi-_Ca5ohux91Ya0o0sdyXN-h30.crl (hash: BTgN2oXJUx0dab0vWKq2A2tY+89ABCli2tdDCKZt3Pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zi-_Ca5ohux91Ya0o0sdyXN-h30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:6b:14:06:e4:75:f4:d5:6c:79:71:b5:e7:ec:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662fbf09ae6886ec7dd586b4a34b1dc9737e877d
Validity
Not Before: Nov 5 04:00:33 2025 GMT
Not After : Nov 6 04:00:33 2025 GMT
Subject: CN=8558836befb62ecc21527e0e7c0231475aeb6c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:10:6c:ae:3b:33:27:88:09:9f:57:ba:98:49:
17:6c:b1:2a:77:a4:be:2b:bb:41:5a:ad:78:08:c4:
9c:31:c4:a3:99:50:f2:5e:4f:71:b7:ce:2c:43:19:
dc:ed:e7:b7:db:e8:07:98:f0:19:2d:b8:86:52:85:
8f:d1:35:25:73:89:1a:aa:6c:af:d7:4a:23:9d:12:
2c:82:cc:a5:a1:1c:3b:c4:1d:58:8c:b5:0e:a2:d0:
ed:22:7f:58:87:6a:f9:42:2b:5c:79:a2:66:33:69:
9e:2d:30:f3:48:2e:72:3b:89:96:6b:10:b7:3b:ab:
38:87:06:65:01:44:34:e2:09:84:35:0a:5a:2b:48:
59:23:7a:7e:60:2b:f6:bf:34:f4:33:61:46:9d:df:
04:1e:58:d6:ae:76:bd:7c:9f:b1:d4:ce:45:81:d9:
7b:67:d1:6f:3e:b9:ba:d0:5c:4d:da:8c:79:75:84:
8b:c5:41:79:41:13:01:e7:f9:e8:87:60:2b:27:58:
5a:f6:57:43:58:8e:98:5b:ec:87:be:fb:04:2b:a9:
0e:33:f6:2c:8f:cd:26:53:6c:20:5d:70:0d:c1:fd:
57:7b:ed:6c:86:df:09:d5:f7:6a:2b:3f:7b:48:bc:
9b:b2:5d:f3:1a:00:e6:17:25:ea:6e:1f:74:15:c6:
72:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:58:83:6B:EF:B6:2E:CC:21:52:7E:0E:7C:02:31:47:5A:EB:6C:24
X509v3 Authority Key Identifier:
keyid:66:2F:BF:09:AE:68:86:EC:7D:D5:86:B4:A3:4B:1D:C9:73:7E:87:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zi-_Ca5ohux91Ya0o0sdyXN-h30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:e5:8e:10:d6:8a:d5:94:76:5f:7c:a4:61:55:f3:32:fc:df:
bd:3a:57:cd:3e:33:76:f1:3e:c1:8c:6e:a1:e9:25:69:2a:2c:
fc:15:9b:61:54:6a:96:e4:34:55:be:36:e3:24:2a:87:85:69:
a8:92:ae:ef:4e:61:0a:40:a6:c4:a8:e0:47:a6:82:d7:a6:4d:
95:e5:d8:c4:07:70:e3:3e:dc:f0:57:50:ae:a1:35:80:c9:00:
4d:3e:c6:6d:f2:6d:4b:7e:eb:8e:4f:c9:22:0e:57:34:af:2c:
fa:ed:3e:eb:c9:7d:a9:86:2c:20:04:10:17:bf:be:92:9f:4c:
e0:b2:2a:bd:7d:06:e3:e8:54:b4:11:4a:eb:54:77:69:2e:e5:
92:44:45:cf:22:24:b8:88:73:36:ad:a7:2c:73:3e:d6:f4:7d:
aa:62:36:e2:0f:8f:f6:80:dc:ac:4d:1f:b6:37:73:68:04:13:
4c:a9:f9:59:aa:43:8c:cc:50:49:89:57:03:40:bd:10:dc:8c:
41:32:19:1a:45:cc:1e:9a:e5:61:7d:7a:54:5f:8e:f9:f8:fa:
57:7c:5d:bd:c4:27:c6:bd:08:04:9b:6b:fd:1a:2c:e0:87:05:
98:bb:c2:2c:31:8a:fa:ca:ce:b4:60:56:a1:5d:c4:bc:3a:96:
8f:4e:15:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:52:29 2025 by rpki-client