Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
File: zQClIzLRIChgRQsg56vE9-Afdk4.mft (raw, json)
Hash identifier: hCGC8pnf0CJMCmNSgmYsJeZJrkJ8o5xSaQNLKXXt5tw=
Subject key identifier: B7:A8:87:16:95:46:9F:9A:DE:1D:9A:63:19:B2:11:85:57:1D:80:99
Authority key identifier: CD:00:A5:23:32:D1:20:28:60:45:0B:20:E7:AB:C4:F7:E0:1F:76:4E
Certificate issuer: /CN=cd00a52332d1202860450b20e7abc4f7e01f764e
Certificate serial: 019A526371C1568D42E95191E3282320B8DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
Manifest number: 0670
Signing time: Wed 05 Nov 2025 05:00:39 +0000
Manifest this update: Wed 05 Nov 2025 05:00:39 +0000
Manifest next update: Thu 06 Nov 2025 05:00:39 +0000
Files and hashes: 1: zQClIzLRIChgRQsg56vE9-Afdk4.crl (hash: Uu1VmEOBS3p61LnTtmHCH5KiMCWF6l2WlhQintcP7Hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:71:c1:56:8d:42:e9:51:91:e3:28:23:20:b8:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd00a52332d1202860450b20e7abc4f7e01f764e
Validity
Not Before: Nov 5 05:00:39 2025 GMT
Not After : Nov 6 05:00:39 2025 GMT
Subject: CN=b7a8871695469f9ade1d9a6319b21185571d8099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ef:1d:61:b4:42:8c:ce:84:93:92:c2:3c:8b:
b2:58:54:c7:b8:e2:42:22:81:4c:8f:0f:c1:62:0a:
7b:45:a8:59:bf:06:3e:a9:3b:72:4e:94:d8:f9:c0:
79:77:c3:42:6e:45:c8:3c:de:a2:e7:07:33:13:ef:
94:62:7c:45:94:4e:97:17:b9:4e:e7:e5:5f:25:91:
00:9a:be:68:25:5d:77:59:1b:7c:16:eb:5c:f7:1d:
9d:62:92:b7:de:0a:9d:fa:ec:fb:64:11:44:cd:be:
19:b9:18:9c:bf:97:14:48:b5:fb:d5:e0:31:79:5e:
21:f1:29:ec:0e:43:7c:d6:82:4a:af:de:d5:af:ca:
32:a3:13:bb:34:ef:47:b0:e9:c2:9e:63:ec:c2:82:
5d:3a:13:12:ec:89:e5:be:be:6b:f5:c5:53:fb:fb:
58:13:59:14:4d:2e:37:0c:4c:0a:58:ec:2a:b2:e7:
19:d1:c1:c4:28:57:83:22:e8:4c:e8:fa:19:c1:7e:
61:86:83:6f:86:63:d0:71:f2:77:e3:79:52:d5:eb:
fd:92:cb:5d:78:84:28:86:d1:07:32:3e:d1:49:29:
4a:00:35:e9:c6:b2:39:bd:80:03:7d:b9:2c:70:61:
87:d9:27:46:ce:06:49:78:8c:40:21:fa:3a:1a:7a:
cd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A8:87:16:95:46:9F:9A:DE:1D:9A:63:19:B2:11:85:57:1D:80:99
X509v3 Authority Key Identifier:
keyid:CD:00:A5:23:32:D1:20:28:60:45:0B:20:E7:AB:C4:F7:E0:1F:76:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:56:d5:e9:9c:15:22:28:69:30:a4:6e:bb:12:b1:b9:4e:35:
b7:0b:99:a2:ab:4d:69:67:17:b7:99:85:16:0a:55:97:28:28:
27:da:12:18:2b:26:a6:0b:dd:44:e3:a9:c1:dc:80:6c:22:f0:
22:ab:37:ca:8e:75:09:73:ee:99:6e:0a:bf:18:60:8a:95:81:
71:05:05:02:3a:10:b1:38:4c:20:0d:38:f8:19:4e:78:64:86:
61:a3:10:27:a5:45:2f:5e:6d:6d:2a:74:19:1a:8a:80:18:2d:
3e:78:29:eb:3b:4d:76:6a:0b:21:8c:96:54:d4:c1:cb:59:6b:
3f:74:52:da:9f:c9:32:b8:3b:85:0e:3f:c0:b1:b9:2d:9a:99:
05:1a:f4:48:05:31:9b:e9:f2:23:6c:ca:63:bd:7a:71:cf:22:
6a:7f:39:b1:df:d6:94:02:ca:54:c7:57:01:da:6e:71:9e:b7:
58:44:33:7f:ee:e5:3b:c8:90:46:1c:07:af:57:e1:b4:be:25:
62:28:78:c7:f6:b6:e8:e0:a6:68:66:77:44:ed:b6:ed:49:b3:
a8:b5:2b:3d:5b:2a:16:2f:90:1a:b3:23:7c:5b:f6:8c:f0:22:
85:a2:8f:d2:a5:09:ae:f0:90:a6:87:03:4c:ea:cc:58:4c:8c:
2a:a7:b9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:30:34 2025 by rpki-client