Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
File: 1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft (raw, json)
Hash identifier: Im9BCI7wRaqCheFPP2wVg2VZRWdSlyCOYnthWlaULYc=
Subject key identifier: BF:A8:78:7A:42:9C:87:0D:DD:26:9F:29:E5:3B:3A:AC:EF:66:E4:F6
Authority key identifier: D5:99:AD:82:CA:0F:DB:A0:6F:E0:8B:7B:9E:0D:13:73:B7:1C:B4:69
Certificate issuer: /CN=d599ad82ca0fdba06fe08b7b9e0d1373b71cb469
Certificate serial: 019A4EF5304968F2D8DB116E61D88E57BD36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
Manifest number: 1004
Signing time: Tue 04 Nov 2025 13:01:22 +0000
Manifest this update: Tue 04 Nov 2025 13:01:22 +0000
Manifest next update: Wed 05 Nov 2025 13:01:22 +0000
Files and hashes: 1: 1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl (hash: wCDUWXkp2L5M20DW0nWIlgzJk7sFgRvtbVGlgepcRmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:30:49:68:f2:d8:db:11:6e:61:d8:8e:57:bd:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d599ad82ca0fdba06fe08b7b9e0d1373b71cb469
Validity
Not Before: Nov 4 13:01:22 2025 GMT
Not After : Nov 5 13:01:22 2025 GMT
Subject: CN=bfa8787a429c870ddd269f29e53b3aacef66e4f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:37:63:e0:ca:44:59:12:e7:b7:08:d2:25:26:
cb:33:dc:63:92:81:d2:92:cb:42:70:0d:fa:4e:34:
a1:12:0f:1c:09:1b:78:1c:ad:fe:3c:6b:75:0b:11:
84:c2:65:8c:99:82:ad:72:b2:62:b0:6d:ee:c7:b4:
d9:e4:02:c6:85:68:48:29:90:c3:7a:55:da:2a:f8:
b1:8d:cb:16:4a:0b:7f:bc:3b:37:04:6a:0d:e9:54:
75:a5:55:b0:09:da:d9:81:c3:97:02:ee:2f:c8:80:
08:90:30:89:54:3c:4c:62:47:c5:df:68:43:1a:99:
e0:f5:29:e4:7b:ec:2c:be:8f:9d:3f:02:a8:22:37:
06:94:76:fa:b7:af:4d:1a:ea:fc:21:17:f6:05:57:
0a:cb:f7:0e:f2:6a:a4:79:7d:d5:f6:26:4a:77:d5:
82:63:e4:fd:87:70:be:75:3e:0c:9c:15:7a:58:ec:
7f:53:c6:d1:f6:e2:ef:55:79:ef:21:1e:cd:35:54:
ad:fe:43:56:5a:4e:5a:97:81:0b:b9:09:b6:65:20:
7f:fc:ea:8f:30:04:b9:0c:3e:dd:13:ba:13:8b:0b:
32:f7:4a:be:ac:35:5b:7f:f1:aa:39:a6:68:8b:77:
84:03:c1:98:b4:84:4c:fe:25:c1:16:65:35:ef:86:
97:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A8:78:7A:42:9C:87:0D:DD:26:9F:29:E5:3B:3A:AC:EF:66:E4:F6
X509v3 Authority Key Identifier:
keyid:D5:99:AD:82:CA:0F:DB:A0:6F:E0:8B:7B:9E:0D:13:73:B7:1C:B4:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:db:1b:c2:15:63:bc:57:0d:d3:34:e7:41:04:d8:2c:43:ed:
1f:14:75:08:72:e2:70:02:09:4a:8d:d3:9a:58:98:ee:9b:b6:
80:2b:2d:3f:09:b4:9b:88:30:51:ce:28:66:5c:91:4e:ee:3c:
55:94:3f:9c:b4:39:7f:9c:0e:07:b8:14:9d:30:46:80:2e:f3:
2a:c9:e9:78:bb:42:07:e2:db:6c:95:07:dc:8b:0c:13:d9:a2:
04:89:50:9c:8e:9a:eb:83:be:b6:d9:c1:3e:4e:42:49:26:cc:
3e:a6:3d:8c:7b:cb:8b:9c:6b:26:bb:cd:50:0c:ea:e2:cb:9d:
f2:5d:27:00:0d:12:47:9c:21:06:e7:fe:6f:62:6f:a1:0f:dc:
f5:bf:01:82:4d:68:0d:f9:eb:83:88:9f:ed:2e:44:5b:b6:1e:
3c:4b:e1:bf:0b:1f:c2:7d:e6:6c:9a:75:21:ad:8b:c0:b5:be:
81:5e:ea:9b:54:0e:5c:d5:7f:7a:37:b4:c0:c1:46:d4:8f:eb:
33:13:a5:7f:08:31:8c:39:05:08:9f:b3:b3:82:26:9c:fd:e5:
03:e5:43:c0:b1:86:d3:b6:c2:1a:71:7f:81:96:a4:5e:67:44:
98:a4:e9:02:f1:98:b0:19:53:ff:80:c3:22:29:d3:4a:a9:9e:
f2:7f:a4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:31 2025 by rpki-client