Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
File: z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft (raw, json)
Hash identifier: HsrsKhliA2kUV5SUURvSdZ+LEYzbjDKpBWG6xUgSOq8=
Subject key identifier: 9E:62:93:A3:21:C1:18:7A:8F:C3:78:86:00:17:C0:CF:76:7A:C8:79
Authority key identifier: CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
Certificate issuer: /CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Certificate serial: 019A4EF5D2BE44247CD5A52BBDC2121B5214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 13:02:04 +0000
Manifest this update: Tue 04 Nov 2025 13:02:04 +0000
Manifest next update: Wed 05 Nov 2025 13:02:04 +0000
Files and hashes: 1: z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl (hash: +VP9WpmI/LR2YOZm6VKfh5cURoeWK3DPPmHc0Hs6RsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:d2:be:44:24:7c:d5:a5:2b:bd:c2:12:1b:52:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Validity
Not Before: Nov 4 13:02:04 2025 GMT
Not After : Nov 5 13:02:04 2025 GMT
Subject: CN=9e6293a321c1187a8fc378860017c0cf767ac879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cc:42:b9:fe:a4:0c:33:1f:27:13:4e:f3:eb:
61:3f:02:36:b2:6b:49:7f:cc:c8:05:3e:46:c0:28:
42:13:c5:63:7f:00:eb:00:f1:2f:46:5d:1e:c1:5a:
63:58:23:54:6d:44:74:6d:21:aa:d4:08:a2:2d:aa:
a9:6d:4c:87:6f:2d:80:f3:5a:ba:1d:e6:31:32:c0:
2c:07:1b:03:42:d3:fb:d5:8c:c2:a2:c6:15:4d:43:
a3:81:00:e9:09:c0:78:b3:4c:d9:25:86:f7:dd:22:
b1:7f:20:71:19:5e:b9:15:97:68:24:84:b0:fd:90:
6a:4f:11:0f:aa:c5:0d:ed:67:f9:b3:8b:c3:e4:72:
c4:90:97:ef:bd:9e:cb:58:94:68:16:2a:37:37:e9:
0b:e9:21:c5:17:7f:02:4e:ec:fd:f2:d1:c1:65:54:
14:0c:2b:70:a5:db:a8:3c:6e:a0:64:cf:08:dd:e7:
66:f3:f2:bd:bc:0c:70:65:75:99:77:36:7f:2f:db:
7d:59:07:9d:ab:cf:ca:09:c7:73:a7:50:51:ae:a8:
cb:e0:86:6b:e6:55:29:f5:f2:cf:5b:0d:6c:9a:ca:
eb:c0:7c:5b:49:68:f3:d9:e5:da:d3:1b:83:bc:43:
d9:25:52:e1:fd:e6:c0:70:7e:10:ee:25:7e:0f:5d:
8b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:62:93:A3:21:C1:18:7A:8F:C3:78:86:00:17:C0:CF:76:7A:C8:79
X509v3 Authority Key Identifier:
keyid:CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:52:5a:06:92:4a:5c:7b:21:1e:63:6b:84:fe:91:97:01:02:
90:ea:ed:b6:bd:b1:5f:2c:0d:ec:79:57:57:7a:68:58:d7:fa:
dd:36:42:39:5c:9d:eb:b1:bc:34:03:cf:f9:18:7a:54:18:86:
8c:23:0b:db:09:ca:be:11:12:08:cd:bc:4e:26:0d:db:bd:90:
8f:83:e0:ad:e8:c0:44:78:25:08:35:12:fc:5a:c6:54:50:97:
c5:4f:43:fe:9b:4c:68:0a:f8:a8:b4:11:85:7d:61:ef:1b:60:
41:ad:af:3a:9a:c7:1b:be:aa:62:ca:98:54:2c:8a:fc:d2:92:
b5:56:7f:92:d4:13:0e:48:eb:c9:59:6c:8b:65:5b:0b:e7:f1:
5b:48:e0:c4:df:e0:7e:48:88:d9:7f:36:4a:20:46:bd:32:6d:
5a:fa:dc:41:ea:d6:1f:17:2a:8c:c0:f8:39:d3:af:bb:02:f4:
4b:8c:f2:e3:3f:59:97:b8:b8:27:04:46:a2:a9:11:c4:34:4d:
a0:4d:b3:e6:59:40:0f:d0:66:c4:fb:bd:05:ff:09:9c:90:8f:
a3:79:52:fd:cb:cf:76:bd:2d:c9:5c:b6:11:c1:eb:32:0b:b7:
d1:8f:76:02:38:66:7f:19:1b:48:36:e9:56:40:64:19:42:cd:
8b:5a:61:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:05 2025 by rpki-client