Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft
File: zoip7Zmtl6w3FxISn-BU9pbcVn0.mft (raw, json)
Hash identifier: S43st1hk1xqSXi7Ez4FgFByggyRku9WB3lstqcZIGsI=
Subject key identifier: 67:AD:C4:5F:0D:8C:45:F5:7A:A9:0C:05:2B:4F:A3:E4:F0:26:7A:70
Authority key identifier: CE:88:A9:ED:99:AD:97:AC:37:17:12:12:9F:E0:54:F6:96:DC:56:7D
Certificate issuer: /CN=ce88a9ed99ad97ac371712129fe054f696dc567d
Certificate serial: 019A4EF4F634EA3B9E2AD57EC06BF984FD66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zoip7Zmtl6w3FxISn-BU9pbcVn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft
Manifest number: 0506
Signing time: Tue 04 Nov 2025 13:01:07 +0000
Manifest this update: Tue 04 Nov 2025 13:01:07 +0000
Manifest next update: Wed 05 Nov 2025 13:01:07 +0000
Files and hashes: 1: zoip7Zmtl6w3FxISn-BU9pbcVn0.crl (hash: kwHL7FN2IbNA5wgBSUA9aU7zTBlFzdAJ2peYV7rURkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zoip7Zmtl6w3FxISn-BU9pbcVn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:f6:34:ea:3b:9e:2a:d5:7e:c0:6b:f9:84:fd:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce88a9ed99ad97ac371712129fe054f696dc567d
Validity
Not Before: Nov 4 13:01:07 2025 GMT
Not After : Nov 5 13:01:07 2025 GMT
Subject: CN=67adc45f0d8c45f57aa90c052b4fa3e4f0267a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8d:3a:f2:c3:93:af:c4:60:76:56:81:d3:9b:
94:25:a2:78:24:74:4b:0b:87:19:ca:91:55:d6:74:
51:20:28:73:23:2d:71:42:7c:6e:d5:04:b9:8e:a7:
a3:da:5c:61:9e:17:24:74:1b:d7:09:ba:41:97:c4:
cb:1c:18:a8:c8:32:c9:c6:f3:55:27:8f:a7:38:c6:
5d:b4:f3:6a:f7:86:d2:d9:34:11:9f:b6:30:f8:31:
b7:91:09:fb:05:45:2e:66:a5:ce:a3:c1:ad:7e:3f:
6f:a6:c6:21:35:3d:e3:88:8d:13:90:15:11:e0:01:
c8:e4:cb:a7:4d:08:3d:8f:3f:2d:43:bb:37:fa:b4:
3f:d8:b7:06:06:ab:c7:e7:11:8a:24:ed:0f:a8:96:
71:75:6e:28:84:c0:6a:fd:ee:14:ca:ae:7d:c0:39:
37:c1:6a:34:34:aa:9d:c6:9b:47:52:d1:d4:80:5e:
d5:9e:bd:f3:d2:c9:f8:10:31:0d:4e:93:18:9d:6a:
d6:d5:9a:99:c2:b1:30:d1:ae:a6:c6:67:25:60:e3:
ad:1d:8e:a5:20:c6:9b:31:fa:8e:2c:16:e8:88:4d:
1b:e0:51:b3:39:d9:64:91:06:9d:86:55:17:62:d9:
96:85:15:79:c5:8e:f1:ae:bf:68:e1:2b:d5:01:9c:
92:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AD:C4:5F:0D:8C:45:F5:7A:A9:0C:05:2B:4F:A3:E4:F0:26:7A:70
X509v3 Authority Key Identifier:
keyid:CE:88:A9:ED:99:AD:97:AC:37:17:12:12:9F:E0:54:F6:96:DC:56:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoip7Zmtl6w3FxISn-BU9pbcVn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:20:14:5b:28:af:58:2a:19:74:12:e6:bf:73:95:0f:24:6f:
44:38:70:52:85:46:87:c9:85:27:29:de:e4:0b:57:3c:64:db:
53:45:38:59:90:59:fc:e7:8b:b6:2e:17:28:15:f9:68:b7:4d:
24:c0:0a:94:8f:ed:6a:7f:7e:4f:c4:1e:62:63:45:c4:ad:4f:
c4:84:0e:dd:88:eb:8b:9f:bd:09:4e:3e:d5:da:29:b6:88:a3:
9f:09:e8:78:7c:df:8a:8c:60:8b:cd:25:78:90:c7:f8:69:95:
49:1d:68:aa:bc:87:0f:da:54:87:47:41:e7:ce:ab:90:ef:28:
90:2e:4d:81:5f:43:b4:83:0a:cc:92:6d:65:87:94:e6:22:c7:
ed:70:7e:a4:68:ad:11:7b:05:54:78:97:5a:d9:80:04:01:5f:
d5:f7:24:19:e1:bf:63:fe:d5:29:c8:f7:31:e2:00:d5:77:05:
bd:ad:9c:1d:a9:8b:82:7c:1c:a0:c0:df:b6:85:f1:d3:a1:73:
ad:11:c6:49:07:be:3f:16:82:cd:49:b5:74:5a:15:af:32:0c:
c0:f3:57:16:74:91:57:f8:1b:a2:a4:80:23:d8:f7:32:07:61:
05:44:a0:81:6a:90:4c:30:91:1d:3c:13:ce:0e:7d:94:ce:ee:
24:70:51:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:39:30 2025 by rpki-client