Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.mft
File: zTf5VqTOlOsexk52R7Q828uPxEk.mft (raw, json)
Hash identifier: u5ZeBo/z0fNhCLROMYsAW9/fbBd3v1ZGZ2lGelCoT10=
Subject key identifier: F6:F3:70:D2:B5:CA:A7:A9:49:49:2B:2E:81:C8:28:8C:6F:33:4D:F7
Authority key identifier: CD:37:F9:56:A4:CE:94:EB:1E:C6:4E:76:47:B4:3C:DB:CB:8F:C4:49
Certificate issuer: /CN=cd37f956a4ce94eb1ec64e7647b43cdbcb8fc449
Certificate serial: 019A4D743F4AD4CE475657CDB93D63B384A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTf5VqTOlOsexk52R7Q828uPxEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.mft
Manifest number: 16C5
Signing time: Tue 04 Nov 2025 06:00:55 +0000
Manifest this update: Tue 04 Nov 2025 06:00:55 +0000
Manifest next update: Wed 05 Nov 2025 06:00:55 +0000
Files and hashes: 1: zTf5VqTOlOsexk52R7Q828uPxEk.crl (hash: PuI9Rd1k6kVW7lDomYmtZRBE1zxd1PEY4BtM86WOk2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTf5VqTOlOsexk52R7Q828uPxEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:3f:4a:d4:ce:47:56:57:cd:b9:3d:63:b3:84:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd37f956a4ce94eb1ec64e7647b43cdbcb8fc449
Validity
Not Before: Nov 4 06:00:55 2025 GMT
Not After : Nov 5 06:00:55 2025 GMT
Subject: CN=f6f370d2b5caa7a949492b2e81c8288c6f334df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5a:c9:46:16:48:d9:0f:2a:1c:e9:b7:43:5d:
98:7c:82:a0:67:c4:f9:1e:bf:62:88:08:e4:42:50:
09:d0:59:80:62:2c:53:53:59:51:92:09:20:3f:6d:
7b:38:c4:60:05:02:57:05:8a:4f:1e:3d:d3:56:4f:
30:80:f4:a5:a0:48:a2:35:ea:4b:90:ae:5e:ca:eb:
97:f0:52:99:12:91:f0:ea:6e:65:bf:c7:a5:91:44:
2a:63:ba:79:72:f4:6b:c7:6a:15:4f:7f:77:28:3a:
46:7b:46:41:81:96:ad:90:ad:aa:a6:8d:1e:b7:77:
43:04:f2:55:ab:41:c6:01:5c:7b:e3:6e:10:ca:ca:
fb:73:21:41:89:7e:1c:9f:08:b6:50:11:32:45:a4:
68:6a:e6:76:41:80:fb:e1:07:bb:ac:37:61:aa:fc:
a2:6e:81:ef:af:de:00:c8:05:6a:7b:0f:58:5e:17:
47:61:92:4c:b6:6c:1d:fd:c0:6d:c8:7f:ca:70:01:
50:32:9b:4a:8f:38:5f:9e:bc:a0:af:31:78:e0:3d:
45:4a:7a:85:71:d7:73:30:e5:85:8d:83:0a:f7:84:
f2:e8:5b:1b:be:62:6b:c2:e6:d8:6c:b1:8e:86:38:
73:88:5b:7c:34:bc:89:a6:e2:e5:b3:82:40:05:90:
ef:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F3:70:D2:B5:CA:A7:A9:49:49:2B:2E:81:C8:28:8C:6F:33:4D:F7
X509v3 Authority Key Identifier:
keyid:CD:37:F9:56:A4:CE:94:EB:1E:C6:4E:76:47:B4:3C:DB:CB:8F:C4:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTf5VqTOlOsexk52R7Q828uPxEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:52:f2:ae:7c:5f:4a:f4:4d:51:17:d0:25:b1:b4:8a:15:85:
f5:55:20:07:d0:84:53:89:26:28:82:c8:f2:52:c6:cf:b5:8c:
d2:57:40:42:f0:f2:58:39:27:a9:46:d2:51:f9:8a:f1:83:bf:
5a:4f:62:8e:e8:e1:12:22:ad:75:c9:c8:10:ac:8e:73:41:1c:
5c:c3:75:75:d2:b0:27:bf:9c:4d:8b:06:38:08:af:cb:9a:8e:
f5:d9:73:41:9d:ed:29:51:38:cf:5d:49:2b:bd:5d:46:5d:13:
9c:f6:39:65:0b:6f:ec:f8:8a:48:3f:00:5c:2f:e9:d6:87:1d:
25:2b:93:d9:44:5f:3f:d7:c8:9d:fb:bc:2c:f3:23:6e:e5:ed:
99:c8:e2:63:b6:a6:4d:32:f9:be:56:ba:16:d7:fc:bf:af:51:
6a:b8:32:30:be:c4:be:08:4a:35:e9:ca:f2:f5:bf:5c:9d:47:
c8:8b:1c:eb:7d:53:02:63:9b:89:11:49:16:39:c4:1c:43:d2:
8c:69:0d:ec:21:f1:93:84:90:13:b9:85:b8:73:5d:b0:ec:20:
9d:23:d4:34:56:34:ad:ac:84:a6:08:b3:8c:03:f5:d4:b7:c5:
a2:f6:1a:3a:39:12:dc:ac:a5:d1:cb:80:f5:b2:5f:0b:5f:f8:
c3:87:cd:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:18:58 2025 by rpki-client