Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
File: zZIJohaMSNNQk7ucBSCxn7D-FDs.mft (raw, json)
Hash identifier: DDgIvY1vAMs1gmzp67z2yMs4xcVnbnzJx4ZrA2mW8xw=
Subject key identifier: 92:B3:40:C2:16:85:50:A4:1A:4D:10:81:A1:BA:87:D9:65:D7:F1:D6
Authority key identifier: CD:92:09:A2:16:8C:48:D3:50:93:BB:9C:05:20:B1:9F:B0:FE:14:3B
Certificate issuer: /CN=cd9209a2168c48d35093bb9c0520b19fb0fe143b
Certificate serial: 019A4E50051AD563C5424EEBA61092BAB32D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZIJohaMSNNQk7ucBSCxn7D-FDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
Manifest number: 0B5A
Signing time: Tue 04 Nov 2025 10:00:58 +0000
Manifest this update: Tue 04 Nov 2025 10:00:58 +0000
Manifest next update: Wed 05 Nov 2025 10:00:58 +0000
Files and hashes: 1: zZIJohaMSNNQk7ucBSCxn7D-FDs.crl (hash: SkPEgvsvaIOWOPyCmy7H4xSo+REDWooZqG80/bTyQ4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZIJohaMSNNQk7ucBSCxn7D-FDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:50:05:1a:d5:63:c5:42:4e:eb:a6:10:92:ba:b3:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9209a2168c48d35093bb9c0520b19fb0fe143b
Validity
Not Before: Nov 4 10:00:58 2025 GMT
Not After : Nov 5 10:00:58 2025 GMT
Subject: CN=92b340c2168550a41a4d1081a1ba87d965d7f1d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:47:8d:01:e3:59:2a:bc:71:46:ad:d6:6d:cd:
b1:92:6b:9c:0e:a4:7a:a2:f8:03:09:6c:5a:72:6d:
93:72:52:12:84:9f:ab:e0:2b:5b:2e:d4:13:09:0a:
01:51:46:d5:cc:7f:5e:47:bc:f3:66:db:b1:f7:13:
bb:6f:d0:42:7c:8d:dc:c9:0b:9b:5a:13:59:99:ed:
34:d2:27:9a:92:fe:55:8e:bc:eb:4d:13:33:8a:79:
bc:c5:c6:d8:95:dd:c8:4f:ad:d8:e1:75:e8:db:ce:
88:89:40:b0:9c:46:8d:01:4d:9e:4c:0f:6d:ef:c0:
e2:14:75:42:d0:4a:91:21:f4:a1:5e:33:b7:7e:b6:
ed:f3:28:c4:3f:73:7e:fd:17:76:44:67:4d:20:50:
28:19:c0:6e:47:77:b5:97:bc:49:74:88:e1:fd:37:
8d:9e:4b:71:20:42:06:00:a2:f1:65:cd:cb:e3:75:
a1:7d:ec:60:db:cc:bb:dd:f6:8d:4f:8c:11:ca:ce:
59:73:12:de:41:36:9b:3e:23:9d:ce:00:8b:b6:91:
72:84:d4:d5:1e:18:e0:ab:bc:42:3d:b1:ea:f0:bd:
02:ac:8f:7c:a1:25:c9:80:0f:94:08:94:5b:95:48:
f4:58:63:75:82:33:9f:45:00:92:c1:db:29:d0:b1:
0b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B3:40:C2:16:85:50:A4:1A:4D:10:81:A1:BA:87:D9:65:D7:F1:D6
X509v3 Authority Key Identifier:
keyid:CD:92:09:A2:16:8C:48:D3:50:93:BB:9C:05:20:B1:9F:B0:FE:14:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZIJohaMSNNQk7ucBSCxn7D-FDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c5:ae:3c:ef:23:93:63:bf:e3:45:94:0c:0a:2b:98:c1:b9:
af:47:9d:34:48:28:c8:0c:1a:d0:d7:6e:a5:5a:73:78:10:af:
a7:63:bd:b0:f7:e1:f0:dc:43:cf:39:b3:60:5e:96:49:26:d6:
4d:56:b1:9e:79:73:a3:48:b1:c2:66:3a:1b:ba:5e:4d:b3:e0:
d5:41:05:a8:3f:f2:e8:04:85:8d:4e:20:53:f8:c9:a5:3b:83:
78:60:42:b6:53:90:c6:45:b8:bf:8c:69:6a:b8:29:fc:cf:9f:
26:bc:0c:83:80:f9:80:0e:75:f3:40:e4:61:3b:00:31:8b:54:
3c:7d:5e:45:89:d7:56:1a:67:63:16:d7:48:dc:76:7d:27:4b:
f4:1f:3b:5b:8f:5f:d7:8a:57:98:e5:d1:40:98:df:d4:d5:3c:
aa:b3:e8:c8:a6:67:2a:b8:80:5d:ff:2a:78:66:b2:99:d1:ef:
07:f8:64:79:8d:c2:3c:19:82:c8:dc:4c:33:ac:ba:cf:be:ab:
aa:19:70:9b:15:cb:8b:ca:03:31:0c:d6:1e:3b:11:79:03:45:
a2:1e:c6:27:e7:98:01:f2:75:1f:d6:0f:cd:bc:9d:8b:08:10:
65:c5:ee:a5:11:28:f1:16:42:55:44:ee:0c:9e:3f:93:7e:8f:
4d:00:6e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:15:46 2025 by rpki-client