Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.mft
File: ZLPjZgb6UsOkchyMoPszCZU0GVo.mft (raw, json)
Hash identifier: YMUW1s1PJdCzufY6g0m3znz1MaClIuk3wlISWOntAnI=
Subject key identifier: CD:2C:34:88:23:EF:BC:40:C4:BB:78:10:F2:34:E7:75:1B:28:0B:C4
Authority key identifier: 64:B3:E3:66:06:FA:52:C3:A4:72:1C:8C:A0:FB:33:09:95:34:19:5A
Certificate issuer: /CN=64b3e36606fa52c3a4721c8ca0fb33099534195a
Certificate serial: 019A4EF5BC7CD04420E18C1D1CA80E2B953B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLPjZgb6UsOkchyMoPszCZU0GVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 13:01:58 +0000
Manifest this update: Tue 04 Nov 2025 13:01:58 +0000
Manifest next update: Wed 05 Nov 2025 13:01:58 +0000
Files and hashes: 1: ZLPjZgb6UsOkchyMoPszCZU0GVo.crl (hash: OpNQKJOUI6uVlC2Ow5Z5m76PZhtrDX1yxoIQosLBT2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZLPjZgb6UsOkchyMoPszCZU0GVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:bc:7c:d0:44:20:e1:8c:1d:1c:a8:0e:2b:95:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64b3e36606fa52c3a4721c8ca0fb33099534195a
Validity
Not Before: Nov 4 13:01:58 2025 GMT
Not After : Nov 5 13:01:58 2025 GMT
Subject: CN=cd2c348823efbc40c4bb7810f234e7751b280bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:06:4a:46:0d:8c:a2:14:de:58:6c:ba:d1:cb:
75:bc:5f:d1:06:77:26:a3:34:9c:a0:a2:1a:45:22:
b9:c4:94:99:f2:74:04:b1:7d:a0:91:59:28:d8:3c:
9c:8a:b2:83:f2:2a:ed:17:95:a5:1b:6b:44:52:9f:
59:10:6b:e6:22:2e:13:30:d1:69:93:b0:40:66:7a:
df:45:68:a4:5f:79:95:c2:ca:1e:f4:49:6b:95:2c:
7f:ae:f8:12:6b:45:39:5b:04:44:71:64:c2:53:88:
eb:ea:35:f6:00:d9:62:ad:4d:56:96:1b:5a:90:7e:
b5:3d:07:ca:48:67:ca:50:e2:af:9f:2c:c1:11:b9:
e9:3d:fb:93:f8:e8:31:3c:f9:f4:fb:a8:15:8c:f1:
4c:a8:ec:79:80:ea:02:03:23:6b:11:5b:65:5a:d2:
dd:92:5d:0c:56:cb:38:78:50:c5:e1:6e:ed:42:af:
d8:d2:8e:c9:09:1a:cc:dd:a9:8b:f2:76:3e:a0:57:
22:62:79:84:ed:75:92:ae:89:df:cb:51:80:80:00:
d8:48:39:58:f7:e2:9c:a9:c6:f7:ab:5d:79:e9:78:
79:bb:83:0b:a2:5d:c4:b5:8f:fe:fa:0c:46:87:3a:
55:ca:17:94:9a:88:64:8b:40:18:0e:39:29:6b:4c:
67:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2C:34:88:23:EF:BC:40:C4:BB:78:10:F2:34:E7:75:1B:28:0B:C4
X509v3 Authority Key Identifier:
keyid:64:B3:E3:66:06:FA:52:C3:A4:72:1C:8C:A0:FB:33:09:95:34:19:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLPjZgb6UsOkchyMoPszCZU0GVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:38:92:9b:f8:48:ad:d9:c1:ce:9e:5f:3b:56:11:b0:6d:b6:
f5:cc:51:9f:5d:46:77:5b:7f:a3:12:9e:95:1e:3f:86:7a:8a:
0d:81:08:e7:70:71:7d:fa:99:5f:d4:07:f0:b2:d7:40:eb:df:
88:f3:e5:53:58:8d:b3:dc:d3:ca:9f:a4:8c:20:19:2a:fd:d0:
cd:06:03:99:fb:c1:91:6d:30:5d:54:3e:44:61:e3:a1:a5:aa:
9a:03:ba:44:83:0a:13:e7:d3:d0:07:72:8d:97:0f:52:d9:1c:
fb:b8:b5:b3:4a:5c:70:d9:9a:71:6f:e5:ea:66:9d:79:0b:76:
52:c1:fc:47:ff:5f:43:51:32:d2:17:1d:48:44:9e:a3:e9:65:
46:b1:23:b1:c6:36:7f:c9:68:37:1a:c2:d8:3d:d5:70:cc:38:
e1:ad:91:f1:ca:6b:25:11:fd:e9:d4:56:b2:a3:76:5f:25:ad:
df:9d:dd:a2:6f:65:ba:d9:95:9a:71:a9:6c:5a:5e:4e:c0:5a:
f3:10:04:62:93:78:e2:24:38:f2:16:72:67:a3:cd:e7:aa:66:
be:71:6a:63:f8:c1:2f:72:a9:89:b7:6a:ac:f7:6e:9d:0e:79:
72:75:73:c0:d7:75:55:12:fc:78:33:fd:cd:69:57:8f:df:7f:
5f:1a:eb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:18:00 2025 by rpki-client