Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
File: ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft (raw, json)
Hash identifier: Qe5hrxkgA2DCHX9uRz8jrRDo3iFl4nK8xQqGQ0PX1n4=
Subject key identifier: 07:63:28:E3:77:D9:C9:B6:D6:8F:78:06:3F:97:BE:5A:79:C3:42:3A
Authority key identifier: 65:D2:B2:F5:4C:A1:71:8C:FD:38:29:31:11:41:56:66:CC:34:E2:62
Certificate issuer: /CN=65d2b2f54ca1718cfd38293111415666cc34e262
Certificate serial: 019A4DAB1126D8139C9A0A1BBFB1C4EF7C9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
Manifest number: 12B5
Signing time: Tue 04 Nov 2025 07:00:47 +0000
Manifest this update: Tue 04 Nov 2025 07:00:47 +0000
Manifest next update: Wed 05 Nov 2025 07:00:47 +0000
Files and hashes: 1: ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl (hash: pXyladAGfWCP8lb974wrUoM4pe+KZCLdRWeWm/N3E0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:11:26:d8:13:9c:9a:0a:1b:bf:b1:c4:ef:7c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d2b2f54ca1718cfd38293111415666cc34e262
Validity
Not Before: Nov 4 07:00:47 2025 GMT
Not After : Nov 5 07:00:47 2025 GMT
Subject: CN=076328e377d9c9b6d68f78063f97be5a79c3423a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1e:a4:9f:2a:50:63:01:d0:3a:e2:20:03:37:
ae:fc:23:df:a9:49:5e:17:09:e6:7a:c8:61:70:c6:
92:bb:d6:25:57:da:e5:43:c7:c8:8e:ea:03:6e:e9:
34:62:8f:ae:28:0a:e6:63:21:9f:68:06:9e:d8:fe:
c3:38:19:0e:3a:32:42:5c:5c:2f:94:45:ff:d9:eb:
18:0e:5e:b4:bf:c6:70:66:b0:3a:65:32:5a:9e:24:
fd:7b:61:49:c3:32:81:55:28:96:25:13:41:19:73:
21:0c:47:aa:9c:a1:3d:e5:92:56:2d:a4:9a:6e:96:
6f:72:a7:3e:85:89:8e:40:32:10:6c:52:fe:88:1e:
4f:09:c1:af:41:e1:a9:4a:d5:be:e8:02:5d:75:80:
69:3e:bf:8c:b8:2f:0e:16:29:3f:43:ad:78:2f:50:
ce:cd:c8:ce:73:e1:e7:22:aa:89:a2:2f:5d:25:a5:
30:e4:14:86:dd:7d:67:45:c3:14:bf:56:62:35:7f:
48:ac:6b:18:fe:16:aa:71:27:fd:f1:a1:3b:5f:74:
8e:fa:3c:32:e4:66:2d:a2:4e:a3:df:ee:89:fc:5b:
9b:cd:cd:16:72:84:08:8e:09:78:5a:95:42:55:e6:
cc:f3:0e:4a:a6:72:af:f5:76:96:b1:77:1f:3e:c7:
78:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:63:28:E3:77:D9:C9:B6:D6:8F:78:06:3F:97:BE:5A:79:C3:42:3A
X509v3 Authority Key Identifier:
keyid:65:D2:B2:F5:4C:A1:71:8C:FD:38:29:31:11:41:56:66:CC:34:E2:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:61:b0:6a:d7:00:fa:73:2c:14:83:63:4a:a2:ef:9d:00:cb:
49:18:f1:b4:15:2d:17:29:35:ea:a8:ca:fb:60:d5:6b:42:d8:
87:99:15:5b:e4:c8:96:27:12:a2:81:d2:3b:a2:26:17:c0:4d:
f3:4a:14:aa:b5:e9:55:cc:7b:a7:d4:05:96:a9:70:48:ad:6c:
e8:f2:06:ef:5a:0a:ee:94:5d:0d:e3:d9:a9:bd:fb:a9:d4:e6:
49:8c:c6:f8:8f:c1:17:26:52:60:17:ff:4b:45:af:a7:98:27:
82:8c:10:c5:df:c6:d4:0d:86:77:3a:f3:42:9a:92:9e:c4:6d:
6d:d6:62:1d:0e:a0:4c:cb:7d:8f:1b:f2:08:36:8b:4b:d4:b3:
c3:2b:f0:dd:5e:1e:59:e6:5b:00:cb:e6:60:af:2b:54:2a:21:
28:5e:24:e6:97:b5:a1:26:f7:32:e4:81:04:4c:b8:7d:a0:67:
b0:74:04:25:5a:80:9b:e7:bc:f2:7f:c6:14:7f:11:09:74:62:
da:48:58:c4:63:01:77:3e:2f:7b:80:0f:a3:83:ce:20:58:d0:
d5:af:a5:61:a4:2a:6c:ce:a7:fc:b6:cb:d6:2b:83:40:6c:05:
16:47:9c:a8:0b:5f:c4:72:e0:48:a7:32:8b:1f:28:be:66:fe:
87:42:1d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:46 2025 by rpki-client