Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
File: z4Qias59GqsqQYMm94QorK38x4E.mft (raw, json)
Hash identifier: d6N+pL2MHWZRkDZgO0WVkHIoH5E0jYxahuGO806MUsA=
Subject key identifier: 1E:73:7D:CE:67:79:0C:0E:61:38:6C:54:BA:33:64:35:FA:FA:5F:D9
Authority key identifier: CF:84:22:6A:CE:7D:1A:AB:2A:41:83:26:F7:84:28:AC:AD:FC:C7:81
Certificate issuer: /CN=cf84226ace7d1aab2a418326f78428acadfcc781
Certificate serial: 019A4D74773EDDED68CC4BF947F46BB1D993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
Manifest number: 06B6
Signing time: Tue 04 Nov 2025 06:01:09 +0000
Manifest this update: Tue 04 Nov 2025 06:01:09 +0000
Manifest next update: Wed 05 Nov 2025 06:01:09 +0000
Files and hashes: 1: z4Qias59GqsqQYMm94QorK38x4E.crl (hash: gRiPemlp6iG4+v3ZNxWicmtOeqqn720vyQQIWE423hA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:77:3e:dd:ed:68:cc:4b:f9:47:f4:6b:b1:d9:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf84226ace7d1aab2a418326f78428acadfcc781
Validity
Not Before: Nov 4 06:01:09 2025 GMT
Not After : Nov 5 06:01:09 2025 GMT
Subject: CN=1e737dce67790c0e61386c54ba336435fafa5fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:59:a9:26:49:2a:c0:91:84:ce:7d:03:1d:19:
27:82:8d:e8:3d:4e:22:13:a5:4b:c6:ac:07:91:9b:
78:86:d3:96:5e:d5:c9:97:b8:d4:44:7a:70:e8:2d:
d8:7f:cb:ab:8a:db:c5:d5:50:47:ab:db:ae:33:c2:
b6:03:c4:af:2f:c1:fc:11:f0:ec:74:7b:64:d4:a2:
50:89:cb:29:d7:33:7f:88:95:4a:ee:cb:6c:c3:5e:
e2:b2:29:e0:0b:2a:06:54:08:d8:4b:1d:63:0e:03:
8e:34:d9:89:41:f6:5a:b8:6e:44:39:f2:32:1d:44:
85:fc:ea:fa:14:16:07:3e:a0:58:72:58:6a:a0:23:
c5:ea:11:9a:84:1a:25:90:c4:11:fe:cd:49:00:7c:
88:ce:c9:e3:48:59:78:54:c6:17:77:a0:ef:69:d6:
e9:de:6f:08:62:aa:1d:5c:fe:ce:07:15:56:21:3b:
ac:34:45:90:e3:25:c4:86:91:5a:d9:dc:af:7a:ab:
ee:57:dd:f8:b8:a6:75:c5:65:03:d0:9d:b9:59:52:
44:73:5e:64:86:7a:e3:77:98:7e:d4:21:01:e4:8b:
a3:e1:d9:5d:07:11:70:80:2b:dd:ee:e6:b8:d3:6b:
f0:1a:97:aa:f4:c3:29:24:64:b2:88:64:88:9f:c2:
ef:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:73:7D:CE:67:79:0C:0E:61:38:6C:54:BA:33:64:35:FA:FA:5F:D9
X509v3 Authority Key Identifier:
keyid:CF:84:22:6A:CE:7D:1A:AB:2A:41:83:26:F7:84:28:AC:AD:FC:C7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b0:b7:dd:48:94:2e:05:7b:e3:12:fb:03:50:78:fc:15:d7:
17:c4:6f:14:fe:ba:3e:58:b3:fd:1b:aa:5e:e3:45:f6:7e:d8:
23:be:c3:56:0f:72:c2:7b:34:78:32:4d:cc:14:26:bf:1a:5a:
9b:e3:c3:ce:72:81:35:7d:e7:ec:db:9f:58:dc:3c:08:50:d5:
bc:9f:27:04:29:57:53:86:fb:f5:68:25:df:54:20:dc:50:5e:
73:3b:fc:9e:f9:64:08:9f:c8:4c:8d:3d:5e:a6:fe:a9:89:35:
b3:1a:21:f5:aa:a2:d1:56:db:f5:6d:e8:09:6c:6f:9e:b2:24:
cf:ce:b2:ed:83:b4:ce:51:4e:9a:6f:a6:12:7f:e3:02:4a:82:
3a:d4:f5:78:7b:81:c2:d7:90:4b:6c:c5:e0:3d:56:4b:c3:2b:
81:a5:e7:63:6b:02:2f:b7:e0:df:81:3b:dc:70:0e:56:58:1d:
e3:d6:22:cc:c4:cd:c2:d5:41:eb:4e:b1:c9:2e:a5:58:90:80:
73:42:78:d1:fa:ea:bd:29:30:09:1f:07:58:0d:da:18:c6:d9:
a1:5b:f5:68:f5:54:1c:2f:30:19:cc:90:12:5f:c9:b9:ae:12:
10:97:6f:25:92:aa:25:b4:60:72:17:0d:68:d1:fb:76:ab:1e:
e4:0b:cd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:46 2025 by rpki-client