Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
File: zv4YrJccgqd399sZ_6szSjJTdwM.mft (raw, json)
Hash identifier: Qk4oSPNuRCBGsAH8B/gQ1UypATEclWmCcg8Gi7m9BZ8=
Subject key identifier: 90:BB:29:2E:E3:6B:6A:C1:0D:21:A9:7F:0F:7D:C9:14:42:31:FD:37
Authority key identifier: CE:FE:18:AC:97:1C:82:A7:77:F7:DB:19:FF:AB:33:4A:32:53:77:03
Certificate issuer: /CN=cefe18ac971c82a777f7db19ffab334a32537703
Certificate serial: 019A4C60D1CCA53A818F788594B2A1807EBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
Manifest number: 11BE
Signing time: Tue 04 Nov 2025 01:00:04 +0000
Manifest this update: Tue 04 Nov 2025 01:00:04 +0000
Manifest next update: Wed 05 Nov 2025 01:00:04 +0000
Files and hashes: 1: zv4YrJccgqd399sZ_6szSjJTdwM.crl (hash: jTO7txbNEKO3/j0Tie/PrrEMnNWE3Ifmr8ZPEFBCNGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:60:d1:cc:a5:3a:81:8f:78:85:94:b2:a1:80:7e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefe18ac971c82a777f7db19ffab334a32537703
Validity
Not Before: Nov 4 01:00:04 2025 GMT
Not After : Nov 5 01:00:04 2025 GMT
Subject: CN=90bb292ee36b6ac10d21a97f0f7dc9144231fd37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0d:c2:7c:9f:17:d6:eb:34:10:47:3a:6b:86:
58:08:82:7c:77:55:0b:9c:fb:b4:b2:9b:8b:b5:64:
46:df:c0:41:dd:49:67:24:72:d3:03:8c:bb:dc:d9:
94:e3:26:35:15:cd:0e:ea:4d:da:8e:6f:05:47:6f:
98:b6:07:e7:75:da:f6:9d:19:25:e5:36:08:cd:34:
e2:ec:57:6a:75:83:2e:1e:78:2e:cc:64:39:b4:ad:
8e:30:33:d1:42:4b:c2:6f:93:e9:c3:e3:04:65:11:
12:53:ca:04:54:8e:bf:e3:9c:6a:0c:a6:b8:90:0a:
b1:9b:1b:8c:26:68:8a:e7:00:3a:e6:ce:9e:fc:e4:
17:5b:c3:fb:4c:4b:eb:e3:4e:b3:7d:5f:35:90:ba:
88:5c:c7:7a:4d:91:1d:1f:c8:c2:44:68:32:10:94:
b1:f6:47:0e:19:4c:7c:35:8c:3e:32:1c:31:0b:21:
94:7f:1c:14:ad:af:81:df:df:60:77:95:91:38:7a:
52:a8:ab:ae:04:82:48:56:58:5f:52:75:5a:95:ea:
09:a3:e0:30:6b:75:c5:b1:0b:31:51:0b:0f:29:cf:
63:3d:e0:80:40:d2:a2:a9:79:6d:af:03:60:6c:92:
0f:7a:91:d2:71:e5:71:64:33:cd:5b:f7:45:11:a0:
ef:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BB:29:2E:E3:6B:6A:C1:0D:21:A9:7F:0F:7D:C9:14:42:31:FD:37
X509v3 Authority Key Identifier:
keyid:CE:FE:18:AC:97:1C:82:A7:77:F7:DB:19:FF:AB:33:4A:32:53:77:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:9f:4d:f7:8d:08:71:27:3b:84:26:81:be:21:59:7b:0f:ef:
4b:09:99:61:f4:df:50:b8:81:98:9b:87:bb:06:56:a8:f2:7a:
bc:8e:78:ff:9f:68:90:7a:c1:f3:be:f2:b6:60:2c:45:a0:df:
4a:7a:bc:4a:af:77:14:60:4e:cd:cc:49:90:e0:b5:a0:77:19:
f0:f0:69:e6:41:b2:fb:c2:bf:e1:68:45:29:5d:b7:ab:b0:f8:
24:59:73:63:0a:88:0c:00:55:44:d3:0a:59:91:83:49:8f:16:
e5:26:47:c2:d7:37:38:6a:7d:0d:40:53:ee:b9:4d:f5:d2:a7:
60:55:cd:1d:a7:8b:01:4f:f7:a7:5f:1e:10:f8:a1:b5:18:2d:
97:ec:bf:34:32:e6:25:85:28:41:cb:99:3c:6a:20:a0:c6:cf:
ae:a3:98:b7:d1:b1:55:a5:66:ef:88:27:59:5e:48:d4:df:e4:
a7:4a:b4:cb:a4:ce:e6:02:52:3c:85:d0:69:2c:db:c4:05:cd:
4b:fb:f0:6d:a7:34:b5:80:ad:7a:86:45:65:2a:73:dd:63:5d:
38:c9:7a:54:49:31:9d:b1:1a:49:73:90:50:ed:f9:dd:86:4c:
d4:f5:e6:fb:2a:b6:67:48:6e:da:16:de:66:4f:de:19:5b:f8:
72:3b:b4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:44 2025 by rpki-client