Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft
File: ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft (raw, json)
Hash identifier: i7c4AyfmsgQl3uconlq/e6putfsfhaqcVp7yjn+kiis=
Subject key identifier: 14:50:9A:F2:28:1E:5A:72:6A:E1:3C:9D:FA:DB:2F:98:3C:75:E4:BE
Authority key identifier: 65:18:6E:4E:F8:CA:ED:F6:6E:D3:4D:93:AB:A8:0B:2C:FC:06:86:73
Certificate issuer: /CN=65186e4ef8caedf66ed34d93aba80b2cfc068673
Certificate serial: 019A5150731F2DE2764C365EAB5DDA595227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRhuTvjK7fZu002Tq6gLLPwGhnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft
Manifest number: 1083
Signing time: Wed 05 Nov 2025 00:00:17 +0000
Manifest this update: Wed 05 Nov 2025 00:00:17 +0000
Manifest next update: Thu 06 Nov 2025 00:00:17 +0000
Files and hashes: 1: ZRhuTvjK7fZu002Tq6gLLPwGhnM.crl (hash: HKuLdIeVCd7IgBA0b2k5IW0Xtxmd0hXkUPwgZlS1rPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRhuTvjK7fZu002Tq6gLLPwGhnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:73:1f:2d:e2:76:4c:36:5e:ab:5d:da:59:52:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65186e4ef8caedf66ed34d93aba80b2cfc068673
Validity
Not Before: Nov 5 00:00:17 2025 GMT
Not After : Nov 6 00:00:17 2025 GMT
Subject: CN=14509af2281e5a726ae13c9dfadb2f983c75e4be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:18:9a:b8:84:fe:da:7a:99:a8:48:b5:09:d3:
17:0c:0e:96:59:07:de:db:b6:72:93:72:ba:e1:30:
75:0f:5b:fc:04:f3:5d:d7:46:a1:0a:13:f3:ea:06:
23:86:51:e2:d5:08:79:b1:5d:9f:5a:f7:e5:87:04:
71:6b:ec:f6:8f:3b:e0:01:d2:bc:4d:6e:66:56:8e:
ce:ac:f0:d1:da:3f:0f:2c:17:24:a7:78:59:4a:f3:
a9:05:ee:d8:31:ed:4b:ee:62:35:d5:5b:f8:62:fa:
4a:fb:4f:43:23:21:e6:ea:2b:7d:a1:77:b4:ec:e3:
1d:7d:3b:f9:ab:64:5b:b5:9d:c5:47:68:da:b0:51:
d6:02:9e:bf:cb:38:fe:f7:d6:ee:d0:cc:d3:00:3e:
13:21:cc:60:4e:dc:a5:4e:3e:52:34:12:03:33:66:
de:9d:00:4d:19:80:c0:59:d9:d1:fb:c5:cc:40:f5:
b1:00:54:71:f9:5f:cd:de:1c:d6:3f:d3:49:92:0d:
8c:80:f2:1c:1f:f6:9d:14:a1:7f:3a:b1:49:e2:86:
be:37:6c:51:85:63:a7:f6:0c:6c:2c:7b:ea:f0:b8:
2d:0a:35:24:f3:89:8b:0e:82:07:62:f7:68:d4:fc:
85:21:c6:0c:33:3d:90:f0:fb:fc:8b:57:6e:3d:49:
b9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:50:9A:F2:28:1E:5A:72:6A:E1:3C:9D:FA:DB:2F:98:3C:75:E4:BE
X509v3 Authority Key Identifier:
keyid:65:18:6E:4E:F8:CA:ED:F6:6E:D3:4D:93:AB:A8:0B:2C:FC:06:86:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRhuTvjK7fZu002Tq6gLLPwGhnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:49:32:2d:16:fc:f7:5e:72:8a:02:1f:0e:79:cb:e0:03:cc:
73:90:f9:cc:c9:24:16:b1:34:48:4b:02:e4:63:d5:a4:26:91:
bc:a0:8d:00:95:9b:cf:1e:d7:68:13:b7:61:81:1f:2a:99:49:
8d:12:61:b7:06:c1:31:07:e5:be:57:09:a0:df:e2:d6:fa:f4:
5f:68:bb:90:a7:aa:0e:d0:65:74:3b:19:4a:38:54:2e:fe:4a:
12:1e:b1:a6:c4:89:38:5a:f5:25:8c:90:fe:02:43:8d:18:19:
bb:0c:49:6a:95:92:5a:59:d8:ee:90:81:2a:cb:f7:f4:63:c8:
b4:e8:69:56:cb:12:e4:da:8b:63:24:6e:d6:fd:c6:82:71:cc:
be:bc:a7:83:91:9f:53:01:b7:5d:1b:6e:24:d1:d6:3c:43:52:
45:dc:ad:4a:98:d7:e3:92:c0:a9:fb:f8:53:cb:8f:73:38:1b:
67:7f:4b:1d:71:b7:ba:d6:ad:f4:72:ee:f9:7b:6c:87:87:50:
f1:79:07:da:fe:c0:f7:20:be:62:73:77:3e:66:97:ac:50:7f:
d0:74:88:de:73:3d:ae:03:4c:fb:f1:6a:94:81:ad:77:4f:06:
6f:04:c3:a0:97:0d:30:96:4b:93:71:82:73:12:a9:38:79:df:
c9:5b:74:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:14:48 2025 by rpki-client