Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft
File: z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft (raw, json)
Hash identifier: 7dZregLx3hcev5VtfqOjddXT418TEWH7Ac3RV9DSDTY=
Subject key identifier: 4C:55:15:84:8D:A3:84:78:92:C1:28:6A:23:C9:C0:B3:AC:D6:41:1C
Authority key identifier: CF:A5:CE:C1:43:A2:AF:1E:D1:C2:D9:96:96:F1:F1:68:7F:45:86:49
Certificate issuer: /CN=cfa5cec143a2af1ed1c2d99696f1f1687f458649
Certificate serial: 019A4EF57363F9438E6C3E941BD986035B75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6XOwUOirx7RwtmWlvHxaH9Fhkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 13:01:39 +0000
Manifest this update: Tue 04 Nov 2025 13:01:39 +0000
Manifest next update: Wed 05 Nov 2025 13:01:39 +0000
Files and hashes: 1: z6XOwUOirx7RwtmWlvHxaH9Fhkk.crl (hash: G050KiSTDdam+x5t8T7O/JR2Zz3SUW/swQ1MKiEO/es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/z6XOwUOirx7RwtmWlvHxaH9Fhkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:73:63:f9:43:8e:6c:3e:94:1b:d9:86:03:5b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa5cec143a2af1ed1c2d99696f1f1687f458649
Validity
Not Before: Nov 4 13:01:39 2025 GMT
Not After : Nov 5 13:01:39 2025 GMT
Subject: CN=4c5515848da3847892c1286a23c9c0b3acd6411c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cb:18:78:ef:f4:75:1f:3e:bc:1f:e3:27:71:
96:2e:1c:91:78:24:f6:e8:75:89:df:12:3d:c8:cf:
57:08:73:e7:35:1f:3b:ed:01:2c:39:97:67:58:16:
ef:6b:a4:b1:d8:82:31:3b:78:e5:db:4c:39:83:f0:
84:63:75:20:aa:05:c3:85:cd:0b:e3:e3:5f:2e:a3:
fb:7f:ca:da:9b:8d:92:3a:f5:a1:98:9e:70:25:28:
5b:a3:5a:2b:a9:d9:79:b4:7c:7f:2c:7b:68:26:93:
68:71:43:56:cd:aa:e9:d0:9e:fa:52:18:b1:82:e2:
47:75:b2:aa:2b:cd:f7:f3:78:a8:98:f5:c5:c1:aa:
f6:cd:30:1d:6c:ab:b1:45:2d:40:ad:89:a7:a7:3d:
e5:6b:e4:84:6d:56:55:1b:fa:57:10:7e:30:df:7d:
a6:5b:6c:86:d0:81:55:9a:13:a3:b8:47:db:04:92:
53:e9:26:a8:dc:59:da:5e:50:c6:36:b8:d4:d8:ff:
eb:ed:0e:1e:ba:ab:1b:fe:10:53:b7:f0:0f:ba:39:
14:fe:25:c2:9b:3e:32:96:bf:24:eb:90:40:52:2c:
df:cc:d8:ef:cb:8c:1e:39:33:f7:e7:70:a4:b4:72:
a6:30:6f:43:29:1c:04:df:c9:d9:6d:c8:08:ea:04:
71:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:55:15:84:8D:A3:84:78:92:C1:28:6A:23:C9:C0:B3:AC:D6:41:1C
X509v3 Authority Key Identifier:
keyid:CF:A5:CE:C1:43:A2:AF:1E:D1:C2:D9:96:96:F1:F1:68:7F:45:86:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6XOwUOirx7RwtmWlvHxaH9Fhkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:07:05:2b:9f:04:35:24:38:42:b3:10:32:27:6f:08:74:0c:
a7:4e:d7:f3:31:c2:27:2a:39:ef:71:ad:b0:78:d0:36:0e:be:
d2:bd:39:0f:49:33:d6:18:d3:3f:9c:9c:53:ba:5d:b7:1e:3f:
c9:b0:0c:dc:30:ab:a5:62:1a:b6:05:7d:ae:d6:35:90:d7:d5:
d8:36:29:3b:b6:dd:2a:96:62:86:88:9b:07:39:43:7a:29:d5:
53:95:8b:bc:8d:bf:d2:20:3f:c6:73:a4:66:e9:fe:14:db:cc:
a7:80:58:62:87:22:04:b5:8e:ad:f6:7a:bc:0b:f4:5d:51:3b:
dc:2a:85:2f:b3:56:ee:9e:3d:4a:68:f8:a8:10:9d:3f:15:59:
ad:23:d8:85:2c:8f:96:a5:0c:4e:6c:66:d7:92:bd:bb:b6:95:
f3:c8:5a:29:e1:f7:7b:ac:f9:59:95:e3:20:14:01:09:12:13:
d9:1c:a5:98:f3:32:5a:cf:4b:d8:cd:f1:a0:6c:9b:77:88:f5:
3a:31:bd:67:97:a5:38:a5:94:33:af:ba:17:cb:67:c1:c1:6f:
24:71:3a:f9:82:39:f3:05:ff:70:58:6b:ea:2c:35:7a:95:d6:
f3:86:ec:78:64:5b:c6:a7:22:2c:90:04:0c:b6:50:53:a2:05:
e6:86:6c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:17:28 2025 by rpki-client