Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
File: ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft (raw, json)
Hash identifier: Jl1go411WnyWTmZWnkx/INSRgUSUbPrKzbAb+tpeQGk=
Subject key identifier: AD:3C:58:A4:70:AC:FA:9F:81:76:FC:9E:01:86:3C:A7:1F:DC:0C:45
Authority key identifier: 64:14:77:5F:DA:EE:C7:B0:D5:C9:27:08:39:88:D5:55:72:7C:21:B5
Certificate issuer: /CN=6414775fdaeec7b0d5c927083988d555727c21b5
Certificate serial: 019A4EF5A9B2432605A36690ABB9E3B6C1A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
Manifest number: 08BA
Signing time: Tue 04 Nov 2025 13:01:53 +0000
Manifest this update: Tue 04 Nov 2025 13:01:53 +0000
Manifest next update: Wed 05 Nov 2025 13:01:53 +0000
Files and hashes: 1: ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl (hash: qC87RQeghEzdbcOdNa+8glih81Vl/e54rEydViszWiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:a9:b2:43:26:05:a3:66:90:ab:b9:e3:b6:c1:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6414775fdaeec7b0d5c927083988d555727c21b5
Validity
Not Before: Nov 4 13:01:53 2025 GMT
Not After : Nov 5 13:01:53 2025 GMT
Subject: CN=ad3c58a470acfa9f8176fc9e01863ca71fdc0c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:31:7b:29:d7:80:29:d4:bb:eb:33:28:f5:df:
c2:a9:e2:21:1d:35:bf:92:d2:8a:30:8a:fe:2f:8c:
62:cb:16:75:8e:27:e3:7a:5d:a9:1e:27:cd:ef:c6:
16:c3:e7:19:fb:a5:b3:21:b4:fb:03:96:14:9d:53:
40:f2:2f:e2:cf:37:9d:27:5d:02:43:69:ad:f9:40:
7f:df:1e:d0:e3:3b:6a:69:d7:63:37:b7:21:08:9e:
90:87:85:f4:66:84:26:ef:40:83:a4:ac:0c:6f:a7:
3b:e9:c3:e7:33:d8:3c:7f:5c:fa:57:08:91:82:54:
c8:4e:15:ff:99:47:34:f7:07:b1:50:dc:7d:eb:9f:
36:d4:b5:53:de:ae:5a:4d:b3:9e:a4:10:53:e7:72:
22:0a:f7:45:4d:26:70:48:16:05:60:19:06:55:45:
ef:10:dc:3d:fa:b6:cf:e2:58:41:3b:ed:7e:b3:23:
66:d0:5f:a4:b1:7e:1d:ba:dc:39:0b:69:78:a8:94:
3b:0b:88:23:0a:1d:aa:78:33:ae:20:7a:fc:4f:3a:
b3:a7:3a:54:3e:6d:cb:71:54:dd:0a:7b:57:50:fc:
28:70:ea:26:34:c0:e6:f8:ef:e8:f7:04:d8:b8:ee:
d0:04:04:3e:9d:74:fd:7b:61:0e:db:f0:a3:42:67:
d7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3C:58:A4:70:AC:FA:9F:81:76:FC:9E:01:86:3C:A7:1F:DC:0C:45
X509v3 Authority Key Identifier:
keyid:64:14:77:5F:DA:EE:C7:B0:D5:C9:27:08:39:88:D5:55:72:7C:21:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:60:1a:be:10:62:58:ad:dc:b5:21:3c:ef:64:4d:ba:89:e0:
f5:55:d4:89:49:98:27:6a:d9:97:b9:ac:50:da:79:4e:0d:a8:
75:0b:1c:7e:55:59:7e:e2:0a:b5:7f:e4:d2:45:47:93:d0:92:
69:23:a1:bc:91:08:ab:09:62:19:d3:f7:7a:a9:f4:65:ec:f3:
fa:26:96:0d:f5:1e:af:5d:42:38:57:ee:84:58:9b:a6:d4:8d:
35:1f:58:f5:47:cb:92:c0:c2:cb:6a:89:38:18:7f:df:c4:2a:
55:96:10:d9:b9:69:e8:45:e2:e6:7d:88:ae:fd:ae:4e:78:8c:
df:ac:47:99:e0:3d:35:6c:6a:96:5c:f3:e3:18:29:79:6c:9e:
ba:e0:bf:e9:d9:3f:1e:a5:31:13:dc:b1:ba:01:f6:f9:8b:36:
6c:c2:0b:7e:30:9b:f0:35:0c:de:31:9d:f3:88:57:43:b4:07:
80:5e:28:4b:39:80:7c:17:2a:66:db:b3:d4:93:e2:7e:47:f2:
25:d9:43:c6:37:20:16:07:c8:bc:24:6c:e0:d7:85:8e:19:f3:
54:54:96:45:c5:94:e4:58:ab:be:8b:40:fc:ec:53:6b:3d:d3:
13:2e:1c:ea:ac:f6:8d:e3:fc:4d:d0:7c:17:75:63:e0:e6:8e:
0f:f7:e0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:27:58 2025 by rpki-client