Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.mft
File: _ZTgRMvlw1KV-rxEWALakFgTtzI.mft (raw, json)
Hash identifier: 1Ln3SCZqujLFwQ+CCtE3ZB7q1qxkrx/PCs5yfw+efAA=
Subject key identifier: 22:70:20:01:05:2D:92:8A:59:62:80:40:78:24:A3:EA:70:6E:32:4E
Authority key identifier: FD:94:E0:44:CB:E5:C3:52:95:FA:BC:44:58:02:DA:90:58:13:B7:32
Certificate issuer: /CN=fd94e044cbe5c35295fabc445802da905813b732
Certificate serial: 019A4F998F25F2D5CDCCA7D81089BC738153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ZTgRMvlw1KV-rxEWALakFgTtzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.mft
Manifest number: 036B
Signing time: Tue 04 Nov 2025 16:00:54 +0000
Manifest this update: Tue 04 Nov 2025 16:00:54 +0000
Manifest next update: Wed 05 Nov 2025 16:00:54 +0000
Files and hashes: 1: _ZTgRMvlw1KV-rxEWALakFgTtzI.crl (hash: bAt2PyDP4D9GrEjMxGHCe0B5BLGThU5Y/WP//fibOgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ZTgRMvlw1KV-rxEWALakFgTtzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:8f:25:f2:d5:cd:cc:a7:d8:10:89:bc:73:81:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd94e044cbe5c35295fabc445802da905813b732
Validity
Not Before: Nov 4 16:00:54 2025 GMT
Not After : Nov 5 16:00:54 2025 GMT
Subject: CN=22702001052d928a596280407824a3ea706e324e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:81:4b:c8:ef:97:0e:8b:9a:5e:05:53:85:8b:
10:ef:de:6b:6c:a5:6e:bc:34:d8:91:aa:ed:0a:45:
12:80:06:47:06:17:62:b3:99:81:3b:8c:8d:91:48:
1f:d3:71:d3:96:54:19:c0:64:97:6a:f2:0b:f2:59:
09:68:eb:2a:f1:4b:d6:c2:85:d1:d9:8b:17:d8:f8:
ff:39:51:42:27:51:cd:fd:93:d3:c7:6f:c3:f8:6f:
08:93:ca:17:58:0b:e8:7d:94:b9:c1:14:e8:a0:b6:
dc:ff:5d:e9:07:23:95:32:48:36:86:0a:e3:fe:b3:
b0:03:a5:f7:44:bb:86:5c:95:7c:06:b4:e6:79:d1:
40:fb:f9:59:3b:e6:5f:35:39:75:f3:d8:6d:56:c2:
e5:3c:b5:19:4d:9e:c5:dc:0b:61:a2:5d:a9:11:aa:
1e:43:27:c5:d2:62:fe:03:fc:6e:52:70:b5:f1:8a:
8f:52:f8:2e:ac:e7:fb:25:94:8a:ef:71:ed:b7:2d:
19:2b:72:88:b6:c2:f9:5f:66:66:2c:74:b0:0e:c6:
1d:c0:7d:d0:fd:b4:f1:59:d2:53:be:00:b4:83:5c:
ad:29:48:d6:dc:33:83:4b:4b:dc:11:a7:6c:0b:00:
f7:c9:f9:2e:e1:48:48:ef:51:be:09:28:99:45:a2:
8a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:70:20:01:05:2D:92:8A:59:62:80:40:78:24:A3:EA:70:6E:32:4E
X509v3 Authority Key Identifier:
keyid:FD:94:E0:44:CB:E5:C3:52:95:FA:BC:44:58:02:DA:90:58:13:B7:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ZTgRMvlw1KV-rxEWALakFgTtzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:84:1d:a1:14:b5:bd:6a:fb:78:04:4c:b9:b0:fd:97:69:28:
54:84:31:20:4e:8a:10:c3:7c:9c:be:b2:35:99:68:87:6b:53:
87:af:b6:4f:63:f1:17:a6:b2:45:af:8c:44:31:3f:ff:34:cf:
26:7b:48:a8:c4:39:a7:18:3c:c5:fe:e7:3c:c6:06:68:ba:ca:
77:c9:9e:0b:6d:5b:1d:5b:cb:c2:64:16:7e:d5:14:d6:01:e7:
df:ce:5e:2e:58:97:32:68:33:ac:1f:09:6d:b9:80:b5:e0:64:
64:7b:60:48:38:a1:97:3f:3a:64:a0:15:3e:56:19:35:3b:1e:
0a:f3:a5:7d:a9:76:19:12:67:00:cf:0a:82:7c:44:37:5e:cc:
c0:e3:00:73:c1:bc:da:89:83:56:f4:7d:8b:22:d0:2a:91:30:
27:0e:c6:89:a3:b2:ee:3f:c7:21:48:12:94:88:63:c2:34:ca:
c9:4e:b9:f9:b7:39:a9:55:2b:dc:8b:d2:0c:4e:d2:0e:77:09:
ee:49:6a:5f:c3:6c:4a:90:b3:26:dd:41:b0:fe:a5:57:58:4a:
ac:95:6a:b9:3c:db:95:b3:31:9e:c6:98:f3:4b:6f:1a:d9:80:
6a:2a:b6:62:df:78:4e:2a:91:95:4c:f5:ae:d2:3b:f4:f2:56:
c9:ba:a3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:43:49 2025 by rpki-client