Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
File: z_XdxJt16oTfRa4RTEMh1G1azUo.mft (raw, json)
Hash identifier: TIl2V9/viRxLZRE9sm28lDjculFJ9Ix36jyycVAq3ds=
Subject key identifier: 12:0B:DA:39:9C:94:CF:A5:24:0A:80:0D:1E:73:E9:A5:8E:0A:66:CD
Authority key identifier: CF:F5:DD:C4:9B:75:EA:84:DF:45:AE:11:4C:43:21:D4:6D:5A:CD:4A
Certificate issuer: /CN=cff5ddc49b75ea84df45ae114c4321d46d5acd4a
Certificate serial: 019A4FCFF46B418476842E445BC5F466316E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
Manifest number: 0E50
Signing time: Tue 04 Nov 2025 17:00:19 +0000
Manifest this update: Tue 04 Nov 2025 17:00:19 +0000
Manifest next update: Wed 05 Nov 2025 17:00:19 +0000
Files and hashes: 1: z_XdxJt16oTfRa4RTEMh1G1azUo.crl (hash: Ez1d3PxEWzPhSJyYs6g/bAHZ2jY5CELPVueOhR9ZjEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:f4:6b:41:84:76:84:2e:44:5b:c5:f4:66:31:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff5ddc49b75ea84df45ae114c4321d46d5acd4a
Validity
Not Before: Nov 4 17:00:19 2025 GMT
Not After : Nov 5 17:00:19 2025 GMT
Subject: CN=120bda399c94cfa5240a800d1e73e9a58e0a66cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8d:e8:f2:72:f4:6d:1c:fd:b7:1f:da:e2:09:
4a:a8:f5:23:80:d5:0a:40:f6:22:4f:f5:a8:a7:d1:
12:23:9d:da:e1:31:bc:96:c5:80:79:91:86:54:0b:
ab:63:3b:a0:59:13:34:02:b9:8e:21:b5:40:65:9e:
dc:92:ce:3d:6c:28:0c:93:b8:f1:7c:b0:80:36:20:
30:16:22:f3:c0:f1:e4:a6:ac:61:1f:ab:2c:40:ae:
c6:e7:ad:3a:aa:c1:c1:ac:6b:18:4a:12:2d:e3:b0:
6a:5b:7e:e1:fb:10:23:4c:b6:bc:8d:80:2e:79:6d:
d9:c3:1c:ad:99:7b:11:0f:77:a3:3f:75:44:71:6c:
bc:f0:71:d5:2d:4f:a1:01:03:f3:3e:2b:ae:22:31:
31:b6:04:ae:00:52:63:7d:53:a8:38:c7:4f:88:6a:
54:2e:70:31:07:4d:75:73:6b:d3:ca:8b:d9:62:0a:
b3:86:13:98:81:93:86:9a:75:ec:e5:bd:dc:2e:66:
f9:c6:1b:80:49:3d:e9:78:a6:65:0b:e6:4c:24:c1:
7f:b1:b2:2e:3c:ca:5a:2b:52:31:b3:bd:64:a6:eb:
33:5e:cb:37:59:5e:aa:c9:79:39:60:9b:94:f7:4a:
a2:c9:b6:62:f5:7d:76:a1:71:fc:e9:d0:15:9a:5c:
60:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0B:DA:39:9C:94:CF:A5:24:0A:80:0D:1E:73:E9:A5:8E:0A:66:CD
X509v3 Authority Key Identifier:
keyid:CF:F5:DD:C4:9B:75:EA:84:DF:45:AE:11:4C:43:21:D4:6D:5A:CD:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:63:d7:05:9d:59:76:17:7f:ca:bb:ea:b5:3a:de:11:d0:1e:
d4:ef:de:13:14:eb:db:b5:fd:fb:26:f1:8b:8d:fb:0c:53:24:
9f:3c:ee:be:4e:7d:48:ff:87:49:3c:97:c4:9f:80:02:a4:eb:
cc:34:f3:04:59:9a:d8:fd:81:92:fb:72:af:44:e6:c9:b1:46:
a5:09:e5:4b:d8:e4:af:c8:ae:2e:74:3c:3f:35:7d:3c:e1:58:
3e:3c:79:3b:76:26:c3:8a:9e:1c:b9:f6:18:89:69:db:0c:3d:
05:79:ad:e8:b7:ad:2a:1c:9b:a0:87:ec:9d:f6:bf:92:43:14:
7e:41:65:f4:39:d6:f2:6e:1b:c1:33:ca:24:6f:9c:57:f5:de:
7e:f7:6c:9f:f1:38:a0:6a:0d:f5:67:38:14:88:bc:60:fa:95:
97:63:2d:ad:dd:e3:d7:30:f9:64:8b:62:69:a0:29:3f:74:bf:
02:ea:51:d1:e9:5e:80:51:f5:dd:8c:dc:52:57:b6:a4:b5:1b:
87:01:32:7c:46:2f:c5:c2:96:26:76:99:1d:d4:d4:5e:a4:07:
f9:2b:98:26:bc:10:01:09:94:a7:ce:06:ad:15:ef:53:1f:aa:
fe:07:d9:2e:b3:b5:87:4a:98:ff:04:77:eb:8c:5d:e5:26:a1:
73:4c:7d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:18:06 2025 by rpki-client