Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
File: z-A2c7iPCK9i_mUqGPb6nINLWO0.mft (raw, json)
Hash identifier: fleFF2Br48oP1986C76E2AOQ7gZaFzh67MWFM9wLmDk=
Subject key identifier: A8:A6:54:F9:46:A5:4A:1F:88:E7:4D:22:1C:71:69:8E:2D:29:5A:0B
Authority key identifier: CF:E0:36:73:B8:8F:08:AF:62:FE:65:2A:18:F6:FA:9C:83:4B:58:ED
Certificate issuer: /CN=cfe03673b88f08af62fe652a18f6fa9c834b58ed
Certificate serial: 019A4D072B2C795D53DE6687615D88F427CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
Manifest number: 12BD
Signing time: Tue 04 Nov 2025 04:01:46 +0000
Manifest this update: Tue 04 Nov 2025 04:01:46 +0000
Manifest next update: Wed 05 Nov 2025 04:01:46 +0000
Files and hashes: 1: z-A2c7iPCK9i_mUqGPb6nINLWO0.crl (hash: cMFaZpc+t80FsrsHF9f+goZdOxQgvcKpcLNKkDmFtLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:2b:2c:79:5d:53:de:66:87:61:5d:88:f4:27:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfe03673b88f08af62fe652a18f6fa9c834b58ed
Validity
Not Before: Nov 4 04:01:46 2025 GMT
Not After : Nov 5 04:01:46 2025 GMT
Subject: CN=a8a654f946a54a1f88e74d221c71698e2d295a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:36:18:1a:ff:73:4f:01:63:53:85:aa:b0:5a:
42:8c:9e:f2:08:ab:a1:51:0d:ec:35:de:9f:f9:58:
a1:aa:b5:86:82:e2:ff:c9:8b:a6:5b:c3:65:97:a6:
1a:28:0b:86:16:8b:36:92:a6:31:b9:43:69:8b:10:
bb:02:39:b7:30:ef:ab:a9:c8:69:bb:26:5e:9e:98:
54:30:ed:95:02:da:ca:11:ae:8d:24:47:d5:63:b0:
f4:9f:e7:89:e1:c5:45:4b:7b:07:27:46:1d:71:14:
56:94:4d:1c:c3:c0:8d:07:a2:cd:88:4d:37:3f:56:
37:ee:6e:53:40:7b:55:f8:56:16:68:10:c9:43:83:
0b:2e:7f:56:ef:7c:f5:ea:48:92:61:7c:6e:88:bc:
78:2f:4c:9c:98:a2:07:72:56:68:80:0c:ef:8c:ff:
77:0a:ea:ac:99:5e:20:62:f8:09:f3:ad:cc:01:09:
d6:9a:23:4d:32:e5:15:2a:78:81:e8:f4:9d:65:d3:
02:78:4d:0d:c4:67:50:82:44:af:76:2a:06:77:09:
a6:29:e7:3a:72:07:b9:b2:94:03:65:a4:56:40:e0:
7e:46:97:f5:58:78:5c:45:b5:fa:b6:8e:f8:14:08:
0a:73:2d:e1:32:bf:5d:eb:05:17:ba:72:e0:ea:47:
9d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A6:54:F9:46:A5:4A:1F:88:E7:4D:22:1C:71:69:8E:2D:29:5A:0B
X509v3 Authority Key Identifier:
keyid:CF:E0:36:73:B8:8F:08:AF:62:FE:65:2A:18:F6:FA:9C:83:4B:58:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:f2:ae:b9:c3:95:06:49:c8:a3:6c:ad:aa:36:97:29:7f:af:
b4:ae:0a:47:bb:5c:fe:dc:11:f1:1d:b2:e4:10:5c:1b:ef:63:
e7:7f:c4:b8:1d:21:02:98:9b:a2:d4:e0:95:f1:4b:e1:90:eb:
97:35:d1:6b:be:35:2e:6e:58:b2:bb:66:36:5a:2d:9d:0e:49:
d5:73:26:d1:06:8e:89:d1:30:96:dc:2f:c7:52:65:25:c6:6b:
42:e6:73:26:3d:dd:89:6f:f8:33:0a:08:3a:5d:a7:a7:91:e5:
de:83:54:6a:a2:84:e8:b3:7f:23:ae:be:6f:a2:b9:d7:d6:43:
7f:ae:1f:d8:4e:ac:8d:61:39:b4:06:6f:57:4d:b3:6f:e5:5e:
27:76:2a:fb:e1:39:e7:ef:e9:2d:2f:d0:b3:aa:dc:99:e0:14:
2f:37:30:8d:56:41:d8:a1:d1:85:ca:72:56:c4:35:a5:4a:29:
59:5c:40:96:3a:ac:1f:56:de:f0:2b:8d:b5:54:7e:ca:ce:34:
50:84:0a:11:1e:27:de:c9:14:ab:a0:81:0c:18:b6:da:28:a0:
66:2e:f0:d4:94:42:84:06:87:6c:fe:98:bc:f9:3c:23:6f:44:
b2:86:27:3d:86:3f:cf:14:84:cf:1d:c0:3a:a9:f6:8b:a4:3d:
5c:08:2e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:43 2025 by rpki-client