Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft
File: Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft (raw, json)
Hash identifier: kAAIaft5AdUe4YMalDSJzv/OrBpVRbg3ZxKtxULnERQ=
Subject key identifier: 7A:DD:10:07:7A:2C:7D:F0:F1:1F:32:D1:89:87:2F:B4:FF:20:FF:FD
Authority key identifier: 67:70:C9:B9:40:57:48:D2:65:48:FD:5F:CA:7A:64:A0:38:D5:81:2D
Certificate issuer: /CN=6770c9b9405748d26548fd5fca7a64a038d5812d
Certificate serial: 019A4DAB2DD44D7C999433369B7C88CC7124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3DJuUBXSNJlSP1fynpkoDjVgS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft
Manifest number: 124E
Signing time: Tue 04 Nov 2025 07:00:55 +0000
Manifest this update: Tue 04 Nov 2025 07:00:55 +0000
Manifest next update: Wed 05 Nov 2025 07:00:55 +0000
Files and hashes: 1: Z3DJuUBXSNJlSP1fynpkoDjVgS0.crl (hash: 4pwj/IuFSREscN8dct8ajm3GF70snzDa3sQYrktfOOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z3DJuUBXSNJlSP1fynpkoDjVgS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:2d:d4:4d:7c:99:94:33:36:9b:7c:88:cc:71:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6770c9b9405748d26548fd5fca7a64a038d5812d
Validity
Not Before: Nov 4 07:00:55 2025 GMT
Not After : Nov 5 07:00:55 2025 GMT
Subject: CN=7add10077a2c7df0f11f32d189872fb4ff20fffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e6:bd:c1:eb:b9:fd:17:c9:f7:5f:c5:f7:b3:
8f:d1:e3:47:0c:b7:7a:a0:0e:55:00:db:ee:45:f5:
61:25:14:31:12:58:fa:1d:a4:4f:4c:4b:69:0f:34:
40:e2:a9:52:3f:88:70:60:d1:19:e6:b0:2b:08:09:
4e:fb:a6:43:97:03:dd:7f:95:47:f5:2f:60:58:2b:
e0:45:86:60:bd:31:8a:af:2a:2b:3f:54:13:6f:ff:
a9:1a:14:21:94:4d:b4:60:de:20:24:35:67:c6:aa:
6e:2b:b8:1e:2d:0b:eb:ad:c6:f2:85:77:45:f7:cb:
ee:c8:4b:f3:fc:12:d4:5b:bd:d6:7e:57:68:d4:3a:
d9:d5:0b:a1:2f:6a:b6:25:b5:7e:3a:21:82:39:50:
95:a1:d4:1e:6a:3c:6a:35:a0:9e:eb:d6:78:94:d0:
44:08:9a:ee:62:62:80:54:a0:28:83:34:5b:37:7d:
e9:29:eb:4d:22:df:4d:c6:d5:83:42:23:f6:56:e0:
8d:51:1d:0a:17:28:c3:39:b1:79:fc:b6:71:65:c6:
57:cf:28:4e:9b:3c:d7:56:df:18:b3:c9:5e:c9:01:
51:b5:c7:81:65:e4:79:89:a4:d8:c2:91:77:b8:9c:
b1:1f:aa:db:b9:14:58:a0:47:cd:88:f8:d8:83:a3:
35:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DD:10:07:7A:2C:7D:F0:F1:1F:32:D1:89:87:2F:B4:FF:20:FF:FD
X509v3 Authority Key Identifier:
keyid:67:70:C9:B9:40:57:48:D2:65:48:FD:5F:CA:7A:64:A0:38:D5:81:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3DJuUBXSNJlSP1fynpkoDjVgS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a0:dd:62:6e:a6:9a:6a:db:06:f4:6e:2c:98:2a:5c:49:c2:
bc:35:ea:21:f2:23:96:e6:d9:f0:a6:2c:fe:08:cd:63:bd:10:
1d:c2:56:58:11:fd:e5:1b:41:7f:5b:e4:69:83:8c:a7:c7:de:
3c:16:4e:99:83:21:48:7d:7f:d9:8d:90:cb:cc:be:5b:3b:2f:
a7:08:fb:7f:c3:63:71:39:55:54:04:ff:a6:bf:27:b5:9f:9e:
ba:ad:f2:56:d3:78:20:33:26:11:6a:b8:2a:30:9e:61:2a:73:
9c:af:6d:30:db:6a:01:53:5d:1a:6d:f4:d7:7f:aa:d1:f2:69:
89:90:ca:56:2b:d3:bb:b3:4d:f1:e4:d6:c1:2b:5b:b2:a0:b0:
15:2c:85:9a:23:db:b8:c9:98:12:3b:38:56:43:4b:07:3b:7f:
46:b5:bf:5b:3b:f2:5a:10:5d:1e:f5:dc:28:84:2a:cf:3f:ce:
c3:e4:78:98:4b:cc:92:c0:63:a2:b3:ef:90:b6:53:6f:72:30:
70:84:3e:fa:b8:60:3e:04:c8:f3:2c:d5:5e:2b:f4:e7:44:6a:
66:32:93:75:54:15:65:53:81:9e:f2:56:31:ec:ed:98:9a:fa:
fc:be:8d:ef:b3:4a:34:ea:6e:f3:1b:b0:d7:59:88:47:ca:1d:
58:de:86:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:15 2025 by rpki-client