Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft
File: zvcELPfCTHnXmEiy6MqzNXpkD9s.mft (raw, json)
Hash identifier: xkOrr54+MBlSHFrseiiOejh2OxyqyaJNYUVCqwoNF9w=
Subject key identifier: 81:34:5E:06:17:3F:65:DB:A8:39:F0:98:89:64:07:51:40:CA:BC:F5
Authority key identifier: CE:F7:04:2C:F7:C2:4C:79:D7:98:48:B2:E8:CA:B3:35:7A:64:0F:DB
Certificate issuer: /CN=cef7042cf7c24c79d79848b2e8cab3357a640fdb
Certificate serial: 019A4D05E254C080AEC5558D5582484AC2FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvcELPfCTHnXmEiy6MqzNXpkD9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft
Manifest number: 092A
Signing time: Tue 04 Nov 2025 04:00:22 +0000
Manifest this update: Tue 04 Nov 2025 04:00:22 +0000
Manifest next update: Wed 05 Nov 2025 04:00:22 +0000
Files and hashes: 1: zvcELPfCTHnXmEiy6MqzNXpkD9s.crl (hash: zZqcpdF4Iw9dQw2/K1OdBi6nqg3Vk3nkD1kFf69xxgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvcELPfCTHnXmEiy6MqzNXpkD9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:05:e2:54:c0:80:ae:c5:55:8d:55:82:48:4a:c2:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef7042cf7c24c79d79848b2e8cab3357a640fdb
Validity
Not Before: Nov 4 04:00:22 2025 GMT
Not After : Nov 5 04:00:22 2025 GMT
Subject: CN=81345e06173f65dba839f0988964075140cabcf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ba:3a:58:e7:75:a5:ec:3a:77:3a:12:bc:3b:
bb:57:84:03:f0:40:cb:5f:49:71:fe:32:54:96:78:
04:e4:33:ca:75:48:51:f6:31:92:52:49:39:b1:97:
27:85:cd:58:f3:5c:77:5b:07:56:3c:b2:64:8f:49:
17:02:93:55:ff:6b:06:17:61:5c:f0:e4:d8:b0:49:
fb:0f:e1:89:e7:cd:91:98:e1:14:a9:ce:29:2e:78:
53:aa:83:a4:14:e8:13:fd:15:e6:17:db:23:b3:bf:
51:e7:97:f4:3c:eb:26:2d:dd:3b:52:d6:e4:33:4f:
b3:d7:20:a8:99:49:4b:f9:ab:f1:6e:98:f1:bc:f8:
88:e4:ff:27:5f:6c:b3:31:e5:90:a6:39:18:e2:48:
f7:93:b3:b9:15:35:68:7a:80:9a:7a:27:99:53:67:
46:e2:6d:67:7d:a3:2e:f7:88:b9:c2:64:c4:37:18:
ee:bb:2a:9e:7a:57:c5:d1:d4:af:a2:71:bf:47:4e:
93:a6:24:87:af:31:4f:ce:54:c3:0c:ae:27:5c:b6:
99:2c:bb:21:55:8b:74:ee:46:66:80:7a:07:d2:87:
94:e1:e6:6d:e3:68:ca:89:0b:cf:ee:e9:a0:e5:ce:
5b:59:35:6d:09:ec:22:3e:da:e2:dd:ba:09:fa:68:
bc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:34:5E:06:17:3F:65:DB:A8:39:F0:98:89:64:07:51:40:CA:BC:F5
X509v3 Authority Key Identifier:
keyid:CE:F7:04:2C:F7:C2:4C:79:D7:98:48:B2:E8:CA:B3:35:7A:64:0F:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvcELPfCTHnXmEiy6MqzNXpkD9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:a1:8e:0c:1e:59:68:23:c2:36:69:3b:44:56:40:6d:c2:fa:
34:fe:e0:d0:14:c8:e9:5e:51:9c:68:db:ab:f7:15:36:df:1e:
61:9c:c3:47:0d:b8:df:0b:75:b5:d9:d4:b3:bf:ea:b3:8d:1e:
18:89:79:f0:ee:e5:77:6b:ff:40:f4:79:22:6e:dd:11:db:26:
7f:2c:62:b8:c4:2b:11:89:ba:a2:a0:a0:26:71:a7:f9:e5:9b:
f2:57:df:ad:a4:d4:24:2e:4f:99:6d:f4:9a:8f:d9:58:63:ee:
d7:07:bc:e4:f3:3c:68:2c:9e:79:0a:a2:58:5b:68:52:18:d0:
5b:a0:13:c2:55:b7:05:ac:45:ef:32:73:05:fc:26:f7:75:5a:
a8:8a:20:48:7e:ba:a3:3d:8a:e2:dd:87:cf:52:91:65:cb:ab:
6c:64:7c:c8:58:ad:07:7a:a9:41:70:0a:e1:f9:93:e3:1d:4b:
2a:15:a2:ec:a8:ae:85:e5:0b:58:4c:c1:f9:16:fd:72:d7:05:
32:63:e7:9c:57:dc:a7:86:31:9e:79:e9:d3:ef:6a:24:0e:ca:
2f:41:1c:4d:93:81:21:98:78:8e:d8:96:78:60:82:1f:03:c4:
fb:82:46:20:da:0e:c1:3c:15:fe:2a:61:3b:0c:52:0d:1f:c0:
f0:ee:92:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:27 2025 by rpki-client