Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
File: ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft (raw, json)
Hash identifier: KIpHL+9zYh1B9D5Ubue+nTsSKX7kleJ7eBcXP92MkPM=
Subject key identifier: 1D:55:64:A2:14:9E:64:66:C7:69:30:B9:C2:0B:4C:4A:08:29:45:6D
Authority key identifier: 64:21:47:0D:59:22:29:8E:D0:46:85:E1:DF:0E:FD:FD:D2:A6:66:07
Certificate issuer: /CN=6421470d5922298ed04685e1df0efdfdd2a66607
Certificate serial: 019A4E4FBA2DBFA73A4A86DA3ADF7ACDA51D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
Manifest number: 0D7C
Signing time: Tue 04 Nov 2025 10:00:39 +0000
Manifest this update: Tue 04 Nov 2025 10:00:39 +0000
Manifest next update: Wed 05 Nov 2025 10:00:39 +0000
Files and hashes: 1: ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl (hash: Yaop8NLXizEDqyxthC1CNhYyuxPI7qmIQUhHHz4n7wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:ba:2d:bf:a7:3a:4a:86:da:3a:df:7a:cd:a5:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6421470d5922298ed04685e1df0efdfdd2a66607
Validity
Not Before: Nov 4 10:00:39 2025 GMT
Not After : Nov 5 10:00:39 2025 GMT
Subject: CN=1d5564a2149e6466c76930b9c20b4c4a0829456d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:90:e7:1d:11:24:6d:1e:79:84:21:dc:bc:99:
c7:90:24:6b:8a:e6:f1:36:6c:8e:8a:84:07:c7:2d:
b3:94:50:03:96:b9:fb:f5:c7:84:08:72:81:e6:f8:
b2:15:24:ac:57:d2:8d:e8:36:e2:58:ee:60:3c:e2:
c1:9a:f9:b0:fb:ca:d8:ca:e8:26:35:92:54:b2:39:
84:90:69:c0:1f:d3:77:48:20:f2:7f:8b:c7:90:85:
ca:8c:28:cd:e7:cf:ea:d2:90:27:96:44:11:ab:95:
7c:62:8f:2f:37:07:51:ab:6f:d2:3d:5a:56:55:ab:
c8:e1:09:1d:4f:c5:d9:28:fa:d9:54:bf:57:53:6e:
94:fc:da:d1:e9:6c:0a:07:9f:42:a7:da:ba:a6:f7:
8f:3e:4d:6f:51:aa:68:9e:ea:73:5f:0c:3e:f0:9b:
ec:fa:77:76:db:a2:ef:e6:9b:e6:d2:c3:7f:22:17:
8c:9a:af:47:04:ae:4c:d4:f4:10:c5:00:df:29:ba:
d9:73:6c:30:b6:5f:76:21:9e:78:9c:6f:9e:74:ce:
1a:cd:26:98:4c:c5:8c:16:02:f3:8b:ce:d3:53:f5:
f2:26:c9:34:7e:94:39:82:04:ad:e3:2d:77:6e:de:
dd:64:eb:aa:e9:6d:a6:88:5b:1a:dc:07:53:b5:93:
24:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:55:64:A2:14:9E:64:66:C7:69:30:B9:C2:0B:4C:4A:08:29:45:6D
X509v3 Authority Key Identifier:
keyid:64:21:47:0D:59:22:29:8E:D0:46:85:E1:DF:0E:FD:FD:D2:A6:66:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:cf:41:1a:68:d7:24:4d:79:1e:42:73:e3:65:de:5f:ad:cd:
54:30:58:c1:ae:33:74:e3:96:77:2f:98:66:a3:5e:2e:6d:18:
2f:36:b0:b2:7f:36:53:5d:f2:94:65:c1:23:97:b9:d0:4d:f4:
0f:6b:3a:0c:f3:29:e1:18:48:c2:81:35:22:60:56:b6:b5:38:
ae:51:54:b0:3b:ff:7a:46:51:78:e5:28:be:99:5c:f0:48:a1:
4f:5b:50:db:f2:ad:a7:80:24:92:3c:22:87:38:ab:48:3e:63:
73:a5:df:d0:71:86:8f:de:07:a8:04:bd:dd:35:71:d5:f9:1b:
30:36:b7:98:b6:5f:d5:16:6e:04:76:7f:a1:50:98:08:59:00:
0b:ba:8b:f5:6b:15:b8:18:a6:38:ce:ee:21:dc:f0:78:56:18:
8e:62:21:93:ba:f8:cf:9c:3a:98:f6:b5:1b:f0:7d:d2:bf:be:
37:6a:8a:9d:d1:f4:b0:f8:01:74:51:23:fb:3f:45:99:8c:b5:
fe:a9:93:c2:77:2f:71:16:d4:c0:74:8f:8e:ff:8f:da:97:30:
71:ad:96:ac:b3:2f:fc:2c:03:4b:2a:ef:e6:a5:de:8c:52:60:
81:a1:f4:0e:b1:9d:f0:76:ec:58:f5:2a:6d:83:d8:ac:b8:91:
f8:87:e6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:33:31 2025 by rpki-client