Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
File: zxTbNzCF4owNm3S-e46JdAuV-fo.mft (raw, json)
Hash identifier: JQNnZ52dweGhd10CQvuKEOdTWEsXP8U+LCI6ZFJXgPQ=
Subject key identifier: B0:D0:64:6F:11:2C:AA:F2:23:27:8D:86:12:69:90:6E:0B:73:63:A7
Authority key identifier: CF:14:DB:37:30:85:E2:8C:0D:9B:74:BE:7B:8E:89:74:0B:95:F9:FA
Certificate issuer: /CN=cf14db373085e28c0d9b74be7b8e89740b95f9fa
Certificate serial: 019A4EF59200DFE6375A7EF20023D0D83A02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
Manifest number: 0D08
Signing time: Tue 04 Nov 2025 13:01:47 +0000
Manifest this update: Tue 04 Nov 2025 13:01:47 +0000
Manifest next update: Wed 05 Nov 2025 13:01:47 +0000
Files and hashes: 1: zxTbNzCF4owNm3S-e46JdAuV-fo.crl (hash: P50kwRg7bDwAzk1pVNE4mSLsb29jigM0sFCVdhoAr7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:92:00:df:e6:37:5a:7e:f2:00:23:d0:d8:3a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf14db373085e28c0d9b74be7b8e89740b95f9fa
Validity
Not Before: Nov 4 13:01:47 2025 GMT
Not After : Nov 5 13:01:47 2025 GMT
Subject: CN=b0d0646f112caaf223278d861269906e0b7363a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1b:49:ec:ed:4e:8a:51:03:81:70:17:b5:52:
6a:eb:51:72:e1:85:45:c9:23:9f:25:8a:d1:f8:a4:
a3:07:0e:55:63:c0:8f:8d:d9:51:32:0d:29:04:33:
10:eb:a3:34:52:51:7b:64:f6:0d:a2:89:c0:e4:1b:
7c:c8:63:10:c7:a3:be:8f:b3:df:4c:38:54:97:c6:
f2:f7:02:3d:8f:62:fd:e6:f9:2d:5c:d1:fe:18:1c:
da:46:a0:11:9d:a8:74:69:66:6a:7f:d1:15:64:d6:
68:3e:7c:ba:df:00:65:47:5c:65:f3:95:c0:6b:cf:
e2:00:a5:13:eb:11:d3:69:03:2a:bd:03:9c:ee:0e:
97:d8:59:71:fc:0c:12:58:69:df:a3:e0:df:99:70:
6e:9f:0b:dc:b4:5d:24:e5:99:f5:2f:68:66:1d:fe:
a7:52:b7:8b:d8:22:c0:cd:da:ea:dc:d9:9c:d0:f9:
11:51:88:a0:fb:63:be:96:8a:b1:f5:62:f3:15:22:
68:31:00:8f:74:a1:ba:0b:56:82:59:77:22:4f:d0:
92:14:0d:3c:9e:ad:4f:77:b6:5e:30:0e:38:47:32:
80:53:cc:fc:bc:10:cd:66:d7:bf:e7:5d:64:7d:a1:
ef:a1:c7:93:0b:28:ad:a7:5a:cc:15:c4:32:ed:da:
e1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D0:64:6F:11:2C:AA:F2:23:27:8D:86:12:69:90:6E:0B:73:63:A7
X509v3 Authority Key Identifier:
keyid:CF:14:DB:37:30:85:E2:8C:0D:9B:74:BE:7B:8E:89:74:0B:95:F9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:dd:30:7c:98:64:06:39:c4:b7:de:1e:c8:ad:c3:eb:a9:4c:
cc:cc:fc:36:3f:3d:2c:59:b5:69:9a:ac:65:93:4f:61:24:a3:
21:f6:6a:8e:aa:9c:f9:8b:ff:89:de:fa:3e:88:22:df:cd:d5:
56:e2:0e:e9:55:90:17:b4:e0:24:cb:14:04:76:54:db:63:1d:
b9:ad:2a:79:46:14:75:8f:81:c2:ab:6c:4a:8a:fd:97:6e:6e:
12:16:0d:46:cc:20:72:c8:be:68:bc:8c:1f:0a:01:01:d3:fe:
51:b9:bd:8b:f0:ca:14:6c:22:fd:89:33:fa:4e:d0:ad:d2:17:
cc:5e:92:09:49:69:cb:1e:17:5d:4a:e0:1b:ed:c1:32:f4:66:
6f:eb:38:0f:84:35:ed:2a:56:80:15:f4:97:57:0e:15:61:27:
c3:f6:cc:71:03:2c:44:65:54:39:d2:71:bb:38:fb:1c:4c:18:
81:41:51:a9:b7:10:a3:cd:99:47:c2:b6:5c:8e:9a:9b:3a:85:
65:5d:53:a4:aa:b5:88:ac:9e:11:42:5d:c9:b9:30:cc:58:ef:
76:b1:52:fb:5e:3c:ac:3e:dc:66:48:46:36:9e:c7:5a:da:3b:
20:99:09:1a:9a:93:12:e9:b3:b8:44:88:6e:f3:94:9c:f5:c8:
47:c2:78:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:07:36 2025 by rpki-client