Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
File: ZIPWjECz28KafUdyeRpTjD7uIDI.mft (raw, json)
Hash identifier: glGhG2uUr+e9ejNAVHFut2urtRCcCqMLPDSHMgeqMcM=
Subject key identifier: 79:80:C5:DA:2A:30:3B:46:43:D4:1E:7D:CE:86:E5:B6:81:D9:3C:30
Authority key identifier: 64:83:D6:8C:40:B3:DB:C2:9A:7D:47:72:79:1A:53:8C:3E:EE:20:32
Certificate issuer: /CN=6483d68c40b3dbc29a7d4772791a538c3eee2032
Certificate serial: 019A54C07F0EF475F0D11655805891246261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
Manifest number: 125F
Signing time: Wed 05 Nov 2025 16:01:32 +0000
Manifest this update: Wed 05 Nov 2025 16:01:32 +0000
Manifest next update: Thu 06 Nov 2025 16:01:32 +0000
Files and hashes: 1: ZIPWjECz28KafUdyeRpTjD7uIDI.crl (hash: tqaFUzktm+ErlRu8l+2OSuzVe3sbqP7xwT5qIZyFLk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:7f:0e:f4:75:f0:d1:16:55:80:58:91:24:62:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6483d68c40b3dbc29a7d4772791a538c3eee2032
Validity
Not Before: Nov 5 16:01:32 2025 GMT
Not After : Nov 6 16:01:32 2025 GMT
Subject: CN=7980c5da2a303b4643d41e7dce86e5b681d93c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4c:43:06:cb:d8:97:34:2d:9f:4a:5a:b8:74:
2e:d8:d7:2c:4b:74:6a:2a:44:f3:d7:69:a1:7c:29:
f4:26:47:09:d0:75:21:f5:e1:87:c6:63:b9:61:df:
36:30:9f:f7:bd:72:af:95:05:9a:94:ce:aa:c3:37:
54:d1:0f:73:6a:a1:5e:bb:20:05:03:27:39:9f:31:
40:e0:a3:17:21:bb:7d:21:be:42:e5:99:15:15:69:
86:ed:ea:78:07:a5:51:31:a1:d8:55:94:ad:33:f4:
ad:f9:6c:bf:34:e9:d5:fd:c8:8d:21:4f:a8:42:08:
9e:01:da:14:ea:de:8f:48:6e:86:98:e2:6d:21:31:
3e:2c:95:83:c2:8b:c5:fe:82:33:4a:a0:80:fa:5a:
92:35:a6:fb:54:38:d2:c2:98:29:5f:aa:2e:5d:68:
62:b6:d2:14:a9:84:6a:78:41:aa:61:48:6c:2b:01:
f4:f2:ee:9d:0e:c4:e3:de:52:26:02:63:38:59:4c:
2d:82:ed:fb:50:76:d9:42:08:38:1c:3c:54:df:be:
df:bd:fe:e3:7b:80:7f:73:21:af:88:0e:44:96:03:
d1:fb:46:86:dd:42:48:63:e9:92:45:ea:70:ce:07:
62:4c:41:ac:cb:76:2e:1e:33:47:7d:6b:f8:b4:f5:
09:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:80:C5:DA:2A:30:3B:46:43:D4:1E:7D:CE:86:E5:B6:81:D9:3C:30
X509v3 Authority Key Identifier:
keyid:64:83:D6:8C:40:B3:DB:C2:9A:7D:47:72:79:1A:53:8C:3E:EE:20:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:a4:f3:55:bc:7a:02:04:a0:04:47:94:99:da:32:66:05:17:
52:cd:e4:95:bb:e0:fb:10:df:3f:6a:4a:b7:ca:71:3c:99:40:
27:76:61:9f:de:c3:99:ea:70:62:68:0c:d3:c8:6e:2b:88:44:
88:d2:d7:70:f4:07:12:02:d0:2e:17:a4:4f:ee:14:f2:20:dc:
0d:27:6a:9d:9d:ed:32:ec:04:e2:14:3a:13:59:6d:f7:62:1e:
b2:1a:99:ba:5a:94:8f:94:6c:f8:7e:1f:54:89:c3:19:b4:43:
2c:fa:57:8e:d1:d4:7c:bc:c8:5c:47:ef:72:12:89:5f:59:cd:
05:da:f9:1f:c9:78:ee:51:15:da:33:12:8c:3c:6f:f2:74:a1:
30:8c:6d:c0:d4:e4:42:7e:88:31:a4:69:5c:91:66:7a:1b:13:
bc:37:7c:af:bf:fc:b4:c6:da:79:2e:91:ae:ab:c4:f9:c5:a6:
3a:e5:95:80:68:0e:d7:6d:02:9d:a5:a8:bd:d3:78:d8:cc:3f:
8a:4f:e7:8a:7d:6b:86:b6:fa:bd:ad:29:3c:1d:5d:98:e4:5c:
20:43:18:bf:66:f5:5c:03:78:de:3b:57:51:c3:d7:06:a5:f9:
b5:a9:4d:67:60:03:0a:96:ab:14:02:96:96:88:29:b9:11:75:
6d:ef:2b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:45:29 2025 by rpki-client