Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c20cdc-b1a6-498b-8ccc-9493a74b5f75/1/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.mft
File: zoHi1W_Z8ZMtvA8hYymUL-I_dVo.mft (raw, json)
Hash identifier: l3PYldkPhPza0s+uvmK9+ziDYsElws4raTKbDroGWDI=
Subject key identifier: 4E:B4:C8:2C:B9:AD:37:7F:BD:33:86:66:F8:F7:0B:83:FE:FC:6A:B4
Authority key identifier: CE:81:E2:D5:6F:D9:F1:93:2D:BC:0F:21:63:29:94:2F:E2:3F:75:5A
Certificate issuer: /CN=ce81e2d56fd9f1932dbc0f216329942fe23f755a
Certificate serial: 019A4F61EA341DE36D20B54429F2391D2559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c20cdc-b1a6-498b-8ccc-9493a74b5f75/1/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.mft
Manifest number: 031C
Signing time: Tue 04 Nov 2025 15:00:08 +0000
Manifest this update: Tue 04 Nov 2025 15:00:08 +0000
Manifest next update: Wed 05 Nov 2025 15:00:08 +0000
Files and hashes: 1: zoHi1W_Z8ZMtvA8hYymUL-I_dVo.crl (hash: p+EmJF1PtZMnMdt3WcNsw7KX7fFdg393XAZxFKtYU6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c20cdc-b1a6-498b-8ccc-9493a74b5f75/1/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c20cdc-b1a6-498b-8ccc-9493a74b5f75/1/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:ea:34:1d:e3:6d:20:b5:44:29:f2:39:1d:25:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce81e2d56fd9f1932dbc0f216329942fe23f755a
Validity
Not Before: Nov 4 15:00:08 2025 GMT
Not After : Nov 5 15:00:08 2025 GMT
Subject: CN=4eb4c82cb9ad377fbd338666f8f70b83fefc6ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:90:4d:f4:7d:0e:7c:db:90:3f:ee:19:73:73:
75:07:38:97:6e:33:10:6f:67:de:e6:c8:9e:ea:fc:
6d:33:49:3d:4d:9d:c8:8f:46:f0:91:81:55:c2:c2:
78:9f:4f:3c:82:37:3e:46:da:88:df:b5:2f:d2:f7:
3e:e2:07:da:58:9b:9c:78:ee:a4:e1:77:9c:e7:06:
a4:4f:a1:30:6f:46:f5:da:4b:2a:a0:3d:d4:cd:ce:
10:72:29:6c:d9:26:17:70:b3:8f:ac:b4:1f:75:fc:
38:a9:b1:40:b5:06:0c:6b:8c:78:c5:8d:5e:0c:a4:
29:a7:9c:1c:fc:f6:03:66:bb:b9:88:3e:54:bd:bc:
36:86:f9:eb:45:6e:ab:62:89:d7:c7:0e:09:a3:20:
94:67:4c:2a:d6:39:61:71:28:8c:ad:ce:66:c8:cd:
72:bc:2b:5c:72:0e:b3:15:7b:e0:32:bc:8b:09:25:
3f:93:13:a4:25:7d:43:13:87:36:da:d2:4f:76:b5:
d4:7f:ef:d8:53:7c:35:7d:17:28:5a:2d:02:24:e8:
5f:a2:48:f6:db:29:70:1d:2d:3e:c6:48:35:32:ca:
5a:77:cf:b8:14:18:71:a6:a6:93:a1:fc:1f:d9:4a:
8b:6a:a5:7a:c4:57:ae:9d:bb:d2:55:9b:80:0a:9b:
c1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B4:C8:2C:B9:AD:37:7F:BD:33:86:66:F8:F7:0B:83:FE:FC:6A:B4
X509v3 Authority Key Identifier:
keyid:CE:81:E2:D5:6F:D9:F1:93:2D:BC:0F:21:63:29:94:2F:E2:3F:75:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c20cdc-b1a6-498b-8ccc-9493a74b5f75/1/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c20cdc-b1a6-498b-8ccc-9493a74b5f75/1/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:91:b6:08:84:ea:93:9e:7a:6d:b2:34:96:30:30:9e:66:ea:
42:3d:ee:28:96:c3:83:73:93:51:8c:4a:c3:d1:cd:fb:66:18:
bc:63:04:ff:aa:25:39:60:a5:c2:94:a8:41:93:c1:55:da:f3:
e8:f3:cf:63:ec:0e:59:32:73:78:9c:d4:34:61:a0:9a:00:c9:
14:eb:9f:4a:da:fc:d5:02:49:cf:1d:c8:69:77:46:1c:7a:f8:
08:9c:50:5a:45:3f:33:47:44:2e:ce:09:76:71:6f:85:b8:ee:
56:09:60:23:8a:29:05:4c:08:0c:59:74:85:4d:62:5a:f0:90:
b3:c9:81:8c:1b:e3:38:1c:13:c1:22:b8:dd:54:94:2c:63:b8:
e4:57:00:1f:a4:09:1c:bd:bc:d5:7d:c0:a3:b6:b7:10:c9:ee:
9d:df:9e:3a:06:61:ab:50:3d:90:66:61:72:2f:13:fb:bb:99:
b5:49:5c:c4:88:82:1a:70:29:a1:a7:49:41:5f:84:dc:48:af:
d8:8f:df:00:35:36:cb:04:e8:75:7e:81:6a:b3:a3:f5:6b:f4:
0a:50:d6:01:f7:83:49:e5:57:3c:ca:0c:36:0b:c5:45:6d:9a:
cc:ea:31:d3:79:a4:a3:4f:c8:01:92:fd:74:58:a2:ab:ff:7c:
19:e7:ab:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:04:52 2025 by rpki-client