Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
File: zZocvpsLS6e0fUKq1nJXFITlWV8.mft (raw, json)
Hash identifier: le0xeq32OfyDf9TnNb89ADrRgAyFPymmSrEHeNNnO3o=
Subject key identifier: 49:EF:E0:96:F0:B8:67:C7:2A:0A:26:5B:D8:28:CA:23:A0:B0:E8:77
Authority key identifier: CD:9A:1C:BE:9B:0B:4B:A7:B4:7D:42:AA:D6:72:57:14:84:E5:59:5F
Certificate issuer: /CN=cd9a1cbe9b0b4ba7b47d42aad672571484e5595f
Certificate serial: 019A4F993129EA3533342113849829210BBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
Manifest number: 14AB
Signing time: Tue 04 Nov 2025 16:00:30 +0000
Manifest this update: Tue 04 Nov 2025 16:00:30 +0000
Manifest next update: Wed 05 Nov 2025 16:00:30 +0000
Files and hashes: 1: zZocvpsLS6e0fUKq1nJXFITlWV8.crl (hash: pK3hu6vBzjr5FV7mgfFPxRytCJ1kWKfGbPZTiCBag78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:31:29:ea:35:33:34:21:13:84:98:29:21:0b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9a1cbe9b0b4ba7b47d42aad672571484e5595f
Validity
Not Before: Nov 4 16:00:30 2025 GMT
Not After : Nov 5 16:00:30 2025 GMT
Subject: CN=49efe096f0b867c72a0a265bd828ca23a0b0e877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:53:ff:2d:5b:04:ea:e5:a3:47:33:80:21:fe:
75:3a:70:8a:77:1a:64:dd:cc:f6:0d:bd:5c:19:4b:
16:19:00:7e:df:41:58:1e:76:83:4e:2b:e1:f4:92:
3b:ff:73:cc:7f:1a:9b:31:af:ff:31:98:27:1a:d7:
12:b4:2a:35:cd:27:4e:22:1e:6a:fb:12:28:e4:67:
91:da:93:cd:a4:48:a7:b9:1d:ad:7c:af:9e:f5:4f:
c8:1c:23:7d:28:91:5b:38:cb:fb:ff:d6:39:04:a6:
86:bf:f5:68:43:32:17:b5:3b:0e:10:27:5c:59:ba:
29:47:b8:db:9c:a6:73:e8:2b:5d:31:dc:c7:35:bb:
c9:47:5b:be:c5:19:64:b2:d9:7f:93:6c:28:c8:bc:
69:1f:8c:9d:5c:73:d5:6d:d6:77:ec:a1:c5:ab:15:
63:73:75:8d:c8:76:cb:3f:b2:8d:b5:b1:e8:64:97:
98:0f:41:7c:c8:f6:e2:83:ed:d1:3f:96:20:59:7a:
e2:9a:be:c9:2d:29:a2:2a:e1:7a:36:fd:ed:51:d4:
90:51:21:f5:ae:2e:18:a2:92:5c:1b:7b:d4:34:68:
1d:14:23:95:cb:a8:a1:fe:23:ac:50:38:78:f3:09:
fa:9b:3b:aa:b6:c1:ad:85:e0:12:6d:c6:31:ed:ec:
41:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:EF:E0:96:F0:B8:67:C7:2A:0A:26:5B:D8:28:CA:23:A0:B0:E8:77
X509v3 Authority Key Identifier:
keyid:CD:9A:1C:BE:9B:0B:4B:A7:B4:7D:42:AA:D6:72:57:14:84:E5:59:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:2d:e1:4e:c5:08:30:5b:89:3e:11:d6:4c:50:22:8e:a4:fc:
2d:90:c4:aa:bf:f3:88:df:cf:a0:a8:73:95:79:18:8b:e1:ec:
a6:89:57:39:d5:86:89:6e:3c:98:c9:34:4b:63:4e:43:d9:4c:
39:9c:ca:e5:7f:3b:f8:27:52:fc:d3:8c:1d:b6:f4:24:a6:04:
1e:fe:cf:f8:4e:0f:d1:43:be:63:56:62:91:68:4f:ba:06:fc:
2d:c4:2a:bc:35:95:28:33:61:19:91:e8:7d:7b:d7:23:e4:e8:
4d:55:a3:eb:8f:f3:32:35:08:cc:51:69:79:20:5f:f5:fd:ac:
b8:88:f2:32:cf:69:45:c9:13:e7:2f:6b:30:3f:73:ca:b4:9e:
bf:b3:0d:d1:fd:22:bb:81:3d:78:99:25:3d:78:39:8c:97:8f:
32:75:96:3c:d0:d5:c2:dc:a1:ba:db:8c:bd:46:ea:3c:58:df:
88:4e:3a:05:8a:48:f5:94:77:a1:04:65:9a:25:f7:f9:8d:78:
89:29:58:e3:59:17:0a:76:c4:ca:5b:7c:1d:bb:54:db:fc:8a:
6c:c9:6a:70:8e:8b:02:88:4b:f8:b9:89:d7:8a:88:26:a9:67:
04:37:4d:41:e5:ac:b5:56:ab:61:c0:de:36:85:30:b4:0c:b6:
88:3b:36:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:31:16 2025 by rpki-client