Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.mft
File: zzep8CHigQ2Eshji9pmyb1NXXmE.mft (raw, json)
Hash identifier: 32KMh2fj53a/9ogvuksJq7yNhHNMmOVOeOjlpen3ceU=
Subject key identifier: DD:07:03:0F:39:DE:13:62:7D:DF:51:47:E4:D9:E5:82:27:63:06:8C
Authority key identifier: CF:37:A9:F0:21:E2:81:0D:84:B2:18:E2:F6:99:B2:6F:53:57:5E:61
Certificate issuer: /CN=cf37a9f021e2810d84b218e2f699b26f53575e61
Certificate serial: 0199FA6AC4134AD024F6EADE64E7087C0187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzep8CHigQ2Eshji9pmyb1NXXmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.mft
Manifest number: 01DD
Signing time: Sun 19 Oct 2025 03:02:04 +0000
Manifest this update: Sun 19 Oct 2025 03:02:04 +0000
Manifest next update: Mon 20 Oct 2025 03:02:04 +0000
Files and hashes: 1: zzep8CHigQ2Eshji9pmyb1NXXmE.crl (hash: P0yLzGxlRBZf+7efuUTJzbB5EboYHEhOxUkL2LeqRaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zzep8CHigQ2Eshji9pmyb1NXXmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:c4:13:4a:d0:24:f6:ea:de:64:e7:08:7c:01:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf37a9f021e2810d84b218e2f699b26f53575e61
Validity
Not Before: Oct 19 03:02:04 2025 GMT
Not After : Oct 20 03:02:04 2025 GMT
Subject: CN=dd07030f39de13627ddf5147e4d9e5822763068c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:61:b0:dd:c9:35:25:3f:c9:43:cd:17:e7:a7:
af:bf:7c:75:49:e5:d3:4f:ce:3d:43:0b:4d:d0:60:
ca:16:ee:d5:a0:0a:3c:0a:bb:e8:ef:db:ab:df:84:
6d:92:cf:1b:5e:32:19:31:bb:a4:a4:27:de:79:59:
99:9e:91:d1:d3:e5:a1:a5:ed:28:2b:eb:4b:7b:1c:
03:f0:d7:9b:df:7c:21:2f:5d:bc:61:da:59:87:dd:
55:14:e5:b9:24:98:f1:62:9f:72:5f:4e:e9:cc:6f:
5c:95:17:50:4a:95:58:a1:50:d0:18:0e:fb:d8:d5:
e8:84:d8:30:1d:54:d9:fc:d6:a1:6a:0f:85:58:1b:
40:0e:9c:6a:5f:fe:1e:5d:01:47:85:0b:60:e4:1d:
cc:b2:34:96:1c:4d:90:a1:d3:ab:1b:57:08:c2:33:
ec:1f:24:81:59:b5:5b:22:4a:1b:ec:60:43:cc:d8:
41:bd:0e:8f:74:48:d4:d4:80:88:55:62:eb:98:5a:
2b:2c:1e:82:f0:69:1a:72:8c:43:6e:f4:16:72:b8:
2b:aa:47:74:a0:3a:88:b0:44:ae:8c:6c:5e:e5:8c:
cc:49:21:1c:73:eb:4d:23:f5:d8:d4:62:47:c6:54:
7a:ba:69:bd:3d:1e:47:2b:68:9e:87:76:3e:2a:c5:
fe:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:07:03:0F:39:DE:13:62:7D:DF:51:47:E4:D9:E5:82:27:63:06:8C
X509v3 Authority Key Identifier:
keyid:CF:37:A9:F0:21:E2:81:0D:84:B2:18:E2:F6:99:B2:6F:53:57:5E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzep8CHigQ2Eshji9pmyb1NXXmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:f3:41:01:6a:1d:ad:4d:d0:d1:c7:64:54:ea:bf:36:bf:d8:
e6:6e:0f:10:c2:83:d0:f1:44:fd:d0:47:59:b3:e0:be:bd:f2:
1e:ef:5c:fe:b8:40:2c:f1:9b:f5:9e:a5:d2:f5:ed:b3:f5:42:
a0:89:4d:d8:be:07:3e:df:5d:56:c4:bd:51:93:38:d8:07:27:
67:44:ce:22:ec:c2:e8:28:cb:8b:fd:f0:11:0b:52:5f:46:d7:
52:d5:f5:33:ad:a2:f0:0d:96:72:bc:49:2a:b3:06:83:cc:40:
8e:c2:0f:77:bf:6c:80:24:f0:e9:13:bf:29:27:80:e9:99:1a:
3f:08:94:96:03:be:f5:a9:3c:95:f8:99:b1:b7:cf:80:81:0b:
9f:95:fa:2e:c1:cf:7a:36:7b:7c:35:fc:b4:46:1a:ed:8d:7a:
64:38:03:5d:1d:cc:5b:e1:26:be:1d:95:c6:bc:cb:04:b5:f2:
74:84:7b:be:d4:2b:bd:6f:d0:18:00:44:37:bd:a5:3c:69:1e:
7d:85:b8:65:3b:b3:27:82:fd:1e:38:33:ec:be:2d:ec:43:10:
f8:fc:34:1a:52:bf:a9:30:8c:fb:eb:5e:60:97:63:13:0d:14:
34:18:61:7c:d9:46:74:c5:3c:af:42:5b:3f:7f:26:38:90:52:
0b:e3:a3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:13:44 2025 by rpki-client