Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
File: zEseS1uaUAMbWdQZcyGgmahXBUA.mft (raw, json)
Hash identifier: dq4gdqMwnhPJ0o/bl7BGtFIyQ4xOhkokiX55XbF2rXg=
Subject key identifier: 2D:92:7C:95:E8:76:48:3E:BE:8D:61:2F:70:D7:E2:40:ED:9F:D2:15
Authority key identifier: CC:4B:1E:4B:5B:9A:50:03:1B:59:D4:19:73:21:A0:99:A8:57:05:40
Certificate issuer: /CN=cc4b1e4b5b9a50031b59d4197321a099a8570540
Certificate serial: 0199FBB3613C282F478925CA966A84128DD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 09:01:00 +0000
Manifest this update: Sun 19 Oct 2025 09:01:00 +0000
Manifest next update: Mon 20 Oct 2025 09:01:00 +0000
Files and hashes: 1: zEseS1uaUAMbWdQZcyGgmahXBUA.crl (hash: AXatXEmGVdlhBSpoDH0hxTYO/yC+G5tXoGVAACInMOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 09:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:61:3c:28:2f:47:89:25:ca:96:6a:84:12:8d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4b1e4b5b9a50031b59d4197321a099a8570540
Validity
Not Before: Oct 19 09:01:00 2025 GMT
Not After : Oct 20 09:01:00 2025 GMT
Subject: CN=2d927c95e876483ebe8d612f70d7e240ed9fd215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:21:9a:b4:e5:4b:54:27:05:4c:9e:79:0a:f0:
6f:e9:36:b6:5a:35:d5:89:f6:bd:9f:dd:d4:1f:fd:
50:e9:da:e0:cb:31:23:3b:b0:de:b2:c5:4e:15:63:
49:c2:9f:91:59:71:bb:4d:80:c6:36:ab:7d:e4:2a:
7b:ba:45:83:81:52:23:0d:0d:44:ba:d6:4d:c8:98:
01:aa:ab:e9:c1:f8:25:a7:76:5d:c1:65:61:2a:67:
56:67:fe:8b:a8:21:d8:e4:e2:b3:b1:05:f2:e8:7d:
f5:41:6c:e2:dc:ef:1c:bd:27:2a:6c:a7:9e:f9:0e:
8d:1d:83:2d:9f:d5:ce:32:f8:6f:ff:ae:b6:4a:d4:
e8:5f:c0:83:62:76:c2:35:37:19:eb:09:3b:98:dc:
cf:c5:9b:0d:5e:6f:10:8b:8e:96:54:41:1a:85:c0:
6b:00:2a:f3:96:bf:e5:0c:45:90:c9:d4:73:8a:91:
41:2b:4b:13:87:4e:26:78:7d:cf:cd:da:f4:cd:01:
df:9e:6d:b6:1e:32:51:17:73:ef:a8:8b:42:e7:95:
35:5f:d8:f5:6c:6a:ee:b6:03:e2:b4:ba:24:fb:0d:
b0:1b:c1:6f:4c:91:ff:42:cc:61:70:a3:b5:4e:89:
87:19:2c:92:97:29:0b:bb:c8:bc:a7:1e:ed:07:82:
17:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:92:7C:95:E8:76:48:3E:BE:8D:61:2F:70:D7:E2:40:ED:9F:D2:15
X509v3 Authority Key Identifier:
keyid:CC:4B:1E:4B:5B:9A:50:03:1B:59:D4:19:73:21:A0:99:A8:57:05:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:53:48:6d:6f:f1:14:f3:38:8d:8e:3f:5f:28:53:cb:ff:88:
16:84:0f:55:2c:78:8d:01:23:f0:9e:c4:f8:47:46:46:2b:e1:
c2:72:46:f9:7b:87:00:45:54:7e:74:9f:ae:9a:2c:9c:f7:27:
f2:82:9c:f7:44:3a:81:20:03:7e:b7:68:32:f1:5a:bf:1f:2b:
cf:bc:a9:f0:53:c3:13:37:3a:a4:35:ba:6d:cc:dd:22:73:8c:
dd:e7:48:18:83:84:a7:25:59:d1:a4:0f:e1:ef:52:e9:e9:d0:
a4:ed:1d:5b:e9:30:ff:e6:69:fb:ee:83:67:ac:34:b8:0b:7d:
ab:b4:78:47:0e:b1:b6:c3:af:ac:d1:10:23:69:05:47:6a:ab:
45:6e:2c:2f:93:57:c2:c4:78:26:ac:07:ef:bd:ae:55:53:ab:
0a:dc:fe:66:f0:dc:98:a7:27:bd:f2:9a:74:43:cd:fb:7c:8b:
2d:78:0a:7d:8a:40:a5:61:0a:20:78:af:62:86:59:2d:da:8e:
f3:22:1c:83:6a:e5:16:8e:63:68:3b:cf:8d:02:06:28:47:e8:
23:f0:ff:c8:f7:3d:73:73:6b:71:4e:62:4f:de:8a:2a:2b:8e:
ec:8f:aa:e9:1b:05:ea:43:86:a0:e9:c0:4b:89:c5:88:fd:33:
44:bb:53:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:47 2025 by rpki-client