Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft
File: ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft (raw, json)
Hash identifier: +z+HlHtqx/Shb5cEHeUFYDsbkDL7BbpoSVsuN2xZvWU=
Subject key identifier: B9:64:AA:1E:F4:32:E1:26:19:14:3F:5F:C1:A5:24:F6:A9:81:80:27
Authority key identifier: 66:6A:6F:43:2D:0C:31:FB:10:17:E2:AB:68:BB:1D:6E:EF:CC:F6:99
Certificate issuer: /CN=666a6f432d0c31fb1017e2ab68bb1d6eefccf699
Certificate serial: 0199FBEC3D7004CED28886501271A0601888
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmpvQy0MMfsQF-KraLsdbu_M9pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft
Manifest number: 13BF
Signing time: Sun 19 Oct 2025 10:03:07 +0000
Manifest this update: Sun 19 Oct 2025 10:03:07 +0000
Manifest next update: Mon 20 Oct 2025 10:03:07 +0000
Files and hashes: 1: ZmpvQy0MMfsQF-KraLsdbu_M9pk.crl (hash: 1HxR4PProI2fTZRbQMCnrBBdrlljCRmcMHF9aoEIOsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmpvQy0MMfsQF-KraLsdbu_M9pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:3d:70:04:ce:d2:88:86:50:12:71:a0:60:18:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=666a6f432d0c31fb1017e2ab68bb1d6eefccf699
Validity
Not Before: Oct 19 10:03:07 2025 GMT
Not After : Oct 20 10:03:07 2025 GMT
Subject: CN=b964aa1ef432e12619143f5fc1a524f6a9818027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fd:1d:38:e4:b8:f5:ee:5b:60:e2:0a:ae:09:
20:e2:0a:f6:5e:4d:ae:8b:2e:4e:c0:dc:e2:42:21:
7b:27:79:66:19:d0:ee:86:69:4d:23:f3:0b:8c:19:
aa:70:ad:52:ba:44:5d:44:25:92:99:08:fc:0a:33:
d0:20:ef:0c:44:39:96:56:14:5e:11:2f:ef:f5:96:
89:68:8b:04:d2:39:1c:8f:38:48:a8:6a:68:ff:48:
53:bd:7d:4d:ef:45:0d:43:46:00:4c:6e:f1:01:6a:
5f:df:c0:fa:00:a0:22:77:ef:00:65:fe:ea:26:73:
3e:95:62:99:03:b2:92:30:8d:71:7c:d1:cd:98:db:
f1:58:a4:ea:a2:4b:b0:3b:92:67:70:32:cf:a6:db:
76:18:44:4f:1d:f9:e5:a4:e2:15:8f:6a:b9:bd:52:
b4:ff:0d:d3:0c:93:32:fc:02:ea:36:3f:35:2d:00:
21:6c:2b:9c:0e:64:a6:b5:21:68:4d:1d:c7:1b:3d:
c3:0b:27:f0:91:a4:ae:c8:ff:3d:92:00:42:e5:ff:
ea:05:e7:8c:26:dd:90:0c:1c:23:9c:88:b7:fa:14:
05:c3:cd:29:27:2a:ab:fa:3f:c0:88:f9:39:1e:02:
80:a4:2d:b9:c0:4e:72:86:3f:b5:eb:78:ab:86:44:
8d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:64:AA:1E:F4:32:E1:26:19:14:3F:5F:C1:A5:24:F6:A9:81:80:27
X509v3 Authority Key Identifier:
keyid:66:6A:6F:43:2D:0C:31:FB:10:17:E2:AB:68:BB:1D:6E:EF:CC:F6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmpvQy0MMfsQF-KraLsdbu_M9pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:7e:41:9b:ba:d9:5e:52:23:28:c4:d1:02:0a:66:01:53:63:
78:b8:1b:92:be:68:c8:10:a3:86:67:b4:55:3c:2c:8f:5d:72:
61:13:ef:f6:a0:f8:fe:a8:cb:48:bf:50:dd:71:ba:83:84:42:
f9:e6:8a:e3:f0:9d:37:c1:bf:7e:1c:eb:4e:ce:0d:0e:b8:ea:
53:f4:5f:a9:79:b5:8b:4a:14:16:c0:4f:22:3e:4f:31:8d:6e:
d4:60:24:fb:bf:3d:21:47:73:aa:81:ae:02:6d:dd:ff:cc:b9:
05:49:d6:9e:c7:28:7c:a5:58:02:d9:47:e4:2a:d2:df:f4:59:
82:2f:70:c8:77:f4:b6:3e:73:4c:ad:87:30:17:3c:37:3e:32:
f9:a1:9b:83:d8:d2:4f:b0:12:50:fa:e7:15:2a:32:a8:07:6b:
0f:c6:4a:85:fa:ad:23:7c:b9:7c:00:ce:d5:7b:55:1d:df:8e:
79:0e:5c:64:3c:08:ec:9b:0d:69:cc:52:ba:7b:91:a3:6d:dc:
14:d5:cc:f3:c8:4d:c2:0d:1a:9a:73:b5:89:56:99:36:a2:74:
0c:7f:79:62:4b:fd:db:2e:c4:30:5f:4e:73:23:b3:ec:13:7e:
b9:bf:97:7d:da:f3:ef:6c:98:8b:6b:dd:65:ed:7e:4b:f8:28:
e8:26:65:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:43 2025 by rpki-client