Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft
File: zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft (raw, json)
Hash identifier: OUSq7bhRprNI3o/or/KQvQuG8zzXW6WWW8aEEm0UmN4=
Subject key identifier: 01:B5:72:40:F8:61:4C:6A:7A:AD:AB:61:F8:E2:87:21:68:9C:7F:E8
Authority key identifier: CD:A1:04:57:72:66:EC:9B:14:67:36:C8:CC:9D:A7:36:6B:1D:97:81
Certificate issuer: /CN=cda104577266ec9b146736c8cc9da7366b1d9781
Certificate serial: 0199FA6A0EE3BD4013525AB786DE59D2D1E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 03:01:18 +0000
Manifest this update: Sun 19 Oct 2025 03:01:18 +0000
Manifest next update: Mon 20 Oct 2025 03:01:18 +0000
Files and hashes: 1: zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.crl (hash: 2b0lNoHLHxVlRqy/+t+WUr4zOzCF2DfVLqbQmDHKgRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:0e:e3:bd:40:13:52:5a:b7:86:de:59:d2:d1:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda104577266ec9b146736c8cc9da7366b1d9781
Validity
Not Before: Oct 19 03:01:18 2025 GMT
Not After : Oct 20 03:01:18 2025 GMT
Subject: CN=01b57240f8614c6a7aadab61f8e28721689c7fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:29:9b:c3:10:57:29:0f:ed:14:2e:a8:09:0b:
1b:dd:1c:f7:96:69:57:91:ac:23:b5:54:16:07:c1:
35:25:eb:68:2b:67:9b:15:10:fc:55:1e:0a:2a:c6:
9e:15:85:41:fd:dc:8e:0b:ac:5e:9c:da:57:90:1f:
1e:e2:94:a4:24:b8:03:b5:67:26:78:65:00:9b:03:
98:db:8b:23:9e:b7:e1:0c:d3:1a:e5:c5:f9:94:1c:
c4:89:11:6d:f5:0a:9d:18:27:81:99:56:31:24:c8:
d2:71:e0:d7:84:1b:ef:1b:7f:30:bc:ed:61:cf:6f:
c3:bf:01:7f:69:e1:59:a7:08:b6:64:7e:be:4a:4b:
86:6e:cd:c9:c3:08:6b:d2:d1:70:30:54:eb:6a:42:
01:65:1d:e0:75:d2:57:31:68:71:0e:63:de:fb:2b:
12:8c:93:f5:10:1d:bf:10:1e:01:0f:d8:21:52:33:
21:80:eb:7b:d2:41:52:a3:00:d2:95:de:3b:08:ba:
e1:1c:39:f4:18:23:b9:b1:bf:c8:30:b2:2e:0a:98:
fb:66:09:f7:5c:41:0b:cc:7f:a2:44:12:cd:03:14:
dd:10:26:93:86:d8:5e:b6:86:cb:b5:8c:18:99:cb:
d9:bf:f8:92:fe:f0:90:b4:2d:bb:34:08:87:20:db:
b8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B5:72:40:F8:61:4C:6A:7A:AD:AB:61:F8:E2:87:21:68:9C:7F:E8
X509v3 Authority Key Identifier:
keyid:CD:A1:04:57:72:66:EC:9B:14:67:36:C8:CC:9D:A7:36:6B:1D:97:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b1:90:e8:d8:ed:56:5f:6e:2e:a9:76:59:b7:9e:c3:9b:3f:
83:96:10:47:3d:63:25:4e:f7:84:19:31:b0:59:52:c3:94:f0:
b5:e4:c1:51:21:b3:ba:69:a2:fb:43:4d:52:df:a4:0f:47:20:
44:d8:c1:a8:90:dc:ed:56:0f:83:cb:46:4a:6c:14:0b:90:d1:
d8:4f:38:d9:f4:5f:b8:ed:91:30:5c:fa:d0:cf:f6:ff:b3:6a:
2d:d5:50:5f:3d:d1:82:eb:49:bf:d9:a4:d7:6a:92:e3:54:f5:
ec:80:ac:2d:76:56:21:05:3f:65:69:9f:6c:31:50:18:1d:e4:
c3:9d:64:bf:62:43:35:5b:e8:06:e4:19:cc:fc:0c:16:e7:70:
bd:ed:00:04:72:72:96:eb:25:80:b7:2a:77:69:01:78:68:2c:
ed:09:90:9a:fb:20:30:f5:ae:15:9a:5a:49:38:7b:63:c5:a5:
41:1e:40:75:fc:ae:bb:32:9f:21:a1:8e:f3:50:72:40:ee:c1:
75:04:df:bb:88:51:98:28:dc:13:c1:e7:a5:58:64:02:43:82:
08:be:81:e3:8e:c5:ee:c7:7d:46:51:b3:e4:c2:7d:14:71:99:
a8:bd:15:90:25:2f:b1:32:33:84:8d:0b:d3:ec:d2:62:70:af:
2e:5d:21:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:04 2025 by rpki-client