Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
File: zEHDryzVmGV10bz2Xsnod2Zu3jY.mft (raw, json)
Hash identifier: neShmBXcdDza1yq1U/e/riN/3X/Nfw5Irz5HOJyVaOk=
Subject key identifier: AD:49:27:6B:D6:5F:A8:30:C8:EC:EA:53:B8:34:EA:99:A9:67:02:76
Authority key identifier: CC:41:C3:AF:2C:D5:98:65:75:D1:BC:F6:5E:C9:E8:77:66:6E:DE:36
Certificate issuer: /CN=cc41c3af2cd5986575d1bcf65ec9e877666ede36
Certificate serial: 019A01B57B526480E3D3A4DABFE823810B54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
Manifest number: 1376
Signing time: Mon 20 Oct 2025 13:01:02 +0000
Manifest this update: Mon 20 Oct 2025 13:01:02 +0000
Manifest next update: Tue 21 Oct 2025 13:01:02 +0000
Files and hashes: 1: zEHDryzVmGV10bz2Xsnod2Zu3jY.crl (hash: rGyXJNkxopz7Nwj+26RWko+msdHr87IclAjwSI0YU7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:7b:52:64:80:e3:d3:a4:da:bf:e8:23:81:0b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc41c3af2cd5986575d1bcf65ec9e877666ede36
Validity
Not Before: Oct 20 13:01:02 2025 GMT
Not After : Oct 21 13:01:02 2025 GMT
Subject: CN=ad49276bd65fa830c8ecea53b834ea99a9670276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:01:e0:f9:8c:7c:a1:03:c7:b2:2b:52:4a:43:
71:95:0e:5f:5d:c4:72:48:84:3a:b8:9a:d8:c2:16:
71:f2:2c:f3:84:7e:07:d7:01:c8:e2:b2:03:cc:f9:
97:f9:38:a9:00:08:01:ec:2a:7d:b6:16:20:57:7c:
50:b8:bf:ce:72:0f:07:89:b9:93:a1:e4:d3:7c:21:
81:40:84:70:96:e0:9c:5b:57:f1:b4:aa:70:1d:6f:
18:8c:3a:24:cf:fe:4d:85:8e:d5:93:7d:71:b1:d6:
64:6e:f9:9a:10:90:5e:32:f9:a2:eb:0a:73:57:c2:
c9:8b:aa:25:27:b8:94:80:9e:41:25:bd:a9:1b:37:
f8:09:71:d0:11:4e:6d:83:d6:f5:08:6b:7c:0e:1c:
5e:85:ba:de:ef:a2:c0:55:39:ca:68:fa:7e:e4:e6:
8f:b9:a2:21:35:4e:ff:05:6e:9b:73:85:de:da:3d:
d1:0e:26:a9:db:5c:b9:41:fd:cb:bd:69:5e:ce:b3:
64:2e:2d:8c:b9:8f:f8:79:c5:bc:49:be:2d:c6:75:
51:03:8e:2c:f6:6d:b0:c2:4c:ec:10:18:ba:73:0f:
6b:d9:e4:25:5c:f7:d0:4f:09:4e:60:9c:a6:6e:ea:
d6:c3:61:58:87:e7:36:91:e8:e5:b1:bb:13:37:2f:
59:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:49:27:6B:D6:5F:A8:30:C8:EC:EA:53:B8:34:EA:99:A9:67:02:76
X509v3 Authority Key Identifier:
keyid:CC:41:C3:AF:2C:D5:98:65:75:D1:BC:F6:5E:C9:E8:77:66:6E:DE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e8:23:99:cf:78:01:e8:3f:b4:df:8b:74:b6:42:fa:10:3c:
f6:5d:ee:52:b1:e3:50:70:ae:50:c0:6f:d6:bf:a9:40:c7:bb:
d9:1c:f3:c4:bf:28:33:32:9d:1b:d2:79:c3:29:f5:06:ca:1c:
38:ad:5a:5f:78:f9:ca:44:52:e8:cc:9f:01:c9:57:41:65:85:
c2:de:30:65:19:0d:e8:52:ed:f5:82:13:46:cb:d5:0e:b9:26:
90:22:4f:75:cf:af:e6:b8:b9:26:ba:c9:40:a4:49:4d:c3:4c:
a9:5e:d9:8e:c0:58:63:47:bb:c7:1b:99:fa:79:fa:46:0e:d4:
3a:e7:78:b5:b7:d8:2c:5f:b0:37:a7:fc:27:2d:ba:b3:32:ef:
64:4c:8b:fe:fb:df:56:49:ef:d2:db:0a:88:e4:d1:e4:07:7c:
e7:4c:65:9c:46:60:00:ae:8a:58:86:ce:42:d8:cc:7b:5a:9b:
70:7f:67:bb:d0:5e:1d:78:25:2e:aa:42:13:31:5b:a4:a1:90:
c3:5d:90:03:f8:cd:79:d6:da:5a:5a:03:4d:eb:42:52:0b:e7:
ca:29:af:d5:d9:de:a6:15:bb:2e:ab:7b:51:49:07:c3:a5:ef:
c4:21:95:3f:65:7a:23:66:6b:9c:17:89:04:3b:59:67:36:4d:
f8:70:e7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:15:29 2025 by rpki-client