Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
File: zqPt3xh6xsGoT4iU1jq7YFlieew.mft (raw, json)
Hash identifier: 34cqLRa1eelBhGf9PQqdH3T+O4qivOwgeBoe8M1T+e8=
Subject key identifier: 32:DD:06:6C:33:27:43:59:B5:A7:94:BF:47:22:DC:42:05:09:67:E8
Authority key identifier: CE:A3:ED:DF:18:7A:C6:C1:A8:4F:88:94:D6:3A:BB:60:59:62:79:EC
Certificate issuer: /CN=cea3eddf187ac6c1a84f8894d63abb60596279ec
Certificate serial: 0199FBEB06B7FB54C3502AFE8CAD387D7C2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
Manifest number: 0EDF
Signing time: Sun 19 Oct 2025 10:01:47 +0000
Manifest this update: Sun 19 Oct 2025 10:01:47 +0000
Manifest next update: Mon 20 Oct 2025 10:01:47 +0000
Files and hashes: 1: zqPt3xh6xsGoT4iU1jq7YFlieew.crl (hash: /LMhWQMyhj5WF/EaL2J03/rEKBpf6PvUbD6S3x4uIXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:06:b7:fb:54:c3:50:2a:fe:8c:ad:38:7d:7c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea3eddf187ac6c1a84f8894d63abb60596279ec
Validity
Not Before: Oct 19 10:01:47 2025 GMT
Not After : Oct 20 10:01:47 2025 GMT
Subject: CN=32dd066c33274359b5a794bf4722dc42050967e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:28:29:3d:01:28:43:74:34:45:a0:80:b5:50:
33:8e:d6:84:cb:83:0e:a5:77:ee:a7:de:73:fa:09:
54:04:e6:30:52:8d:b7:50:ad:48:f3:54:12:a6:37:
53:2e:31:b1:0f:7e:f7:5a:f1:1d:a4:65:65:70:c1:
07:50:d0:45:71:bc:f4:83:84:23:de:6d:59:bc:18:
04:34:4d:e4:bc:a6:50:28:e9:e0:bd:f1:1a:0a:05:
93:e1:0c:de:c3:33:ce:77:92:da:a8:cb:6f:fd:19:
a3:89:f1:92:76:b2:0a:82:bd:66:b1:83:64:33:b5:
ac:88:52:b1:ee:97:e8:21:14:23:ef:6e:7f:92:a5:
08:63:0c:fc:33:74:06:a4:fc:7f:0c:8f:bf:08:4b:
3c:cb:76:70:78:59:10:8c:8f:5f:0e:f2:5c:47:03:
3a:84:4e:d4:52:8d:60:9b:07:5d:8f:00:93:f3:29:
ef:e3:0a:c9:83:13:bc:b0:8a:09:ec:69:66:9a:1a:
5c:20:4a:69:61:95:12:81:8b:c8:27:1f:fa:bc:4b:
1f:a4:d9:e5:3a:81:7b:12:7c:3c:92:e7:04:09:dd:
12:fa:b1:33:35:6d:52:a3:2a:39:fa:2c:63:5f:4a:
33:02:36:f2:34:b2:6b:e5:1e:02:49:c1:0e:6f:50:
00:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DD:06:6C:33:27:43:59:B5:A7:94:BF:47:22:DC:42:05:09:67:E8
X509v3 Authority Key Identifier:
keyid:CE:A3:ED:DF:18:7A:C6:C1:A8:4F:88:94:D6:3A:BB:60:59:62:79:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e0:1f:77:23:fe:7b:f6:de:68:85:b1:88:b1:54:22:b9:54:
25:98:7f:61:a9:73:66:8b:07:3b:a2:c0:6e:3a:5b:ed:49:3b:
8d:e4:05:2e:c2:ea:51:f9:86:24:fc:73:88:72:2b:9a:a2:21:
4c:ca:a2:15:af:57:06:0b:03:36:ed:26:29:9f:36:f3:ec:e5:
a1:47:69:33:d8:e2:af:2b:49:1c:4a:27:de:4c:6c:b2:78:8f:
92:b8:de:ff:96:78:4f:fe:bf:0e:a9:46:5b:a1:16:c5:e1:86:
e9:1d:c7:04:18:eb:b6:05:c6:d6:b1:51:ed:91:0b:4b:46:4b:
9d:cf:2f:5a:1e:2f:58:1e:e0:0a:db:5a:6b:16:17:05:7f:c7:
cc:1b:25:68:91:e5:20:d0:c7:74:ca:ed:bf:8e:f0:d3:18:fc:
c9:d1:9b:ec:c5:aa:98:d0:e0:48:20:0a:fd:c9:20:6e:4a:fc:
53:bf:44:17:53:68:1f:f1:95:18:16:9f:16:fe:8e:85:2b:e2:
81:d3:bc:35:64:0d:2e:80:c6:54:fa:65:9d:d2:41:18:97:9c:
d3:9a:81:bb:90:93:3d:3a:5b:44:3d:6e:b7:b4:36:a0:2a:af:
3a:fd:49:eb:0d:de:22:4c:a0:1a:18:93:87:f1:70:cc:f1:ea:
7a:ee:4a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:12 2025 by rpki-client