Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft
File: ZUlVDFrmZAApGGz8nep06Rp7Yec.mft (raw, json)
Hash identifier: OZ8tph3GFnmznu234Z4LwQ+y+1R50Yrjiw5IGTv87+0=
Subject key identifier: C8:51:42:5F:BC:DD:32:AF:BC:B0:16:37:22:29:E7:6A:2B:8C:D6:1D
Authority key identifier: 65:49:55:0C:5A:E6:64:00:29:18:6C:FC:9D:EA:74:E9:1A:7B:61:E7
Certificate issuer: /CN=6549550c5ae6640029186cfc9dea74e91a7b61e7
Certificate serial: 0199FB462D7979063D43336B54094C52E73B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUlVDFrmZAApGGz8nep06Rp7Yec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft
Manifest number: 03B9
Signing time: Sun 19 Oct 2025 07:01:44 +0000
Manifest this update: Sun 19 Oct 2025 07:01:44 +0000
Manifest next update: Mon 20 Oct 2025 07:01:44 +0000
Files and hashes: 1: ZUlVDFrmZAApGGz8nep06Rp7Yec.crl (hash: WD1HdDoWtyT8kKlzuuBXdCJsYIgCOuYtWOU4Yjm+5MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUlVDFrmZAApGGz8nep06Rp7Yec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:2d:79:79:06:3d:43:33:6b:54:09:4c:52:e7:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6549550c5ae6640029186cfc9dea74e91a7b61e7
Validity
Not Before: Oct 19 07:01:44 2025 GMT
Not After : Oct 20 07:01:44 2025 GMT
Subject: CN=c851425fbcdd32afbcb016372229e76a2b8cd61d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4c:ff:be:60:19:f1:bf:b8:9e:88:64:49:3c:
9c:6d:d9:fa:cc:00:68:68:b3:80:ad:f2:99:0b:5c:
57:3e:0b:3f:19:20:2a:6b:55:52:9d:cf:9e:b2:9e:
b5:05:7a:2c:9c:06:bc:55:b7:33:c0:54:22:7c:29:
9f:35:30:94:c1:87:cd:ae:e1:8e:f1:53:9f:58:26:
89:05:9e:44:3c:26:3d:3c:e5:bd:b5:ba:27:26:d5:
b6:25:8d:2b:5f:a9:c1:b4:e8:c9:82:b3:d7:1a:a8:
ed:8f:b6:59:41:d9:03:e6:b0:19:e7:72:66:6f:51:
44:7b:1c:cf:65:87:28:52:a4:80:e9:d3:67:2d:2f:
f6:0f:6f:2f:0f:88:f4:1a:11:a9:60:35:76:81:2a:
0a:3b:1b:1b:44:65:a8:6d:aa:76:1a:8b:9d:df:de:
35:0c:28:a0:07:6a:ba:ea:22:70:54:7e:90:21:3f:
52:98:f4:55:0f:c5:21:da:60:eb:5f:cb:73:ed:43:
ab:96:9d:55:62:4d:8e:cd:5f:f5:dc:36:ad:b3:d4:
cc:ff:2f:ef:98:3f:59:13:68:e6:2c:35:8e:41:3a:
18:84:d1:4b:bc:c8:25:51:19:2f:08:80:fb:e4:d6:
62:9c:24:1d:aa:9b:3c:aa:e7:b2:36:e9:e9:82:b0:
76:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:51:42:5F:BC:DD:32:AF:BC:B0:16:37:22:29:E7:6A:2B:8C:D6:1D
X509v3 Authority Key Identifier:
keyid:65:49:55:0C:5A:E6:64:00:29:18:6C:FC:9D:EA:74:E9:1A:7B:61:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUlVDFrmZAApGGz8nep06Rp7Yec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:af:79:47:f9:f4:4e:44:e2:0f:72:de:0d:d2:82:ea:da:26:
ad:8d:48:81:bb:d4:79:6e:d1:cc:c4:5f:27:f9:0a:5f:52:58:
3e:4a:df:df:79:a6:ca:2c:10:ad:c4:8b:96:97:52:3b:d6:ff:
f5:77:bf:b9:90:33:56:e7:06:cc:d1:32:15:58:1f:31:e7:41:
9c:b8:21:9c:a6:e8:89:c5:cf:73:0a:f0:cd:60:eb:4b:4b:f7:
c2:95:81:ed:f8:97:07:c1:97:a7:ea:f3:a7:ff:1f:3d:75:51:
b0:3f:b1:cf:10:66:f1:f7:ba:63:10:f8:c8:b1:79:28:58:17:
11:bb:5b:f2:76:52:6c:3a:d6:dc:91:22:17:df:8b:5a:34:01:
36:22:98:1b:50:fa:ba:79:38:bf:f4:e6:53:b2:43:52:2d:8b:
c6:b3:6c:d6:91:83:1a:16:9c:de:14:f2:db:02:ff:c3:9e:38:
2a:0c:c7:59:2a:1a:a3:dc:71:50:79:de:b9:97:72:28:7f:b2:
50:cf:fc:d6:2f:24:c5:ce:da:7b:56:a4:ef:fd:f1:9c:d2:6a:
07:6a:3c:e4:6a:d1:87:e9:b4:c6:13:59:45:15:83:47:2c:89:
b8:5e:c0:cb:e8:96:e4:2a:94:84:5d:6c:10:4d:83:c9:92:ef:
9f:2a:ef:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:24 2025 by rpki-client