Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/zQwDKJL2la9ME_sKyoBD0Xsbl78.mft
File: zQwDKJL2la9ME_sKyoBD0Xsbl78.mft (raw, json)
Hash identifier: QiT+Q1/dcx/K/V5KzZI1zPkv4AU7UChMdjFyedXq0ys=
Subject key identifier: 27:4C:53:6C:06:2B:FD:70:98:4F:C0:B4:23:F3:3B:1A:02:0D:EC:E3
Authority key identifier: CD:0C:03:28:92:F6:95:AF:4C:13:FB:0A:CA:80:43:D1:7B:1B:97:BF
Certificate issuer: /CN=cd0c032892f695af4c13fb0aca8043d17b1b97bf
Certificate serial: 0199FCC61B050BFF8E992463131B71A7CFDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQwDKJL2la9ME_sKyoBD0Xsbl78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/zQwDKJL2la9ME_sKyoBD0Xsbl78.mft
Manifest number: 0A84
Signing time: Sun 19 Oct 2025 14:01:05 +0000
Manifest this update: Sun 19 Oct 2025 14:01:05 +0000
Manifest next update: Mon 20 Oct 2025 14:01:05 +0000
Files and hashes: 1: zQwDKJL2la9ME_sKyoBD0Xsbl78.crl (hash: xZVdo7rF9LEOlIuMsOdb/rLaBORHolfIb5gyj93N+1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/zQwDKJL2la9ME_sKyoBD0Xsbl78.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/zQwDKJL2la9ME_sKyoBD0Xsbl78.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQwDKJL2la9ME_sKyoBD0Xsbl78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:1b:05:0b:ff:8e:99:24:63:13:1b:71:a7:cf:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd0c032892f695af4c13fb0aca8043d17b1b97bf
Validity
Not Before: Oct 19 14:01:05 2025 GMT
Not After : Oct 20 14:01:05 2025 GMT
Subject: CN=274c536c062bfd70984fc0b423f33b1a020dece3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fd:3b:c3:87:80:79:3c:01:03:8e:7c:7f:b0:
e3:ca:39:16:fe:dc:fe:48:05:a0:a3:55:32:49:51:
d4:56:de:f7:b4:c4:c0:ff:02:50:86:22:b0:1a:f8:
19:6c:e2:4f:b9:5a:29:2b:58:04:b3:30:6f:ef:3e:
dc:c0:7b:4b:ae:53:cb:79:c3:1d:70:bf:40:50:e7:
7c:b1:45:97:ba:33:c8:46:7d:9f:fe:58:9b:4c:c6:
7e:bd:3b:c6:6e:57:ec:ff:60:5a:6d:da:02:26:01:
d3:08:c5:ba:f9:98:1c:d3:41:44:77:bb:97:a0:05:
d6:dc:84:b4:89:65:95:42:27:db:ef:9d:f5:d1:50:
65:ec:de:f6:d5:cf:e3:86:5d:37:d8:df:ff:ac:08:
d8:0a:e0:9e:ad:3f:3c:b2:aa:ce:ed:46:d2:77:85:
4a:d7:0c:6d:dd:a4:db:33:b4:3d:3e:de:bf:6d:3c:
91:29:7a:60:50:ab:e8:80:f5:b3:b5:0b:af:9e:5f:
19:5b:0a:21:da:bb:bb:be:2f:c9:49:92:e1:21:ec:
30:e5:ff:b5:ff:5c:0b:5e:60:35:08:33:00:48:60:
91:61:0e:40:4a:9b:2a:32:44:6a:05:81:ec:04:47:
0d:04:e0:86:bf:7e:ba:63:1c:66:b3:e7:aa:43:34:
55:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4C:53:6C:06:2B:FD:70:98:4F:C0:B4:23:F3:3B:1A:02:0D:EC:E3
X509v3 Authority Key Identifier:
keyid:CD:0C:03:28:92:F6:95:AF:4C:13:FB:0A:CA:80:43:D1:7B:1B:97:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQwDKJL2la9ME_sKyoBD0Xsbl78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/zQwDKJL2la9ME_sKyoBD0Xsbl78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/zQwDKJL2la9ME_sKyoBD0Xsbl78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:4b:04:1e:69:2e:93:38:a8:85:a9:f9:9e:87:8e:35:34:7d:
84:71:69:2e:66:16:39:2d:90:e5:03:f1:16:67:9f:5c:6b:57:
1c:5f:bb:1d:c5:de:41:98:9e:06:ed:ad:65:47:2c:ad:1c:15:
44:4d:3c:fd:11:49:b1:58:ed:fc:97:c0:57:c6:88:12:e7:da:
1c:c0:3b:11:ec:7e:3c:72:a8:cc:f0:66:95:02:a3:8e:b9:67:
ec:01:40:17:aa:0b:00:13:d3:6f:34:de:b9:fa:b1:46:7a:1c:
74:ea:ff:f6:fe:d3:7b:f5:e0:9a:99:25:af:af:cf:ce:83:51:
06:d1:50:2e:05:e7:ac:b9:25:01:b7:ec:53:be:16:25:b1:ca:
6b:f9:7b:e7:10:9c:d1:10:40:f4:0a:ad:01:31:11:46:aa:53:
b6:12:db:61:7b:51:90:53:84:c6:03:97:69:39:a1:59:5a:5c:
53:35:ce:d1:81:ac:1a:e3:63:79:c2:bd:02:d9:71:2e:61:38:
d5:81:78:ca:7d:56:06:66:ac:10:10:16:2d:31:b2:85:99:bf:
59:76:cd:e8:0c:65:05:ff:00:e2:ed:2f:16:d7:d3:37:48:7a:
94:c3:9a:c0:19:37:e2:cc:16:15:ca:6f:6e:fc:9a:1e:bb:fd:
0a:68:0b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:47:07 2025 by rpki-client