Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft
File: ZpDQciFADjewHnSnEvrnxtcDFZU.mft (raw, json)
Hash identifier: LjEzE0SRo9chhxr6HYze3OLAY6y9H9q54JctPu5GgJ8=
Subject key identifier: BE:75:75:AA:89:79:9E:08:22:D9:8D:51:C8:5B:6E:10:6A:31:AA:A4
Authority key identifier: 66:90:D0:72:21:40:0E:37:B0:1E:74:A7:12:FA:E7:C6:D7:03:15:95
Certificate issuer: /CN=6690d07221400e37b01e74a712fae7c6d7031595
Certificate serial: 019A0110A55015B2ECE0F97EA9B568103746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpDQciFADjewHnSnEvrnxtcDFZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft
Manifest number: 1192
Signing time: Mon 20 Oct 2025 10:00:59 +0000
Manifest this update: Mon 20 Oct 2025 10:00:59 +0000
Manifest next update: Tue 21 Oct 2025 10:00:59 +0000
Files and hashes: 1: ZpDQciFADjewHnSnEvrnxtcDFZU.crl (hash: du2w25Kt5lWMqXWsTxdLAjpcSdnYUTHPDqaz2fZfZh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpDQciFADjewHnSnEvrnxtcDFZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:10:a5:50:15:b2:ec:e0:f9:7e:a9:b5:68:10:37:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6690d07221400e37b01e74a712fae7c6d7031595
Validity
Not Before: Oct 20 10:00:59 2025 GMT
Not After : Oct 21 10:00:59 2025 GMT
Subject: CN=be7575aa89799e0822d98d51c85b6e106a31aaa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1d:de:37:fc:14:8e:cb:5d:e1:3c:e4:70:07:
3a:29:98:34:7a:ac:73:58:be:6d:6b:4b:06:04:7d:
4e:59:de:a8:91:e0:fa:5d:29:1c:be:7c:21:dd:08:
3a:b2:b2:5d:c2:49:6a:5f:43:12:e1:94:e0:d3:f3:
d2:f6:82:a8:11:69:bc:b3:e7:98:61:bb:f3:75:74:
b5:4e:1e:a3:b9:55:23:4c:22:ce:3b:b7:98:68:ec:
6a:61:8a:f2:36:aa:b9:12:0c:40:28:bf:a8:7e:69:
f4:a1:7b:31:b2:f7:c7:2b:c3:94:12:27:80:e3:c2:
07:f0:2e:91:3e:86:c3:84:91:7a:ca:c5:8a:5e:1c:
dc:5c:2f:63:22:62:26:ae:05:3e:e4:fd:d6:68:29:
fc:81:a1:18:d8:ec:f3:5e:8d:7f:00:28:96:06:a8:
66:69:84:9f:3b:c1:2e:73:c6:e5:86:57:46:c1:ef:
a8:27:f8:8a:b9:b1:05:19:2c:70:f4:cc:af:8c:7f:
33:b8:70:6a:ac:cc:4e:f2:77:86:8d:90:e2:e4:bf:
85:46:ea:f0:66:ae:bb:95:91:7f:54:71:0a:07:bc:
f0:1c:a7:72:6e:35:ca:6a:ff:f9:ef:6f:50:41:11:
94:6a:0c:7c:ff:e6:07:4b:10:78:7e:1d:61:8e:23:
50:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:75:75:AA:89:79:9E:08:22:D9:8D:51:C8:5B:6E:10:6A:31:AA:A4
X509v3 Authority Key Identifier:
keyid:66:90:D0:72:21:40:0E:37:B0:1E:74:A7:12:FA:E7:C6:D7:03:15:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpDQciFADjewHnSnEvrnxtcDFZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:7c:3d:d0:65:b9:7b:ae:9a:0b:26:2d:a3:09:42:a4:23:91:
a5:58:67:bc:76:a1:c0:cb:0f:68:a2:f9:21:9b:59:bb:f5:71:
f5:bf:30:15:b5:40:4d:05:f7:c3:85:77:ce:75:0a:5c:c7:04:
e9:2a:51:91:92:05:9f:01:96:8d:ab:3c:1d:70:ca:8a:05:a1:
4d:7f:72:98:e1:cc:20:8f:8d:63:94:90:bf:38:d7:59:2f:37:
82:7e:6c:3f:c5:c0:7c:92:a2:a1:4b:d0:57:78:d8:0f:d6:3a:
8c:8e:c2:bd:12:5b:81:c9:79:dc:57:da:d9:9a:aa:b8:a2:9f:
e4:12:f1:6f:c2:18:0d:43:6d:bf:89:c8:c4:9f:13:d2:6c:68:
d4:9e:d8:c3:c7:ac:d2:99:44:6b:f5:04:00:6e:b3:4d:6e:ac:
45:b5:9b:30:c6:43:eb:9a:5d:b1:f0:d8:41:43:c5:07:4e:40:
32:2d:f1:82:c2:d0:97:de:8a:11:fb:30:75:e5:cc:ce:3b:a3:
a8:b3:98:21:4a:b6:52:64:3a:ea:7b:b6:b5:8a:9f:19:1d:29:
85:e3:68:5c:ca:40:bb:ca:f0:27:84:11:a1:20:fd:38:8c:aa:
80:e8:20:d7:c9:75:61:82:6c:de:5a:ea:38:94:d3:a3:12:77:
d9:59:15:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:40:38 2025 by rpki-client