Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
File: zeICwBqCkO6VMl06Tzf_QOmWSPo.mft (raw, json)
Hash identifier: p/PPaUpkOSSM5imn7Y2ttf5g4GGuMbHdfAfQdDujKX0=
Subject key identifier: 11:6B:31:4E:3A:23:F7:A5:4A:2E:E3:87:E4:03:41:FD:62:28:14:3C
Authority key identifier: CD:E2:02:C0:1A:82:90:EE:95:32:5D:3A:4F:37:FF:40:E9:96:48:FA
Certificate issuer: /CN=cde202c01a8290ee95325d3a4f37ff40e99648fa
Certificate serial: 0199FFC7F85ECE83FB36225DC38BE4770F69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
Manifest number: 103B
Signing time: Mon 20 Oct 2025 04:01:59 +0000
Manifest this update: Mon 20 Oct 2025 04:01:59 +0000
Manifest next update: Tue 21 Oct 2025 04:01:59 +0000
Files and hashes: 1: zeICwBqCkO6VMl06Tzf_QOmWSPo.crl (hash: Z6MCZJrP5pqJwk+qY+mrjAhh50YslS9bQnIDQqszcT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:f8:5e:ce:83:fb:36:22:5d:c3:8b:e4:77:0f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cde202c01a8290ee95325d3a4f37ff40e99648fa
Validity
Not Before: Oct 20 04:01:59 2025 GMT
Not After : Oct 21 04:01:59 2025 GMT
Subject: CN=116b314e3a23f7a54a2ee387e40341fd6228143c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bd:37:13:d1:0c:0e:d9:a2:73:9a:d4:bd:c0:
10:26:c5:58:0b:7b:fc:92:7b:1a:d6:f9:9e:2f:00:
33:4e:62:87:91:e8:c6:30:14:c2:a1:4b:e6:14:67:
ba:98:ea:7a:e5:fa:34:6b:5d:22:3c:e6:16:ec:90:
ca:3e:ad:7e:c0:2e:9a:dc:08:d0:73:2c:fd:0e:ac:
9a:41:71:a4:ce:57:a4:7b:a7:bb:aa:d3:ea:c0:25:
56:ad:40:8f:fa:82:06:1b:86:4d:92:90:d8:26:c2:
80:80:99:31:f9:75:25:8c:74:98:5e:0d:f9:14:25:
c0:4a:ab:39:70:82:37:f0:5d:35:65:8f:5a:e1:25:
48:8e:fa:c9:32:02:71:8b:56:b1:e5:c3:24:e7:ae:
79:3e:33:7d:a8:f5:60:54:b0:50:7e:ba:02:54:be:
3c:f9:21:a2:8b:c7:d4:a7:23:51:45:8f:0c:05:62:
7d:6f:fb:25:9c:7f:d9:5b:80:e7:eb:8c:1c:e2:b6:
d8:3c:e0:19:07:e4:0f:7b:26:45:9d:a4:23:03:3d:
32:49:0f:1d:fb:25:e9:98:9d:88:e3:e1:c8:a0:b1:
ba:c6:ae:18:e6:75:55:98:e5:69:fa:71:76:cd:59:
7e:d6:83:66:2f:6b:c0:40:31:fd:cc:d1:ce:06:f3:
96:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6B:31:4E:3A:23:F7:A5:4A:2E:E3:87:E4:03:41:FD:62:28:14:3C
X509v3 Authority Key Identifier:
keyid:CD:E2:02:C0:1A:82:90:EE:95:32:5D:3A:4F:37:FF:40:E9:96:48:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d9:6f:d3:58:2d:77:2c:50:d9:40:47:33:c9:cb:e3:b8:92:
62:f9:47:c6:a7:22:ea:e2:b3:fe:c3:3b:a1:fa:ca:d9:77:02:
9b:0f:c3:7a:90:6a:df:61:7e:65:3e:a6:bc:49:51:37:db:54:
28:64:ac:0e:ff:39:c9:0c:b7:f0:5c:8f:64:e9:c0:96:58:8f:
63:3e:87:9b:93:eb:38:1f:2e:1f:df:57:01:c9:a2:ec:e0:4d:
b8:88:d7:6e:20:3b:f2:ad:23:71:c1:2d:f8:b1:a9:84:34:a3:
49:de:1e:09:f2:b9:77:ca:1a:b7:57:57:fd:4d:fd:1c:ff:40:
e3:4a:9e:93:74:ea:1e:ea:ed:28:9d:96:81:06:28:1d:00:be:
91:8e:5e:63:0a:fd:30:d1:62:24:a2:2e:f6:31:81:80:08:9e:
ee:c1:1d:78:ab:eb:01:c1:95:a8:22:16:10:74:c6:a6:8f:a8:
22:a5:d4:21:a9:d5:08:8a:c3:ef:31:05:64:46:62:e3:dd:a6:
d3:b3:ba:5a:a6:b0:2a:9e:b1:62:e2:26:d8:ce:f5:1e:67:b4:
39:12:56:fd:1b:3c:bd:9b:93:7f:70:5e:41:88:ae:8b:4b:8e:
a6:d3:b7:a1:5c:51:ce:4e:db:89:80:dd:34:ee:ed:ad:4b:59:
32:40:0d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:34:05 2025 by rpki-client