Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft
File: ZWo7XAkm87RZeYDaUImcKOpqa9k.mft (raw, json)
Hash identifier: KlOJns4t+rpTqyzbOYetMLOC26dJrqKzwMWmtO3h4xA=
Subject key identifier: 18:F3:CE:4A:4D:4B:7B:C1:1E:3F:6F:A1:F4:46:9D:09:BE:7B:02:BB
Authority key identifier: 65:6A:3B:5C:09:26:F3:B4:59:79:80:DA:50:89:9C:28:EA:6A:6B:D9
Certificate issuer: /CN=656a3b5c0926f3b4597980da50899c28ea6a6bd9
Certificate serial: 0199FC58869A96FE1855279985D61525A04C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWo7XAkm87RZeYDaUImcKOpqa9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft
Manifest number: 0AA5
Signing time: Sun 19 Oct 2025 12:01:23 +0000
Manifest this update: Sun 19 Oct 2025 12:01:23 +0000
Manifest next update: Mon 20 Oct 2025 12:01:23 +0000
Files and hashes: 1: ZWo7XAkm87RZeYDaUImcKOpqa9k.crl (hash: WiZhkaGtAyKYeffSD6CsZDkoDEPx4XK4JOVdXVt3XOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZWo7XAkm87RZeYDaUImcKOpqa9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:86:9a:96:fe:18:55:27:99:85:d6:15:25:a0:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656a3b5c0926f3b4597980da50899c28ea6a6bd9
Validity
Not Before: Oct 19 12:01:23 2025 GMT
Not After : Oct 20 12:01:23 2025 GMT
Subject: CN=18f3ce4a4d4b7bc11e3f6fa1f4469d09be7b02bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:16:cd:3c:3b:f7:7a:c9:7c:20:24:83:02:bd:
b8:71:1f:5c:27:dd:1a:62:c2:09:27:27:74:85:1b:
5e:3e:27:19:c2:25:5b:f8:1c:d9:f5:ca:54:d6:f5:
e7:2f:17:40:26:4a:9e:83:0a:7a:88:67:ec:a6:4c:
00:b1:58:7f:c9:24:ab:95:1d:8d:ee:94:7f:a9:7f:
85:a1:34:89:e8:ea:43:f0:55:1e:a8:72:09:06:99:
0f:30:03:ea:ec:30:3a:13:88:f0:9a:81:e9:78:06:
53:66:fd:f6:11:76:46:af:86:1f:9b:8b:ca:c0:2c:
cf:e7:79:70:ab:c4:a0:3a:6f:1c:fd:41:c4:54:5c:
c6:62:ca:9f:d0:d0:d8:a5:5c:de:0c:74:27:d9:2d:
33:ff:e5:01:ed:b6:65:bb:52:1f:b1:51:5f:20:8b:
e2:e9:a4:67:c8:26:e8:4e:d8:e7:08:84:8e:bd:b5:
e8:d8:87:5a:16:d4:9d:9e:13:7f:a2:a7:37:e3:d3:
2d:07:0a:27:ab:f4:7e:d8:19:7f:e6:14:91:57:d9:
07:c9:11:ac:b0:4b:6f:e3:75:71:38:1e:e8:43:20:
e9:69:4e:ba:ee:ad:32:29:b0:0f:b6:85:ab:2e:73:
e7:54:d5:09:58:7d:ee:14:d0:64:75:0a:b9:67:d9:
a9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F3:CE:4A:4D:4B:7B:C1:1E:3F:6F:A1:F4:46:9D:09:BE:7B:02:BB
X509v3 Authority Key Identifier:
keyid:65:6A:3B:5C:09:26:F3:B4:59:79:80:DA:50:89:9C:28:EA:6A:6B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWo7XAkm87RZeYDaUImcKOpqa9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:14:6e:6b:da:1a:87:a6:68:83:51:59:ea:b7:bd:d2:08:67:
10:5c:70:74:e3:91:e0:cf:5c:94:84:5d:a5:ea:99:0e:26:57:
73:45:6c:7e:61:24:56:d1:19:7f:80:51:0e:ec:4d:a4:c1:d0:
f1:e9:ba:60:86:92:95:b5:50:00:ef:7a:ae:03:3a:77:80:2e:
b3:38:43:45:bd:ca:7e:5e:82:08:43:2b:1f:96:7e:94:d6:36:
be:5f:d0:66:73:2b:17:1c:3c:e2:52:d7:07:5d:29:7b:69:9a:
b9:9a:96:3e:83:29:6b:75:03:c8:7b:f5:eb:c3:ac:e3:f0:ad:
bb:f8:4f:85:b1:97:d9:3a:64:75:c1:77:7d:11:f2:5d:4e:e0:
1c:52:32:bb:7e:8e:35:d4:c2:d2:d4:b8:df:03:eb:31:14:f6:
61:2f:75:ac:02:25:e6:4d:c2:a7:05:08:69:54:d0:21:aa:39:
12:45:fc:85:7f:4b:3a:4d:2a:d8:5a:71:ec:e2:54:2a:22:c2:
33:e4:06:2a:5b:8c:12:de:2c:60:f2:40:c5:1f:f5:a5:15:8a:
df:ed:45:65:c4:44:8f:78:57:16:1e:6d:51:d8:9b:65:c3:99:
46:1c:22:da:87:12:ce:da:bc:77:03:e2:a3:73:44:47:d1:dd:
a1:fc:f8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:00 2025 by rpki-client