Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
File: zltbNMXCbMP9SuDC5VH3ks7LbFM.mft (raw, json)
Hash identifier: HbcQF68BPDLnzcmyMwDB4xQsayJ0vkM0KGv+Kd6eju0=
Subject key identifier: 24:A5:9E:15:42:A2:57:43:59:B5:1B:37:08:11:C0:00:34:55:7B:9E
Authority key identifier: CE:5B:5B:34:C5:C2:6C:C3:FD:4A:E0:C2:E5:51:F7:92:CE:CB:6C:53
Certificate issuer: /CN=ce5b5b34c5c26cc3fd4ae0c2e551f792cecb6c53
Certificate serial: 0199FBEB885573E96E2253B917363F30C909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zltbNMXCbMP9SuDC5VH3ks7LbFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
Manifest number: 0EFE
Signing time: Sun 19 Oct 2025 10:02:21 +0000
Manifest this update: Sun 19 Oct 2025 10:02:21 +0000
Manifest next update: Mon 20 Oct 2025 10:02:21 +0000
Files and hashes: 1: zltbNMXCbMP9SuDC5VH3ks7LbFM.crl (hash: V0AB0GlqdSd5G8W9Vkupd97Gzth4SrYb1wDRTP4CpVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zltbNMXCbMP9SuDC5VH3ks7LbFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:88:55:73:e9:6e:22:53:b9:17:36:3f:30:c9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5b5b34c5c26cc3fd4ae0c2e551f792cecb6c53
Validity
Not Before: Oct 19 10:02:21 2025 GMT
Not After : Oct 20 10:02:21 2025 GMT
Subject: CN=24a59e1542a2574359b51b370811c00034557b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:36:4a:fd:ae:c0:c0:fc:bc:71:1d:46:85:95:
43:24:9d:8e:4f:18:20:30:d1:3b:a8:a7:3d:d5:f1:
cf:7e:46:b1:9a:5f:a4:88:b2:06:cc:9d:9b:bf:58:
85:2e:0d:ae:5e:90:b2:b1:1b:68:3f:70:68:54:98:
5b:9b:7f:93:a5:d6:71:dc:0f:cd:95:08:a4:b3:59:
1a:86:f6:5e:e9:27:b7:d7:ce:e7:e4:54:77:67:14:
7b:82:40:35:22:a5:99:2c:ed:af:dc:5e:33:50:d3:
8b:bf:07:d0:c1:1f:57:b8:2c:48:db:d5:b1:2e:10:
97:78:54:ee:fe:41:1c:90:0a:d3:54:27:d7:c4:e6:
ef:1d:b8:8f:0d:52:09:f0:1e:09:c1:30:7b:63:f9:
5f:ee:1e:84:69:0c:37:ae:b3:20:70:1e:d3:ec:8a:
35:17:9b:ef:13:a8:ef:15:1c:b6:cd:3a:a3:1b:9f:
5d:67:7a:37:2a:41:9d:ab:6f:74:d9:5b:26:05:f8:
74:53:23:bf:cf:fb:8d:fb:e8:bd:d7:c7:00:12:87:
67:e1:53:72:4f:2e:b0:0c:67:b7:c1:0e:4b:0a:c4:
e1:d9:c4:34:ca:8b:e0:04:69:c3:8d:d9:0f:ee:5d:
5e:91:e3:a6:8c:cd:f7:61:bb:08:9a:d1:ee:a2:82:
28:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A5:9E:15:42:A2:57:43:59:B5:1B:37:08:11:C0:00:34:55:7B:9E
X509v3 Authority Key Identifier:
keyid:CE:5B:5B:34:C5:C2:6C:C3:FD:4A:E0:C2:E5:51:F7:92:CE:CB:6C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zltbNMXCbMP9SuDC5VH3ks7LbFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:91:df:52:4c:42:9f:80:21:52:52:bc:08:20:00:88:f0:4f:
33:bf:a6:4c:77:79:04:33:f9:3f:fd:9e:2b:3b:6f:c7:88:09:
34:f6:39:79:a3:e3:8a:4e:60:a9:6b:0a:db:25:f8:80:04:41:
85:51:de:b1:f6:15:3b:54:53:d5:7c:f7:20:b2:23:68:d8:3a:
12:93:08:3d:f8:85:0e:9f:4f:2f:f9:49:25:f9:b1:40:e5:42:
e1:86:b5:a4:3f:ed:c9:82:c7:ea:3a:98:10:79:11:f5:40:be:
5b:80:52:8e:b4:2b:8d:09:85:eb:62:42:db:17:0a:cf:3f:d8:
48:54:bd:92:29:9a:e5:41:85:10:82:ba:61:53:9b:1b:ab:0a:
30:15:83:7c:f3:0f:11:d9:0a:a0:1e:cd:41:77:f8:4f:28:b5:
b1:2f:e0:2b:18:6f:f6:4a:8a:c7:f8:64:5f:c9:8a:6d:cc:68:
0a:95:e7:c9:17:2e:40:92:18:0b:2b:0b:16:dd:ac:c0:55:21:
6f:f2:f7:dd:e3:d1:58:4f:14:29:17:e2:dd:8c:48:d7:3d:ed:
c0:82:cc:28:35:9a:82:83:56:e0:cb:d1:30:47:87:17:55:c6:
35:4b:01:76:70:bb:1f:57:58:4a:c9:47:a8:7d:c2:9a:89:97:
4d:0f:4e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:41 2025 by rpki-client