Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
File: zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft (raw, json)
Hash identifier: SPk7bPbw4YXMMMEt2YcsivRURw0dJqWSTduA6oLG34U=
Subject key identifier: C3:7D:C8:C2:08:B7:AB:03:67:60:5E:D4:47:54:71:D6:22:5D:3D:9E
Authority key identifier: CC:AC:37:2F:7A:9B:81:71:DC:BF:C1:16:0C:AA:22:C8:FD:C6:8B:7B
Certificate issuer: /CN=ccac372f7a9b8171dcbfc1160caa22c8fdc68b7b
Certificate serial: 0199FE471D2D80EE695F1F079A31484809C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
Manifest number: 0E75
Signing time: Sun 19 Oct 2025 21:01:37 +0000
Manifest this update: Sun 19 Oct 2025 21:01:37 +0000
Manifest next update: Mon 20 Oct 2025 21:01:37 +0000
Files and hashes: 1: zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl (hash: OyeUqPVQBE1W9LofCP7kWoyXv1nacR+IEL+EOYYvV8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:1d:2d:80:ee:69:5f:1f:07:9a:31:48:48:09:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccac372f7a9b8171dcbfc1160caa22c8fdc68b7b
Validity
Not Before: Oct 19 21:01:37 2025 GMT
Not After : Oct 20 21:01:37 2025 GMT
Subject: CN=c37dc8c208b7ab0367605ed4475471d6225d3d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:eb:58:79:5f:7a:2b:43:a4:d6:eb:cc:08:3b:
31:78:3e:e6:0e:be:29:b7:7b:96:21:7e:30:39:99:
d2:13:4e:29:d8:f1:5d:52:be:fc:43:9b:09:01:fb:
40:55:e3:eb:13:ad:94:1f:37:b6:fa:e4:98:05:d4:
bd:3c:96:74:3b:8d:10:c6:43:2b:5f:b5:88:11:3b:
05:b1:35:3d:21:38:05:e8:ac:4d:f9:d8:30:a6:df:
9f:47:7b:0f:dc:f1:fd:d4:7e:e8:af:99:b5:3f:85:
e1:0f:a9:80:30:36:97:50:87:8a:58:cb:8f:29:02:
a5:3e:e2:d7:ba:aa:b5:f4:c3:ae:bf:7b:20:2f:6a:
a4:ed:c0:df:e5:32:d9:fe:49:b1:58:1d:ab:ac:f7:
a8:3f:ba:6f:cf:ba:9a:98:b2:09:70:38:cc:98:b0:
78:a0:35:02:7f:57:c8:a0:05:57:0b:48:c3:68:6c:
80:a8:49:72:c8:26:85:f5:fb:67:b4:28:6a:be:99:
13:7e:38:4d:69:ab:b9:4c:e8:a9:d9:da:63:c7:7a:
99:31:ee:1e:3a:f7:36:ca:ad:ab:65:6d:8e:da:27:
39:04:a4:e2:5e:36:64:57:c6:54:f0:a9:78:32:cf:
ce:8c:d2:4d:c3:0b:f3:0b:44:f5:8f:dd:bc:e9:84:
d0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7D:C8:C2:08:B7:AB:03:67:60:5E:D4:47:54:71:D6:22:5D:3D:9E
X509v3 Authority Key Identifier:
keyid:CC:AC:37:2F:7A:9B:81:71:DC:BF:C1:16:0C:AA:22:C8:FD:C6:8B:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e2:c6:50:97:18:e2:83:98:1b:73:4a:1b:f6:9f:69:07:a5:
81:23:81:f9:bf:cc:c7:d5:42:04:58:21:8c:8f:f7:2a:46:5f:
24:a7:bf:55:21:c3:65:e2:19:a5:ba:d0:86:53:b9:b2:ac:81:
38:57:b9:e0:ec:4d:90:0b:c1:71:a7:12:f8:01:7b:54:cf:72:
86:f9:89:5b:7d:74:16:b6:43:39:b8:87:a8:75:a8:0b:f7:0a:
34:e2:6a:29:95:7b:c4:9c:97:ca:d9:02:fc:5c:b0:ff:19:7f:
31:cf:24:33:11:8a:89:16:35:af:e3:9d:47:41:6c:36:85:ba:
c0:46:6a:0b:8e:3b:30:2b:35:59:a1:82:3e:b6:89:5a:27:58:
b6:55:96:3f:ef:5e:2f:73:23:84:47:1a:94:04:c7:cb:4f:44:
26:d0:2b:95:6b:49:eb:a3:77:30:06:61:a0:db:ec:df:f8:ac:
f3:d4:12:56:4d:dd:bc:86:96:41:20:d2:7f:76:80:9c:a5:87:
5f:90:c2:92:f2:a0:87:0e:52:b5:58:5e:bf:a8:b9:0e:b6:1b:
55:ac:34:17:b0:e5:b8:36:fd:82:76:54:e2:60:38:36:ac:11:
40:c5:a8:a7:b2:fb:07:c2:07:c8:68:9b:7e:6c:2c:d9:6e:82:
a0:ff:83:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:55:34 2025 by rpki-client