Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft
File: zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft (raw, json)
Hash identifier: BX7d4+z/w0gtTnWC4fMpNkx7mvwb7lRlPXxW8Yrm3VA=
Subject key identifier: 0C:8E:49:D4:8E:AE:F8:8C:B7:B3:80:34:F0:B0:CF:CD:19:7D:74:D1
Authority key identifier: CE:ED:AA:36:04:51:46:EB:C5:84:E7:1B:5C:1A:FA:68:A7:39:99:98
Certificate issuer: /CN=ceedaa36045146ebc584e71b5c1afa68a7399998
Certificate serial: 0199FCFD447B6FE389DFB9443C367CE677A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zu2qNgRRRuvFhOcbXBr6aKc5mZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft
Manifest number: 0644
Signing time: Sun 19 Oct 2025 15:01:20 +0000
Manifest this update: Sun 19 Oct 2025 15:01:20 +0000
Manifest next update: Mon 20 Oct 2025 15:01:20 +0000
Files and hashes: 1: zu2qNgRRRuvFhOcbXBr6aKc5mZg.crl (hash: yjlGEKZgNXqh/pjkDi3FDlKuq6eA3Vk5FeZU+As9KnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zu2qNgRRRuvFhOcbXBr6aKc5mZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:44:7b:6f:e3:89:df:b9:44:3c:36:7c:e6:77:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceedaa36045146ebc584e71b5c1afa68a7399998
Validity
Not Before: Oct 19 15:01:20 2025 GMT
Not After : Oct 20 15:01:20 2025 GMT
Subject: CN=0c8e49d48eaef88cb7b38034f0b0cfcd197d74d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ab:23:bc:78:b6:a4:5a:d7:a9:7b:43:0e:0e:
90:26:01:5b:57:c2:95:3e:1c:12:11:ef:32:9e:f3:
cc:cd:7c:62:43:74:1e:6c:93:bc:43:d5:ba:4f:30:
64:7e:cc:76:31:40:be:41:e9:68:7d:bd:bd:55:cf:
18:f8:77:2d:1d:21:fc:ca:b2:38:4b:a8:03:9b:c1:
c4:db:00:b4:da:48:35:18:44:cd:6c:4b:5b:77:44:
53:8e:89:9f:dd:02:77:56:99:91:25:d1:61:58:65:
6a:84:6d:c8:5a:d0:4f:58:7a:99:0f:75:f9:1c:c3:
5e:80:53:6a:5a:b8:ea:a7:a1:d4:ad:2e:f2:23:d1:
19:dc:f1:41:6e:a2:ff:30:d8:41:57:da:f1:4c:b3:
a7:02:93:b2:9d:63:07:49:d3:99:9a:f4:59:b5:c3:
94:24:d5:01:9d:03:78:75:64:ba:d1:3c:3d:e5:71:
eb:54:0b:2d:36:6b:9d:57:13:10:8e:7e:e8:33:18:
22:13:78:75:36:3b:8c:e6:6b:ae:69:8c:d6:2d:eb:
d4:cb:44:fc:44:46:a7:16:d5:5a:17:b2:35:c1:cc:
16:f0:79:af:cb:2d:41:51:a4:87:42:13:9a:84:76:
fc:eb:72:1e:dd:0d:8b:2f:99:51:1b:e5:ff:e6:f8:
43:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8E:49:D4:8E:AE:F8:8C:B7:B3:80:34:F0:B0:CF:CD:19:7D:74:D1
X509v3 Authority Key Identifier:
keyid:CE:ED:AA:36:04:51:46:EB:C5:84:E7:1B:5C:1A:FA:68:A7:39:99:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zu2qNgRRRuvFhOcbXBr6aKc5mZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ef:f0:c5:29:b8:3b:c8:9e:7e:11:ce:5f:78:aa:8b:87:ce:
94:ca:9e:f4:09:53:73:a3:27:50:78:00:2c:9e:b1:14:a5:3a:
4f:8e:79:46:81:33:62:0d:85:cc:ac:a1:0b:c2:3c:04:81:2b:
48:45:64:e5:f1:e1:d7:d4:2f:83:e6:0e:a0:8e:3d:92:a1:6a:
3e:25:6b:a4:4f:a2:04:c3:24:41:25:fc:de:cc:7a:92:fc:b8:
37:56:2f:10:b7:0f:72:2b:b3:89:d8:53:38:90:cc:d3:46:fa:
0c:21:4e:d8:43:2c:cf:6d:02:34:ac:6a:44:25:2f:1e:1e:54:
d6:fd:3d:c3:5f:0d:a1:84:f2:5a:5f:53:d4:dc:31:6d:b9:f5:
c2:d1:b9:18:5b:fc:76:80:71:26:c5:f6:bb:77:69:c4:23:1b:
82:54:91:0c:5a:07:11:3b:4e:f5:b0:e1:52:0c:09:85:69:b4:
7d:c6:e9:0c:12:d5:f3:6e:29:7c:fb:d2:18:dd:6d:39:55:3f:
ff:41:db:50:5f:1e:5f:12:ba:b8:32:5a:e1:ad:7e:5d:7f:79:
3e:1c:af:51:4f:41:cb:d9:ce:8f:26:cf:a9:59:fc:b7:68:b3:
f9:7f:00:b8:97:5d:ef:0a:ce:24:69:b8:e5:45:cb:05:c1:41:
63:3e:0b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:30 2025 by rpki-client