Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
File: zhBBHjnMnlhDTAu5dVTWBj53Auw.mft (raw, json)
Hash identifier: YVCPMp7hhKOmGSRJYC6m7psaok4L1dAeOM8A2a18oh8=
Subject key identifier: 65:A8:E4:D5:2A:D4:8F:47:5A:3B:D6:B2:AA:DC:46:2A:21:B3:CB:7B
Authority key identifier: CE:10:41:1E:39:CC:9E:58:43:4C:0B:B9:75:54:D6:06:3E:77:02:EC
Certificate issuer: /CN=ce10411e39cc9e58434c0bb97554d6063e7702ec
Certificate serial: 0199FCC6741CA38D1A73CB6F44C7D95F9EB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
Manifest number: 0A61
Signing time: Sun 19 Oct 2025 14:01:28 +0000
Manifest this update: Sun 19 Oct 2025 14:01:28 +0000
Manifest next update: Mon 20 Oct 2025 14:01:28 +0000
Files and hashes: 1: zhBBHjnMnlhDTAu5dVTWBj53Auw.crl (hash: yGRj8cGRUHH+AAlW42rt3CxrvvjXU1A93EqGtOGgA5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:74:1c:a3:8d:1a:73:cb:6f:44:c7:d9:5f:9e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce10411e39cc9e58434c0bb97554d6063e7702ec
Validity
Not Before: Oct 19 14:01:28 2025 GMT
Not After : Oct 20 14:01:28 2025 GMT
Subject: CN=65a8e4d52ad48f475a3bd6b2aadc462a21b3cb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:05:8a:16:54:c1:fc:95:fa:af:9b:d8:a8:78:
87:d8:0f:75:7b:4f:b2:31:a6:ef:69:21:78:65:58:
e2:e3:01:fd:ad:fd:4b:b8:4c:51:13:db:c4:58:3e:
f7:37:8c:3e:02:40:88:84:5f:c8:2e:9c:6d:f5:13:
07:b5:7d:3f:55:7d:96:cc:0e:f2:e9:65:6e:27:a5:
7f:d5:42:49:88:a9:17:cc:3f:5d:bc:6c:6c:a5:a7:
02:c5:d5:f3:90:68:e4:3d:7f:52:dc:60:02:7c:0c:
bd:7a:74:3e:65:8c:43:44:f4:2c:ea:e6:10:92:d6:
2b:63:f0:e1:48:d2:bf:43:47:02:df:f4:26:8b:44:
82:f8:cf:67:27:7f:68:45:99:a5:e1:27:d4:b5:80:
f0:bd:04:f9:28:9c:49:45:98:06:61:0b:08:93:06:
81:7c:79:86:1a:cc:eb:ff:63:c8:38:02:b1:59:1b:
11:f0:99:f8:3c:e5:77:fd:49:10:f5:b9:d8:15:70:
99:7c:f1:ef:be:ae:c7:0a:bd:aa:73:90:6a:b5:44:
99:a6:2c:40:f8:38:e8:83:0c:ae:e5:3c:9a:5d:72:
18:d9:85:9f:cf:9d:3a:64:e5:a9:c4:c1:e2:3f:06:
5e:93:ba:3e:1f:95:20:13:3e:46:0c:0a:ff:36:0f:
b8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A8:E4:D5:2A:D4:8F:47:5A:3B:D6:B2:AA:DC:46:2A:21:B3:CB:7B
X509v3 Authority Key Identifier:
keyid:CE:10:41:1E:39:CC:9E:58:43:4C:0B:B9:75:54:D6:06:3E:77:02:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:38:5e:a7:74:51:f9:6c:be:76:0f:ea:37:d1:fc:b2:bb:37:
37:2c:09:ad:2c:cb:14:d5:9e:4d:82:d8:e7:e1:e9:80:c7:1b:
0b:65:2a:ff:1f:f0:a6:c1:e0:99:a1:63:bc:38:1c:fd:9d:58:
8d:af:1d:a1:31:25:55:8b:ef:75:cc:42:9e:94:0e:ce:19:7e:
71:51:99:b6:44:b5:96:2c:1a:e8:4e:00:82:2d:21:c7:76:23:
ca:60:7b:fa:d7:12:c8:50:d7:5f:6d:e0:fd:a5:da:14:b4:8e:
26:16:8f:ac:18:96:f0:78:fe:ec:01:58:8d:86:97:5c:c0:21:
93:30:d6:4c:7b:c5:5a:1a:d6:0b:fe:b3:9e:a7:66:1a:ef:7d:
4d:b9:59:f3:19:74:17:56:25:b8:50:ac:bc:cc:02:19:32:14:
7f:0a:e4:39:e1:58:73:0b:ee:d4:9f:21:da:24:fc:a1:7a:35:
6d:56:8d:6f:3e:3a:02:12:95:d3:38:71:1f:54:86:b4:39:bc:
1c:71:09:22:1c:07:3c:b9:c0:c5:84:80:65:5b:8b:ad:59:8d:
8c:cc:eb:53:83:a0:c1:06:b6:bb:15:6d:01:01:c5:4c:d2:68:
a8:ef:4c:d6:8a:1c:5d:81:04:0c:01:4c:fe:da:f9:b0:7a:be:
5a:91:c9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:43 2025 by rpki-client