Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.mft
File: _zEXrp1q4OHko4t0mrv52eSSwoU.mft (raw, json)
Hash identifier: IWzRvdTndDfgQ+aDtQlsZsjrGm1Sa4g+C9yN6xgNcr8=
Subject key identifier: AB:78:F7:FE:06:17:5E:34:25:5C:EE:C6:D8:C8:7A:D8:D4:28:21:A9
Authority key identifier: FF:31:17:AE:9D:6A:E0:E1:E4:A3:8B:74:9A:BB:F9:D9:E4:92:C2:85
Certificate issuer: /CN=ff3117ae9d6ae0e1e4a38b749abbf9d9e492c285
Certificate serial: 0199FDD95E2A21A260DB79436CF29E377AB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zEXrp1q4OHko4t0mrv52eSSwoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.mft
Manifest number: 028D
Signing time: Sun 19 Oct 2025 19:01:44 +0000
Manifest this update: Sun 19 Oct 2025 19:01:44 +0000
Manifest next update: Mon 20 Oct 2025 19:01:44 +0000
Files and hashes: 1: _zEXrp1q4OHko4t0mrv52eSSwoU.crl (hash: NmZYizJAMVlzuwwE3w/kFt/y11oc+Sw+eBqENhF5M7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zEXrp1q4OHko4t0mrv52eSSwoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:5e:2a:21:a2:60:db:79:43:6c:f2:9e:37:7a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3117ae9d6ae0e1e4a38b749abbf9d9e492c285
Validity
Not Before: Oct 19 19:01:44 2025 GMT
Not After : Oct 20 19:01:44 2025 GMT
Subject: CN=ab78f7fe06175e34255ceec6d8c87ad8d42821a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f4:09:75:6d:f3:13:79:70:8c:9a:df:f9:e2:
3f:47:ef:33:f4:0f:24:af:a9:90:ab:e8:41:fe:1c:
84:b4:23:04:9f:28:f4:9f:21:fe:b5:4a:70:3e:d5:
09:9d:cc:ac:fb:d1:45:65:93:5c:eb:6c:cf:42:b6:
98:e4:8e:af:e1:e8:d3:65:1b:76:56:70:7b:76:e8:
8f:3b:90:86:b1:f0:b1:9d:e5:6e:a6:ef:f9:59:d9:
b0:d9:d7:98:c1:1f:00:87:0e:1c:e4:ab:42:25:49:
c8:29:3c:2d:bb:c7:41:83:60:8d:21:db:dd:13:02:
09:d2:88:7a:c5:a3:54:dd:e6:e5:b6:62:c9:1e:08:
e9:5f:a3:06:48:92:72:14:ef:89:fc:66:ee:63:a1:
9d:d9:64:c1:3d:0b:3e:b5:2a:c1:64:71:37:85:72:
e9:e6:54:c8:4b:a2:8f:7d:24:57:df:c6:f6:97:38:
d6:66:07:78:60:a6:7e:03:2d:d6:cc:01:9b:a1:cd:
ee:94:b1:eb:af:14:c5:5a:32:f6:18:52:fd:d1:7c:
67:40:8d:10:70:8e:fa:ba:56:b7:12:6c:c7:58:17:
50:76:34:37:b2:d5:b4:ce:33:0e:85:fd:59:fb:09:
16:85:e5:d7:01:3c:36:67:33:6f:be:dd:81:2c:fe:
57:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:78:F7:FE:06:17:5E:34:25:5C:EE:C6:D8:C8:7A:D8:D4:28:21:A9
X509v3 Authority Key Identifier:
keyid:FF:31:17:AE:9D:6A:E0:E1:E4:A3:8B:74:9A:BB:F9:D9:E4:92:C2:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zEXrp1q4OHko4t0mrv52eSSwoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:0d:52:34:4b:40:f9:04:3b:88:23:41:98:60:32:22:39:e7:
b2:69:e5:e7:ff:4f:3c:ec:0e:91:37:c0:ae:0a:03:ec:c5:d2:
0c:ad:b8:b5:6e:1f:82:48:47:3b:c5:f8:03:a5:62:14:82:2c:
2c:4f:67:77:15:9b:01:16:aa:59:66:c0:25:70:08:b6:23:80:
7a:93:ed:3f:78:a8:84:6b:42:2c:5f:da:bc:7a:17:34:fa:23:
e1:73:87:70:31:9a:31:e1:96:93:11:7e:e7:cc:81:94:69:47:
b4:6c:cc:d3:35:ae:89:97:1a:4c:b0:d8:ec:75:f9:4b:b9:6a:
c3:a6:cf:6d:9e:4a:b3:bd:cd:a5:8e:b0:66:cd:50:14:b4:8c:
cd:04:5d:4c:a7:67:a7:75:64:5d:ac:fd:e7:7b:50:7f:7b:0e:
74:84:99:04:61:f8:1e:1f:0f:7f:80:f8:32:86:1e:b2:35:fe:
0e:3c:86:1b:75:eb:18:ef:7c:f6:84:c7:15:62:96:25:8c:14:
66:02:e7:bf:87:09:61:24:d3:31:20:99:52:da:2d:6d:93:32:
dd:ed:e9:e0:ab:bf:8e:29:8b:42:2d:a4:d7:f9:d6:72:44:20:
17:6d:73:f5:5a:d9:7f:ab:b4:9a:bc:c2:2d:70:d5:e4:31:9e:
58:1d:04:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:58 2025 by rpki-client