Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft
File: ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft (raw, json)
Hash identifier: XF2ZXMmnlHqBm8wCrV2SspFboM3ghUqfNLVr5WA8kWc=
Subject key identifier: 4A:00:E2:F9:5F:92:91:23:BC:82:DC:F3:2E:EF:04:6B:E2:A1:37:D0
Authority key identifier: CE:D1:B9:3A:C3:DA:64:EB:37:68:5D:7E:AA:19:AA:B7:4C:23:7F:37
Certificate issuer: /CN=ced1b93ac3da64eb37685d7eaa19aab74c237f37
Certificate serial: 0199FBEC1348C021CC8901DBD711AD66CFA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztG5OsPaZOs3aF1-qhmqt0wjfzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft
Manifest number: 11A3
Signing time: Sun 19 Oct 2025 10:02:56 +0000
Manifest this update: Sun 19 Oct 2025 10:02:56 +0000
Manifest next update: Mon 20 Oct 2025 10:02:56 +0000
Files and hashes: 1: ztG5OsPaZOs3aF1-qhmqt0wjfzc.crl (hash: rmnxucrtYBfCTBCRN6EkdmypTP+Tu7VVqpiUGi1sgEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztG5OsPaZOs3aF1-qhmqt0wjfzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:13:48:c0:21:cc:89:01:db:d7:11:ad:66:cf:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced1b93ac3da64eb37685d7eaa19aab74c237f37
Validity
Not Before: Oct 19 10:02:56 2025 GMT
Not After : Oct 20 10:02:56 2025 GMT
Subject: CN=4a00e2f95f929123bc82dcf32eef046be2a137d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:79:46:f0:3d:65:ef:77:b6:f5:8e:37:ad:e2:
df:68:65:03:e7:35:bb:e6:b6:bc:cc:b6:7d:12:76:
a8:80:1b:be:1d:15:1c:62:f7:77:d2:64:52:49:43:
45:35:36:13:fc:b2:fd:ce:df:ca:35:54:9a:08:e1:
0c:bc:7e:67:84:69:d7:4d:ce:c5:dc:fa:cb:78:18:
3f:25:bf:57:94:d5:6f:54:54:3b:b7:18:88:30:e3:
95:93:dd:a3:1c:9e:02:82:73:12:e0:74:c5:ef:71:
b1:c2:48:f6:90:ea:25:15:cd:d3:dc:13:61:d4:5d:
3b:6e:2e:26:49:95:d0:8f:7a:78:f5:0b:58:8c:f6:
38:66:7f:2d:bf:2d:3e:6a:8e:2f:14:7d:33:60:d5:
d4:2c:6f:c7:eb:9d:18:a6:59:5c:55:2f:d6:9e:22:
99:c8:d6:e6:c1:d3:6f:02:5f:f7:4e:8d:fe:11:5f:
e3:53:85:97:85:f2:69:d8:f9:0c:9b:95:8a:76:0d:
c8:d4:21:55:f5:61:34:9d:85:ca:ad:73:8f:11:67:
25:bc:37:37:c0:ff:af:45:9e:9a:e4:1a:18:40:c3:
4e:66:5d:05:55:55:76:60:3b:0e:99:57:c7:1c:c7:
c6:b9:ec:33:91:7d:4a:ce:8c:68:4a:12:43:4b:c7:
58:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:00:E2:F9:5F:92:91:23:BC:82:DC:F3:2E:EF:04:6B:E2:A1:37:D0
X509v3 Authority Key Identifier:
keyid:CE:D1:B9:3A:C3:DA:64:EB:37:68:5D:7E:AA:19:AA:B7:4C:23:7F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztG5OsPaZOs3aF1-qhmqt0wjfzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c2:cd:3f:68:13:5c:4d:50:be:0e:52:f4:21:a3:9f:f0:d8:
79:f5:55:72:73:36:b1:22:a4:3b:b4:65:83:fd:e3:e7:19:fb:
23:26:8b:10:90:01:7b:8e:2a:b4:a1:c3:f8:58:ce:48:f0:83:
89:01:bb:63:62:61:a5:18:73:59:eb:1e:85:60:3d:e5:72:60:
3a:8b:cb:75:bd:03:1f:c4:12:ac:17:1c:3a:1f:31:32:a7:7d:
fa:69:15:5a:2a:73:f2:d1:8f:47:1b:0e:dd:8b:37:2a:df:86:
e6:bc:1c:29:c5:e6:eb:fb:39:6a:d9:63:49:69:3c:d3:37:7d:
8c:02:f8:fe:25:c4:d6:5b:e4:06:6f:3b:82:54:ed:88:b2:3e:
23:07:53:eb:50:9e:a4:c6:0d:44:44:f9:3e:79:23:40:e3:03:
74:e3:f0:82:f4:a1:e5:44:09:52:28:1a:bc:37:8f:7c:7a:5f:
9e:ed:24:fd:1e:c3:5c:e0:0d:eb:58:e0:15:b5:0a:95:20:9b:
4e:46:e8:6d:b6:21:c1:ef:42:6d:13:aa:e3:dc:80:ea:ad:de:
fe:1c:79:89:5a:72:b0:cc:e1:a6:7a:fd:14:b6:37:0d:9a:11:
86:94:4b:9e:3c:44:2f:38:8d:31:3d:62:5c:79:2a:15:f0:b4:
03:c5:ad:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:42 2025 by rpki-client