Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.mft
File: zEUACR782QXnLqRfJ4JIZh8iWy8.mft (raw, json)
Hash identifier: qMWbD54AFA5BT+3lSqi5PnBh/HJv2hajBhjODxmofV4=
Subject key identifier: 5F:01:F2:5C:92:66:81:B4:CE:63:74:DA:1E:11:CF:C9:F0:F2:5A:6B
Authority key identifier: CC:45:00:09:1E:FC:D9:05:E7:2E:A4:5F:27:82:48:66:1F:22:5B:2F
Certificate issuer: /CN=cc4500091efcd905e72ea45f278248661f225b2f
Certificate serial: 0199FB7C90B5D02744A66D5E300972B62D24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEUACR782QXnLqRfJ4JIZh8iWy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.mft
Manifest number: 0196
Signing time: Sun 19 Oct 2025 08:01:08 +0000
Manifest this update: Sun 19 Oct 2025 08:01:08 +0000
Manifest next update: Mon 20 Oct 2025 08:01:08 +0000
Files and hashes: 1: zEUACR782QXnLqRfJ4JIZh8iWy8.crl (hash: vXckiwut2s4A1l3dK1CTOSqF/aDaan9w71GUUl2dIns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEUACR782QXnLqRfJ4JIZh8iWy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:90:b5:d0:27:44:a6:6d:5e:30:09:72:b6:2d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4500091efcd905e72ea45f278248661f225b2f
Validity
Not Before: Oct 19 08:01:08 2025 GMT
Not After : Oct 20 08:01:08 2025 GMT
Subject: CN=5f01f25c926681b4ce6374da1e11cfc9f0f25a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d9:5d:39:2a:cc:db:b9:1e:38:a2:64:09:e7:
bf:6d:a7:d0:c3:cc:d7:68:8f:d8:da:33:c3:ce:31:
2a:1e:c9:ff:53:c3:50:ac:f6:82:51:d7:44:b2:eb:
dc:82:c3:ec:b6:6a:d1:ef:4a:b1:71:7a:32:f2:5c:
b9:cc:bf:eb:b8:90:0c:ac:5c:26:5a:83:f8:56:96:
c0:06:c2:a1:ca:61:23:9b:80:21:42:db:03:7d:a7:
fd:c9:40:63:8f:88:94:09:67:a6:43:95:f6:a0:b8:
18:ee:18:f5:5a:f0:78:a5:5e:94:32:e5:fc:6e:f3:
cf:31:67:47:4f:0e:db:4a:73:41:50:66:b7:f9:7b:
29:9e:5b:52:cd:2a:c8:3a:26:21:ac:31:82:10:8b:
25:e0:77:79:69:22:ff:6b:fc:d1:23:d6:77:ed:0e:
2b:10:f1:56:0c:6c:71:5e:d7:e6:5e:cf:84:77:ab:
93:24:81:4d:82:6e:92:87:01:27:be:ef:72:c1:f8:
43:0e:d3:b1:86:ad:48:30:c2:54:fb:6f:d3:89:2b:
6b:dc:ac:e4:e8:76:98:32:1c:78:58:9e:91:b1:66:
2b:66:6c:62:f2:e6:6a:57:6d:eb:e8:63:b2:69:11:
ee:ae:c0:ab:17:11:62:f1:07:c5:12:65:fe:73:48:
5c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:01:F2:5C:92:66:81:B4:CE:63:74:DA:1E:11:CF:C9:F0:F2:5A:6B
X509v3 Authority Key Identifier:
keyid:CC:45:00:09:1E:FC:D9:05:E7:2E:A4:5F:27:82:48:66:1F:22:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEUACR782QXnLqRfJ4JIZh8iWy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:e4:cd:5d:3c:ee:15:f4:e8:26:25:05:20:0d:c7:0a:91:f1:
7e:9c:ef:62:41:9b:3d:56:62:48:c2:8e:90:aa:b7:23:68:69:
11:1f:c2:d4:97:98:a7:fb:13:8c:97:e3:c2:97:ea:eb:64:a2:
0c:26:a2:9f:09:9e:d8:94:45:91:62:77:b1:5d:8f:0e:c1:69:
39:30:9f:6e:b6:be:df:e7:b4:24:46:81:7d:c0:c5:3a:0a:f9:
d5:4f:d8:22:9f:77:bf:f1:7c:40:f8:9a:fe:f2:79:42:3d:8f:
dd:6a:05:60:c3:a3:8f:b6:b8:45:40:83:43:e4:af:2a:bd:18:
ce:6f:ab:13:f2:be:65:ba:4b:78:4a:b4:da:c1:d3:18:5e:d0:
0e:06:90:91:37:cf:84:64:4e:0d:79:dd:30:31:2d:69:40:a1:
04:aa:34:a8:e3:94:a5:a3:29:c9:3d:c1:7e:be:1b:2b:6a:b2:
08:02:94:5b:f6:b5:fe:0a:d1:61:af:cb:9a:23:7c:e8:a7:ea:
4a:57:a9:af:9d:92:8e:cc:e2:c6:68:38:dd:c0:f2:10:c8:ff:
ec:f2:b4:47:1f:53:8e:35:27:10:a1:68:1e:7e:41:8c:1e:20:
d0:6c:43:05:7e:aa:38:6f:75:75:b9:aa:9d:2e:b3:7a:af:c1:
a0:a5:24:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:34 2025 by rpki-client