Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/58a3b6-9a80-49c2-8775-3801c6216e6c/1/zAqQDXC9EPfSIhpWSNpUpeP0RxI.mft
File: zAqQDXC9EPfSIhpWSNpUpeP0RxI.mft (raw, json)
Hash identifier: zEziXkSLS9Aa/rLufAQGTI1y22VkeLJAILsM5n0GU2I=
Subject key identifier: 54:70:F2:63:BA:50:06:19:BA:51:F8:D9:5F:68:0E:1D:87:EC:F5:A9
Authority key identifier: CC:0A:90:0D:70:BD:10:F7:D2:22:1A:56:48:DA:54:A5:E3:F4:47:12
Certificate issuer: /CN=cc0a900d70bd10f7d2221a5648da54a5e3f44712
Certificate serial: 0199FB0F5355FA8DFE708DF0C8C01164AEF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zAqQDXC9EPfSIhpWSNpUpeP0RxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/58a3b6-9a80-49c2-8775-3801c6216e6c/1/zAqQDXC9EPfSIhpWSNpUpeP0RxI.mft
Manifest number: 0193
Signing time: Sun 19 Oct 2025 06:01:49 +0000
Manifest this update: Sun 19 Oct 2025 06:01:49 +0000
Manifest next update: Mon 20 Oct 2025 06:01:49 +0000
Files and hashes: 1: zAqQDXC9EPfSIhpWSNpUpeP0RxI.crl (hash: jDpzU8CVP5DTs20zzh8VL18iQzwfE9fIPpwyZ3I475w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/58a3b6-9a80-49c2-8775-3801c6216e6c/1/zAqQDXC9EPfSIhpWSNpUpeP0RxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/58a3b6-9a80-49c2-8775-3801c6216e6c/1/zAqQDXC9EPfSIhpWSNpUpeP0RxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zAqQDXC9EPfSIhpWSNpUpeP0RxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:53:55:fa:8d:fe:70:8d:f0:c8:c0:11:64:ae:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc0a900d70bd10f7d2221a5648da54a5e3f44712
Validity
Not Before: Oct 19 06:01:49 2025 GMT
Not After : Oct 20 06:01:49 2025 GMT
Subject: CN=5470f263ba500619ba51f8d95f680e1d87ecf5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:15:99:1f:90:e1:12:34:61:45:95:5b:5f:4c:
9e:41:28:db:e2:e6:db:d4:16:27:b0:d8:76:9d:77:
d4:e3:05:36:23:53:8e:8d:64:92:f4:2d:cb:ce:62:
3d:e9:67:56:d0:76:e0:11:2e:82:e6:70:c9:e4:e1:
5c:18:d7:e8:0d:b2:15:15:62:0a:13:cb:cc:56:cf:
03:86:a7:91:f8:07:4d:87:70:1c:8d:d3:f0:ef:5f:
53:b8:78:54:78:51:29:37:40:bb:3b:e7:1b:91:10:
96:02:df:d3:92:19:1b:18:45:34:a4:8e:69:9d:21:
82:bc:8f:7e:de:a0:db:64:b4:f4:3c:49:05:41:a9:
c3:68:a8:dd:63:1a:77:2c:6f:11:1a:81:30:4f:27:
ea:92:04:aa:ab:48:6c:6c:ff:24:55:37:e8:10:b9:
50:d4:e4:44:ec:ca:20:88:85:b9:3c:c0:62:3b:28:
e9:0d:d4:7e:88:70:5c:49:2c:6b:bd:1b:a1:e9:54:
5b:cd:4a:2e:d9:5b:1c:91:79:a8:97:29:84:17:37:
ea:67:8e:31:c7:e2:5f:25:d4:1e:b0:c0:fd:81:d0:
63:10:92:07:c6:61:10:09:92:f9:ca:08:59:91:d7:
1c:aa:13:87:85:73:95:4e:c0:6c:30:f0:e1:16:d4:
a8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:70:F2:63:BA:50:06:19:BA:51:F8:D9:5F:68:0E:1D:87:EC:F5:A9
X509v3 Authority Key Identifier:
keyid:CC:0A:90:0D:70:BD:10:F7:D2:22:1A:56:48:DA:54:A5:E3:F4:47:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zAqQDXC9EPfSIhpWSNpUpeP0RxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/58a3b6-9a80-49c2-8775-3801c6216e6c/1/zAqQDXC9EPfSIhpWSNpUpeP0RxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/58a3b6-9a80-49c2-8775-3801c6216e6c/1/zAqQDXC9EPfSIhpWSNpUpeP0RxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ba:01:b3:b1:84:86:78:d4:1f:ed:d8:ef:c5:ca:94:47:36:
66:36:2e:0a:2a:65:f6:12:51:c0:44:b8:34:55:50:fb:7b:ce:
4e:d7:ad:88:47:16:b8:da:8f:81:37:49:b3:5b:26:5c:68:e7:
27:2c:c0:86:4d:46:f8:91:af:3f:37:3c:61:1e:e6:bc:98:a7:
fc:0a:80:4a:da:e7:1a:4f:82:75:7f:7d:4e:ce:0e:0c:6b:60:
df:e6:27:62:b6:77:96:13:6c:1b:7f:16:7b:76:2f:3c:45:79:
81:9d:76:76:44:ba:29:66:b6:0d:8f:e6:95:2c:90:42:04:d9:
30:ff:67:85:ae:7d:30:bc:f7:d7:ae:18:21:de:f5:0f:59:21:
be:cf:27:41:fb:b8:24:de:ce:19:5d:fc:05:a9:f2:4f:1e:94:
e5:b9:88:f2:b3:42:e4:cd:15:46:b3:03:ec:0e:44:e6:88:c9:
0e:50:ea:cd:4f:6e:94:37:5b:56:40:f6:02:72:f6:c2:52:20:
60:4a:c9:27:1c:a6:a2:32:ca:7a:ee:83:36:77:9c:ce:72:40:
a9:31:59:06:16:31:d0:be:b0:2f:27:13:cd:d7:bc:f2:3d:08:
87:2a:19:08:9e:88:70:f7:09:db:68:fc:cf:3c:24:97:1b:ed:
17:b5:9f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:23 2025 by rpki-client