Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
File: zZIJohaMSNNQk7ucBSCxn7D-FDs.mft (raw, json)
Hash identifier: u/7iQ+WjnSfcd3OjScllILpCjuDWWwahGEBRSVgvYnk=
Subject key identifier: 37:7B:40:4A:E9:C4:18:AA:41:84:D0:DD:18:3E:8D:90:C9:52:FE:90
Authority key identifier: CD:92:09:A2:16:8C:48:D3:50:93:BB:9C:05:20:B1:9F:B0:FE:14:3B
Certificate issuer: /CN=cd9209a2168c48d35093bb9c0520b19fb0fe143b
Certificate serial: 0199FD33E6E5487C83BFAB5CC19C340CCA1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZIJohaMSNNQk7ucBSCxn7D-FDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
Manifest number: 0B30
Signing time: Sun 19 Oct 2025 16:01:01 +0000
Manifest this update: Sun 19 Oct 2025 16:01:01 +0000
Manifest next update: Mon 20 Oct 2025 16:01:01 +0000
Files and hashes: 1: zZIJohaMSNNQk7ucBSCxn7D-FDs.crl (hash: FaoAHMuX2gXF3pJ55w1MgVDRBmgmUml1iuGeN/aUpqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZIJohaMSNNQk7ucBSCxn7D-FDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:e6:e5:48:7c:83:bf:ab:5c:c1:9c:34:0c:ca:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9209a2168c48d35093bb9c0520b19fb0fe143b
Validity
Not Before: Oct 19 16:01:01 2025 GMT
Not After : Oct 20 16:01:01 2025 GMT
Subject: CN=377b404ae9c418aa4184d0dd183e8d90c952fe90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2b:cc:e0:f4:d8:60:3e:ea:3e:fc:fb:73:11:
92:10:20:81:99:18:64:27:b3:ba:5c:21:a3:39:0f:
8a:c7:11:aa:3c:23:1e:38:d9:fc:d1:07:42:47:dd:
65:b8:52:8b:35:bf:e1:6d:fa:d6:bc:cc:fa:43:8b:
7d:ce:53:71:49:76:ce:34:81:32:4f:7d:64:d7:33:
0d:c3:80:d7:0e:93:96:fc:4a:37:8e:79:c7:f6:ca:
5b:b3:cb:90:75:78:2c:56:60:ae:51:bb:65:01:3e:
a4:c5:c7:11:49:86:d6:72:c4:d2:e2:8f:61:7a:22:
5e:da:fe:c7:d1:a0:c9:dd:05:e1:78:77:3d:f2:07:
3c:0a:41:97:b6:91:36:0b:31:53:0b:c4:b0:3a:bc:
f6:ba:0e:58:b4:4d:49:f8:94:99:28:bf:35:56:22:
94:82:05:7a:5c:b3:0b:78:85:f0:6f:7e:a0:a2:e0:
88:f4:3d:fe:6a:4d:01:27:91:ab:99:2a:5b:a4:73:
c1:b1:84:18:85:c4:1d:e8:e9:1d:c3:60:bc:b1:1d:
7d:c6:a0:4c:e1:8f:98:a3:37:da:7c:14:60:38:74:
81:f0:61:43:b1:1a:01:66:4d:79:24:a5:56:b7:b3:
bf:93:aa:6f:e6:c7:8d:13:26:eb:5e:31:a1:94:57:
d8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:7B:40:4A:E9:C4:18:AA:41:84:D0:DD:18:3E:8D:90:C9:52:FE:90
X509v3 Authority Key Identifier:
keyid:CD:92:09:A2:16:8C:48:D3:50:93:BB:9C:05:20:B1:9F:B0:FE:14:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZIJohaMSNNQk7ucBSCxn7D-FDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:70:19:16:70:22:ba:94:52:25:3a:56:8a:61:99:6e:5a:73:
02:78:c9:53:94:35:4c:2b:8e:be:57:9f:f7:f5:34:14:78:2a:
e9:3f:e8:f6:c7:2b:a0:e4:37:41:2b:39:ab:a8:7f:0e:c5:79:
66:04:74:3d:cc:07:4a:48:a3:20:6d:43:0f:d1:22:55:3a:ca:
8b:82:43:99:be:e6:ac:87:6e:58:8f:ee:e9:e6:51:21:9c:7f:
5f:ea:ca:74:d9:27:49:65:b2:03:0b:6e:5f:9a:d3:91:8e:01:
dd:7e:eb:e5:dc:87:3f:9b:18:72:53:23:b9:f4:e8:88:e3:5f:
cb:2a:3c:5d:9d:4c:db:91:55:a7:5a:74:c2:be:30:a7:40:83:
9b:5b:da:1a:d5:d4:44:14:6f:03:79:6e:da:f5:7b:a6:d6:80:
f2:f4:2d:91:dc:d9:f2:50:6b:11:44:54:8b:3c:a9:b9:18:9f:
f1:2a:c9:f3:81:a0:06:c8:1a:83:b6:36:62:a6:66:91:08:c7:
d5:a1:0b:18:fa:ba:49:40:74:94:15:e0:84:24:9b:1a:25:a3:
b2:66:09:68:c3:a0:2e:57:ef:d4:21:51:33:9b:5a:d8:94:ad:
0a:b7:7b:34:13:f2:0b:b2:fa:aa:40:53:9e:81:20:ae:af:a2:
65:6e:cd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:48:49 2025 by rpki-client