Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
File: ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft (raw, json)
Hash identifier: csOrk2kWEuVe4wlygqN5gAO7pXdOKCKZeZ4zt2wh42Y=
Subject key identifier: F0:B3:FA:AF:A6:C4:AB:01:45:32:A2:76:ED:B4:A8:B1:19:0C:D6:3D
Authority key identifier: 64:14:77:5F:DA:EE:C7:B0:D5:C9:27:08:39:88:D5:55:72:7C:21:B5
Certificate issuer: /CN=6414775fdaeec7b0d5c927083988d555727c21b5
Certificate serial: 0199FFC75A0B56074A316F2B28355FCF27BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
Manifest number: 0891
Signing time: Mon 20 Oct 2025 04:01:18 +0000
Manifest this update: Mon 20 Oct 2025 04:01:18 +0000
Manifest next update: Tue 21 Oct 2025 04:01:18 +0000
Files and hashes: 1: ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl (hash: LF51ygH5LIRHmEpiZctqhDU24lmrViilELca04m2S8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:5a:0b:56:07:4a:31:6f:2b:28:35:5f:cf:27:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6414775fdaeec7b0d5c927083988d555727c21b5
Validity
Not Before: Oct 20 04:01:18 2025 GMT
Not After : Oct 21 04:01:18 2025 GMT
Subject: CN=f0b3faafa6c4ab014532a276edb4a8b1190cd63d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6c:1f:51:1b:e7:79:4b:3f:00:34:6e:80:09:
64:d3:87:6e:60:e2:85:ee:d7:f1:c1:b9:41:31:56:
e2:d7:59:4d:e7:6f:e8:18:40:cd:b2:b7:ba:94:cb:
44:ae:27:57:16:17:f6:0b:15:48:5a:9d:94:d4:7a:
75:c0:07:07:46:b3:98:22:c9:7a:37:78:4d:13:03:
82:b5:32:7d:72:bf:c6:1a:29:a8:74:f0:22:92:5b:
fe:14:13:2b:d3:70:c8:cc:35:57:b1:5b:e2:50:38:
70:b5:52:b3:36:3b:1d:33:8e:9c:01:ce:96:24:1b:
7b:71:9e:92:3f:55:24:ec:83:a8:84:07:02:6b:28:
db:61:1f:b5:c1:ae:b2:6c:a7:14:e8:17:8f:ae:1c:
61:dc:e9:d9:70:54:47:ca:1b:b6:d0:f0:27:79:fe:
fe:ae:cf:3b:cd:95:d7:9c:4a:60:66:dd:9d:cc:75:
3b:2a:13:1a:ec:b6:8b:97:bd:ce:91:73:9f:70:9e:
0b:4a:07:e2:22:52:43:8b:72:7a:b9:d4:2c:71:f5:
8c:19:45:1d:e4:10:55:52:f9:82:59:f9:eb:81:b8:
4f:b3:ed:88:7b:60:f9:6c:87:3b:cb:fb:fb:50:6d:
48:5d:76:1c:f1:78:dc:7d:76:94:6b:82:65:6e:43:
47:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B3:FA:AF:A6:C4:AB:01:45:32:A2:76:ED:B4:A8:B1:19:0C:D6:3D
X509v3 Authority Key Identifier:
keyid:64:14:77:5F:DA:EE:C7:B0:D5:C9:27:08:39:88:D5:55:72:7C:21:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:83:1f:21:3b:aa:6a:ab:48:43:e7:ed:81:2c:2d:cd:d5:6b:
fc:ea:aa:1b:47:9f:10:c5:ca:d3:50:88:c8:ef:2a:84:1b:25:
de:01:16:02:30:12:a8:8b:a5:88:06:e1:b1:d7:83:9a:a5:c6:
1c:45:81:43:0b:be:7d:15:db:44:14:38:98:94:5e:1b:32:b1:
58:78:ac:be:1f:82:48:b8:28:39:ab:cf:3b:7a:9a:fa:e1:92:
2c:b8:77:10:a4:89:fb:8b:61:07:c3:bb:52:88:72:c3:43:66:
bd:d5:f1:43:d6:c5:0f:19:ac:9d:73:8e:9d:07:57:a9:20:0e:
0e:d7:ed:ec:82:ff:1e:b3:e6:ce:3b:f8:9e:3d:08:1b:90:36:
bc:72:65:56:b5:2e:2b:c5:73:f3:7a:75:f3:89:ec:38:be:e6:
08:4f:51:86:f6:b3:67:03:bf:73:e3:31:b9:f0:65:42:9d:5c:
7b:6e:47:74:8c:80:b4:b6:c3:fd:f2:37:93:aa:b4:8c:fc:13:
db:15:82:e9:52:6a:95:59:0f:05:17:e9:41:1a:b1:a4:5a:3b:
9c:2c:8d:83:59:93:42:6a:d9:41:7a:6a:e4:2a:d8:b0:68:69:
e1:c2:2e:34:7a:be:3a:0a:ec:32:ea:6a:e3:89:72:34:12:2e:
b6:db:1b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:51:18 2025 by rpki-client