Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft
File: zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft (raw, json)
Hash identifier: vX3Ld+0LnDMRpxRkuKIjBJmz1UoWEa5cEIH4LafX3qQ=
Subject key identifier: E2:46:96:F4:ED:C5:60:9F:B1:34:98:35:2E:1C:22:96:9E:07:4D:64
Authority key identifier: CE:A7:CC:D2:AE:C0:BB:EF:C6:35:08:56:51:2A:95:FE:02:25:99:59
Certificate issuer: /CN=cea7ccd2aec0bbefc6350856512a95fe02259959
Certificate serial: 0199FC8F59CB1817D52C4FBAAB7F59E5F4EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqfM0q7Au-_GNQhWUSqV_gIlmVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft
Manifest number: 0277
Signing time: Sun 19 Oct 2025 13:01:17 +0000
Manifest this update: Sun 19 Oct 2025 13:01:17 +0000
Manifest next update: Mon 20 Oct 2025 13:01:17 +0000
Files and hashes: 1: zqfM0q7Au-_GNQhWUSqV_gIlmVk.crl (hash: CCOGPZ7GN081Ui3lQXxUCemAxWboQPdh4ryl4DWnHnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqfM0q7Au-_GNQhWUSqV_gIlmVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:59:cb:18:17:d5:2c:4f:ba:ab:7f:59:e5:f4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea7ccd2aec0bbefc6350856512a95fe02259959
Validity
Not Before: Oct 19 13:01:17 2025 GMT
Not After : Oct 20 13:01:17 2025 GMT
Subject: CN=e24696f4edc5609fb13498352e1c22969e074d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:82:bf:c8:d8:5d:14:3d:60:64:75:e2:e8:df:
8e:eb:0a:76:ea:5a:b7:ef:09:21:8b:b0:30:ad:4c:
0e:cb:9f:0b:bd:4b:42:57:c5:92:22:ac:38:c4:51:
a6:88:07:f3:31:1e:0d:cf:4b:b7:51:51:1f:77:75:
33:1a:e2:36:f7:6d:08:51:f0:e9:57:ab:27:8a:c5:
10:d5:16:90:f7:59:2e:19:5b:3f:84:75:a7:f8:a0:
e9:4f:92:de:a8:ed:a8:e7:1b:6e:94:4c:cc:a9:40:
bb:4d:f0:ea:a5:01:ff:c8:15:6a:4a:d0:01:8a:e6:
a1:60:23:0d:69:1e:14:02:43:93:b3:62:03:91:28:
59:db:d8:6d:2c:b2:33:ca:dc:da:92:87:ce:35:04:
ba:08:37:5a:7e:39:66:fc:d1:5f:f3:22:57:94:e2:
1c:bd:80:20:a8:29:cb:1a:50:6e:0b:07:12:6b:73:
21:76:d7:8d:b7:18:83:d5:6b:84:d6:a8:54:db:54:
c1:0c:ae:a2:18:e2:4b:87:e2:ec:de:ed:4c:63:bc:
15:3f:3d:c9:c1:2f:d7:79:8f:24:ca:cd:d8:47:ef:
d9:0d:9f:fe:e1:ce:2f:d7:e6:81:7a:be:9c:54:29:
0f:1a:31:c9:cd:33:a9:ea:84:76:fd:87:e2:5c:ef:
c7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:46:96:F4:ED:C5:60:9F:B1:34:98:35:2E:1C:22:96:9E:07:4D:64
X509v3 Authority Key Identifier:
keyid:CE:A7:CC:D2:AE:C0:BB:EF:C6:35:08:56:51:2A:95:FE:02:25:99:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqfM0q7Au-_GNQhWUSqV_gIlmVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:c1:5b:c1:23:3b:8b:90:6e:a4:4d:fc:78:b0:28:ce:9a:05:
6e:40:46:2f:00:1c:c1:06:62:f2:7a:d8:88:84:81:93:33:21:
e0:55:90:af:91:a2:06:0d:9c:b8:d8:d8:c8:cd:37:47:51:1e:
7b:22:e4:53:14:5d:99:2a:96:c5:cf:97:f4:7a:3c:8c:c7:d2:
bc:d4:b9:2c:23:b5:b2:74:34:69:53:2e:49:e0:c6:9c:c3:d6:
5e:42:b6:9f:7d:36:cf:93:69:c5:c9:b6:0c:0e:7f:77:f5:36:
e0:db:19:13:2e:f8:c7:86:2b:81:dc:28:55:40:0b:8d:3d:ba:
bc:53:1d:37:0a:f8:7b:17:bd:5f:31:8f:ec:7c:07:58:1a:f4:
ca:b2:1a:85:f3:5c:2a:d6:54:a7:e7:f6:1f:53:62:bf:9e:2f:
7b:31:b8:64:4f:4e:55:26:00:09:8a:c0:9a:3d:f6:dc:17:43:
01:bc:d5:e6:38:36:de:20:bd:8a:a4:f1:ef:15:6b:18:69:d7:
a3:32:88:56:7e:34:f5:57:1b:9c:16:d5:c1:7a:c6:07:83:b2:
23:9a:54:e3:cf:be:76:49:91:78:73:fa:40:cd:50:ed:37:e7:
72:a5:d4:ce:2f:ed:45:c3:5b:4e:2d:ca:1c:f8:4a:2f:a8:b7:
4e:5c:62:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:32 2025 by rpki-client