Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
File: ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft (raw, json)
Hash identifier: IUlEbXozQm2HJC189Rx+bsf4O2popBIrhz57sZr8l3k=
Subject key identifier: 4C:A2:C8:C8:0E:CA:E5:3A:AD:5F:31:3E:2F:6D:A8:E3:BF:A6:AE:D3
Authority key identifier: 65:FA:27:00:83:37:65:17:16:82:85:F9:7C:2F:0D:E4:3D:C1:76:3B
Certificate issuer: /CN=65fa270083376517168285f97c2f0de43dc1763b
Certificate serial: 0199FBEB114E68E3C15B52046C2ACB398441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
Manifest number: 0D37
Signing time: Sun 19 Oct 2025 10:01:50 +0000
Manifest this update: Sun 19 Oct 2025 10:01:50 +0000
Manifest next update: Mon 20 Oct 2025 10:01:50 +0000
Files and hashes: 1: ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl (hash: Rj3MmyQylQv2dL20Ok4bxKMuUCvIPPI2xDL4QmLgeCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:11:4e:68:e3:c1:5b:52:04:6c:2a:cb:39:84:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65fa270083376517168285f97c2f0de43dc1763b
Validity
Not Before: Oct 19 10:01:50 2025 GMT
Not After : Oct 20 10:01:50 2025 GMT
Subject: CN=4ca2c8c80ecae53aad5f313e2f6da8e3bfa6aed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e7:23:78:4c:ca:53:20:1c:4f:89:6a:7a:c5:
7a:75:fc:82:43:2e:fc:65:50:62:36:23:77:55:e2:
6e:3d:24:4b:da:49:35:7a:6d:4d:35:1e:b6:84:8c:
5c:b0:7e:9b:57:73:7c:ec:01:e7:37:da:e7:d2:c1:
74:f8:4f:4e:34:d9:9c:87:6d:4b:a6:19:fb:10:19:
7b:f1:20:2d:eb:2d:62:7b:28:bf:a0:ac:f0:b4:1a:
3d:de:7f:6d:40:69:a6:6e:00:e3:7a:dd:1d:0a:d6:
70:36:5e:1c:d9:13:0e:15:1a:e5:df:16:db:83:e2:
83:01:53:a4:12:7a:c8:08:90:c7:96:30:5f:02:55:
d1:7d:94:f1:66:d3:38:27:73:14:23:2e:b1:46:38:
ca:2a:76:d6:f5:18:6c:18:ab:f8:20:17:bc:c2:75:
06:09:bd:fd:70:e6:af:94:34:52:b8:f3:3c:d6:6f:
8d:a5:7f:57:a8:44:42:45:79:ea:58:88:21:14:cb:
61:72:f3:82:d8:df:c8:d0:2b:80:d7:ba:db:8c:84:
67:28:65:45:4b:ec:28:08:47:f9:1f:0a:7a:8a:ef:
bf:da:a1:b4:8c:87:25:9f:24:8d:27:f1:23:f8:89:
91:33:e2:79:5d:6c:c6:31:fc:2c:fe:7e:b8:aa:93:
f2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A2:C8:C8:0E:CA:E5:3A:AD:5F:31:3E:2F:6D:A8:E3:BF:A6:AE:D3
X509v3 Authority Key Identifier:
keyid:65:FA:27:00:83:37:65:17:16:82:85:F9:7C:2F:0D:E4:3D:C1:76:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:cf:bc:81:49:3b:5f:19:de:62:bf:96:fc:e9:a0:d1:5b:da:
12:a0:11:52:ee:01:fe:14:82:3d:23:04:b0:f8:c8:6a:88:2d:
2a:a5:8c:a4:9c:0b:92:a2:dd:63:48:18:a2:37:4f:6c:45:48:
6c:cf:64:f6:96:d3:24:3e:50:f7:b5:33:af:a2:cb:9e:2a:cb:
0f:07:e2:94:6b:d8:a5:1b:c7:6b:ad:93:36:52:e1:02:57:7f:
5e:1f:aa:de:9a:6c:d3:06:ad:e1:58:7a:ad:1b:36:cf:cc:04:
5e:dc:c6:b9:82:de:9f:52:32:b0:ad:60:62:3b:de:ba:83:41:
17:55:d1:6a:26:08:45:a0:67:bf:c2:25:00:7e:60:b4:92:11:
3d:d3:ae:2e:bd:cc:b1:13:23:af:25:42:31:57:80:c7:00:d3:
1d:83:f8:cf:a8:c3:56:ff:3b:c5:af:f9:b9:a6:b9:78:93:d1:
a4:66:95:89:c7:db:d3:be:59:4e:25:04:67:52:16:c0:ea:10:
6a:40:e7:77:e5:53:82:9e:b7:12:84:69:cb:c1:4a:0a:fb:53:
91:db:93:56:fa:ff:63:0f:91:2c:b8:8f:16:47:bf:d7:a7:e7:
10:d5:5e:68:2e:09:dc:a8:25:bf:21:0d:ee:3a:42:2d:f2:62:
d6:2b:f9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:57:16 2025 by rpki-client