Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
File: ZCurhFmUi3l0dkjhPpm50KWCUGo.mft (raw, json)
Hash identifier: JOBO/D87fOn0am8f1jX4YhMw7VCKTxjV/S287tLt4Wk=
Subject key identifier: CC:07:C2:C0:11:90:E8:5C:7C:F2:69:31:81:9D:36:19:3C:29:70:EE
Authority key identifier: 64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A
Certificate issuer: /CN=642bab8459948b79747648e13e99b9d0a582506a
Certificate serial: 0199FF59316DD39D9274AE168AC22435E511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
Manifest number: 0A4D
Signing time: Mon 20 Oct 2025 02:00:59 +0000
Manifest this update: Mon 20 Oct 2025 02:00:59 +0000
Manifest next update: Tue 21 Oct 2025 02:00:59 +0000
Files and hashes: 1: ZCurhFmUi3l0dkjhPpm50KWCUGo.crl (hash: QDPJVE8t4yNs3XhzimgMqlLDDjJhoW9cMT3NkFYP6yQ=)
2: paYy_Hhxnm4PBAs2Lf2_YVwZO6U.roa (hash: ATfmnjPDFCrMSy8LdJNeeiWeAqOBvNXLV0H5uqzb3IU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:31:6d:d3:9d:92:74:ae:16:8a:c2:24:35:e5:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642bab8459948b79747648e13e99b9d0a582506a
Validity
Not Before: Oct 20 02:00:59 2025 GMT
Not After : Oct 21 02:00:59 2025 GMT
Subject: CN=cc07c2c01190e85c7cf26931819d36193c2970ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:86:0d:2e:ae:31:cf:fc:b1:09:33:9e:4b:a1:
6e:5d:7c:61:b3:ee:86:7c:ac:90:da:c8:b7:e6:0f:
1c:ab:10:24:26:b9:56:9e:89:76:ca:04:69:47:5f:
aa:2a:fe:d3:39:4d:cb:ee:a4:7a:a7:0d:e6:f5:73:
bc:95:2e:ca:51:e0:a5:ed:55:bb:1b:ff:15:82:b9:
96:02:50:73:0d:71:61:21:70:c0:29:1f:e9:1d:e1:
c1:11:2f:22:bc:59:c9:9d:35:e8:33:96:20:87:59:
eb:eb:3d:9b:06:a8:de:e1:5d:d5:7a:e5:8e:f2:06:
a9:cf:d2:d4:f6:f2:2a:d2:6e:c8:ec:82:ba:b3:5e:
75:6e:ed:2e:d1:db:8b:57:49:8c:60:11:17:85:c2:
3d:63:3b:d8:3d:f4:52:0e:c6:66:f0:fd:bd:cf:37:
e6:63:89:7d:fb:2b:ff:9c:98:05:16:69:44:42:2a:
b3:f8:c0:8c:20:c3:b4:5b:a5:ea:e4:32:dd:ca:69:
e3:82:e6:67:64:ff:f4:f8:e3:00:24:c5:f4:81:d9:
61:a4:6b:a4:3f:0d:f6:4a:d9:f0:7f:40:c4:b8:c0:
b3:71:8e:e5:65:ac:0d:80:76:fc:54:f7:7a:83:3c:
41:62:c8:94:36:c4:7d:b9:19:20:1d:bb:23:c4:34:
f4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:07:C2:C0:11:90:E8:5C:7C:F2:69:31:81:9D:36:19:3C:29:70:EE
X509v3 Authority Key Identifier:
keyid:64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:2c:5b:d8:50:05:2a:73:90:c1:f0:2a:e2:4e:3a:e6:77:ec:
40:0d:3a:60:cc:c7:be:49:7d:45:65:6a:e1:1b:94:ed:38:15:
e5:8d:54:a0:a0:5a:63:a9:b5:87:ba:1c:83:06:36:e9:d7:d1:
97:43:67:a5:26:4d:b2:81:2f:ff:48:61:ab:91:ea:ce:e1:fb:
91:a9:0f:f1:c6:23:5c:56:0f:1c:dd:02:a0:dc:30:f8:81:c7:
85:8e:be:e2:53:3e:e9:aa:54:62:b9:a3:45:cf:66:fd:e3:84:
96:2f:67:d4:c7:29:71:9e:b8:6b:2c:ec:f8:a6:f5:96:1b:3d:
2c:f9:c3:7e:e9:94:3f:e5:4b:e8:50:1a:8e:df:d0:bd:fd:18:
b1:7d:1f:c4:5b:0d:60:5c:4b:34:bf:d6:27:1c:d3:5b:95:ab:
72:c1:c5:ad:7e:ee:70:9a:14:85:59:2e:0c:84:c2:97:a1:5a:
f5:64:53:66:c5:10:76:e7:3a:74:72:48:85:36:1f:ee:78:52:
ca:c5:3e:ed:23:4e:8d:3c:77:83:b5:59:74:1f:59:6c:6b:02:
60:4d:6e:b4:23:34:f0:91:d4:35:17:a9:ae:f8:42:4c:c3:ad:
ee:45:4c:36:39:2e:69:fc:19:9c:b4:7d:3d:ed:01:7d:61:44:
ab:c8:c3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:56:00 2025 by rpki-client