Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
File: zW6So-uArGPuVwLA2XtOnwuCM_A.mft (raw, json)
Hash identifier: 9F+25Fp3OJ0OyEKhx6s03qZUW9912HAb3L2nHheSxSg=
Subject key identifier: F3:4E:49:D5:4E:9E:44:C2:40:25:03:FC:D4:8A:06:E7:BC:7C:EA:5E
Authority key identifier: CD:6E:92:A3:EB:80:AC:63:EE:57:02:C0:D9:7B:4E:9F:0B:82:33:F0
Certificate issuer: /CN=cd6e92a3eb80ac63ee5702c0d97b4e9f0b8233f0
Certificate serial: 0199FE7D994B5E313C98FD6AF4FDB56F774A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
Manifest number: 11B8
Signing time: Sun 19 Oct 2025 22:01:07 +0000
Manifest this update: Sun 19 Oct 2025 22:01:07 +0000
Manifest next update: Mon 20 Oct 2025 22:01:07 +0000
Files and hashes: 1: zW6So-uArGPuVwLA2XtOnwuCM_A.crl (hash: 0eYuHUcXMQD78KvsbGuRgraiCjaQfP1yWnMuaCPIRVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:99:4b:5e:31:3c:98:fd:6a:f4:fd:b5:6f:77:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6e92a3eb80ac63ee5702c0d97b4e9f0b8233f0
Validity
Not Before: Oct 19 22:01:07 2025 GMT
Not After : Oct 20 22:01:07 2025 GMT
Subject: CN=f34e49d54e9e44c2402503fcd48a06e7bc7cea5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:15:13:52:9b:b3:82:37:60:ae:3a:0e:3f:7d:
b7:f2:8c:8e:12:cb:47:76:7d:74:b6:ca:52:f9:fc:
48:48:27:c6:15:e0:55:e0:c6:27:ef:0e:0f:73:62:
fe:f7:86:b8:50:4e:d4:45:66:60:3e:5e:a6:c8:77:
f2:d5:e7:c1:f3:23:a1:05:1b:1a:59:34:1f:1d:7a:
ed:66:e1:52:58:25:3d:d7:3d:d3:e2:11:42:a8:83:
b0:e6:ed:a6:0e:8c:7b:6d:d9:ac:64:9b:f7:74:57:
83:dc:10:16:35:1c:a6:5e:5e:6a:44:04:fe:bc:da:
05:d5:f5:5c:90:00:f3:05:3e:01:d1:33:93:59:fe:
5a:65:d1:6c:2e:5e:bd:d5:ec:1f:82:3d:c8:d0:e3:
4c:e2:47:b0:88:92:0c:31:73:bf:ea:5a:75:03:c8:
02:be:96:29:85:e2:88:1b:db:eb:c4:5b:21:74:a4:
9e:d7:73:ad:5a:eb:7b:fd:5d:df:fb:04:e1:12:58:
7f:11:c3:c7:89:da:3c:f1:51:15:52:79:53:81:b1:
5f:d8:f3:47:f9:9e:c2:e1:9a:32:ef:b0:c1:13:63:
69:d8:70:c7:e0:72:c2:20:fa:f5:31:65:9b:47:e7:
0b:ab:70:ed:3f:64:7e:ee:b7:7d:29:d8:a4:52:ba:
ac:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:4E:49:D5:4E:9E:44:C2:40:25:03:FC:D4:8A:06:E7:BC:7C:EA:5E
X509v3 Authority Key Identifier:
keyid:CD:6E:92:A3:EB:80:AC:63:EE:57:02:C0:D9:7B:4E:9F:0B:82:33:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:19:11:9d:26:b4:50:39:8a:a8:58:40:84:c1:08:f4:da:e4:
c4:25:ac:3a:cc:68:a0:82:6d:86:c1:3d:01:3e:3f:96:8e:2c:
e3:18:1f:7a:7d:53:2c:01:c0:65:4a:6e:e8:51:43:99:c3:b1:
df:03:14:e2:76:fc:e1:e7:0c:e8:82:be:d5:bb:f8:16:70:44:
eb:6c:ab:80:8c:69:af:ff:47:71:29:b3:1a:61:f8:9c:74:17:
a4:b7:b2:52:9a:35:23:81:cf:e8:fc:2c:39:f4:ca:5b:36:5b:
90:4e:23:c9:cc:27:27:e7:3b:80:25:ea:65:31:5c:98:c3:d2:
a3:03:74:45:15:d6:b3:eb:3a:f2:e3:fc:7d:b3:72:eb:d6:69:
3d:b9:b0:08:3a:b0:95:11:54:59:9a:d4:ec:ba:85:ff:2d:43:
73:2e:6a:0d:fe:58:fa:61:64:0f:3d:2f:11:32:46:4a:86:c0:
60:81:f8:2a:ef:85:fa:40:d2:d4:9c:96:92:32:a6:fd:42:3f:
2c:5b:12:42:0a:46:1d:78:69:8d:2e:46:1f:7a:74:a7:09:ca:
86:4f:9c:8a:cd:29:ec:9b:0e:37:eb:fd:51:0d:4d:f1:9b:7d:
6d:d1:0c:ea:fa:2c:bc:c5:d9:55:f4:01:6e:71:0b:8e:9a:30:
37:23:a2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:04 2025 by rpki-client