Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft
File: Zur1u0vnZQbp7F5pTYtYUKmOciM.mft (raw, json)
Hash identifier: w9tK8rFd+orsfFyKRsNi9PBt2gV9lcpxnSEMdYhkuZ4=
Subject key identifier: 53:B9:01:7E:31:5E:C8:48:15:EA:6F:2C:62:B6:7D:F1:47:FD:5B:34
Authority key identifier: 66:EA:F5:BB:4B:E7:65:06:E9:EC:5E:69:4D:8B:58:50:A9:8E:72:23
Certificate issuer: /CN=66eaf5bb4be76506e9ec5e694d8b5850a98e7223
Certificate serial: 0199FD33EE63341787074BC193283283411B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zur1u0vnZQbp7F5pTYtYUKmOciM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft
Manifest number: 0D4F
Signing time: Sun 19 Oct 2025 16:01:02 +0000
Manifest this update: Sun 19 Oct 2025 16:01:02 +0000
Manifest next update: Mon 20 Oct 2025 16:01:02 +0000
Files and hashes: 1: Zur1u0vnZQbp7F5pTYtYUKmOciM.crl (hash: xbH5/8FbT25/yUj9RRgh8659Qmy3f3bA4hkkalZUb00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zur1u0vnZQbp7F5pTYtYUKmOciM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:ee:63:34:17:87:07:4b:c1:93:28:32:83:41:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66eaf5bb4be76506e9ec5e694d8b5850a98e7223
Validity
Not Before: Oct 19 16:01:02 2025 GMT
Not After : Oct 20 16:01:02 2025 GMT
Subject: CN=53b9017e315ec84815ea6f2c62b67df147fd5b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e8:cf:ba:f6:6b:5e:22:bc:e6:91:7c:46:26:
26:79:67:8a:10:3e:b1:50:7c:3b:01:62:3e:66:1b:
3f:41:07:c8:cc:77:57:3d:e0:ab:3c:f1:a6:8d:df:
70:d6:84:82:f4:ba:72:57:3e:12:22:ae:12:23:33:
bd:49:9a:81:37:d8:2f:c6:54:19:30:c7:22:38:2e:
17:ac:57:39:a0:f9:51:56:ca:c7:61:1e:0a:ce:d2:
83:10:04:64:72:17:96:8f:75:2b:03:31:ee:4c:7d:
99:bd:fd:4a:93:ce:46:71:64:51:7f:92:1c:12:db:
4b:58:2a:12:e8:2d:76:b4:0e:e3:60:6a:8b:f9:d1:
bf:73:a6:3d:7f:c2:ae:dd:66:54:27:43:ce:74:2d:
50:6a:14:c9:4e:63:52:b8:4f:f7:a1:a7:3e:b0:de:
e5:62:33:ae:4f:76:e7:fd:1d:48:0d:b8:7c:1e:6d:
e0:75:e7:95:28:d7:67:00:1d:51:4e:22:81:e1:6b:
87:6f:98:58:74:5c:1a:26:ef:e0:2f:04:85:17:15:
25:88:5a:0d:67:73:ac:54:6f:dd:68:9a:e5:18:dd:
6c:7a:7a:47:2c:e9:8f:5d:f8:ce:6b:fb:96:c7:a8:
bd:13:08:d9:76:b5:78:d1:a6:ee:86:97:b0:61:d3:
ca:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B9:01:7E:31:5E:C8:48:15:EA:6F:2C:62:B6:7D:F1:47:FD:5B:34
X509v3 Authority Key Identifier:
keyid:66:EA:F5:BB:4B:E7:65:06:E9:EC:5E:69:4D:8B:58:50:A9:8E:72:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zur1u0vnZQbp7F5pTYtYUKmOciM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:7a:a2:82:96:66:a0:c1:fe:bd:e7:66:62:20:88:4f:64:cc:
2c:c0:a1:81:c4:67:db:30:f6:8c:f8:b4:0e:47:47:69:e3:ec:
f1:c1:a4:3f:cb:58:77:be:82:7e:12:a9:a6:a2:b1:fa:c9:ae:
be:57:80:da:45:a2:d7:49:f1:74:92:b8:cf:d3:0d:e7:90:8a:
09:d6:78:09:71:01:af:45:ca:61:a1:a4:e1:27:e5:61:0c:a5:
50:e7:f3:8f:b4:90:c6:88:a9:10:5a:03:f7:f8:67:ee:ba:1f:
5e:16:37:5c:28:93:13:9b:1d:07:cf:20:99:28:83:b9:d2:7c:
28:06:c7:ec:b7:67:81:a4:6f:7d:b6:d4:b8:7c:31:9b:b1:6b:
56:3f:7f:cd:fd:dd:41:80:ef:9c:c7:a5:71:38:ed:4a:57:d4:
44:b4:d3:bb:38:f3:7e:aa:95:7e:6f:af:47:76:10:56:0e:fd:
15:99:b5:33:42:93:b7:a2:20:73:06:41:0a:1f:58:87:52:74:
e8:10:b1:ba:b9:f4:12:d4:35:7e:c0:49:6c:91:42:6a:0b:0f:
60:23:72:22:50:66:38:33:8f:4b:1f:3c:7b:55:f2:71:ec:06:
1c:c6:f4:8d:1a:0e:85:14:32:85:66:e1:26:e7:61:6a:ef:19:
c9:56:6d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:56 2025 by rpki-client