Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
File: ZAu20bLSfK4nWGXG1czH-KdXt_U.mft (raw, json)
Hash identifier: Vs+BDRFXNmtJb1XBtbwH52Vu7NH2MMZ4gPTYRrKbqiw=
Subject key identifier: C0:28:8E:2E:68:C8:ED:8F:16:77:C3:39:03:7B:03:55:2C:A5:01:1D
Authority key identifier: 64:0B:B6:D1:B2:D2:7C:AE:27:58:65:C6:D5:CC:C7:F8:A7:57:B7:F5
Certificate issuer: /CN=640bb6d1b2d27cae275865c6d5ccc7f8a757b7f5
Certificate serial: 0199FC8F73828A68BAC9549BE0F19B22E3CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
Manifest number: 0D2F
Signing time: Sun 19 Oct 2025 13:01:23 +0000
Manifest this update: Sun 19 Oct 2025 13:01:23 +0000
Manifest next update: Mon 20 Oct 2025 13:01:23 +0000
Files and hashes: 1: ZAu20bLSfK4nWGXG1czH-KdXt_U.crl (hash: GjxF509sU84V4/WubMF7F/no4ubS7vVYh1kr+WpVOD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:73:82:8a:68:ba:c9:54:9b:e0:f1:9b:22:e3:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=640bb6d1b2d27cae275865c6d5ccc7f8a757b7f5
Validity
Not Before: Oct 19 13:01:23 2025 GMT
Not After : Oct 20 13:01:23 2025 GMT
Subject: CN=c0288e2e68c8ed8f1677c339037b03552ca5011d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:51:8c:76:c7:ab:9d:ec:89:e7:fc:92:bb:f5:
bf:88:25:21:73:46:ae:dd:c2:68:1c:30:e4:cc:01:
da:7c:82:8f:35:28:e3:03:90:45:68:79:de:3b:95:
41:02:d5:8e:75:13:4d:61:a2:92:89:13:f7:0f:76:
f3:56:8b:69:1a:ba:e5:dd:b0:fe:f4:bb:0c:d0:54:
ae:1f:fb:4d:cb:40:29:ab:ad:bc:40:9c:8f:69:78:
7c:43:f3:10:71:8c:68:42:7d:c6:40:b1:aa:c3:01:
2c:f1:0b:4b:22:2f:6d:1e:7d:f1:16:3f:0e:27:15:
76:7d:fd:88:7e:91:97:12:20:97:3d:87:9a:9e:ec:
c5:80:ae:a3:5a:26:2d:53:68:6d:5d:1f:7d:f8:18:
d7:c2:d8:88:81:e7:a3:84:97:6c:7d:c6:ac:e9:74:
32:e5:e9:bd:8b:c9:0f:56:0d:6f:9d:4d:e9:8d:c4:
60:a8:ae:3a:d2:f1:e5:c7:a8:5d:21:d7:e6:a7:63:
e4:ef:65:15:65:06:ec:ac:2d:e1:70:00:1a:e9:7a:
57:7a:cb:86:cb:a5:28:42:fa:da:8f:17:03:53:46:
fe:f0:2e:dc:00:28:a2:38:9a:d2:dd:6c:73:86:51:
6e:ea:9c:b4:14:7b:8d:a1:98:99:f9:e4:00:ac:05:
45:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:28:8E:2E:68:C8:ED:8F:16:77:C3:39:03:7B:03:55:2C:A5:01:1D
X509v3 Authority Key Identifier:
keyid:64:0B:B6:D1:B2:D2:7C:AE:27:58:65:C6:D5:CC:C7:F8:A7:57:B7:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ff:17:f2:c4:ad:cf:08:7c:08:db:0a:7f:c3:fb:3f:a4:9c:
81:28:91:f6:8f:86:18:18:72:2a:12:56:4f:20:7d:a9:ad:f8:
85:2c:83:a5:26:28:a2:e5:91:60:3c:8e:b2:cd:6d:52:e5:5c:
76:24:fa:c2:d1:5f:47:a7:c1:61:21:57:b0:bb:f0:59:b0:4f:
f1:a0:fe:2a:f9:11:12:ec:f8:cb:61:bf:6b:8d:78:a2:14:1d:
65:e3:40:61:fe:80:39:0b:3b:ad:92:0f:af:b7:9d:63:e3:4a:
70:ab:89:a0:e5:90:99:83:55:58:ca:14:4f:51:c5:2e:53:21:
78:52:58:f6:8f:34:40:58:0a:f0:bd:0e:40:c8:90:88:fb:75:
ae:01:fe:f9:02:e9:cc:a3:c8:5a:02:4c:4a:9e:70:55:1b:91:
a3:bf:e6:48:69:1e:1e:74:ea:09:47:41:e5:e7:81:fd:51:fc:
6c:f1:d1:f5:e4:c1:97:03:61:dc:6c:d4:7f:f7:c7:c8:17:70:
da:92:79:15:7c:a5:48:a2:9f:d5:06:60:5b:f3:0b:2f:95:81:
82:19:b0:5c:16:fa:41:a1:46:55:b0:2b:1c:f2:04:2d:81:fe:
a7:8b:b0:f7:9e:07:47:05:d5:23:d0:78:7f:6f:ce:c2:d1:0c:
73:99:5e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:36 2025 by rpki-client