Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft
File: ziLsmUVCynrKrdWHJ-RgarRJAEA.mft (raw, json)
Hash identifier: MtSWPcZ3xXdjMw7PL0O7IQKt3GHEuutqubtuO8juiz0=
Subject key identifier: 4C:6E:2D:9D:AE:CA:0C:D2:51:3D:B5:12:6C:F0:E0:F5:F5:EF:D7:46
Authority key identifier: CE:22:EC:99:45:42:CA:7A:CA:AD:D5:87:27:E4:60:6A:B4:49:00:40
Certificate issuer: /CN=ce22ec994542ca7acaadd58727e4606ab4490040
Certificate serial: 0199FB461D6B95C058B5D4D62715A2732B5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ziLsmUVCynrKrdWHJ-RgarRJAEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft
Manifest number: 0FC5
Signing time: Sun 19 Oct 2025 07:01:40 +0000
Manifest this update: Sun 19 Oct 2025 07:01:40 +0000
Manifest next update: Mon 20 Oct 2025 07:01:40 +0000
Files and hashes: 1: ziLsmUVCynrKrdWHJ-RgarRJAEA.crl (hash: IG8lcPYYeIv4jFvZ4FoMV/zuD4v8glSXhFlQmQQ9MNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ziLsmUVCynrKrdWHJ-RgarRJAEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:1d:6b:95:c0:58:b5:d4:d6:27:15:a2:73:2b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce22ec994542ca7acaadd58727e4606ab4490040
Validity
Not Before: Oct 19 07:01:40 2025 GMT
Not After : Oct 20 07:01:40 2025 GMT
Subject: CN=4c6e2d9daeca0cd2513db5126cf0e0f5f5efd746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f2:d8:84:f0:e7:8a:ee:e8:a2:61:1e:85:c0:
c9:fd:63:3f:f2:1e:2a:40:54:49:07:39:19:62:68:
ff:91:24:d4:19:f4:6c:4a:ed:9d:4a:66:b7:11:6a:
b1:86:d3:89:04:85:57:d2:bf:4b:f0:3c:3c:ad:5d:
b6:fa:85:ae:ed:f7:b2:ef:29:37:2e:58:3e:67:7d:
3b:ad:fc:03:ba:dd:bf:24:5e:5e:c1:c0:18:a9:50:
c8:83:ff:28:fd:10:49:5d:bd:75:cb:e0:9d:16:99:
9a:85:39:86:44:01:c7:9c:31:c7:d1:69:13:f3:81:
82:43:75:8f:17:46:da:1c:92:0e:11:8f:1c:6c:0e:
0a:0e:65:22:c3:51:43:fb:89:bc:b4:87:9b:99:4c:
eb:aa:2c:b4:1d:56:bd:9c:f8:83:7b:ee:f8:ae:06:
e6:e2:65:3a:48:01:50:21:0b:06:ca:a7:4e:4b:89:
93:5a:34:ff:f5:d1:a0:32:bf:13:59:51:ac:52:78:
6f:66:4a:43:ec:94:f7:5a:6a:3f:df:5d:b4:a1:1a:
2a:de:c8:01:10:83:f7:77:2f:f2:77:29:11:ef:b2:
eb:03:87:d5:d3:21:70:48:11:c1:96:cb:77:c8:9c:
a2:9c:7f:83:17:6c:bb:57:ca:71:eb:6b:6a:0c:67:
35:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6E:2D:9D:AE:CA:0C:D2:51:3D:B5:12:6C:F0:E0:F5:F5:EF:D7:46
X509v3 Authority Key Identifier:
keyid:CE:22:EC:99:45:42:CA:7A:CA:AD:D5:87:27:E4:60:6A:B4:49:00:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziLsmUVCynrKrdWHJ-RgarRJAEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:77:2f:b1:49:8c:c6:4c:a9:50:d1:5e:89:4b:65:2a:64:67:
93:b5:bf:bf:9f:ea:a0:20:ab:02:64:24:e9:1e:12:0a:9c:60:
ab:37:d2:e5:08:29:20:1b:c4:e9:95:2b:09:4c:f4:ea:bb:74:
0f:3b:a1:67:d4:3e:7c:e2:f9:bb:15:1b:56:00:72:85:63:df:
af:78:30:a4:21:5e:89:4e:7d:5d:ee:61:20:d5:58:3f:bb:1a:
dd:a5:07:73:e3:e9:80:be:92:6b:08:d1:b2:a8:e2:e4:12:02:
c3:03:8c:80:66:95:2e:cc:da:12:92:6d:11:d1:18:48:22:1c:
24:e5:73:5b:ac:ae:ac:81:c5:50:b9:82:b7:86:14:ea:15:4f:
98:39:51:91:8e:bc:60:8b:9b:66:30:88:34:97:87:cc:11:f8:
47:fb:2d:76:b4:5a:b1:95:77:09:60:3d:37:9b:6d:d0:fa:fb:
03:9a:1d:60:01:cf:10:6b:af:69:2d:59:df:af:10:99:e3:2f:
7b:0a:98:f1:9e:45:b7:72:78:b5:17:fe:5a:60:49:59:d9:ab:
78:a0:b3:9d:df:36:64:b6:5f:ce:70:a5:15:21:ea:f4:49:c6:
23:43:f9:d7:a6:1b:fd:36:fd:18:18:e8:27:e8:25:e7:64:38:
d8:58:b4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:40 2025 by rpki-client