Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft
File: z32kMRhYgiWjduwhScczbEYzZEA.mft (raw, json)
Hash identifier: tFJ6QC0aExtEuStwoO8Wn0dEsetDatZVjh26oaFBCsg=
Subject key identifier: 8F:AB:06:23:C1:6E:1C:59:7B:64:2D:82:24:D5:F9:37:ED:DC:6F:C8
Authority key identifier: CF:7D:A4:31:18:58:82:25:A3:76:EC:21:49:C7:33:6C:46:33:64:40
Certificate issuer: /CN=cf7da43118588225a376ec2149c7336c46336440
Certificate serial: 0199FBEB59F62A8AA34E7BA498291FD89BD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z32kMRhYgiWjduwhScczbEYzZEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft
Manifest number: 0F00
Signing time: Sun 19 Oct 2025 10:02:09 +0000
Manifest this update: Sun 19 Oct 2025 10:02:09 +0000
Manifest next update: Mon 20 Oct 2025 10:02:09 +0000
Files and hashes: 1: z32kMRhYgiWjduwhScczbEYzZEA.crl (hash: UacFojmjSKG/sUM6DG2Kinyddb5Hh4orVlZ516HuTic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/z32kMRhYgiWjduwhScczbEYzZEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:59:f6:2a:8a:a3:4e:7b:a4:98:29:1f:d8:9b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7da43118588225a376ec2149c7336c46336440
Validity
Not Before: Oct 19 10:02:09 2025 GMT
Not After : Oct 20 10:02:09 2025 GMT
Subject: CN=8fab0623c16e1c597b642d8224d5f937eddc6fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c9:1e:a1:50:36:80:a2:cc:9a:a0:b2:50:03:
a6:04:77:73:1d:8a:21:54:6a:ce:48:73:21:02:bf:
4b:4a:26:c4:f4:1a:f3:ad:91:de:09:4b:81:7a:e9:
21:fa:5a:e6:77:79:15:b1:cc:bf:cd:38:6f:10:84:
52:55:ee:d8:7e:ee:a9:ba:7e:c3:a6:ae:c7:c1:df:
3e:e0:61:7c:f9:47:8a:52:55:f1:20:a4:84:c3:cd:
b7:ea:0a:b1:26:3b:25:d1:37:76:f0:b2:e0:11:f3:
dd:63:41:7c:f7:90:83:41:27:6b:9c:78:cf:09:c6:
20:db:91:51:7c:bc:64:64:a6:78:4c:9b:b1:39:86:
12:ff:e9:55:9d:2d:a2:ba:c6:d3:80:08:66:17:49:
6e:4a:3b:7d:3a:d6:c5:03:c7:cb:fe:fe:35:fb:fb:
78:53:34:50:12:77:64:12:ad:03:57:e7:6d:20:e9:
65:51:f2:e8:f9:56:dc:f4:76:83:fa:6e:fc:d9:b0:
f7:9a:51:54:dd:ff:48:b4:50:89:cf:8a:42:45:12:
b9:57:06:d7:32:1d:f1:d6:b7:50:c7:a1:2d:ff:d1:
44:b8:d4:34:2b:42:c3:81:e8:ef:b0:fc:d5:35:8f:
5b:4a:93:83:31:5e:f8:0a:e6:09:66:79:af:77:a4:
31:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AB:06:23:C1:6E:1C:59:7B:64:2D:82:24:D5:F9:37:ED:DC:6F:C8
X509v3 Authority Key Identifier:
keyid:CF:7D:A4:31:18:58:82:25:A3:76:EC:21:49:C7:33:6C:46:33:64:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z32kMRhYgiWjduwhScczbEYzZEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d8:db:20:b6:da:74:c2:34:37:bd:8c:9a:b5:e7:29:b0:86:
67:af:1e:dc:dd:5a:77:14:60:c1:a2:66:75:39:65:90:03:e9:
1a:68:07:62:dc:06:03:86:23:36:3c:92:83:15:a5:f1:2f:06:
ec:fe:91:68:78:ae:32:55:6e:2f:88:19:84:16:9b:8c:d0:dd:
dc:21:c9:cc:77:88:de:05:78:c4:5f:6c:a7:8e:c1:6a:6d:ac:
61:14:35:ca:36:7c:5b:41:55:d5:04:78:c8:6e:48:23:5c:68:
7b:70:12:7e:72:68:f7:80:55:04:66:c6:7d:35:fc:90:5e:35:
05:8b:b2:52:ff:86:9e:ad:da:9d:cd:0a:d5:50:f4:c4:d0:18:
70:6b:0f:69:90:1e:8d:93:ab:29:43:98:7e:65:8e:9a:5f:7b:
c4:76:af:2e:4a:9a:12:fc:83:8c:7f:be:22:5d:88:4b:27:6e:
46:b8:c9:70:1d:a9:65:ec:48:fb:c8:cb:6b:9e:a1:36:61:ea:
52:d1:c6:c3:0a:64:9f:c7:fb:66:1c:65:76:05:98:bb:53:07:
ca:fa:6c:ec:dd:04:70:6c:25:71:cc:00:27:38:a0:73:83:3b:
54:ba:37:82:2b:78:e4:1e:4a:a4:c7:6b:f7:83:ea:6d:80:c2:
22:82:a7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:53 2025 by rpki-client