Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
File: Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft (raw, json)
Hash identifier: pBVlpCYqpNyhi/F0ofn5aDoUJofh4yoRQb+LhKvhu0w=
Subject key identifier: 9A:EA:DC:E4:5A:64:12:60:17:55:B7:B7:2E:65:AF:EC:5D:09:AB:DD
Authority key identifier: 66:1F:2D:A6:C2:DF:94:A7:D0:5A:7E:E4:01:FC:FE:31:68:64:0A:C3
Certificate issuer: /CN=661f2da6c2df94a7d05a7ee401fcfe3168640ac3
Certificate serial: 0199FBEB65D631EBFD6D49B2D2CB49A9C61C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zh8tpsLflKfQWn7kAfz-MWhkCsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
Manifest number: 0AEE
Signing time: Sun 19 Oct 2025 10:02:12 +0000
Manifest this update: Sun 19 Oct 2025 10:02:12 +0000
Manifest next update: Mon 20 Oct 2025 10:02:12 +0000
Files and hashes: 1: Zh8tpsLflKfQWn7kAfz-MWhkCsM.crl (hash: 8XKvXOcxS8fX88qR5ZSICLXJjKK+60usHIGCHoQ7GQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zh8tpsLflKfQWn7kAfz-MWhkCsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:65:d6:31:eb:fd:6d:49:b2:d2:cb:49:a9:c6:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=661f2da6c2df94a7d05a7ee401fcfe3168640ac3
Validity
Not Before: Oct 19 10:02:12 2025 GMT
Not After : Oct 20 10:02:12 2025 GMT
Subject: CN=9aeadce45a6412601755b7b72e65afec5d09abdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a7:dd:a8:a3:cf:f3:1e:6d:26:91:8b:db:b1:
a4:e8:07:e3:39:a4:0a:12:11:3a:f6:a5:90:ea:04:
d7:62:88:e7:39:33:5f:27:dc:7b:93:26:36:5b:ad:
19:7b:d3:30:22:be:d5:56:15:0b:bc:94:e8:0c:cb:
30:76:6d:11:d8:67:2a:08:76:42:8f:6c:8d:40:61:
f4:c4:a5:3e:82:b6:d6:7c:df:5a:31:44:71:11:ec:
34:76:12:18:34:19:cc:2c:fc:cf:1d:19:d3:fa:93:
cf:4a:83:73:95:39:3d:74:ee:f5:61:b1:1b:10:53:
82:f5:10:1a:3c:a7:52:88:00:84:2f:d0:7f:de:65:
e6:ec:6d:6b:e6:1a:52:ea:9f:c1:f9:d1:45:ec:c7:
35:b9:7e:b4:b4:99:30:10:b6:d3:d7:0b:c3:70:2d:
c4:61:29:50:82:86:73:ac:58:25:17:9a:6a:92:6b:
b8:db:93:7e:23:71:82:fb:49:0d:aa:5c:db:c1:9a:
81:b3:05:c5:8b:77:18:ad:df:c4:5a:d0:8c:0e:12:
29:1a:af:74:34:8a:2f:4a:3f:61:56:04:56:b0:42:
ed:77:3f:35:19:96:10:79:ac:c8:a8:92:8f:80:37:
55:13:e6:e1:25:1e:a0:4d:98:4c:97:e4:2a:33:2d:
f5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:EA:DC:E4:5A:64:12:60:17:55:B7:B7:2E:65:AF:EC:5D:09:AB:DD
X509v3 Authority Key Identifier:
keyid:66:1F:2D:A6:C2:DF:94:A7:D0:5A:7E:E4:01:FC:FE:31:68:64:0A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zh8tpsLflKfQWn7kAfz-MWhkCsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:31:d0:f1:ed:a9:45:af:68:9e:2e:d2:96:4b:8c:df:71:43:
c6:68:7d:45:d9:a9:a6:11:90:1f:8a:a8:03:2e:4e:f0:e5:8c:
cb:2c:95:f1:a7:3d:be:65:6f:11:da:61:2f:25:0d:1c:e5:49:
b2:be:b1:83:2f:99:a3:39:2d:a3:9b:6d:4e:48:69:47:4d:75:
55:52:12:60:d7:98:43:02:57:50:3a:d5:5c:0a:8a:0e:80:8d:
8d:78:25:22:f4:7e:7e:15:0a:b4:7c:6b:8f:79:9c:8c:4b:ce:
c6:eb:59:9a:a3:90:71:33:2c:d3:78:1e:4b:c6:38:28:7e:41:
c1:80:7a:fd:5d:eb:4f:70:8b:35:f8:89:f0:d4:06:d0:df:1a:
4b:79:8c:8a:17:da:d6:b9:cc:d9:de:05:6b:da:8a:8c:21:f9:
d4:2d:bd:12:bd:03:ba:55:2f:84:3d:1d:9e:d1:f2:7f:bd:6b:
24:f6:bd:7f:bc:11:0f:3c:6f:69:a7:06:9a:5f:f3:54:ff:9c:
e9:f0:e0:0c:d8:c9:5f:13:72:52:26:ba:c9:c0:42:3b:e3:4b:
0b:e1:cb:69:cb:a4:8a:30:54:25:a6:77:92:58:ec:2d:fb:85:
6f:08:e7:55:7c:0d:b7:50:0e:5d:9f:52:1b:6c:88:91:23:de:
f3:e0:a9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:37:54 2025 by rpki-client