Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft
File: z5dREMc5t0-E1BcDxIgoMnJ73cw.mft (raw, json)
Hash identifier: 8cEbpbLb02WBQzr00d91la1MgCy2R/c7Juo2vBqWf5k=
Subject key identifier: C7:89:99:ED:77:31:AF:36:75:DA:9B:13:EC:60:E9:1B:A8:52:63:9C
Authority key identifier: CF:97:51:10:C7:39:B7:4F:84:D4:17:03:C4:88:28:32:72:7B:DD:CC
Certificate issuer: /CN=cf975110c739b74f84d41703c4882832727bddcc
Certificate serial: 0199FBEBED29F4E6C8E2021CE7D59A60B9BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5dREMc5t0-E1BcDxIgoMnJ73cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft
Manifest number: 166F
Signing time: Sun 19 Oct 2025 10:02:46 +0000
Manifest this update: Sun 19 Oct 2025 10:02:46 +0000
Manifest next update: Mon 20 Oct 2025 10:02:46 +0000
Files and hashes: 1: z5dREMc5t0-E1BcDxIgoMnJ73cw.crl (hash: FFQNZg7kU9FCabejTSjZy1qLY+JhXHmTc6XXHPcxKRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z5dREMc5t0-E1BcDxIgoMnJ73cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:ed:29:f4:e6:c8:e2:02:1c:e7:d5:9a:60:b9:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf975110c739b74f84d41703c4882832727bddcc
Validity
Not Before: Oct 19 10:02:46 2025 GMT
Not After : Oct 20 10:02:46 2025 GMT
Subject: CN=c78999ed7731af3675da9b13ec60e91ba852639c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:04:b6:cc:d0:27:87:0f:e3:bc:ce:2e:2a:c4:
0c:fe:e6:06:b4:4c:3a:09:57:c7:4c:bb:c7:e7:66:
c9:4d:6c:0b:da:e3:99:e0:55:90:42:71:8e:3c:0b:
0d:d9:e6:73:18:f1:3a:b5:2e:31:d5:78:34:93:31:
b2:0b:17:1c:dd:bb:a9:4b:f1:81:a0:e4:60:b6:2c:
42:c0:c6:ab:ee:5a:50:cb:d3:f8:f4:64:49:8a:8c:
5d:d8:b9:d9:28:ec:9d:c2:2f:33:18:70:a1:2a:c0:
1a:df:10:44:7b:48:29:b7:3a:b7:f8:16:13:62:be:
58:4e:1a:37:b7:aa:fc:0e:a0:78:b9:6b:dd:6b:8a:
53:5d:5f:cf:87:99:3b:5f:31:7d:89:81:8c:03:8a:
1f:cb:9c:b8:cb:2b:fb:fd:7e:ca:8d:ca:b4:ad:f3:
4f:cd:5d:16:2b:2e:6d:6c:ba:e0:6c:ba:d8:b1:e0:
99:03:9b:f1:27:ac:2e:aa:63:10:81:d9:e2:a0:27:
a0:26:46:d6:cb:71:4e:44:c0:96:a5:f6:29:f6:74:
e3:f2:ff:0c:0b:2d:a6:bb:29:7f:bd:d8:c5:e1:01:
7b:e9:bb:40:60:74:fc:1c:71:43:64:b1:43:86:c0:
21:f7:d5:f0:95:2c:aa:3d:78:7e:c4:2c:aa:ac:75:
0a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:89:99:ED:77:31:AF:36:75:DA:9B:13:EC:60:E9:1B:A8:52:63:9C
X509v3 Authority Key Identifier:
keyid:CF:97:51:10:C7:39:B7:4F:84:D4:17:03:C4:88:28:32:72:7B:DD:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5dREMc5t0-E1BcDxIgoMnJ73cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b8:9e:09:d5:de:d1:95:c3:08:1a:bc:c0:e7:72:4d:e4:4b:
eb:65:ad:6f:6e:a7:df:2a:4c:1d:0f:60:93:9d:ae:0e:16:0f:
40:e9:e5:05:e2:37:80:72:99:14:1d:c2:ab:68:5b:c8:76:ed:
4c:a1:d2:32:8c:b2:0a:0f:1f:62:5f:38:89:d1:c3:c8:2b:4d:
f4:52:27:37:ee:23:7f:4a:77:46:7b:14:7c:a7:47:28:69:44:
48:3b:30:d9:c6:b9:d9:31:29:9a:ed:d5:52:ef:9d:ab:a0:3f:
d6:e9:b9:6f:73:85:7a:15:f3:08:3e:33:a2:10:92:6d:33:6b:
ed:f7:2c:8a:30:39:86:1a:6f:74:85:62:bb:49:22:cf:82:11:
8e:e8:5e:ee:98:ea:6e:4b:bc:ad:c7:13:34:8a:12:10:f6:cf:
24:5e:79:96:d9:db:b7:fd:de:22:70:ab:0f:72:89:20:d8:3f:
3c:24:87:ad:0e:e0:6c:39:3d:c6:fb:11:0d:e0:e6:1e:14:bc:
5f:b5:5d:77:43:1c:a5:d9:4b:f8:dc:10:02:2d:e9:22:6d:17:
e2:46:6c:ec:11:e8:92:5a:ef:e9:21:b6:3d:f8:71:82:e6:66:
a6:11:15:bb:26:8c:7b:48:69:2c:7c:4e:b6:65:6e:04:8b:c0:
1f:8e:ae:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:18 2025 by rpki-client