Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft
File: zWv2DrCPHiOrqLp5fBFyREzhW3E.mft (raw, json)
Hash identifier: cP7+suIVd+OzRaO0qyXUhWE0clX/OP7oGxZKkgRH4Qo=
Subject key identifier: E2:3D:BA:37:8A:30:A7:10:18:24:C5:29:D1:64:62:4A:07:36:84:EC
Authority key identifier: CD:6B:F6:0E:B0:8F:1E:23:AB:A8:BA:79:7C:11:72:44:4C:E1:5B:71
Certificate issuer: /CN=cd6bf60eb08f1e23aba8ba797c1172444ce15b71
Certificate serial: 0199FDD990915B56C80629CA22A666DBDC96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWv2DrCPHiOrqLp5fBFyREzhW3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft
Manifest number: 1191
Signing time: Sun 19 Oct 2025 19:01:57 +0000
Manifest this update: Sun 19 Oct 2025 19:01:57 +0000
Manifest next update: Mon 20 Oct 2025 19:01:57 +0000
Files and hashes: 1: zWv2DrCPHiOrqLp5fBFyREzhW3E.crl (hash: yCiZuejR9N9HqSBGfa6aKeoV0Dl+OBUmbtA2le2u37g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWv2DrCPHiOrqLp5fBFyREzhW3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:90:91:5b:56:c8:06:29:ca:22:a6:66:db:dc:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6bf60eb08f1e23aba8ba797c1172444ce15b71
Validity
Not Before: Oct 19 19:01:57 2025 GMT
Not After : Oct 20 19:01:57 2025 GMT
Subject: CN=e23dba378a30a7101824c529d164624a073684ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:76:8b:84:cd:6d:0b:6f:54:99:c7:58:77:e5:
3e:02:97:e0:51:b0:3b:48:ae:64:51:bb:7e:dd:f0:
33:d3:df:ba:39:a7:dd:31:7d:c8:c9:30:68:dd:c8:
f4:37:48:24:39:45:a0:9c:e8:d0:f7:b4:a4:df:b6:
9f:0f:74:a8:f0:16:42:88:c7:78:20:6f:9a:90:59:
81:71:c6:f0:a6:a6:db:b9:10:93:8f:78:ab:ab:d7:
ce:b2:aa:9b:5c:c3:b7:c1:bf:27:0b:e2:5f:5f:53:
f4:87:f8:ed:54:dc:06:79:6f:6f:d9:f1:a0:58:7b:
37:35:c0:6d:e2:e5:b0:f4:18:88:7e:ed:49:76:92:
aa:a1:15:8c:81:ee:25:58:09:ce:db:7d:74:74:ba:
40:fe:be:23:48:72:81:00:07:1d:7b:32:9d:ed:fb:
58:c9:0c:34:db:b6:51:76:cc:cb:ce:c0:fd:8e:a9:
70:43:39:2e:d6:19:56:af:84:d8:1e:89:bd:8f:1e:
92:92:c9:31:81:a9:42:8b:0c:e4:ec:91:ce:11:65:
e0:9e:60:f2:6c:5c:aa:eb:84:0b:3b:d1:67:80:e4:
ac:95:7d:f9:66:1a:b4:fc:8a:03:ca:d3:53:9f:a6:
c4:0d:0c:d0:c1:21:d3:9d:f0:8d:59:be:05:a4:72:
c5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:3D:BA:37:8A:30:A7:10:18:24:C5:29:D1:64:62:4A:07:36:84:EC
X509v3 Authority Key Identifier:
keyid:CD:6B:F6:0E:B0:8F:1E:23:AB:A8:BA:79:7C:11:72:44:4C:E1:5B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWv2DrCPHiOrqLp5fBFyREzhW3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:70:29:73:d7:1b:35:d6:2f:4d:45:f8:e3:fd:39:89:8e:68:
03:43:3e:94:9e:bc:62:4f:cf:1d:2c:ae:4d:16:6f:b1:05:d3:
3b:03:ab:17:b0:de:e5:64:61:98:c7:dd:4d:bf:d4:29:82:c7:
e9:3e:3c:59:59:66:fa:24:1c:d8:88:b3:98:65:1c:e8:d2:bd:
cd:0b:4b:fa:40:a0:c1:87:9f:ea:cb:fa:1f:b3:61:cd:95:0b:
29:7a:c0:4c:02:d4:15:cb:65:55:2e:ae:ac:d3:2c:6d:c4:f5:
03:0f:72:4b:ce:80:1a:99:e6:8f:53:c0:b4:94:2b:a8:ae:89:
b6:d1:6d:dc:91:19:2b:1c:f1:5e:66:ac:5b:a4:4f:f8:a5:96:
93:e6:95:2a:e4:e3:03:d0:ca:a0:21:99:0c:41:2f:9c:4f:fe:
77:a9:24:12:7b:7f:39:6f:2a:c5:3f:89:a3:67:07:38:63:12:
6a:99:e5:4c:58:ae:b6:ed:bd:24:6f:ad:00:fc:39:e3:2e:d5:
80:58:e3:7e:c2:63:36:19:40:d4:31:55:a6:05:0b:56:10:23:
76:74:84:a2:64:62:ad:b7:e5:61:6c:2c:d3:4b:c1:b7:c5:79:
07:ad:d9:19:8d:d0:f0:5b:89:d2:41:71:d6:78:65:14:f7:b6:
2d:92:16:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:11:41 2025 by rpki-client