Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.mft
File: z379uI0GEsUL1dfhZa94NPDdPwQ.mft (raw, json)
Hash identifier: 80ml9kIKaCcYK+7saZugSs4cYKjWzgm2s5QSAwxysiM=
Subject key identifier: 16:F9:9A:B6:78:15:85:E6:EC:A3:40:CD:DB:13:F5:13:86:30:60:14
Authority key identifier: CF:7E:FD:B8:8D:06:12:C5:0B:D5:D7:E1:65:AF:78:34:F0:DD:3F:04
Certificate issuer: /CN=cf7efdb88d0612c50bd5d7e165af7834f0dd3f04
Certificate serial: 0199FFC80EE57FD56487F6C19D7502ADC652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z379uI0GEsUL1dfhZa94NPDdPwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.mft
Manifest number: 0198
Signing time: Mon 20 Oct 2025 04:02:04 +0000
Manifest this update: Mon 20 Oct 2025 04:02:04 +0000
Manifest next update: Tue 21 Oct 2025 04:02:04 +0000
Files and hashes: 1: z379uI0GEsUL1dfhZa94NPDdPwQ.crl (hash: fW/7NspAmQtjhr+hCjXZ0q2c/9k3bUF7nHv+JVv7HC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/z379uI0GEsUL1dfhZa94NPDdPwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:0e:e5:7f:d5:64:87:f6:c1:9d:75:02:ad:c6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7efdb88d0612c50bd5d7e165af7834f0dd3f04
Validity
Not Before: Oct 20 04:02:04 2025 GMT
Not After : Oct 21 04:02:04 2025 GMT
Subject: CN=16f99ab6781585e6eca340cddb13f51386306014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:13:3d:d5:84:f9:1d:a4:ff:99:72:87:45:d0:
3e:5d:ca:91:b3:d9:03:61:7e:71:02:9b:fc:7b:6f:
13:e9:85:30:92:1d:e5:a9:fc:4b:b0:d0:59:10:46:
78:3b:44:0d:a5:f5:b3:1c:41:d3:cb:f1:be:34:cd:
ca:3d:75:02:60:75:c6:27:e6:e2:24:a5:bd:88:8e:
ea:7f:a4:20:0b:bf:e5:1c:5b:e1:36:73:02:7c:4b:
e7:b3:6b:3d:01:bb:64:75:7a:64:00:e0:06:d9:fd:
60:4c:d5:f6:0c:eb:91:a5:24:c7:ba:8b:57:c8:1a:
57:3c:e0:c0:0c:8f:3f:cc:bd:43:c7:1a:2d:6d:1e:
fd:6d:c9:cd:7b:bd:23:98:3c:da:51:30:df:74:bd:
3b:a3:ef:62:39:a0:36:09:0f:6f:e6:7a:38:19:20:
2a:2a:ec:0b:c9:6a:b9:84:c3:b6:11:2f:2c:e8:79:
ad:31:38:9c:7f:48:e6:91:d6:62:49:26:39:f4:80:
34:20:db:85:96:22:c2:07:5a:91:0e:63:40:36:89:
b5:bb:17:cf:d8:ea:01:40:93:45:67:ca:27:f9:dc:
60:ee:c2:99:48:95:62:ce:88:b1:b1:ab:42:92:15:
63:89:57:c4:4d:ee:64:3f:c6:05:b1:c7:c9:fc:b2:
b9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F9:9A:B6:78:15:85:E6:EC:A3:40:CD:DB:13:F5:13:86:30:60:14
X509v3 Authority Key Identifier:
keyid:CF:7E:FD:B8:8D:06:12:C5:0B:D5:D7:E1:65:AF:78:34:F0:DD:3F:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z379uI0GEsUL1dfhZa94NPDdPwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:96:5d:23:fd:59:05:1f:79:d3:1f:54:77:e5:c4:68:fd:a8:
93:48:72:2e:66:2b:4c:4c:45:60:76:68:69:89:b5:b0:47:5b:
b7:7b:ba:ac:f1:db:80:f8:69:40:a3:37:a7:95:30:79:22:73:
ba:82:39:98:e7:41:6f:82:c2:61:6d:e2:9f:40:51:b2:ae:dc:
43:a8:3c:1a:97:17:ae:0e:a8:31:ff:78:16:41:32:6c:80:94:
47:9f:b1:08:54:e9:ae:96:6f:ea:9c:0c:5d:2a:be:57:4a:c2:
6a:1c:f9:5d:b9:aa:ef:61:f7:2d:d7:a3:74:bb:8f:62:a8:17:
09:36:4e:13:d3:ec:5f:d1:54:81:15:5d:17:3b:ee:93:45:c5:
ee:dd:d4:a6:9e:d9:c7:78:72:d2:42:05:b4:be:12:a2:b1:01:
81:3d:f1:eb:bb:4f:6a:de:8c:f1:25:70:14:6d:65:33:f6:76:
3f:df:8a:ad:40:e0:f3:89:5f:da:91:46:14:3a:58:74:78:e5:
7c:77:7e:02:1c:a7:cb:81:c8:ae:f2:e2:c3:ce:9d:20:b9:93:
6a:db:51:f2:d3:24:a3:c0:76:e7:ce:26:4d:5f:27:97:bd:b1:
96:ab:03:f1:4f:20:25:05:a5:40:b9:46:2a:49:5d:d0:b4:a6:
e3:44:77:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:35:32 2025 by rpki-client