Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
File: z_-U05EdBEp2YYbXaqSgkTbYnXw.mft (raw, json)
Hash identifier: bp85Pvt/yNnrb7/7PU5LIv35oTIcD+tuVFjOoY9JVx4=
Subject key identifier: 57:C6:D0:AF:84:F8:33:A8:6B:3D:FC:BC:A0:BA:3D:AB:B7:AD:88:FD
Authority key identifier: CF:FF:94:D3:91:1D:04:4A:76:61:86:D7:6A:A4:A0:91:36:D8:9D:7C
Certificate issuer: /CN=cfff94d3911d044a766186d76aa4a09136d89d7c
Certificate serial: 0199FBEB2F474878B4B5837371CA84E479F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
Manifest number: 106F
Signing time: Sun 19 Oct 2025 10:01:58 +0000
Manifest this update: Sun 19 Oct 2025 10:01:58 +0000
Manifest next update: Mon 20 Oct 2025 10:01:58 +0000
Files and hashes: 1: z_-U05EdBEp2YYbXaqSgkTbYnXw.crl (hash: aD4Cej3roGDR+eaVHZlGFQk+mVarepG867PfWXa2IIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:2f:47:48:78:b4:b5:83:73:71:ca:84:e4:79:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfff94d3911d044a766186d76aa4a09136d89d7c
Validity
Not Before: Oct 19 10:01:58 2025 GMT
Not After : Oct 20 10:01:58 2025 GMT
Subject: CN=57c6d0af84f833a86b3dfcbca0ba3dabb7ad88fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e2:f2:78:15:05:b8:a0:59:d8:ee:ba:0c:5b:
8f:6d:e3:97:e8:36:8f:f5:8a:4d:33:ef:92:a6:51:
e4:cc:75:d5:5b:33:34:91:e4:88:e5:1b:99:89:de:
a4:5c:a6:0f:23:be:09:0a:63:15:ad:66:9a:31:5d:
dc:d6:96:73:a9:78:0a:c0:60:48:2a:4c:ea:1e:eb:
4f:f8:ab:36:ba:96:5a:6c:31:69:08:29:e8:90:0e:
d9:1f:e3:0d:cd:0b:a6:c5:42:d4:7c:c5:3b:d0:9c:
4f:30:24:0d:4b:7c:ff:11:d2:3b:72:66:92:c8:4c:
f9:cf:28:82:ad:02:86:10:79:18:cc:5b:88:9e:d6:
f1:97:cf:19:73:d5:c4:0c:2d:57:95:55:1d:c6:9b:
6c:63:cc:f2:5a:fe:11:e2:b9:09:3a:4a:ee:f8:1e:
ed:21:a0:1a:ee:a4:5b:a5:ee:24:65:33:01:31:3f:
9a:82:d5:e7:a6:c1:77:19:e9:fd:64:34:6a:f8:63:
3b:7a:be:ec:bc:f1:17:1e:5f:a9:d2:ad:40:0a:d2:
14:96:a6:5f:b4:3d:4b:b7:6e:29:45:4f:fa:53:a6:
5d:3a:0a:bf:8c:75:22:e8:14:2d:f5:76:84:58:0a:
0b:aa:f9:f5:cd:f2:45:39:fd:aa:31:e1:1c:4b:37:
75:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C6:D0:AF:84:F8:33:A8:6B:3D:FC:BC:A0:BA:3D:AB:B7:AD:88:FD
X509v3 Authority Key Identifier:
keyid:CF:FF:94:D3:91:1D:04:4A:76:61:86:D7:6A:A4:A0:91:36:D8:9D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f6:a6:e6:c1:d9:d7:bc:d2:11:57:7a:d6:e9:4b:ee:16:7a:
db:12:67:53:34:61:bb:fa:10:59:91:aa:33:5b:1f:61:37:ff:
df:e3:78:7e:b4:b5:36:3c:79:58:68:62:5f:b1:06:21:79:48:
78:6d:60:7d:77:24:d1:26:c3:f9:82:44:e5:08:56:85:58:28:
b1:2e:2e:b8:04:b7:a1:a3:ad:1e:b1:c1:d5:75:38:14:48:e4:
f8:4b:62:7b:18:91:e9:01:86:24:d6:cb:0f:9c:e0:26:7b:e2:
64:d8:e0:62:a9:be:e1:e9:d9:4a:70:90:12:54:77:7c:ea:ab:
5d:e9:41:38:69:51:15:72:cf:73:8f:87:b2:0e:be:21:5d:38:
5d:ff:2f:f0:03:1a:9e:62:1d:3b:98:e3:bc:f5:68:bf:22:f3:
3f:42:86:b5:b5:22:1d:03:b6:cb:5f:96:50:d5:bd:d3:17:06:
00:c7:13:0f:5a:be:96:de:56:d8:40:48:46:65:f5:b4:d1:bf:
57:d1:36:5b:08:bf:04:fa:cb:c0:ba:67:3e:ad:24:ab:75:10:
bc:ec:29:1f:2b:5d:1e:cd:67:15:8c:a9:71:bc:cd:2f:b3:e1:
63:d4:2e:89:8a:23:2d:bd:97:0e:b0:9d:49:16:67:c4:ab:80:
34:d7:59:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:58 2025 by rpki-client