Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft
File: zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft (raw, json)
Hash identifier: Ew8ZB41b4uSD/nVfDPQMG0T9CQxFoTmZuEVI+WVAIRM=
Subject key identifier: 1F:4B:01:7B:A4:A5:C3:30:45:8D:3D:ED:95:16:EC:2E:F7:0C:FF:E4
Authority key identifier: CF:2E:3D:1F:FF:9B:D5:47:9A:13:30:F8:8F:A2:EC:07:C0:EA:EC:49
Certificate issuer: /CN=cf2e3d1fff9bd5479a1330f88fa2ec07c0eaec49
Certificate serial: 0199FD348888EB5ADC32478321CD28F68EAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft
Manifest number: 09BF
Signing time: Sun 19 Oct 2025 16:01:42 +0000
Manifest this update: Sun 19 Oct 2025 16:01:42 +0000
Manifest next update: Mon 20 Oct 2025 16:01:42 +0000
Files and hashes: 1: zy49H_-b1UeaEzD4j6LsB8Dq7Ek.crl (hash: vlVS+CSgJuh0emczzvyJ9gD5P1R+tlb7QJqvC/zJlL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft
rsync://rpki.ripe.net/repository/DEFAULT/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:88:88:eb:5a:dc:32:47:83:21:cd:28:f6:8e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2e3d1fff9bd5479a1330f88fa2ec07c0eaec49
Validity
Not Before: Oct 19 16:01:42 2025 GMT
Not After : Oct 20 16:01:42 2025 GMT
Subject: CN=1f4b017ba4a5c330458d3ded9516ec2ef70cffe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ec:d8:d2:21:35:9d:29:38:51:39:bb:b0:6f:
97:5a:99:3a:3e:98:32:79:62:75:4f:d4:f7:12:fa:
13:4b:ed:4f:ae:d2:6c:78:e1:06:17:84:b5:41:a9:
6e:5c:11:32:99:3e:72:f4:95:4e:3c:e4:76:4f:d3:
75:0a:9a:42:76:a3:91:66:7f:15:9f:87:11:ca:bf:
ad:50:ce:43:0c:5e:06:98:84:63:02:5d:23:98:ae:
84:c3:3a:f8:24:e7:d5:22:2f:e3:0c:21:b6:fc:17:
ee:cb:8b:ee:8b:7f:f2:79:84:b5:c0:bb:18:0d:eb:
7f:5a:fc:04:6e:98:5a:8e:e2:43:af:3a:b4:85:6a:
70:60:5e:6f:31:3e:4b:50:c2:9e:51:93:b5:30:f2:
69:5f:3f:82:d9:8a:f4:b6:ef:88:8d:c9:a6:f8:e6:
e9:54:79:8e:02:7a:fe:4e:84:16:55:52:97:f8:8b:
66:c0:bc:85:f0:e7:09:45:99:2d:56:4f:7e:35:b0:
e8:6c:9f:2e:f3:5a:ea:06:9c:e8:e2:ba:01:30:85:
5d:4d:f0:61:d7:dd:b2:dd:93:e2:0f:21:bb:af:71:
85:de:84:9b:45:19:7a:19:19:ff:a7:c0:70:4a:ed:
5d:9f:e6:86:b0:0c:c0:57:77:67:9d:2c:c8:8f:91:
57:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4B:01:7B:A4:A5:C3:30:45:8D:3D:ED:95:16:EC:2E:F7:0C:FF:E4
X509v3 Authority Key Identifier:
keyid:CF:2E:3D:1F:FF:9B:D5:47:9A:13:30:F8:8F:A2:EC:07:C0:EA:EC:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:5f:67:79:eb:2b:b0:e3:8d:45:83:0c:3c:1b:03:f7:af:f5:
fb:ec:c9:51:8f:af:46:c8:01:92:c1:60:d5:db:dc:af:31:9d:
69:d3:9f:b3:52:1b:22:c3:2b:8d:f5:c4:12:6d:0e:ae:17:d0:
9a:86:a7:e1:f0:50:88:5d:f7:3d:3c:05:e8:ba:40:8b:71:ff:
1b:10:0b:89:cc:e3:ef:eb:2f:d5:ad:22:6a:10:7a:3a:3b:33:
21:89:49:7b:17:70:34:28:30:03:4c:79:6d:64:4e:2a:d6:4d:
6d:e7:65:7f:05:d1:6a:a6:1f:31:32:50:4a:fc:3a:82:80:d9:
34:32:01:63:72:7d:49:3c:c8:6f:ed:4b:6a:20:16:ba:e4:b3:
05:b1:59:a4:51:3e:e4:24:7f:b0:bb:2b:7e:2f:bf:fb:07:6f:
5e:ea:95:7c:74:2f:55:3a:29:03:ee:9a:ab:4e:be:78:3f:19:
57:48:6b:a1:65:34:4d:1b:f5:ce:08:e8:25:81:b6:64:48:39:
f9:63:fe:b8:19:4f:84:47:fa:e5:4a:0b:ec:2f:51:b9:33:4a:
93:56:f3:79:b7:04:8f:ab:8a:37:3b:73:bb:e1:78:f2:e1:23:
f6:4c:8e:c8:ff:30:b1:77:14:d4:e5:8e:9e:38:9c:b2:f7:df:
3c:ab:17:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:30:12 2025 by rpki-client