Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
File: 1-zZG-6aQRe3l745cOaL8F_nw0tw.mft (raw, json)
Hash identifier: MwimZws3CCf9RAONna4cUVvJPuIegVO050BsWA71g9U=
Subject key identifier: 68:3E:E3:D5:09:96:59:7E:CA:04:E7:15:2B:90:5C:32:A9:7E:20:30
Authority key identifier: FB:36:46:FB:A6:90:45:ED:E5:EF:8E:5C:39:A2:FC:17:F9:F0:D2:DC
Certificate issuer: /CN=fb3646fba69045ede5ef8e5c39a2fc17f9f0d2dc
Certificate serial: 0199FD6AD3E4BA78A4388E0D019006BF1841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
Manifest number: 0DD9
Signing time: Sun 19 Oct 2025 17:01:00 +0000
Manifest this update: Sun 19 Oct 2025 17:01:00 +0000
Manifest next update: Mon 20 Oct 2025 17:01:00 +0000
Files and hashes: 1: 1-zZG-6aQRe3l745cOaL8F_nw0tw.crl (hash: HSubS74cFgvlYbLiaEZiLwHB1C8cKW6r7nKYmVexfUA=)
2: FLK4BXajTTtzozg6zwS2W0dW8TU.roa (hash: TZ26mwHHQp1z9Q90vDXRes8PV7AQXwe9m95HyPKhgHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:d3:e4:ba:78:a4:38:8e:0d:01:90:06:bf:18:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3646fba69045ede5ef8e5c39a2fc17f9f0d2dc
Validity
Not Before: Oct 19 17:01:00 2025 GMT
Not After : Oct 20 17:01:00 2025 GMT
Subject: CN=683ee3d50996597eca04e7152b905c32a97e2030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ea:ad:c6:a9:89:4c:be:08:19:f8:fa:55:25:
bf:44:d4:82:27:80:c5:17:5c:ea:76:cf:54:08:43:
a3:5c:a8:ed:2b:cc:8b:c1:93:e0:bf:e4:7c:62:4c:
91:1f:a5:2f:01:af:30:6f:b4:89:f3:4e:5f:8e:47:
09:36:58:66:c4:40:f7:e6:ec:63:26:dc:e3:26:90:
44:c6:d5:7d:93:bf:c9:ba:77:29:0a:0e:24:6a:a7:
b6:67:d6:63:11:c9:b8:fd:95:d6:d3:7f:16:1b:5c:
43:5d:d9:57:28:bc:f3:9b:55:64:b8:58:df:ef:c8:
f8:42:8f:1b:7a:5e:fd:5f:dd:57:fd:8b:72:82:d8:
fb:cb:70:3a:c0:e3:3e:a9:6f:93:5e:2f:db:93:98:
4a:4c:bd:6d:31:1a:e1:b3:88:b3:22:49:dc:77:98:
ec:4f:5f:c9:40:56:5f:e1:d3:a6:7a:3c:d1:94:a3:
0c:58:16:a8:61:11:8d:d6:e6:1e:6c:f3:4b:4e:93:
04:86:17:ef:b7:18:78:42:2c:26:6a:28:79:98:84:
7e:6d:aa:b3:e5:b0:4e:3f:ad:92:9d:8f:c5:79:80:
d4:60:54:8a:40:5b:f3:ce:b1:25:7e:e0:a2:fc:fb:
f1:c7:ca:43:c8:3e:63:f3:40:1b:56:3d:8b:44:a2:
de:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:3E:E3:D5:09:96:59:7E:CA:04:E7:15:2B:90:5C:32:A9:7E:20:30
X509v3 Authority Key Identifier:
keyid:FB:36:46:FB:A6:90:45:ED:E5:EF:8E:5C:39:A2:FC:17:F9:F0:D2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:67:b7:0c:32:b5:77:8f:bf:58:4f:8b:d5:c4:95:4f:9f:0b:
ef:b7:87:33:df:c1:e8:40:82:75:51:0f:b5:a3:d5:7c:0f:43:
96:f3:b8:e9:72:0c:36:d2:d7:30:ea:9c:2f:e9:f4:c5:46:7c:
e0:f4:80:52:d3:e9:60:85:86:fe:83:a1:31:a5:a7:2e:9a:29:
f6:27:06:1e:15:b6:91:e9:9e:6d:a3:0c:58:ba:d8:4b:f8:e4:
11:33:89:b8:5b:f7:87:20:03:68:2e:6f:44:03:92:7e:fa:cd:
c6:7e:95:8f:4e:cd:87:25:f3:04:1f:ed:24:b0:33:98:8a:a0:
82:cf:c7:6a:89:fa:5e:b3:81:4c:ce:9e:89:48:37:7b:17:5e:
d3:65:e2:b1:5d:f4:9a:bf:60:9c:2d:a7:32:31:43:98:a5:a4:
5a:30:74:84:b4:6a:cc:7e:5c:cf:1a:24:81:01:d3:43:51:f7:
f4:bc:b3:c3:fd:42:a7:1b:c7:00:ce:c0:66:64:c8:90:d6:99:
9b:2a:2d:1d:ed:00:2e:e3:2c:b5:15:a3:cd:61:7a:a9:dc:4b:
c3:87:73:57:e4:89:9a:35:57:ff:98:49:7b:3a:ef:f2:76:bc:
f5:96:45:e5:e9:55:4f:ba:a6:f6:2b:e5:72:6e:09:c2:2f:86:
9e:f2:a4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:30:06 2025 by rpki-client