Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft
File: zb7dtaniq1M0dBCLfIAPgTLxDiE.mft (raw, json)
Hash identifier: HwyqIF7rYwO3o8MABF8+Y7kVby8YBlmGPZo9o+thfyc=
Subject key identifier: ED:FD:9E:44:3F:6A:F6:4A:56:B9:A7:36:8F:9C:DA:14:A5:06:9C:2B
Authority key identifier: CD:BE:DD:B5:A9:E2:AB:53:34:74:10:8B:7C:80:0F:81:32:F1:0E:21
Certificate issuer: /CN=cdbeddb5a9e2ab533474108b7c800f8132f10e21
Certificate serial: 0199FC58514109F7EF6CFDE7F4BFDAD7917C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zb7dtaniq1M0dBCLfIAPgTLxDiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 12:01:10 +0000
Manifest this update: Sun 19 Oct 2025 12:01:10 +0000
Manifest next update: Mon 20 Oct 2025 12:01:10 +0000
Files and hashes: 1: zb7dtaniq1M0dBCLfIAPgTLxDiE.crl (hash: EjLgukrlnBefGJipsyHF8zCjVqzyOvF8tTYPR/tp/yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zb7dtaniq1M0dBCLfIAPgTLxDiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:51:41:09:f7:ef:6c:fd:e7:f4:bf:da:d7:91:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdbeddb5a9e2ab533474108b7c800f8132f10e21
Validity
Not Before: Oct 19 12:01:10 2025 GMT
Not After : Oct 20 12:01:10 2025 GMT
Subject: CN=edfd9e443f6af64a56b9a7368f9cda14a5069c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:94:15:cd:7b:85:e8:b1:fb:87:f5:3c:69:25:
74:a6:16:ea:99:d1:d0:0a:e9:36:8f:ef:9d:83:f1:
b2:e2:31:da:05:96:b3:37:78:f2:73:6b:16:99:c0:
49:d6:b8:c8:97:34:08:62:df:1c:96:45:0b:2a:3c:
99:65:61:1e:57:a5:17:bf:80:13:95:79:d8:8e:e8:
69:68:e8:f6:41:1f:de:0d:f7:7c:f8:2d:ec:21:a9:
fb:87:65:3c:7b:06:b7:2e:f4:67:89:2d:e3:f3:f6:
be:1b:d8:c2:5c:13:e9:48:ab:e0:3d:f0:34:f8:93:
9d:b2:27:a7:9c:91:9a:55:55:69:21:a7:67:8b:53:
20:03:4e:4f:22:71:5c:e0:1a:63:2e:45:9c:a8:b2:
75:b9:7b:1f:1d:c5:e5:e6:db:5e:c4:ae:83:d1:3c:
67:8c:24:83:f2:a6:83:e3:8e:b2:47:3f:d9:ed:d8:
55:88:22:38:fb:5c:e5:0b:d3:ff:59:0f:22:74:18:
69:6f:c2:c5:22:9c:a8:73:5b:8d:1a:95:8b:08:97:
64:05:4c:b8:22:41:a2:27:aa:c4:38:73:23:55:69:
14:38:72:61:4c:fe:13:df:fa:12:46:76:66:85:9b:
11:35:b4:3a:9d:91:7f:6a:91:c3:38:cc:10:48:5b:
4d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FD:9E:44:3F:6A:F6:4A:56:B9:A7:36:8F:9C:DA:14:A5:06:9C:2B
X509v3 Authority Key Identifier:
keyid:CD:BE:DD:B5:A9:E2:AB:53:34:74:10:8B:7C:80:0F:81:32:F1:0E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zb7dtaniq1M0dBCLfIAPgTLxDiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:45:60:bc:54:ef:61:f2:01:56:72:ac:37:cb:9c:ad:9d:23:
c5:3e:cc:0b:f8:3a:66:55:0e:a9:ac:90:10:51:49:db:b5:68:
c4:99:4d:0c:91:2d:25:ce:24:e2:9d:de:b1:db:8e:33:b9:34:
bb:8e:43:31:9f:b3:4b:88:55:fa:ba:2f:ea:3c:37:44:cb:66:
d0:fd:55:a5:d4:2e:be:e7:d1:45:4c:a8:47:3c:d7:b0:ed:bf:
f4:24:88:aa:b8:1e:c3:23:25:f7:70:e8:9a:ea:71:63:18:15:
a5:65:d1:85:79:ac:23:cc:fc:a1:3b:9e:79:8b:2d:c8:f5:7f:
41:7b:c4:52:b1:bd:f6:1f:df:ba:3e:38:6d:cd:84:cb:45:6d:
9f:e3:a8:05:69:44:39:0c:11:96:24:a7:10:b3:07:20:ad:eb:
a4:34:a9:5b:bf:8f:df:83:1e:1d:01:75:5e:f8:99:18:f4:b8:
ee:63:14:cf:78:79:7b:30:de:1c:35:be:f6:fd:1f:ea:24:fd:
59:f4:c3:92:7d:a3:63:5d:2b:15:e5:be:3e:c5:ab:de:3e:9e:
89:18:7d:d8:7f:21:8c:fa:b6:0c:e0:d1:ff:df:d7:b1:b4:a7:
35:94:04:c9:3a:7e:9a:5c:e6:eb:ef:87:7b:71:ce:63:81:59:
a6:9a:f6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:15:29 2025 by rpki-client