Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.mft
File: zc30j16nbFCnF-EFgEjLr2f7JJI.mft (raw, json)
Hash identifier: lHydR+kBgzwIIn60DpIuNkpoNEhjS6fClriry2uBPW0=
Subject key identifier: 29:FE:6B:3A:1B:17:89:BE:F8:C3:C7:36:E8:49:5D:00:79:64:8F:5C
Authority key identifier: CD:CD:F4:8F:5E:A7:6C:50:A7:17:E1:05:80:48:CB:AF:67:FB:24:92
Certificate issuer: /CN=cdcdf48f5ea76c50a717e1058048cbaf67fb2492
Certificate serial: 0199FBEC06FC210E80B1526FE601ADFE1B9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zc30j16nbFCnF-EFgEjLr2f7JJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.mft
Manifest number: 0403
Signing time: Sun 19 Oct 2025 10:02:53 +0000
Manifest this update: Sun 19 Oct 2025 10:02:53 +0000
Manifest next update: Mon 20 Oct 2025 10:02:53 +0000
Files and hashes: 1: zc30j16nbFCnF-EFgEjLr2f7JJI.crl (hash: LA6yNWFIenFPxzTEBVF6D7aKaKC9FkXPeFWIJvD6XQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zc30j16nbFCnF-EFgEjLr2f7JJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:06:fc:21:0e:80:b1:52:6f:e6:01:ad:fe:1b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdcdf48f5ea76c50a717e1058048cbaf67fb2492
Validity
Not Before: Oct 19 10:02:53 2025 GMT
Not After : Oct 20 10:02:53 2025 GMT
Subject: CN=29fe6b3a1b1789bef8c3c736e8495d0079648f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:53:fa:66:9d:40:06:d8:24:26:5a:3c:c0:d0:
ab:3b:7b:ea:dd:e0:0f:24:c4:12:41:bf:1b:3a:5d:
15:4c:52:1c:d4:b9:04:b7:85:ff:87:95:f9:8f:80:
0a:a7:2c:d9:03:04:0a:22:5a:5c:b4:b3:8b:28:61:
ad:da:f0:d4:94:64:b8:e4:18:6e:fb:6b:67:24:42:
91:ef:b4:9e:28:83:d7:68:0a:ae:28:88:b1:6d:af:
37:e1:40:1d:77:63:bb:df:30:73:6c:f7:c1:93:56:
41:9a:d5:20:97:7d:6b:5e:63:23:e9:56:3a:7a:9e:
86:8d:bf:a8:b3:02:27:84:14:08:f3:c9:c6:5d:cf:
3d:79:42:2a:17:e2:6a:be:91:e5:4a:97:26:f8:52:
5e:64:87:1a:6c:07:8a:ef:12:60:6d:94:38:62:eb:
a5:14:3a:97:5a:4d:69:f9:f3:14:21:1b:78:c6:f0:
6b:2c:2f:3f:0e:ab:7e:f3:e7:31:0b:34:db:bc:57:
da:8f:03:92:6e:14:33:d0:c0:ae:2f:5b:88:78:5e:
6c:dc:e5:34:b8:cd:c2:86:e7:3b:c7:9e:b3:cd:34:
04:47:f0:39:32:34:37:6b:ff:4e:0b:75:93:eb:f3:
e5:35:b9:da:75:08:31:42:67:ff:f6:ce:5d:cf:13:
52:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:FE:6B:3A:1B:17:89:BE:F8:C3:C7:36:E8:49:5D:00:79:64:8F:5C
X509v3 Authority Key Identifier:
keyid:CD:CD:F4:8F:5E:A7:6C:50:A7:17:E1:05:80:48:CB:AF:67:FB:24:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zc30j16nbFCnF-EFgEjLr2f7JJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:5f:1d:60:43:9f:69:29:9a:dc:12:6a:13:1e:bb:ce:e5:e2:
fa:ed:c2:71:c8:56:6b:90:a8:15:13:f7:4d:f6:64:f5:a6:cb:
5d:2f:fa:61:eb:96:25:16:08:ec:53:c1:d5:fe:26:41:2c:c7:
d1:f7:a4:5c:e4:b4:03:50:f5:18:4b:f1:6f:e5:d7:84:32:ec:
48:a2:9d:d7:e9:08:44:5c:4b:28:6d:32:4b:f3:0b:95:2b:7d:
f1:a4:9b:98:9d:15:94:a4:1d:56:b6:7a:1c:fb:b1:3e:95:d4:
77:9e:4f:4e:ed:d5:eb:fc:10:39:d7:d8:8f:e8:ff:74:0d:9f:
dd:78:7d:33:83:ba:3a:63:fa:af:fa:8c:b0:4b:3b:da:d9:e4:
c2:fc:58:70:a1:84:11:43:9b:ce:82:ae:07:cf:ad:2a:fb:17:
1c:31:7e:ed:69:4d:f2:60:21:fb:6e:10:da:5d:14:7a:3d:f6:
33:2a:3c:c7:78:dc:c3:de:3e:21:be:c3:05:5a:6e:07:f6:56:
f7:03:d5:a8:e6:8a:48:c1:59:1f:4a:3c:18:df:54:1a:22:52:
01:8d:61:5f:86:41:3e:ac:d9:a3:c0:a5:ff:38:22:ec:54:8a:
c8:ec:a2:95:d9:9f:cd:e1:5f:ce:07:11:86:5f:ca:d2:50:72:
b6:29:6f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:34 2025 by rpki-client