Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft
File: zfyNbNSfmv4mTVQumpYU89SsHJ0.mft (raw, json)
Hash identifier: cmUTB8HcG5flxK5NJ+Qej/AAUWWFZj/JmQMRsPHOGnM=
Subject key identifier: 02:66:32:30:C1:7B:D8:E5:18:F3:C1:8D:A6:EA:BC:4F:A0:51:87:C4
Authority key identifier: CD:FC:8D:6C:D4:9F:9A:FE:26:4D:54:2E:9A:96:14:F3:D4:AC:1C:9D
Certificate issuer: /CN=cdfc8d6cd49f9afe264d542e9a9614f3d4ac1c9d
Certificate serial: 0199FBEB8E1FD2E43D1AF4C1A2E41E58D746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfyNbNSfmv4mTVQumpYU89SsHJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 10:02:22 +0000
Manifest this update: Sun 19 Oct 2025 10:02:22 +0000
Manifest next update: Mon 20 Oct 2025 10:02:22 +0000
Files and hashes: 1: zfyNbNSfmv4mTVQumpYU89SsHJ0.crl (hash: QYQ0EHFEk9DcIAfB57fcBEsNPbyiZyxWHFjMBifLrKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfyNbNSfmv4mTVQumpYU89SsHJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:8e:1f:d2:e4:3d:1a:f4:c1:a2:e4:1e:58:d7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdfc8d6cd49f9afe264d542e9a9614f3d4ac1c9d
Validity
Not Before: Oct 19 10:02:22 2025 GMT
Not After : Oct 20 10:02:22 2025 GMT
Subject: CN=02663230c17bd8e518f3c18da6eabc4fa05187c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:55:0e:da:80:a4:ef:65:3f:ea:9f:e3:86:33:
bb:0a:5a:2c:47:58:dd:8d:20:2d:15:f5:a3:3c:86:
0d:da:60:a3:9a:2d:1b:a1:41:4e:e0:44:61:c6:0e:
d5:98:65:42:93:8c:6f:75:50:7a:5a:5d:32:94:bf:
4c:41:a3:00:8c:7d:36:9c:e0:1c:8a:1b:30:0f:e4:
4d:a4:cd:b6:35:eb:80:a5:90:2d:3d:06:f8:a5:fc:
73:3a:cf:85:8b:74:f5:4c:05:0e:cb:8b:e0:ba:46:
06:cc:26:85:c2:17:09:d1:38:60:56:41:db:92:37:
22:c1:b4:41:6a:97:16:17:fd:1f:c0:20:99:91:55:
7c:8d:b3:a1:9e:02:f0:75:da:7a:4d:a3:27:bf:ca:
6f:d7:01:94:cf:3f:83:6b:74:ad:32:dd:a1:45:95:
ed:4d:a3:01:4f:58:99:24:01:c2:5c:97:aa:a0:8f:
d3:af:b3:f4:ff:d3:90:d9:0c:53:7d:f8:78:6d:ca:
dd:cd:ca:6c:26:b0:be:c8:b5:b7:db:21:40:72:ff:
98:c1:70:48:c7:68:21:4a:3f:d9:33:b4:7d:0a:ce:
97:56:d0:2a:d8:66:5a:46:66:f4:95:13:0a:97:0f:
64:41:92:49:03:6f:ce:b9:59:d8:e8:f0:5f:b9:42:
f5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:66:32:30:C1:7B:D8:E5:18:F3:C1:8D:A6:EA:BC:4F:A0:51:87:C4
X509v3 Authority Key Identifier:
keyid:CD:FC:8D:6C:D4:9F:9A:FE:26:4D:54:2E:9A:96:14:F3:D4:AC:1C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfyNbNSfmv4mTVQumpYU89SsHJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:9a:3f:9e:ab:e3:c7:6a:67:b1:8e:9e:6d:9b:49:32:46:ad:
09:11:8b:9b:a8:75:33:6f:2b:be:eb:60:bd:16:c7:2b:ea:9c:
ec:2e:e0:45:c0:c4:55:7f:da:e5:e6:32:42:f2:c8:27:ea:e1:
7f:0a:65:0f:ff:e5:04:b9:a6:7b:60:84:2a:e2:24:ac:f6:fa:
21:24:7f:3a:a1:78:ed:ea:6e:47:75:5a:46:24:b3:57:82:7a:
49:ca:b8:a2:c5:f8:6a:ec:34:30:c9:1b:c9:e9:b9:cb:83:a8:
dd:6a:74:10:a2:ca:6c:6e:a3:11:1d:76:b2:e3:45:83:98:b6:
08:9a:4e:ad:6f:2b:0c:f8:6a:b8:14:5a:da:7d:35:c4:f6:05:
cf:47:e0:d6:50:5b:17:ed:84:c4:99:f9:fc:28:37:6e:96:00:
d5:6f:1e:99:50:28:49:d7:3e:6f:95:2b:6a:30:2b:77:33:8c:
36:49:b5:f9:c9:c7:5c:b4:82:9f:ba:84:da:ac:26:0e:9c:8d:
bb:60:73:f1:23:2d:c3:16:0e:f9:b3:56:f6:ec:03:14:9f:ff:
01:fe:06:d0:60:df:dd:67:f9:f2:d5:b6:92:4a:b6:10:47:d5:
85:fd:1a:7a:1c:1a:27:40:7d:86:5a:67:bc:d7:15:1e:cd:6c:
2d:62:0b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:40 2025 by rpki-client