Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft
File: ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft (raw, json)
Hash identifier: kA5geGnPL12XjhfrcVbRBEDP/yQ32s4Lq2IdJn6Upwo=
Subject key identifier: 97:A9:2D:1A:4C:38:76:00:41:9C:E1:BE:85:54:C9:5F:19:7A:5B:76
Authority key identifier: 66:26:3F:EB:C8:52:2D:DA:56:CB:B4:39:B6:1A:05:62:BE:1A:E1:E3
Certificate issuer: /CN=66263febc8522dda56cbb439b61a0562be1ae1e3
Certificate serial: 0199FBEB16A4D34FCDFAF2A08E1AB0FCE9E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZiY_68hSLdpWy7Q5thoFYr4a4eM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft
Manifest number: 1439
Signing time: Sun 19 Oct 2025 10:01:51 +0000
Manifest this update: Sun 19 Oct 2025 10:01:51 +0000
Manifest next update: Mon 20 Oct 2025 10:01:51 +0000
Files and hashes: 1: ZiY_68hSLdpWy7Q5thoFYr4a4eM.crl (hash: WOnuuRgKLukwmzDFT+xi1pB5HRT2Qizh+y0sczkA0AE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZiY_68hSLdpWy7Q5thoFYr4a4eM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:16:a4:d3:4f:cd:fa:f2:a0:8e:1a:b0:fc:e9:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66263febc8522dda56cbb439b61a0562be1ae1e3
Validity
Not Before: Oct 19 10:01:51 2025 GMT
Not After : Oct 20 10:01:51 2025 GMT
Subject: CN=97a92d1a4c387600419ce1be8554c95f197a5b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:86:e5:5e:2c:da:99:12:45:9a:74:0d:e9:31:
3c:e4:f2:30:7f:73:fe:1e:ba:e3:eb:18:21:ce:23:
04:79:49:74:90:fb:04:d7:e1:8b:c7:72:63:5e:12:
11:92:11:a8:e5:9f:0e:ac:dc:ca:97:c8:4d:64:7f:
54:88:c1:06:47:df:7a:c7:49:a1:96:45:b8:3f:72:
7c:37:4b:b8:b7:bd:e4:82:bb:c4:7c:c9:17:8b:6e:
65:71:99:e2:2c:2c:d5:fc:ea:17:46:ee:90:b1:af:
7f:9d:63:32:64:74:14:c2:ce:ed:3c:b0:a8:8d:7b:
6d:37:60:f4:a0:67:13:bd:b1:2f:90:e9:cc:34:a3:
75:8a:ce:98:e6:14:af:c5:ee:d8:0b:27:b3:fd:80:
14:7b:2f:af:04:7c:c7:ac:4a:cd:61:cc:c4:2d:bb:
0c:1e:99:62:fd:fc:32:2e:03:cf:20:0b:2f:b3:ca:
80:ee:6a:ea:6a:cc:51:e5:8a:83:e3:a7:86:bc:1a:
a8:2a:ad:fb:4e:a5:94:13:ff:14:cf:dd:89:8f:e6:
5c:82:f1:d5:4e:fb:82:91:1d:13:28:a7:5e:94:55:
29:76:ef:e7:d3:9e:72:9f:f2:a5:d0:31:5f:73:42:
a1:ad:74:a8:24:f3:48:3e:78:cc:b3:49:e1:16:2b:
c7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A9:2D:1A:4C:38:76:00:41:9C:E1:BE:85:54:C9:5F:19:7A:5B:76
X509v3 Authority Key Identifier:
keyid:66:26:3F:EB:C8:52:2D:DA:56:CB:B4:39:B6:1A:05:62:BE:1A:E1:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiY_68hSLdpWy7Q5thoFYr4a4eM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b8:13:7d:b0:a5:51:b3:8f:e0:c8:25:de:8f:f5:26:cd:7b:
ec:3c:7b:ca:18:74:1b:3a:17:92:64:d0:3a:4c:49:55:e6:e4:
c8:43:84:c2:af:2f:b9:8b:e0:68:9e:76:44:5b:65:9d:70:51:
db:4b:eb:ad:c6:a2:32:18:68:45:9a:bc:45:6e:13:d8:88:d5:
e5:36:f3:5f:b9:dd:5d:02:48:51:71:b3:11:cf:00:ae:10:00:
df:55:27:d5:54:29:dd:5a:79:40:ef:32:28:a1:be:11:ab:65:
d1:7f:e6:58:8a:8d:61:fe:3a:9b:75:88:fc:d3:17:c0:36:9f:
65:a1:d5:c7:82:14:b5:3a:06:52:41:62:4b:28:41:36:65:ad:
61:8c:2e:45:79:d2:67:4d:57:2a:27:36:60:2a:44:7f:ec:c0:
07:10:6b:45:93:61:e5:7f:31:f5:45:6a:b9:dd:0b:3e:74:fe:
c6:c3:73:9f:35:0e:72:5a:2c:aa:5f:4f:5b:3d:c4:e6:2c:54:
e6:7a:c2:20:d5:2a:de:dc:2d:a7:0e:fe:68:87:d4:34:72:f1:
77:bb:b8:81:20:5b:d0:2b:bf:ea:37:9d:1b:e9:eb:e2:3e:11:
df:6e:01:b2:92:6c:5f:e9:79:d6:97:4f:26:62:f0:51:30:b6:
3f:34:09:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:09 2025 by rpki-client