Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft
File: Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft (raw, json)
Hash identifier: EmpCvqDBEQyJF38wq6Hos5jXQeA/8YoALmnp94j5fqM=
Subject key identifier: A1:77:BB:61:AB:4C:42:77:D8:BB:23:D8:A2:F7:8D:01:46:DB:9A:B4
Authority key identifier: 67:77:98:7B:4F:1C:17:D2:14:65:A3:4A:90:BD:02:B5:2E:A6:E0:27
Certificate issuer: /CN=6777987b4f1c17d21465a34a90bd02b52ea6e027
Certificate serial: 0199FBEAB69EDD7259282FCEB1E16A231468
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft
Manifest number: 0DEB
Signing time: Sun 19 Oct 2025 10:01:27 +0000
Manifest this update: Sun 19 Oct 2025 10:01:27 +0000
Manifest next update: Mon 20 Oct 2025 10:01:27 +0000
Files and hashes: 1: Z3eYe08cF9IUZaNKkL0CtS6m4Cc.crl (hash: zF5kPiKKBhf1Hl7YrSPPDlU4ceXNcwX1oiXoeBvktRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:b6:9e:dd:72:59:28:2f:ce:b1:e1:6a:23:14:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6777987b4f1c17d21465a34a90bd02b52ea6e027
Validity
Not Before: Oct 19 10:01:27 2025 GMT
Not After : Oct 20 10:01:27 2025 GMT
Subject: CN=a177bb61ab4c4277d8bb23d8a2f78d0146db9ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:42:7c:22:b9:c2:48:64:f4:bf:4b:d0:1a:b6:
c6:79:cf:21:57:69:b3:2a:92:80:4b:bb:09:4d:4b:
6e:48:38:ff:28:72:f1:11:0d:ab:6d:ce:dd:44:f1:
70:82:51:3f:07:00:02:eb:d2:2d:a1:5b:24:a2:8a:
44:bb:29:a3:7d:40:bb:ea:57:c1:3a:98:49:80:5e:
1a:7c:2b:19:8f:bd:62:1c:a4:1d:01:91:c1:59:63:
d0:cd:05:18:49:11:d5:3c:45:74:40:3a:79:b1:eb:
b9:f0:10:52:f1:74:4d:da:eb:ab:1f:e3:00:ff:d9:
a0:f8:a8:a8:fc:98:bc:3a:b3:31:be:59:49:5e:01:
73:a8:d9:34:2b:16:d6:ce:bf:e3:57:72:e3:a8:2a:
62:05:10:07:89:70:05:c8:ca:09:b3:63:b7:0d:ec:
9f:f3:74:d4:15:02:67:9f:f1:b3:ce:91:14:b6:53:
78:67:ba:ad:b9:18:76:3d:32:a4:7f:f9:e6:dd:2c:
fb:bb:13:83:1a:4b:f1:c5:7b:80:0a:aa:c8:98:0e:
e7:b6:66:c8:1d:f9:bc:0c:e1:40:96:19:32:cf:0e:
52:ad:a6:89:86:7f:17:40:c3:ed:a2:07:e4:a2:1e:
cf:f4:eb:a8:68:06:4c:50:a1:13:92:c1:75:2a:0c:
4b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:77:BB:61:AB:4C:42:77:D8:BB:23:D8:A2:F7:8D:01:46:DB:9A:B4
X509v3 Authority Key Identifier:
keyid:67:77:98:7B:4F:1C:17:D2:14:65:A3:4A:90:BD:02:B5:2E:A6:E0:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:e5:44:18:4b:d5:54:4f:23:fd:c3:18:a9:3a:a6:da:1e:26:
cf:14:63:b8:70:bd:8b:d2:4c:3a:83:bf:4d:ee:ab:65:c5:f4:
11:23:11:84:86:14:9f:88:70:98:6c:58:b7:a3:1b:c3:31:12:
b1:0b:4d:9e:e7:6a:c2:53:4c:7d:cd:9e:6f:bb:ac:43:76:36:
46:09:89:e8:96:05:af:90:fc:85:b1:a5:ac:83:c5:24:dd:f4:
9d:85:54:b4:82:f7:15:47:2e:df:f8:97:b1:4d:13:06:df:40:
a0:4b:c5:94:93:4c:d4:a9:6a:d0:95:a2:80:08:66:f7:10:e7:
01:98:c3:18:3e:0a:43:a2:21:81:bd:ce:c0:9c:e8:1d:a4:7f:
12:62:c8:bd:d5:b8:41:36:c6:3b:6c:41:d7:ff:cb:5d:16:a7:
23:ec:ed:48:26:d7:ee:a2:7c:af:94:d3:9c:b1:94:33:2a:44:
a6:e9:4d:66:e9:bc:b0:c5:d4:2a:a3:7a:a5:4d:7a:11:65:00:
c7:f7:78:ca:31:91:62:6d:d4:fd:5a:ae:6a:fc:14:57:56:9e:
f4:ff:bd:8b:0d:04:76:4a:be:fa:39:29:a5:ff:17:41:8f:79:
f7:8f:97:d4:04:9c:b9:c7:ab:7b:d2:6e:8e:89:24:99:39:63:
b2:4f:1d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:53:28 2025 by rpki-client