Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft
File: ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft (raw, json)
Hash identifier: TjUxWNZ/vHsb4h3mpOUs2CYhN68Cdu8rS3cuioHmHJE=
Subject key identifier: 03:97:7D:25:55:8E:23:52:90:9D:D1:D7:11:DE:C4:D6:92:AB:6E:2A
Authority key identifier: 64:78:BD:EC:FB:D3:5D:3F:17:C3:90:6E:62:F9:3E:B2:BB:11:3E:5D
Certificate issuer: /CN=6478bdecfbd35d3f17c3906e62f93eb2bb113e5d
Certificate serial: 0199FDD9501A0BAA9CA131655CE5D994C238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHi97PvTXT8Xw5BuYvk-srsRPl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft
Manifest number: 067D
Signing time: Sun 19 Oct 2025 19:01:41 +0000
Manifest this update: Sun 19 Oct 2025 19:01:41 +0000
Manifest next update: Mon 20 Oct 2025 19:01:41 +0000
Files and hashes: 1: ZHi97PvTXT8Xw5BuYvk-srsRPl0.crl (hash: RH8a6ijuwtaPtOMrZsi2/z4xfUO9ZspgawrlflpSFIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZHi97PvTXT8Xw5BuYvk-srsRPl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:50:1a:0b:aa:9c:a1:31:65:5c:e5:d9:94:c2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6478bdecfbd35d3f17c3906e62f93eb2bb113e5d
Validity
Not Before: Oct 19 19:01:41 2025 GMT
Not After : Oct 20 19:01:41 2025 GMT
Subject: CN=03977d25558e2352909dd1d711dec4d692ab6e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e4:e7:d8:61:43:ea:29:ae:02:bb:b9:69:91:
b7:b8:d8:7b:e5:33:1e:e5:3a:49:05:b9:3f:60:d3:
44:c2:86:d8:dc:ca:dd:c0:68:d0:c6:3f:ec:99:52:
a3:95:47:d3:df:6f:b3:c0:c5:44:19:27:7b:60:dd:
ce:18:3e:68:39:21:e1:43:1e:8c:65:e4:80:1b:b6:
2b:dc:9b:c9:b9:29:d8:1e:83:60:d3:d9:8e:19:2c:
33:5f:87:20:1b:01:ab:d2:0b:56:6a:6b:d5:62:ff:
3b:3f:e8:c5:15:f8:53:e6:ea:6a:16:83:5e:2a:c0:
84:ea:d8:05:87:99:aa:a1:df:4d:f8:be:3e:f2:2d:
c1:30:40:9c:e3:76:b2:76:7a:50:9d:1f:d5:54:70:
1f:8c:f3:5b:25:38:0f:93:d4:a1:ff:8d:f9:89:ab:
7a:0e:99:b6:bd:2f:73:82:f3:f9:cb:38:4f:6f:eb:
99:ba:13:ce:ff:66:19:65:a3:d4:fc:32:ac:22:20:
3b:02:cf:e2:85:9c:a6:5c:42:7c:67:0c:6a:4a:61:
41:e9:76:bb:11:03:63:7f:c5:75:8a:95:9e:fc:24:
27:c3:80:3e:38:d7:ef:e5:be:28:45:07:a0:18:e0:
ce:14:07:b8:7d:9f:4b:5b:4b:78:47:83:6f:96:e9:
69:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:97:7D:25:55:8E:23:52:90:9D:D1:D7:11:DE:C4:D6:92:AB:6E:2A
X509v3 Authority Key Identifier:
keyid:64:78:BD:EC:FB:D3:5D:3F:17:C3:90:6E:62:F9:3E:B2:BB:11:3E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHi97PvTXT8Xw5BuYvk-srsRPl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:be:ea:f3:bb:a4:57:c5:85:0f:79:b9:0c:a6:43:74:e9:fc:
68:51:bc:ff:52:61:d8:71:c2:42:49:2e:71:cf:4e:45:20:d9:
ea:cd:b6:6f:4f:38:b6:b0:27:04:64:91:21:da:b5:6a:0c:20:
cf:f5:60:ad:0f:19:dd:f8:84:13:4a:37:21:b6:5a:ad:bf:35:
af:01:64:c0:00:5a:3a:25:71:e5:e7:b0:fb:96:3c:0a:14:c6:
ba:1a:eb:25:f3:25:70:25:89:01:3c:be:3b:b8:99:c5:c4:3c:
f9:aa:b1:de:dc:5f:31:a9:39:10:48:37:d0:52:df:88:60:3d:
22:0f:3d:a4:34:a8:26:77:af:f0:63:8c:9a:8c:0d:de:8d:1e:
4b:75:45:3d:94:5c:be:3f:af:7a:66:f9:39:02:d9:a4:2d:b9:
67:bf:01:e0:f8:6f:8a:b7:e5:94:24:f4:0a:81:21:33:24:91:
61:e2:d6:b8:44:21:39:cb:b8:ab:90:6e:c1:f9:6b:e8:67:e2:
f0:68:74:86:81:39:e4:99:51:3b:55:53:fc:3f:13:92:f9:29:
54:3c:74:ac:cc:5e:ab:c9:be:8e:d3:91:32:3d:cc:6b:55:39:
fb:62:4d:69:40:1e:e1:b1:62:17:e5:14:c0:5c:06:b0:64:46:
61:8a:bb:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:42 2025 by rpki-client