Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft
File: z_jVsaHSJUEodoK9xpNv8sUlq7w.mft (raw, json)
Hash identifier: NlOOtDYWhrkFFZ1Aq48RwKFyv8dKmaykXS3RwO1xZKo=
Subject key identifier: D1:7E:58:63:E9:F0:9F:4C:9A:D7:C5:8D:4E:0E:07:C1:ED:B2:55:4F
Authority key identifier: CF:F8:D5:B1:A1:D2:25:41:28:76:82:BD:C6:93:6F:F2:C5:25:AB:BC
Certificate issuer: /CN=cff8d5b1a1d22541287682bdc6936ff2c525abbc
Certificate serial: 0199FF2248839C664FF94068697CB78CC4B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_jVsaHSJUEodoK9xpNv8sUlq7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft
Manifest number: 0C7C
Signing time: Mon 20 Oct 2025 01:01:00 +0000
Manifest this update: Mon 20 Oct 2025 01:01:00 +0000
Manifest next update: Tue 21 Oct 2025 01:01:00 +0000
Files and hashes: 1: z_jVsaHSJUEodoK9xpNv8sUlq7w.crl (hash: tyO2Og3vVSrVHtMojnJZNSyg4RJiHGJOQKmF9zhPNmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_jVsaHSJUEodoK9xpNv8sUlq7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:48:83:9c:66:4f:f9:40:68:69:7c:b7:8c:c4:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff8d5b1a1d22541287682bdc6936ff2c525abbc
Validity
Not Before: Oct 20 01:01:00 2025 GMT
Not After : Oct 21 01:01:00 2025 GMT
Subject: CN=d17e5863e9f09f4c9ad7c58d4e0e07c1edb2554f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4d:2a:c5:90:02:46:67:ef:79:57:d9:da:ea:
56:e4:92:43:a2:d8:35:75:36:21:ab:55:7b:69:8a:
61:68:64:d5:c8:bc:0e:4d:e1:d9:50:d3:99:4c:11:
fe:e4:6c:40:69:3f:72:c4:3a:09:47:7e:74:c2:0d:
e3:ac:f1:55:bc:35:e9:ba:5d:7f:2d:66:dd:32:91:
8f:37:1f:bc:56:89:4f:a9:61:9b:a6:76:0c:f1:b0:
e9:5a:7a:3b:65:19:3e:2c:fd:a9:59:f5:fb:22:5f:
fd:59:44:c8:1e:6d:75:29:47:b0:0f:99:f0:a6:99:
0a:d2:e0:e2:97:ee:37:9f:bc:57:43:57:91:26:9d:
e5:77:99:9b:51:d1:a4:48:23:13:57:95:2f:34:b2:
5b:37:63:dd:01:f3:9e:8d:96:de:9f:4e:e1:dc:86:
fc:49:25:d0:85:b4:c6:a1:21:96:7a:fd:cc:e2:10:
98:29:ce:44:a6:c9:a6:9f:ea:6f:83:e4:6a:3a:ff:
1b:af:c2:07:73:2d:34:51:f1:00:63:71:41:e0:c0:
03:b0:57:b2:23:f9:06:e3:5c:d6:7f:cd:83:e8:d4:
bd:01:4e:6d:d0:46:fb:b1:1f:b3:d2:50:91:18:db:
32:72:fc:5a:ab:35:28:f5:9f:62:6f:7c:91:bc:f7:
27:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7E:58:63:E9:F0:9F:4C:9A:D7:C5:8D:4E:0E:07:C1:ED:B2:55:4F
X509v3 Authority Key Identifier:
keyid:CF:F8:D5:B1:A1:D2:25:41:28:76:82:BD:C6:93:6F:F2:C5:25:AB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_jVsaHSJUEodoK9xpNv8sUlq7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b9:e1:b2:9b:e7:9d:fa:0f:81:9d:be:61:52:f8:79:f6:30:
9c:27:b0:b2:17:17:bd:b1:1b:11:d6:9c:f3:eb:e4:78:58:ab:
0b:23:56:b0:77:e1:6e:98:b5:c6:7b:ad:d7:9e:67:53:b3:db:
e0:cc:19:c4:d6:3e:96:a3:b1:d3:e2:54:e6:2b:7a:66:2e:fa:
b7:93:cf:4e:cb:ea:91:96:d9:66:4d:69:d4:31:1f:74:41:ce:
6b:2d:6a:1d:8f:77:ab:2a:60:6d:4a:45:a3:8e:7e:85:a0:e7:
ee:b8:95:ab:88:d5:50:79:9f:99:90:9a:ca:14:06:e6:d4:07:
c7:6b:a7:1f:ba:d8:b1:09:cb:a1:c2:2c:5f:5f:ce:1f:1c:ed:
bc:7b:6a:97:b8:1c:a4:31:6a:ff:cb:72:3f:4b:53:47:8b:19:
d1:7e:35:e9:e1:d4:9e:12:46:13:b0:89:04:0a:22:f0:e0:41:
8f:5a:68:e6:3e:54:9f:6b:06:3f:5c:e9:c1:63:2c:7e:f6:ec:
75:0a:32:c0:3f:54:8c:87:10:ab:8e:87:00:bd:b2:f9:d8:c3:
3b:11:03:1d:27:fd:6d:d8:9e:49:7c:a4:cf:14:75:d1:41:f9:
06:b7:60:89:c3:92:32:04:94:ff:13:de:d3:c3:ec:93:7d:d4:
8e:71:61:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:11:26 2025 by rpki-client