Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
File: ZtYtu574eixrGodeUq8TKIRpclo.mft (raw, json)
Hash identifier: y60F4F3Wa3OEA5oNix8EOwjDxWZQ8su5WS9t0FU4dDo=
Subject key identifier: 67:E7:BC:32:8E:1A:6B:5D:10:22:F7:7D:D7:49:AB:61:EE:F0:0B:D3
Authority key identifier: 66:D6:2D:BB:9E:F8:7A:2C:6B:1A:87:5E:52:AF:13:28:84:69:72:5A
Certificate issuer: /CN=66d62dbb9ef87a2c6b1a875e52af13288469725a
Certificate serial: 0199FC586351B2D3EBDF5E729D36E458884A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
Manifest number: 16DD
Signing time: Sun 19 Oct 2025 12:01:15 +0000
Manifest this update: Sun 19 Oct 2025 12:01:15 +0000
Manifest next update: Mon 20 Oct 2025 12:01:15 +0000
Files and hashes: 1: ZtYtu574eixrGodeUq8TKIRpclo.crl (hash: wtz40JKbUX+LuXhqpSyPcHCP7SoSzKM+L/nNXRsYdvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:63:51:b2:d3:eb:df:5e:72:9d:36:e4:58:88:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d62dbb9ef87a2c6b1a875e52af13288469725a
Validity
Not Before: Oct 19 12:01:15 2025 GMT
Not After : Oct 20 12:01:15 2025 GMT
Subject: CN=67e7bc328e1a6b5d1022f77dd749ab61eef00bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:88:27:ab:d3:9a:50:1a:28:cf:14:fa:98:af:
5c:12:da:81:e4:c2:6d:56:8d:dc:85:cd:bd:80:d5:
f9:98:84:a7:fe:a8:05:cf:21:be:30:58:af:bc:22:
9d:ae:5b:a5:10:67:16:25:65:58:f7:19:92:94:18:
f3:cd:fe:ec:ba:e5:b2:13:96:4d:93:0f:03:6a:e1:
06:68:d9:83:07:40:c7:f7:22:5c:5b:c7:a7:04:45:
3a:55:67:28:ab:7e:65:e2:b3:5d:42:0d:d2:56:80:
33:d9:79:f1:9c:ad:ca:4f:d9:70:fe:04:d7:c9:c3:
65:75:a7:11:cb:ac:f1:59:eb:d2:31:f2:8f:e6:92:
ed:c9:a8:b2:a3:c0:6e:f3:d1:c7:51:22:41:6b:9a:
8e:a9:f5:fd:04:e7:55:31:bc:5f:75:8b:ca:2a:90:
2b:62:56:63:5c:be:32:34:00:ca:5f:2d:0b:15:f6:
c6:68:99:26:c4:2c:c8:46:be:d0:6e:cb:31:23:83:
a0:a6:55:fe:b2:2d:ae:8b:76:76:eb:e9:73:99:f5:
d1:e1:df:cd:01:85:09:c7:b2:d1:8b:ab:d1:e6:43:
81:b3:9f:da:be:d6:d4:6d:19:57:8d:4d:80:f8:7b:
9e:3b:db:ba:f7:44:7d:f0:23:a1:74:8f:62:d2:7b:
01:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E7:BC:32:8E:1A:6B:5D:10:22:F7:7D:D7:49:AB:61:EE:F0:0B:D3
X509v3 Authority Key Identifier:
keyid:66:D6:2D:BB:9E:F8:7A:2C:6B:1A:87:5E:52:AF:13:28:84:69:72:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ee:82:65:26:fc:6a:f6:40:28:ad:df:6c:33:e1:d9:65:03:
f9:e6:e8:b0:d6:db:ce:5f:0a:40:48:95:74:29:e1:91:8f:4c:
70:51:df:1f:6b:aa:fa:e3:eb:16:d4:5b:dc:90:7d:43:b7:49:
26:e7:d8:cf:73:62:8c:de:71:4c:39:e7:3e:34:00:d3:c8:e1:
32:bf:ac:7d:76:9c:98:b6:17:1e:80:5d:c2:0a:09:3a:b5:46:
cf:e0:ed:2e:6c:2e:5a:c1:be:e6:29:d3:06:3c:0a:7f:ff:ff:
4f:cd:4f:38:c9:43:61:2b:a4:19:a9:1c:4c:92:ac:f2:98:c7:
f1:d5:8a:2a:29:13:9a:de:7a:96:93:b8:a3:4e:b2:11:98:de:
9d:e8:da:12:dd:e7:9f:07:88:82:9f:6a:73:88:2e:78:77:5e:
ca:23:40:2f:bc:eb:d1:f2:dd:02:a2:3a:b9:7f:e8:4d:2b:92:
43:36:c1:eb:17:bd:3f:6a:b0:6d:5c:df:72:9b:fd:12:d2:ae:
ee:a6:e6:9a:40:ff:76:78:9d:6a:64:8a:ce:44:7d:fb:6e:a1:
bc:d0:8f:f8:e4:4e:34:97:fe:f7:d8:fb:3a:4d:dd:ce:4b:80:
8b:3c:25:f0:14:4d:92:a2:eb:1d:75:e6:a4:5a:ca:87:10:15:
d6:f6:44:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:30 2025 by rpki-client