
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
File: RzLsDpHbv5TdodZQRH0miXbWIJo.mft (raw, json)
Hash identifier: 6wq38gqvIEhtEArjZmaOPhKqQMXTxImPwohCoO9kPls=
Subject key identifier: 14:66:18:E9:AC:C7:5A:44:CB:BD:E7:44:D0:95:02:5E:A5:60:E5:0C
Authority key identifier: 47:32:EC:0E:91:DB:BF:94:DD:A1:D6:50:44:7D:26:89:76:D6:20:9A
Certificate issuer: /CN=4732ec0e91dbbf94dda1d650447d268976d6209a
Certificate serial: 0199FD34640F4D3A848639F39962663F7B3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzLsDpHbv5TdodZQRH0miXbWIJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
Manifest number: 0B99
Signing time: Sun 19 Oct 2025 16:01:33 +0000
Manifest this update: Sun 19 Oct 2025 16:01:33 +0000
Manifest next update: Mon 20 Oct 2025 16:01:33 +0000
Files and hashes: 1: RzLsDpHbv5TdodZQRH0miXbWIJo.crl (hash: tqvDpS9Cxk8pM1ZU6JYy5toCOb4HI3590dfVftlLJhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzLsDpHbv5TdodZQRH0miXbWIJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:64:0f:4d:3a:84:86:39:f3:99:62:66:3f:7b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4732ec0e91dbbf94dda1d650447d268976d6209a
Validity
Not Before: Oct 19 16:01:33 2025 GMT
Not After : Oct 20 16:01:33 2025 GMT
Subject: CN=146618e9acc75a44cbbde744d095025ea560e50c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a3:fc:6a:9b:8c:45:33:56:6e:de:eb:d7:27:
0c:61:89:ef:a2:26:1e:4d:6b:43:0f:3e:d4:fb:6d:
72:32:79:67:d0:37:aa:ed:ed:a0:b2:02:64:44:27:
8a:27:f0:e2:e2:15:df:ae:a7:6e:b3:72:b4:25:a0:
90:a5:29:10:29:75:07:b9:cd:e8:a1:de:85:9e:8a:
4b:6e:0c:84:1a:27:31:96:b5:01:82:bc:78:68:34:
be:95:d7:e9:4e:ee:f8:46:29:39:83:9f:b7:bb:21:
56:f4:f0:bc:ec:98:0b:52:99:f6:4d:1d:5a:c9:c7:
13:fd:11:2d:4a:1f:85:c8:e0:f5:3d:c6:4c:98:31:
c8:35:e4:1e:5c:bd:ca:76:8b:3d:0c:7d:d5:8f:83:
2c:a2:cc:2f:bf:f5:8b:e1:29:c1:67:6a:77:e7:ed:
e3:d6:53:62:12:30:fa:b6:79:ce:bb:6a:59:99:ae:
3f:38:89:60:2e:49:45:ec:33:e0:fc:2d:44:f4:ad:
a9:ae:b8:2a:51:fd:9e:0b:1b:92:39:07:94:ad:7c:
13:7d:d1:51:bd:cc:86:42:85:9e:c8:43:b6:16:e8:
d4:93:18:12:49:64:84:10:97:f1:ae:23:06:ab:bf:
6c:a7:98:c0:c1:8c:7f:af:ba:0d:dc:a6:23:b2:2a:
94:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:66:18:E9:AC:C7:5A:44:CB:BD:E7:44:D0:95:02:5E:A5:60:E5:0C
X509v3 Authority Key Identifier:
keyid:47:32:EC:0E:91:DB:BF:94:DD:A1:D6:50:44:7D:26:89:76:D6:20:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzLsDpHbv5TdodZQRH0miXbWIJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:3a:79:5d:cb:e0:0e:33:de:4b:3b:48:b5:07:eb:4c:1c:63:
8f:f8:8f:34:7c:1d:4c:ef:b0:42:a8:fb:51:7e:05:14:f4:cd:
f8:7f:ee:59:3b:ca:de:cc:89:a2:30:15:27:57:06:94:ab:36:
5e:0d:f6:26:b7:fa:b1:12:13:e1:ae:4a:0d:ea:bd:d4:0a:ed:
64:b8:60:62:2b:77:38:31:04:74:37:24:d7:c6:b2:f0:ee:e1:
58:89:d4:33:7a:eb:e7:d0:7f:87:06:78:89:03:57:aa:82:05:
af:a3:3d:df:18:d8:d7:bd:2b:12:bf:1e:0e:08:49:79:63:b2:
ea:2e:d7:58:9c:a0:f7:4f:03:74:18:1b:00:77:e7:4e:ae:77:
b1:9c:c7:72:60:82:57:b9:cd:1b:14:9c:df:0b:6e:3f:0c:93:
0f:d2:f4:ec:6e:d0:70:08:cc:16:cd:ef:03:a3:74:ae:0c:3b:
7a:6c:57:c9:48:63:05:37:3b:be:8e:b2:15:43:ec:10:ce:04:
18:a8:b2:91:40:b0:03:d6:14:86:60:3c:d8:e1:9e:3f:46:1f:
e0:9b:69:02:b3:9f:1a:a5:b8:80:0e:62:fb:c2:0d:fb:b9:36:
16:2d:49:5d:8c:da:03:fe:a6:16:94:f3:8e:4e:06:12:dd:8b:
64:a3:b5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:45:40 2025 by rpki-client