Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
File: 1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft (raw, json)
Hash identifier: 3EgPIDQ1cc+PqlvOc8LU+SO7SpADL2Da3Y44r5JB1WU=
Subject key identifier: 81:D7:76:4F:5E:7A:60:B5:30:D0:66:B8:45:8C:3D:52:3B:AE:30:3F
Authority key identifier: D5:99:AD:82:CA:0F:DB:A0:6F:E0:8B:7B:9E:0D:13:73:B7:1C:B4:69
Certificate issuer: /CN=d599ad82ca0fdba06fe08b7b9e0d1373b71cb469
Certificate serial: 0199FBEBD7CEEC962A34ABCF1CD3C9851215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
Manifest number: 0FD9
Signing time: Sun 19 Oct 2025 10:02:41 +0000
Manifest this update: Sun 19 Oct 2025 10:02:41 +0000
Manifest next update: Mon 20 Oct 2025 10:02:41 +0000
Files and hashes: 1: 1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl (hash: ieQiBfGprAxF8stPi2bzPttLmhn8JA9aXWl/AJALF2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:d7:ce:ec:96:2a:34:ab:cf:1c:d3:c9:85:12:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d599ad82ca0fdba06fe08b7b9e0d1373b71cb469
Validity
Not Before: Oct 19 10:02:41 2025 GMT
Not After : Oct 20 10:02:41 2025 GMT
Subject: CN=81d7764f5e7a60b530d066b8458c3d523bae303f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d3:2f:4e:99:d8:4c:43:52:23:e7:97:64:f3:
3b:a1:c5:97:ee:49:4a:b4:17:ed:71:b5:47:47:24:
8c:73:9d:ee:34:2a:90:bd:d6:3f:88:20:d6:a0:17:
ab:06:c6:93:4f:7a:94:7c:3a:8b:0c:4d:1f:0b:60:
43:5b:0a:30:b1:31:54:3a:0e:4c:77:95:49:f6:50:
70:be:3f:ca:4d:cd:65:bc:cc:3d:a5:3c:05:9c:84:
18:64:ed:5e:71:3f:4c:f8:dc:ef:75:6d:a4:b3:f8:
48:93:c7:a5:1c:f3:f3:72:9c:4a:1f:bb:7a:2d:3e:
df:30:6f:c0:5c:ad:05:3c:d0:13:cb:96:8b:4e:54:
4b:98:e1:fe:68:09:bd:c0:da:53:bc:09:51:87:93:
44:ad:46:8b:02:13:12:07:1a:02:b6:5b:9f:47:ef:
8a:6b:0a:1d:d2:b6:5a:63:b6:c1:da:8a:da:b1:d6:
dc:b6:f1:fa:d9:89:78:ca:32:fa:c7:ce:15:d1:2a:
1f:cc:9b:24:77:24:f5:ff:8b:bd:8f:bd:5f:92:4c:
2b:1c:17:87:e1:00:cf:58:61:fe:37:da:16:d3:86:
c8:df:f5:45:5d:8b:79:12:9c:59:3a:18:b6:73:60:
8c:3d:e2:06:b6:a4:2c:18:91:e7:c1:89:41:f3:cf:
c5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D7:76:4F:5E:7A:60:B5:30:D0:66:B8:45:8C:3D:52:3B:AE:30:3F
X509v3 Authority Key Identifier:
keyid:D5:99:AD:82:CA:0F:DB:A0:6F:E0:8B:7B:9E:0D:13:73:B7:1C:B4:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:6f:ab:cf:bf:6f:cf:9d:91:49:dd:b3:9c:62:41:f3:4d:41:
98:60:68:dd:33:c3:6f:d2:d1:d7:3f:f4:f5:31:bc:37:cb:91:
02:42:ed:27:78:d1:94:37:30:2b:cd:6d:ae:60:4d:07:2a:3a:
75:c3:e1:c8:26:88:3a:73:a5:ea:01:c5:84:d2:68:e8:c9:3d:
e5:95:8a:15:c9:d5:2f:54:9e:0d:75:87:5a:2c:54:40:56:08:
50:e4:b2:81:89:7f:d1:aa:4b:4a:89:a5:87:81:51:a6:b9:19:
e3:7d:f3:b8:6d:9f:9a:85:8d:fd:7c:34:c3:62:00:30:30:85:
c9:70:03:4d:2c:00:32:ee:25:9c:50:04:a0:88:63:aa:fa:2d:
a3:46:65:7b:96:9a:35:2a:b8:a1:7a:2c:9e:70:35:08:3e:dc:
b7:3c:93:c2:fd:2c:f3:58:b8:e8:73:c2:0a:46:26:14:d1:f4:
df:52:dd:3e:d2:40:31:d3:f2:31:78:aa:4d:58:e7:76:05:d4:
cf:28:62:37:7e:7f:2f:4a:3a:d0:e7:42:1f:11:b2:28:12:a1:
bb:87:05:06:7d:1b:3f:03:f8:43:74:af:c8:33:47:d4:76:11:
df:21:96:f4:46:47:7d:ea:84:fe:f9:db:fb:d7:3b:89:53:d4:
9b:f3:d8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:21 2025 by rpki-client