
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
File: z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft (raw, json)
Hash identifier: GfhYbO8iy5IFRHJrbjnDKRJ/tIFe2o1xDNtigo7vuCk=
Subject key identifier: CD:8E:66:83:99:B0:9D:48:53:FB:51:5B:0D:3E:40:1B:40:12:FE:7A
Authority key identifier: CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
Certificate issuer: /CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Certificate serial: 0199FBEA90B302EFF115139A2EEC863403F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 10:01:17 +0000
Manifest this update: Sun 19 Oct 2025 10:01:17 +0000
Manifest next update: Mon 20 Oct 2025 10:01:17 +0000
Files and hashes: 1: z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl (hash: XUzrT6ZM13ArtdlzpeF7tvPHL1JXwJ5KuZZR1KR4t9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:90:b3:02:ef:f1:15:13:9a:2e:ec:86:34:03:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Validity
Not Before: Oct 19 10:01:17 2025 GMT
Not After : Oct 20 10:01:17 2025 GMT
Subject: CN=cd8e668399b09d4853fb515b0d3e401b4012fe7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:02:b4:07:66:77:43:dd:0c:64:e2:78:0e:e1:
f3:5f:5b:f0:0f:9e:6b:b4:85:3b:4e:73:dc:58:2a:
f2:7f:ae:88:1d:0b:dc:ba:da:ed:3e:5b:66:87:c8:
92:ad:eb:95:df:a2:4a:cc:c8:1a:c6:57:fe:2d:81:
5e:7a:37:07:21:c5:d0:11:97:54:86:36:86:8a:6a:
f8:35:f7:97:49:14:e0:16:05:66:6f:4e:2f:b7:44:
1e:4c:89:61:cc:1f:d4:88:a7:9f:ed:0f:19:2f:c3:
c3:4f:3a:b3:04:db:41:ad:46:c8:05:aa:ea:87:18:
1d:19:c4:3a:8e:c6:ed:b5:0b:3b:ac:4d:e3:6a:b7:
22:7a:26:cc:8f:22:c8:30:71:69:29:f7:b6:f5:ad:
4c:dc:9d:14:d5:f8:8f:16:95:27:1f:f4:22:ce:15:
16:6c:ae:48:94:f6:84:36:03:2a:9f:d0:83:e5:73:
b5:2e:87:e2:1d:ac:9b:5c:85:7d:2c:ed:ea:8f:e9:
1d:fd:12:d1:8e:08:83:e7:89:8f:aa:ae:53:3b:04:
bf:a9:e0:d5:34:67:f0:c3:48:dd:1f:00:0a:36:c0:
28:63:3c:ba:f8:00:30:54:67:b1:77:9a:86:54:9f:
44:77:69:58:23:35:83:18:cb:9c:9c:ef:71:91:35:
f8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8E:66:83:99:B0:9D:48:53:FB:51:5B:0D:3E:40:1B:40:12:FE:7A
X509v3 Authority Key Identifier:
keyid:CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ba:76:f0:3e:2b:c7:e0:fd:b1:7b:45:90:b8:42:31:20:64:
35:5b:53:3f:30:b0:63:79:80:7f:f3:43:29:90:bb:e3:68:ab:
67:a6:f2:03:71:40:3b:5b:df:a3:9e:04:d0:c8:06:00:ed:83:
ae:21:32:66:2c:51:6a:01:f2:9d:b1:38:bb:82:4f:8d:5a:09:
3d:9d:24:8b:24:0e:3a:84:6a:6d:4e:c4:59:a0:c5:88:62:6d:
54:b6:cb:4b:4c:a6:47:20:db:ed:a2:68:10:d8:db:04:e5:8e:
1c:70:de:26:68:69:f8:19:55:dd:a6:09:4d:13:4b:46:0b:23:
d7:8a:bd:e6:e1:bc:c1:72:49:56:2d:ef:c8:89:21:80:6d:ab:
85:11:f0:7e:e5:39:ed:b2:d9:e6:fe:ba:94:87:df:89:58:88:
3f:f5:36:7d:bf:fb:96:0a:fa:a2:70:b4:45:ce:08:0e:5c:6a:
70:cb:07:cc:71:95:d9:37:0c:01:39:2b:7b:1b:09:a2:dd:7a:
c1:19:84:ac:88:89:fe:75:23:8a:1b:3d:f5:9c:3c:fe:6e:49:
fc:a1:05:6c:76:76:0d:72:b7:6a:c2:86:95:0e:16:41:3a:32:
bb:f2:ef:b1:72:4f:50:ca:38:27:5e:2d:60:cf:29:43:95:bb:
88:58:d9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:42 2025 by rpki-client