
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft
File: ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft (raw, json)
Hash identifier: IaOG65zYiBu8SktpWXfyAyStRzeT7jGD5G5tUPaVx2A=
Subject key identifier: E6:F3:F3:68:83:34:9A:EF:A2:9E:B3:42:DF:EF:9E:19:39:50:E3:C5
Authority key identifier: 66:D5:E5:CD:7D:03:75:DE:25:27:40:54:64:12:B8:8B:A5:BC:FA:7A
Certificate issuer: /CN=66d5e5cd7d0375de252740546412b88ba5bcfa7a
Certificate serial: 0199FB7D018FA6BDF1DDE15D69C5BA86F54B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft
Manifest number: 126E
Signing time: Sun 19 Oct 2025 08:01:37 +0000
Manifest this update: Sun 19 Oct 2025 08:01:37 +0000
Manifest next update: Mon 20 Oct 2025 08:01:37 +0000
Files and hashes: 1: ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.crl (hash: fiTdC0rZczrMEbnvFh5vMLK8m7CvyUNkl9jEJZzl4mk=)
2: uoOTDO3I8Ju9HNeb_RrUnxiXqMM.roa (hash: uWLf97UT0+0lxJvC3noTnvF0IVTFV5k9XbA2AIDmE6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7d:01:8f:a6:bd:f1:dd:e1:5d:69:c5:ba:86:f5:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d5e5cd7d0375de252740546412b88ba5bcfa7a
Validity
Not Before: Oct 19 08:01:37 2025 GMT
Not After : Oct 20 08:01:37 2025 GMT
Subject: CN=e6f3f36883349aefa29eb342dfef9e193950e3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0a:fe:57:c8:78:3a:e6:df:42:84:b4:a5:3f:
6c:0d:9b:dc:22:73:66:a4:f3:8a:43:3f:e7:b7:32:
ac:ef:a2:12:38:eb:2d:fc:7f:df:a4:fb:f3:cb:0b:
7b:c0:3b:6f:85:23:60:31:a6:c5:c5:55:9d:a7:2f:
ab:4a:74:5c:a6:4e:41:97:3a:bc:5a:dd:3d:46:dc:
4e:b0:76:ce:cc:63:d3:79:3b:b8:e9:9b:1d:89:ae:
c1:1a:c8:11:e9:a0:d9:45:89:d0:a7:06:6d:cf:0e:
11:a7:da:2e:d4:9f:50:47:f5:3c:bd:00:85:9e:11:
4e:bd:c5:86:41:1c:f6:d9:5a:e7:a1:52:bd:b8:47:
cf:b5:f2:2a:98:c2:9b:00:44:cf:d5:32:73:54:f4:
f5:b8:81:5b:b9:28:57:8b:7f:bc:a2:f9:39:34:66:
18:dd:16:b7:7d:98:a8:af:69:e4:4b:cb:71:71:9e:
6f:ec:db:2c:5c:ec:4d:2c:f3:4a:6e:90:5b:0e:76:
eb:6b:aa:c7:21:a1:90:da:5a:d2:52:0b:57:41:30:
5e:a7:7d:85:3a:c5:e5:a7:40:be:c3:c3:4e:fd:bb:
20:fb:8b:96:ad:99:2c:45:ea:56:51:0f:e8:aa:f8:
21:c0:72:47:e3:b2:6e:a3:5c:c5:8a:a5:e5:7e:b7:
21:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F3:F3:68:83:34:9A:EF:A2:9E:B3:42:DF:EF:9E:19:39:50:E3:C5
X509v3 Authority Key Identifier:
keyid:66:D5:E5:CD:7D:03:75:DE:25:27:40:54:64:12:B8:8B:A5:BC:FA:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:29:c6:ac:5a:b1:70:8f:cf:f6:07:2c:32:72:00:fe:e2:54:
ab:0d:94:6c:84:4b:5d:5d:a4:5c:4b:df:b9:3f:e1:56:1e:c0:
7b:55:fb:3a:84:c2:92:de:52:82:e0:6e:e8:b6:5e:2b:91:71:
9a:4f:f3:06:ab:26:a4:21:d2:2e:64:8a:23:0d:2c:e0:7a:4d:
0f:7e:76:9b:68:03:b7:7e:e6:2b:5c:7a:fd:4f:ba:cb:e1:13:
34:60:b8:7d:bc:b5:29:d6:0b:e1:bb:db:34:d3:17:33:f9:7f:
88:82:0a:0e:b8:2a:d0:20:92:df:be:09:0d:89:72:e3:0d:be:
71:ab:ec:03:65:31:bf:84:ee:86:48:c5:b7:70:fa:48:8c:4e:
22:86:04:88:54:7e:69:ca:8b:a1:1d:56:c3:33:59:66:64:cc:
a9:1b:a1:47:29:e2:e9:ca:77:13:93:7f:28:04:60:e9:0c:aa:
d3:2c:3b:f4:4d:36:0d:fc:a1:41:12:cb:f8:11:93:d2:df:e6:
4a:78:8a:26:25:24:dc:e3:53:2b:af:f2:6b:58:a9:b4:90:05:
08:18:e2:f0:2f:76:02:6e:fd:78:74:e7:96:73:3d:af:0f:b6:
51:6a:49:97:63:cc:99:09:c8:54:87:1e:d0:0e:b7:ea:95:26:
3f:96:2a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:37 2025 by rpki-client