Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3689be-8152-4bad-b996-3cda71373dc9/1/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.mft
File: zbxDGxyYhtwrIQCNzP3hjbc1Nxw.mft (raw, json)
Hash identifier: 3ALCJ+edFvQHKOi3+/4VjNXheqNk0GR2G1QMvmY7qJg=
Subject key identifier: 9C:7E:F9:30:91:C6:06:1A:37:1D:22:CB:1B:DA:22:00:99:E1:8D:33
Authority key identifier: CD:BC:43:1B:1C:98:86:DC:2B:21:00:8D:CC:FD:E1:8D:B7:35:37:1C
Certificate issuer: /CN=cdbc431b1c9886dc2b21008dccfde18db735371c
Certificate serial: 0199FBEBBC5352CE19C65DEB92E4CD98120B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3689be-8152-4bad-b996-3cda71373dc9/1/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.mft
Manifest number: 045C
Signing time: Sun 19 Oct 2025 10:02:34 +0000
Manifest this update: Sun 19 Oct 2025 10:02:34 +0000
Manifest next update: Mon 20 Oct 2025 10:02:34 +0000
Files and hashes: 1: zbxDGxyYhtwrIQCNzP3hjbc1Nxw.crl (hash: dfo/lrHqVI67rDWUd1q5TQcqIyXkEjJgrELavXqgkVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3689be-8152-4bad-b996-3cda71373dc9/1/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3689be-8152-4bad-b996-3cda71373dc9/1/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:bc:53:52:ce:19:c6:5d:eb:92:e4:cd:98:12:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdbc431b1c9886dc2b21008dccfde18db735371c
Validity
Not Before: Oct 19 10:02:34 2025 GMT
Not After : Oct 20 10:02:34 2025 GMT
Subject: CN=9c7ef93091c6061a371d22cb1bda220099e18d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:81:e3:eb:96:4b:f8:7c:64:ae:3f:e8:dd:53:
ab:2f:f3:d8:8f:26:b5:d0:2e:04:2c:b8:03:05:3c:
78:87:01:d5:19:7d:03:dc:ca:0b:0e:34:9b:76:c4:
f0:97:b2:c3:36:9b:87:05:75:3a:ab:40:d7:83:9c:
d0:f4:27:8b:2d:e2:c6:74:c1:6c:a8:47:7d:1f:fa:
0b:61:13:d4:de:53:99:ed:18:74:cd:05:e9:96:e3:
be:fa:11:b4:f9:c6:31:62:c0:d5:35:20:1f:13:cf:
49:40:bf:6e:a1:79:77:49:0c:72:74:49:44:5d:08:
07:bc:1e:fb:e4:41:f8:b5:77:df:0f:70:65:74:a8:
dd:a7:c6:45:76:4e:24:8e:52:e0:42:69:bd:3b:03:
e2:df:75:52:2c:3e:7d:68:24:ca:76:27:f4:47:af:
63:ad:7a:ef:b7:42:a3:a7:7f:ee:c2:ad:5b:bb:06:
95:3d:a5:5d:44:d3:58:f5:97:f8:da:46:e5:a3:0f:
53:7b:6a:f1:19:f0:fd:f8:7e:20:b2:e4:ce:4b:1e:
50:9b:d6:5b:e2:35:17:1d:18:c3:54:90:a4:4c:27:
b9:75:f5:cc:58:dd:7d:3e:f9:fc:73:54:9a:e5:4c:
bb:b7:ab:f3:70:9a:c2:ef:6c:59:fe:ff:39:c1:a5:
29:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:7E:F9:30:91:C6:06:1A:37:1D:22:CB:1B:DA:22:00:99:E1:8D:33
X509v3 Authority Key Identifier:
keyid:CD:BC:43:1B:1C:98:86:DC:2B:21:00:8D:CC:FD:E1:8D:B7:35:37:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3689be-8152-4bad-b996-3cda71373dc9/1/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3689be-8152-4bad-b996-3cda71373dc9/1/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:73:f4:0c:18:d4:34:04:bd:1c:f7:0f:fc:66:f3:0f:47:d4:
c7:b0:e1:35:a1:cb:15:12:0e:80:85:2d:3b:db:24:fa:f1:66:
78:2f:c1:32:df:09:e6:6f:28:c8:50:5c:f9:0d:66:5f:26:12:
dc:f8:bd:04:53:dd:9e:05:66:0e:6f:9a:7b:02:07:dd:3b:e3:
93:10:c6:aa:91:83:a8:30:84:da:63:5d:3a:a8:ad:8d:f4:70:
a4:2c:b8:61:ab:d9:78:d4:c6:e8:72:c7:e2:79:45:50:1d:7c:
2c:d9:78:97:f8:53:63:fe:f0:b8:96:a5:bd:8a:44:a8:3b:8e:
12:78:49:25:17:01:f3:53:c3:52:58:17:df:05:2f:9c:7b:17:
d0:db:72:f2:88:ef:02:74:34:8a:b2:00:72:d2:af:98:5c:60:
5e:c1:bc:b1:9c:15:78:d1:ae:1d:a2:be:a0:9e:af:2e:d6:9c:
74:21:b6:d9:72:a3:03:4b:c0:98:96:0d:dc:19:a4:fd:66:f2:
a6:ef:d3:66:b3:7d:0e:aa:6d:e4:34:6a:0c:26:6c:29:fa:ec:
15:79:8f:da:ad:8e:5b:af:67:16:12:54:1d:e1:7c:e1:e6:13:
e9:0f:d0:c2:f9:ac:3e:2d:a3:98:c3:ef:fc:22:c0:93:d9:4d:
26:c4:ee:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:34 2025 by rpki-client