Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.mft
File: zTf5VqTOlOsexk52R7Q828uPxEk.mft (raw, json)
Hash identifier: MJtsrGDGR03DOhcD36NtyMcA1lNkcQl8BYqHteTb6EI=
Subject key identifier: D0:CB:DD:CD:AF:08:81:1D:8A:63:71:84:B4:FA:8C:BA:97:C8:EF:39
Authority key identifier: CD:37:F9:56:A4:CE:94:EB:1E:C6:4E:76:47:B4:3C:DB:CB:8F:C4:49
Certificate issuer: /CN=cd37f956a4ce94eb1ec64e7647b43cdbcb8fc449
Certificate serial: 0199FA6A0BA7F7DDC34F38382080900EBA84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTf5VqTOlOsexk52R7Q828uPxEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.mft
Manifest number: 169A
Signing time: Sun 19 Oct 2025 03:01:17 +0000
Manifest this update: Sun 19 Oct 2025 03:01:17 +0000
Manifest next update: Mon 20 Oct 2025 03:01:17 +0000
Files and hashes: 1: zTf5VqTOlOsexk52R7Q828uPxEk.crl (hash: JTl/F7j47EcDadEH07whtDtO6NboN0arwixsCQTptKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTf5VqTOlOsexk52R7Q828uPxEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:0b:a7:f7:dd:c3:4f:38:38:20:80:90:0e:ba:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd37f956a4ce94eb1ec64e7647b43cdbcb8fc449
Validity
Not Before: Oct 19 03:01:17 2025 GMT
Not After : Oct 20 03:01:17 2025 GMT
Subject: CN=d0cbddcdaf08811d8a637184b4fa8cba97c8ef39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8e:16:c5:46:70:2c:21:2b:60:82:5f:50:fc:
1c:75:e6:f6:59:3c:37:ec:30:f7:6a:36:a0:c1:9c:
e2:49:1f:26:94:df:b4:95:e8:eb:96:7e:48:44:c1:
ab:7e:cc:57:27:a9:40:f0:cd:7b:0e:05:2f:99:a2:
2b:96:5d:f4:fa:14:b3:58:44:5e:40:8e:b6:ba:c3:
60:2c:bf:6b:fa:bc:c0:20:73:ef:64:6d:2c:e1:0a:
e0:e8:81:5c:4b:cc:0d:32:83:5d:81:93:56:97:fa:
6f:45:3a:3c:c9:28:d6:c1:8d:e9:72:4a:6a:16:f3:
3b:25:17:15:68:64:45:ec:27:f6:36:80:b0:15:6f:
7e:46:54:1e:69:ae:cf:76:7b:1b:97:21:1a:4b:88:
c7:aa:3b:e8:12:d4:c3:ab:55:e6:73:e7:24:f5:d0:
35:cd:93:cf:9e:34:e1:7f:ec:94:f8:d8:b5:9a:c4:
76:99:34:d8:88:70:93:52:81:4f:61:5c:45:1e:61:
39:0d:6a:c5:e9:8d:f2:da:95:41:f3:72:8f:2b:20:
fe:aa:e9:4b:8f:dd:27:58:ca:a4:af:e5:b8:11:5b:
99:98:1c:d7:21:a2:4a:9d:04:02:bb:f6:65:19:1b:
1b:fc:3b:d4:24:23:49:db:a9:6f:a6:be:59:30:7f:
c8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CB:DD:CD:AF:08:81:1D:8A:63:71:84:B4:FA:8C:BA:97:C8:EF:39
X509v3 Authority Key Identifier:
keyid:CD:37:F9:56:A4:CE:94:EB:1E:C6:4E:76:47:B4:3C:DB:CB:8F:C4:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTf5VqTOlOsexk52R7Q828uPxEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:9d:27:4b:67:65:5e:c3:63:65:18:8b:af:81:54:2b:e3:40:
3a:a0:33:b6:cf:43:6b:19:6c:11:4e:62:2c:5f:c7:de:ce:c4:
45:31:ea:3c:b9:7b:32:73:60:75:11:84:29:de:eb:53:79:22:
f0:c5:01:f0:13:a2:3a:de:d4:b5:a2:9d:4c:cf:e4:43:59:72:
3b:71:dd:2e:7a:24:4c:32:e8:01:3c:40:92:f9:23:9f:86:f3:
b1:76:27:89:63:a9:a8:2c:33:0f:54:1e:86:ae:2a:60:56:05:
38:ff:c9:91:5c:17:9e:8d:93:d1:22:2b:b1:c2:48:5e:dd:84:
ba:4c:c9:de:a6:b9:d1:dd:b1:a8:40:df:1e:a8:d1:3e:b1:c7:
e2:46:07:e5:0e:ba:75:e9:87:6b:1c:03:1b:80:00:c2:4f:c5:
4a:8b:cc:14:b1:fa:fd:c7:cf:7c:d4:8c:ef:a3:1f:6f:15:3e:
b1:d0:19:f5:d8:da:35:09:c9:97:00:ac:ad:60:51:ea:84:92:
41:84:32:7a:02:19:12:2c:ea:0d:55:d9:2a:50:78:5f:19:86:
0b:1d:89:64:4f:dc:03:b3:b3:16:ee:4b:31:1d:f4:06:16:bb:
92:db:10:88:fe:b9:96:3d:39:5e:d1:4e:04:91:06:dc:79:0d:
35:29:21:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:07 2025 by rpki-client