Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.mft
File: z3F496AF-Td59GjTS628zBuc6lA.mft (raw, json)
Hash identifier: pJX6ll1jJTdT5yADcHo8pMhaB8JvyfvpShSrBa4LBig=
Subject key identifier: 98:95:A9:59:79:EB:8E:F0:56:87:7F:D0:63:08:20:06:C3:31:33:F0
Authority key identifier: CF:71:78:F7:A0:05:F9:37:79:F4:68:D3:4B:AD:BC:CC:1B:9C:EA:50
Certificate issuer: /CN=cf7178f7a005f93779f468d34badbccc1b9cea50
Certificate serial: 0198D515C4CB3F40D522B5301EEB7E77A555
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3F496AF-Td59GjTS628zBuc6lA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.mft
Manifest number: 0F07
Signing time: Sat 23 Aug 2025 04:00:30 +0000
Manifest this update: Sat 23 Aug 2025 04:00:30 +0000
Manifest next update: Sun 24 Aug 2025 04:00:30 +0000
Files and hashes: 1: z3F496AF-Td59GjTS628zBuc6lA.crl (hash: Pn6N+wUFdPRUqAJzxXcuzQ5/GKb6L4SXBw9CF+19nM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3F496AF-Td59GjTS628zBuc6lA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:c4:cb:3f:40:d5:22:b5:30:1e:eb:7e:77:a5:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7178f7a005f93779f468d34badbccc1b9cea50
Validity
Not Before: Aug 23 04:00:30 2025 GMT
Not After : Aug 24 04:00:30 2025 GMT
Subject: CN=9895a95979eb8ef056877fd063082006c33133f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:57:71:22:a1:b3:57:af:53:91:54:83:05:fa:
44:a6:f9:3b:df:bc:84:93:f0:51:04:35:e7:3d:e6:
00:32:e0:6c:0a:88:ff:d8:01:6c:20:be:04:71:fc:
c3:be:0f:4e:16:22:5d:f1:00:c1:fe:66:32:fa:ab:
2f:58:4d:96:6d:d0:94:f0:c7:67:b3:d5:b5:9d:73:
11:ce:b9:5a:bf:09:9b:29:bc:c3:5c:c5:22:84:2a:
d3:77:c5:7b:e3:ef:d4:75:a8:d9:26:fc:65:7b:00:
ec:f7:d7:1f:aa:30:da:06:5e:5a:1d:e4:91:85:37:
43:67:88:3c:43:da:e8:4e:d2:89:b6:3a:99:c4:16:
1c:d9:fd:8c:ce:4a:7a:37:1c:c8:f7:8d:3c:e5:81:
53:fb:59:9b:f9:36:a0:8e:41:56:09:5b:bc:af:fa:
b3:04:d7:47:85:9d:a1:cb:40:48:92:f6:2a:30:40:
64:61:c5:1b:bf:57:7a:6b:6a:de:75:0f:a8:d6:59:
f3:dd:4b:d6:f2:77:a9:a9:ea:3c:e1:cf:41:ba:e6:
47:a8:f2:82:32:61:a1:67:7e:68:3c:3d:37:be:38:
21:6a:ad:6b:f6:80:a8:e7:4c:94:c6:e4:01:12:26:
25:9c:b4:a6:d0:b0:77:45:e3:71:53:f8:49:97:46:
90:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:95:A9:59:79:EB:8E:F0:56:87:7F:D0:63:08:20:06:C3:31:33:F0
X509v3 Authority Key Identifier:
keyid:CF:71:78:F7:A0:05:F9:37:79:F4:68:D3:4B:AD:BC:CC:1B:9C:EA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3F496AF-Td59GjTS628zBuc6lA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:60:d3:f2:c2:b8:2d:40:76:80:f5:d0:d2:2e:c3:fe:36:4b:
0a:ee:30:15:db:80:11:be:2f:44:40:34:56:d7:0b:e2:d4:39:
7d:23:4b:f8:54:b1:b5:90:f6:d8:02:b5:11:b5:ee:f5:f7:62:
69:ff:29:d8:fa:56:26:c7:74:ce:c3:69:56:d5:07:e0:12:e5:
fd:a5:ee:7d:fb:e9:16:0d:a8:07:35:3a:60:dd:2f:89:cc:9f:
61:1a:7a:0e:51:71:0c:e1:e8:de:b2:b5:25:4c:5d:71:95:29:
1a:71:da:be:74:14:51:89:d2:bf:80:3c:6a:c4:89:10:9e:54:
d4:a9:01:7b:77:41:57:15:c7:7a:61:97:da:30:d3:5c:09:31:
20:78:e0:5f:68:71:d6:f3:68:35:81:e1:7c:8d:70:4f:a0:58:
e2:75:6f:27:6c:03:9f:47:48:1a:20:e3:5d:46:dc:ee:b6:c7:
81:ed:23:f9:19:d5:c6:71:cf:aa:04:8a:39:2f:d3:59:de:13:
ec:57:e2:a9:50:be:31:f4:6c:59:8d:57:96:5c:21:86:0f:c1:
e3:fb:69:d8:63:f2:69:ad:24:be:a7:22:f0:8d:59:ca:76:98:
b8:82:d2:2e:5c:2d:49:e9:43:f3:fe:1a:a2:a9:c4:93:19:f0:
f8:8f:02:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:16 2025 by rpki-client