Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
File: ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft (raw, json)
Hash identifier: sKNJMCXy2qBMAsEyatI9ei9YXdPzh608k/mt4PcOjSE=
Subject key identifier: 16:D4:3F:4D:C2:5E:AC:54:4B:7A:8F:8D:D5:B5:ED:E0:A1:3C:F1:5C
Authority key identifier: 65:D2:B2:F5:4C:A1:71:8C:FD:38:29:31:11:41:56:66:CC:34:E2:62
Certificate issuer: /CN=65d2b2f54ca1718cfd38293111415666cc34e262
Certificate serial: 0199FAA0EC165F83E67639172A4C6CA2BCD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
Manifest number: 128A
Signing time: Sun 19 Oct 2025 04:01:14 +0000
Manifest this update: Sun 19 Oct 2025 04:01:14 +0000
Manifest next update: Mon 20 Oct 2025 04:01:14 +0000
Files and hashes: 1: ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl (hash: 5hYSijVyI8SpjNijUehznXorM+TKJTN2MKrNlBnKed4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a0:ec:16:5f:83:e6:76:39:17:2a:4c:6c:a2:bc:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d2b2f54ca1718cfd38293111415666cc34e262
Validity
Not Before: Oct 19 04:01:14 2025 GMT
Not After : Oct 20 04:01:14 2025 GMT
Subject: CN=16d43f4dc25eac544b7a8f8dd5b5ede0a13cf15c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cb:05:f0:37:cc:ad:98:19:f1:ff:26:cc:bb:
e7:7b:5c:ff:05:09:89:09:0e:a7:57:30:bf:38:b9:
4b:b6:82:f5:ce:f0:de:bd:fa:a9:92:e3:2a:ab:d2:
10:7a:95:f2:4c:0d:67:be:39:fe:c5:99:c8:79:a0:
b2:6f:0b:67:e8:4d:52:e6:6d:b4:1d:fc:f2:e5:53:
80:1a:79:c9:82:a9:8d:c8:d1:d3:19:a7:98:e1:dc:
df:96:3c:cb:14:c5:9d:33:8c:c2:ea:8f:04:af:09:
13:f9:b3:b9:9c:77:a5:09:bc:83:b7:11:31:d4:0d:
af:d2:f0:ee:f7:e8:63:2b:44:3e:81:b2:5f:f3:2d:
b6:c4:e8:7e:01:5d:7a:03:68:46:a7:fb:8a:51:c2:
a3:69:c0:4f:48:2f:b8:ca:8b:26:18:fa:b0:ab:a4:
45:22:ee:56:a5:6b:e3:d1:a5:98:c2:74:6d:b2:26:
de:63:76:2c:4f:16:10:a0:b9:0b:22:a5:ae:9c:bd:
d7:29:4a:6a:a6:e0:f0:cd:42:bf:94:22:16:5e:64:
a9:38:d5:d4:b4:c6:4e:99:89:6b:94:ef:cb:6d:dc:
3d:a1:00:ea:00:52:e4:92:d2:5e:d7:ba:a1:fb:dc:
6d:e1:d2:db:18:ec:1d:28:5b:79:e0:9d:a1:fe:88:
d6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D4:3F:4D:C2:5E:AC:54:4B:7A:8F:8D:D5:B5:ED:E0:A1:3C:F1:5C
X509v3 Authority Key Identifier:
keyid:65:D2:B2:F5:4C:A1:71:8C:FD:38:29:31:11:41:56:66:CC:34:E2:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:5c:d7:28:bb:51:47:a7:19:66:c2:61:d0:fc:5d:a7:cf:d6:
a4:04:8c:51:9e:4d:bd:59:84:33:2f:51:c3:58:33:1f:4d:16:
0e:5e:b7:bd:98:46:1b:e4:96:5a:99:2f:c3:9e:97:8b:72:a9:
3c:75:ff:1b:ab:0c:6a:fe:d4:03:91:4e:3f:fd:43:42:7a:97:
70:72:4d:75:52:f2:02:90:8b:4d:e2:cf:af:2b:c4:23:5a:8d:
8c:e6:0b:f5:47:07:b1:fe:c1:53:78:61:c3:e0:a2:12:9b:15:
c6:3e:7e:6e:b7:e7:b7:98:eb:6b:86:95:75:64:38:99:e6:17:
f4:4c:56:5f:40:74:fd:84:68:4e:8b:f6:a4:e1:76:98:8d:e9:
8c:18:35:cb:eb:cc:a5:0d:1c:64:ef:eb:8d:29:9a:6a:2c:74:
02:c7:f3:d7:b0:2c:1e:5e:0c:d7:7a:71:25:a3:cb:fe:34:e5:
59:d8:24:a1:6e:59:a3:83:61:3e:dc:78:77:d5:6e:19:57:2e:
a2:bb:61:18:c8:52:ef:e9:f9:75:39:c7:15:d3:59:e2:eb:e7:
50:d7:4f:56:e7:4e:11:3e:f1:31:be:18:67:b8:8b:83:36:fa:
f5:f1:54:fc:23:3e:d5:00:00:f4:89:3a:0c:9d:8d:14:7f:49:
11:4c:1b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:58:05 2025 by rpki-client