Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
File: C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft (raw, json)
Hash identifier: dqL3WxtkCGvWR0lpCRM/t9rnkwyz0VeUkTw1wLVUMkE=
Subject key identifier: C8:01:B2:81:76:FF:E4:F3:71:8B:17:66:11:64:44:54:58:6A:86:3F
Authority key identifier: 0B:FC:FD:E0:A7:72:FA:7C:3E:9D:19:FA:70:77:F7:02:6B:D7:71:B2
Certificate issuer: /CN=0bfcfde0a772fa7c3e9d19fa7077f7026bd771b2
Certificate serial: 0199FF22DEF9AC2774543C62D5B340915D0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
Manifest number: 01BE
Signing time: Mon 20 Oct 2025 01:01:39 +0000
Manifest this update: Mon 20 Oct 2025 01:01:39 +0000
Manifest next update: Tue 21 Oct 2025 01:01:39 +0000
Files and hashes: 1: C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl (hash: dA3c43RDN5mXNaMnNEKrvI587UZQc7VqVpXvenR+UAk=)
2: ZFWlomNdM98mTRRpq_aoaHkQskg.roa (hash: 2nCI1N6NzlzYTCwqy1BPldF9j5r8eU6FY2+RvTWo+Dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:de:f9:ac:27:74:54:3c:62:d5:b3:40:91:5d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfcfde0a772fa7c3e9d19fa7077f7026bd771b2
Validity
Not Before: Oct 20 01:01:39 2025 GMT
Not After : Oct 21 01:01:39 2025 GMT
Subject: CN=c801b28176ffe4f3718b176611644454586a863f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a1:5a:9c:21:9a:12:71:7d:31:16:87:71:fb:
1e:f8:b6:77:d9:1d:c0:df:a6:6d:94:44:d9:d7:54:
53:62:81:e2:e5:f2:16:8e:e1:6b:de:f0:9c:28:ef:
af:74:dd:e8:d3:b5:50:b6:d3:fb:4b:5e:b6:d4:ad:
1d:55:fa:34:df:11:4c:ed:43:69:f3:de:b0:b1:b7:
08:d5:ed:ba:2c:37:87:8e:92:31:44:9a:e9:74:5b:
b6:50:68:85:cc:45:d1:15:4b:91:1e:15:79:b5:53:
c5:90:dc:65:70:f6:dd:8c:c3:d3:2b:8f:b5:98:ab:
ce:b4:8a:56:7a:8c:61:af:c7:b8:e7:86:db:4d:3f:
e1:96:0f:cf:10:3f:a5:94:3f:67:5c:d4:aa:24:9b:
08:7f:2b:56:54:21:2e:9b:48:a2:0a:d4:27:3d:11:
24:54:60:96:24:66:b7:cf:42:9b:c9:6b:54:ec:c8:
d5:0b:0a:53:3c:8d:06:74:52:7a:cc:54:84:69:c1:
91:ab:2a:c1:d2:8b:3f:1e:7a:61:79:eb:19:22:56:
5f:fe:21:95:77:c4:4c:ee:b7:a0:02:04:9f:65:d0:
d7:d5:2d:2b:96:38:68:f2:c5:83:91:4f:fe:f6:29:
97:20:e0:50:da:e7:33:47:46:0d:9e:07:80:43:65:
ea:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:01:B2:81:76:FF:E4:F3:71:8B:17:66:11:64:44:54:58:6A:86:3F
X509v3 Authority Key Identifier:
keyid:0B:FC:FD:E0:A7:72:FA:7C:3E:9D:19:FA:70:77:F7:02:6B:D7:71:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:bc:9a:c3:1c:1b:5f:22:cb:33:46:62:67:a3:c2:aa:77:de:
8b:88:2c:ed:9a:09:39:bf:fc:b8:60:8b:a5:dc:51:7b:0a:54:
60:00:84:89:5b:87:7c:7a:b3:77:68:7c:41:97:e2:86:f5:2c:
c3:7b:b2:78:3e:46:90:bf:65:0d:78:3e:8b:b4:6c:a8:e6:06:
89:8e:3c:65:dd:e2:93:e4:50:80:1c:4d:28:5f:93:19:ee:0a:
e0:95:0a:32:07:bd:ee:51:c4:0c:f8:f7:67:35:18:fb:83:05:
73:19:4d:65:8b:6c:8d:70:5a:2c:d3:71:82:3a:c5:22:e4:8b:
f4:d6:33:60:7f:a2:0d:1c:f8:87:92:75:00:3d:3f:f7:9b:23:
03:54:27:8b:bc:12:28:b7:c5:37:a6:8f:8e:12:f2:c7:54:39:
0a:de:c7:52:13:2b:3e:c9:b6:2a:1f:91:f0:46:c5:d0:2d:ec:
e9:42:1b:8d:66:3f:d3:c2:25:27:88:aa:9e:76:65:bc:15:38:
f2:4b:f4:96:15:42:a9:55:71:69:e2:37:61:0f:4b:41:e5:ce:
61:c8:59:82:cd:95:49:a0:cd:65:70:bb:94:25:44:4e:e9:51:
6d:86:98:45:79:bd:91:70:04:f9:31:36:89:03:28:9e:a4:6e:
50:a6:df:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:44:50 2025 by rpki-client