Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
File: zy3L5YDpQvIQonhxtWUMjCkGOFE.mft (raw, json)
Hash identifier: ugYycAYo6mEVRYqwCsallDhZF9wNMMpbmpnWhA7Z+3o=
Subject key identifier: 6C:29:44:A4:00:E0:73:CE:C9:40:A6:AE:BF:1F:62:5D:A2:D8:96:3A
Authority key identifier: CF:2D:CB:E5:80:E9:42:F2:10:A2:78:71:B5:65:0C:8C:29:06:38:51
Certificate issuer: /CN=cf2dcbe580e942f210a27871b5650c8c29063851
Certificate serial: 0199FBEBF774F3BE563DAFDAA88605C8B80E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 10:02:49 +0000
Manifest this update: Sun 19 Oct 2025 10:02:49 +0000
Manifest next update: Mon 20 Oct 2025 10:02:49 +0000
Files and hashes: 1: zy3L5YDpQvIQonhxtWUMjCkGOFE.crl (hash: Jkqtd6LhFxiPuQ3GIHzqsLu64mt9zk2n6pRFTmzWDi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:f7:74:f3:be:56:3d:af:da:a8:86:05:c8:b8:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2dcbe580e942f210a27871b5650c8c29063851
Validity
Not Before: Oct 19 10:02:49 2025 GMT
Not After : Oct 20 10:02:49 2025 GMT
Subject: CN=6c2944a400e073cec940a6aebf1f625da2d8963a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2c:21:49:d2:4b:ff:7f:27:7e:78:20:b5:1b:
19:94:03:52:49:5b:c4:a9:bb:58:87:8d:a3:a6:c7:
8f:4b:55:cf:2f:c4:b2:da:51:7b:1b:6a:c2:d3:64:
95:58:63:6b:f2:08:e7:88:a9:9c:70:c1:db:d4:93:
4c:f4:a3:d6:94:86:66:2c:a5:e8:14:f8:ed:51:b0:
37:83:ab:cd:f1:f3:fd:d2:d5:98:d9:03:de:71:ef:
fd:8b:40:00:98:05:01:ec:3a:ec:47:7b:5b:f7:0d:
90:96:ab:2d:6b:ce:cf:32:df:c9:83:c3:5c:ee:77:
5c:f9:5b:e6:8d:34:08:72:06:ca:57:40:8e:e4:1f:
be:f0:c4:55:39:f5:99:2a:49:5b:71:6a:62:a2:f8:
1c:37:72:52:f9:ea:44:e1:22:e0:cd:54:11:cc:2d:
1d:4e:b8:26:92:45:76:45:f9:3c:a7:ce:6b:b4:9e:
a9:39:8c:76:59:91:93:41:62:93:5b:23:dd:a0:af:
4b:c2:de:8e:cc:0a:db:98:bf:f0:d0:f0:f6:c1:31:
c2:5b:73:60:07:cc:00:0b:46:fb:b3:61:c2:8c:bc:
4c:56:66:9e:83:55:55:37:18:da:66:19:d9:d1:bd:
ad:48:c1:b8:a2:d5:89:5e:a1:be:4d:46:2c:16:60:
97:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:29:44:A4:00:E0:73:CE:C9:40:A6:AE:BF:1F:62:5D:A2:D8:96:3A
X509v3 Authority Key Identifier:
keyid:CF:2D:CB:E5:80:E9:42:F2:10:A2:78:71:B5:65:0C:8C:29:06:38:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:6c:da:22:7f:d2:13:26:f2:41:d8:98:f9:3d:b1:5b:75:c3:
a4:3f:53:f4:f7:47:d2:c2:9c:e8:1e:e3:d1:0c:82:94:fa:bb:
10:aa:b1:67:b4:ed:81:9f:0d:24:3d:82:e4:3f:ed:e3:a2:50:
1b:f3:16:6d:f6:05:79:32:7c:75:47:16:5d:b1:96:76:f2:78:
ba:3b:30:9f:9c:c5:31:46:80:07:56:42:1b:df:b4:4e:9d:17:
5a:30:d8:9a:dc:e6:08:80:81:73:42:11:b2:ec:b9:8d:e1:00:
06:44:fe:a6:fc:44:aa:30:0c:b4:9e:6c:90:c1:45:ee:2a:ca:
97:f2:77:ed:15:62:a9:02:28:f4:1d:f7:33:bb:fa:5b:bd:9c:
14:ca:1f:3f:5a:70:db:50:ec:16:06:1c:5e:b8:b6:e8:d8:1b:
77:ba:1f:60:ee:a2:a3:5c:3a:c3:67:33:55:7f:5f:f8:15:64:
37:14:b3:30:22:3d:42:22:96:11:5f:c5:64:a1:e3:55:39:ed:
49:81:12:e4:11:97:e0:83:4b:f9:c1:47:d1:8b:82:a4:d3:ca:
67:96:5f:70:51:2e:b8:dc:60:26:4b:20:a1:5b:88:a7:b8:78:
51:87:ae:4a:09:b2:fb:5c:08:d9:d9:97:3c:63:c2:25:35:aa:
25:e6:19:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:14 2025 by rpki-client