Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
File: z_XdxJt16oTfRa4RTEMh1G1azUo.mft (raw, json)
Hash identifier: AvtXYCfXV2Z9VsxYkWhK9WT+Woik7ZT9UZhJx2l/LJw=
Subject key identifier: 37:FF:8A:D5:67:0A:C7:85:84:1D:27:F5:6C:2F:8E:08:29:5B:47:71
Authority key identifier: CF:F5:DD:C4:9B:75:EA:84:DF:45:AE:11:4C:43:21:D4:6D:5A:CD:4A
Certificate issuer: /CN=cff5ddc49b75ea84df45ae114c4321d46d5acd4a
Certificate serial: 0199FEB4C7E7842A249B1024494B26E2BE3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
Manifest number: 0E26
Signing time: Sun 19 Oct 2025 23:01:24 +0000
Manifest this update: Sun 19 Oct 2025 23:01:24 +0000
Manifest next update: Mon 20 Oct 2025 23:01:24 +0000
Files and hashes: 1: z_XdxJt16oTfRa4RTEMh1G1azUo.crl (hash: SWzxMJl6bPU+m6Yvnfspcy63TPegi9jdQFCwVRIUpkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:c7:e7:84:2a:24:9b:10:24:49:4b:26:e2:be:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff5ddc49b75ea84df45ae114c4321d46d5acd4a
Validity
Not Before: Oct 19 23:01:24 2025 GMT
Not After : Oct 20 23:01:24 2025 GMT
Subject: CN=37ff8ad5670ac785841d27f56c2f8e08295b4771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9f:a9:bb:6f:e4:5f:69:a9:dd:ce:5f:98:0c:
e8:e8:fa:0a:ea:40:0a:c7:f0:1b:e3:66:e7:45:2a:
74:b7:64:6d:e6:03:fb:1d:40:f0:08:6b:16:31:00:
11:be:da:2a:13:e1:d0:ee:95:16:c3:bc:5e:23:c5:
c7:c4:91:7b:5c:d5:4b:5d:34:44:4f:73:be:6e:2e:
c7:bd:f5:7f:d2:b3:be:71:22:f8:41:90:52:d9:cc:
e1:66:2f:92:20:e9:3a:95:96:37:ed:49:99:63:97:
91:a1:45:eb:80:1b:ab:85:48:e9:8d:00:d5:37:79:
85:ae:78:7e:9f:ca:f6:5d:35:a4:61:3b:f4:86:7e:
ed:0d:fe:1c:54:7f:a6:e6:22:c0:28:f0:93:32:af:
6f:55:5d:cb:22:a9:7c:93:09:79:69:64:85:c1:58:
c4:8b:10:06:32:46:1b:a0:80:68:39:89:2c:20:03:
c2:05:35:30:2c:10:66:cc:ac:5f:7c:14:58:47:55:
23:8a:9f:02:01:c7:22:d5:2e:4d:c7:d6:66:12:21:
fc:55:4f:8e:96:9f:64:9a:ec:12:d5:e5:d6:3d:f5:
19:51:67:df:41:79:fd:99:45:2d:65:9a:ea:36:f7:
0a:94:5b:99:6b:c9:45:87:3b:c2:d9:c8:64:ed:5a:
97:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:FF:8A:D5:67:0A:C7:85:84:1D:27:F5:6C:2F:8E:08:29:5B:47:71
X509v3 Authority Key Identifier:
keyid:CF:F5:DD:C4:9B:75:EA:84:DF:45:AE:11:4C:43:21:D4:6D:5A:CD:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f4:5c:0e:56:8c:6c:d1:a3:0c:07:fa:f7:d8:91:3f:63:cb:
e8:10:55:78:fc:53:78:40:0b:ea:62:83:e9:20:62:4b:f7:c0:
3a:01:7d:87:b9:4e:7a:29:37:95:14:c2:ad:9b:c5:8e:2a:43:
5e:9e:6f:d0:be:9c:64:80:f5:6a:ea:41:e3:56:49:85:a6:e1:
66:3f:2c:25:09:89:43:df:a6:e5:07:f7:d4:18:cd:07:76:0c:
b6:79:9a:bf:7b:d0:8d:09:55:cb:6b:7e:08:50:f8:20:4b:87:
d9:c5:84:cc:b5:31:25:81:e8:f0:f9:05:fd:56:23:b3:fc:ab:
c7:7f:d6:50:2d:b7:04:c2:ba:00:e3:a9:6b:0c:a2:0b:13:3c:
8a:0d:65:85:f3:09:68:b3:8a:92:60:5d:a7:f2:83:2c:c4:ad:
fc:8a:00:49:2f:10:df:51:ad:09:d0:fb:3b:c0:91:e7:6c:5e:
97:33:7b:41:4a:05:d3:9b:92:c4:36:83:32:ab:6f:2b:c5:69:
71:1e:6a:e0:64:e0:59:b9:cd:0d:71:b6:e1:3f:7a:32:97:f4:
6f:5e:93:b0:ac:ce:94:e7:e6:c3:e0:9b:de:ba:5b:22:e1:84:
94:ba:98:33:09:78:25:93:ca:4a:a5:2e:a8:c0:fb:33:aa:b1:
f8:f8:08:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:03:23 2025 by rpki-client