
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft
File: Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft (raw, json)
Hash identifier: kiCJFXK5nH+9Qk2l0mhZS4n6uUc8ya59tlWRpFxFUfY=
Subject key identifier: 94:C4:35:FE:33:5A:D2:B7:2A:83:F6:56:E0:23:61:F4:E2:89:3C:8B
Authority key identifier: 67:70:C9:B9:40:57:48:D2:65:48:FD:5F:CA:7A:64:A0:38:D5:81:2D
Certificate issuer: /CN=6770c9b9405748d26548fd5fca7a64a038d5812d
Certificate serial: 0199FC8F162FEF65C3ECC6114AC96FA8ACEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3DJuUBXSNJlSP1fynpkoDjVgS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft
Manifest number: 1224
Signing time: Sun 19 Oct 2025 13:00:59 +0000
Manifest this update: Sun 19 Oct 2025 13:00:59 +0000
Manifest next update: Mon 20 Oct 2025 13:00:59 +0000
Files and hashes: 1: Z3DJuUBXSNJlSP1fynpkoDjVgS0.crl (hash: Owv/RPZwB/kteHJ4+FUAM9r38tiDlZ1GUdYS8uuzceI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z3DJuUBXSNJlSP1fynpkoDjVgS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:16:2f:ef:65:c3:ec:c6:11:4a:c9:6f:a8:ac:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6770c9b9405748d26548fd5fca7a64a038d5812d
Validity
Not Before: Oct 19 13:00:59 2025 GMT
Not After : Oct 20 13:00:59 2025 GMT
Subject: CN=94c435fe335ad2b72a83f656e02361f4e2893c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c6:16:df:8b:70:b9:da:d9:14:1c:74:84:4d:
28:32:ab:b3:aa:91:dd:6d:5a:cc:b2:a2:b8:51:3f:
13:2c:8f:9a:aa:69:4a:a7:e6:62:58:5b:bd:20:f7:
4d:2e:f0:11:55:94:95:25:f8:9c:18:23:1d:41:1d:
a8:5b:7f:e0:aa:0d:03:2e:05:64:7f:c1:f4:66:8a:
e2:25:fc:1d:b5:67:4c:60:ae:d9:c2:5b:6e:4d:9c:
09:3b:d3:6a:72:9b:c5:f2:4c:f3:e9:67:04:c2:77:
92:d3:55:78:b9:11:d1:0b:bc:2e:d0:e6:91:1e:59:
cd:fe:44:0a:8f:b0:82:3d:71:a5:37:0e:11:03:1e:
82:e8:ba:27:74:42:d8:7a:92:1e:b7:46:f6:9b:13:
53:3c:79:bd:a2:f5:d2:8a:10:b2:0c:1b:d1:d8:0d:
77:be:2c:bd:c3:3d:04:75:c5:6a:a0:2e:53:ed:58:
c5:38:4d:ec:42:a1:ed:58:9d:f0:0e:cb:e5:fb:eb:
a4:a2:09:df:e7:b0:ba:fa:42:0c:d1:08:c9:9f:1a:
72:a8:3c:1f:11:db:52:01:02:60:0e:c5:9a:ec:b6:
fa:8b:bf:44:ee:c9:41:b1:be:08:a6:8b:9e:aa:2a:
1c:38:18:96:c6:e8:b0:28:28:95:2f:ef:55:22:0d:
d7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C4:35:FE:33:5A:D2:B7:2A:83:F6:56:E0:23:61:F4:E2:89:3C:8B
X509v3 Authority Key Identifier:
keyid:67:70:C9:B9:40:57:48:D2:65:48:FD:5F:CA:7A:64:A0:38:D5:81:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3DJuUBXSNJlSP1fynpkoDjVgS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:67:dc:5e:8a:8c:80:2f:68:b4:2e:61:d0:b2:2d:f0:d0:50:
cd:ee:3e:68:b8:8c:d4:cb:91:bd:a1:35:22:9f:70:05:3b:3f:
83:25:a8:8f:96:e4:15:59:7b:08:9f:91:a0:a3:4d:f8:33:90:
28:28:9e:5f:b2:e2:60:65:0c:bb:77:ef:ef:4c:5a:06:a1:2b:
e5:3a:77:bd:19:e8:06:94:f9:4f:e7:cf:b7:10:00:ba:a5:35:
50:84:4e:60:2c:bb:1e:69:d9:fe:51:61:8b:dd:53:0f:bc:01:
19:37:bd:b4:07:25:37:49:19:f7:f6:1d:ce:1e:9a:f4:8a:33:
3c:fe:15:e9:28:6a:c0:77:5b:0a:28:8d:93:9c:30:1f:3e:9e:
fc:33:c9:4f:63:78:cc:c8:4e:9f:b4:e1:9d:d7:38:44:fa:7b:
7a:5c:1f:8d:b7:9e:32:01:ba:83:96:a9:2a:b8:07:0b:59:66:
65:8d:32:5e:5d:a4:63:90:d1:82:3b:e6:15:76:37:ab:23:f5:
bd:ab:1e:03:13:ed:c8:c9:d7:bf:0a:ad:aa:81:d2:91:ab:39:
72:48:4b:bb:88:24:9e:9b:7c:bd:1c:c3:2a:03:5e:f2:71:e4:
81:b6:c8:9b:36:ee:1d:32:a4:59:49:66:c5:cf:76:70:e0:c9:
d0:2d:58:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:13:22 2025 by rpki-client