Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
File: ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft (raw, json)
Hash identifier: Bytj5VxkjvRRuXYePkXwkN7TEPsu1lDDNYTS/zWIXuw=
Subject key identifier: FA:92:2D:35:B5:A1:DC:1B:8E:A4:10:5B:4F:EE:0B:F5:AD:19:43:9C
Authority key identifier: 64:21:47:0D:59:22:29:8E:D0:46:85:E1:DF:0E:FD:FD:D2:A6:66:07
Certificate issuer: /CN=6421470d5922298ed04685e1df0efdfdd2a66607
Certificate serial: 0199FB46048703A3BC5B9489BA652030597D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
Manifest number: 0D51
Signing time: Sun 19 Oct 2025 07:01:33 +0000
Manifest this update: Sun 19 Oct 2025 07:01:33 +0000
Manifest next update: Mon 20 Oct 2025 07:01:33 +0000
Files and hashes: 1: ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl (hash: GtL5uhnadonIVQusubcYGJ6WqBEOcBU6YoaSv7tX2YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:04:87:03:a3:bc:5b:94:89:ba:65:20:30:59:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6421470d5922298ed04685e1df0efdfdd2a66607
Validity
Not Before: Oct 19 07:01:33 2025 GMT
Not After : Oct 20 07:01:33 2025 GMT
Subject: CN=fa922d35b5a1dc1b8ea4105b4fee0bf5ad19439c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f3:c6:36:15:84:91:44:56:47:ef:03:a8:1b:
ca:fb:7f:99:bd:40:b5:b5:1c:c5:d3:02:ff:d1:ae:
c9:c9:0e:d5:8a:85:f9:26:22:88:dc:b7:b1:16:f1:
1b:31:0b:cb:63:df:b6:b2:2d:e6:b1:b1:6c:cb:12:
91:94:48:15:65:8f:cb:ea:fc:65:3d:22:d8:65:97:
fb:32:7a:12:cc:ca:c2:f4:73:54:e3:70:de:65:d2:
6a:55:e7:c0:6f:1f:3f:87:96:8f:ea:dc:08:7c:eb:
89:b8:70:c1:9c:aa:82:71:10:13:b9:c1:c4:e1:fb:
cb:e5:5c:a7:90:63:e3:ca:35:35:45:5a:ec:e6:b4:
bc:c7:31:55:59:10:fe:60:66:5b:c3:74:e6:d6:f7:
f8:c7:02:ad:53:e4:a8:84:9e:5d:c6:9d:d8:83:29:
ba:62:32:e8:be:4f:02:94:8f:4d:2d:bf:4a:a6:c0:
3b:3a:c8:90:93:db:e4:c4:a5:76:c1:85:51:b9:1c:
7d:d1:cc:04:ac:57:8b:19:42:dd:cd:cc:c3:49:34:
c1:87:f8:0c:cc:66:0a:63:6e:4e:ff:03:31:fc:f8:
b8:d8:a8:1f:82:db:96:1c:99:2e:f8:86:09:0d:37:
ff:9c:67:85:a4:2e:2c:b1:a1:0f:04:fc:75:68:d3:
61:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:92:2D:35:B5:A1:DC:1B:8E:A4:10:5B:4F:EE:0B:F5:AD:19:43:9C
X509v3 Authority Key Identifier:
keyid:64:21:47:0D:59:22:29:8E:D0:46:85:E1:DF:0E:FD:FD:D2:A6:66:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:8e:30:b8:e1:fc:ed:59:cb:25:ff:ae:a7:fe:c7:59:b7:2e:
76:e9:59:69:3d:d1:e5:4e:14:4a:06:79:c3:b4:d1:23:55:2e:
ee:04:77:4a:d0:8b:6c:fd:6f:2f:ca:95:21:1b:e1:2a:2e:cc:
0a:0b:00:67:d4:f3:65:bb:69:7a:a7:68:62:ee:a0:87:0a:60:
6a:ac:91:66:12:79:5b:2c:90:6d:d3:37:bd:65:8f:7d:c0:01:
8a:27:c1:41:a0:ac:61:18:e6:52:ba:ed:51:1c:ca:25:19:b1:
5e:ba:ed:d6:82:6f:9a:f8:70:c3:b9:7e:1b:53:ae:80:5c:0e:
97:ef:63:72:d0:67:8c:95:e1:a4:d3:cb:12:ed:01:62:71:70:
0b:7f:75:4a:fb:a2:f8:ac:44:7b:d5:af:e3:cd:fe:9c:cc:7a:
69:89:69:bf:33:9d:ce:21:00:b5:1f:3b:e9:6c:20:d1:a3:13:
0f:1c:04:a8:09:df:c8:68:6d:be:e1:43:03:d4:bf:0b:82:ae:
f0:ec:6d:b9:f4:31:e4:75:98:1b:07:ba:98:73:c8:10:a7:2f:
e2:f8:d0:58:3c:0c:5c:73:c6:12:d4:94:a0:8e:60:a0:a5:54:
fc:45:be:35:29:bd:b8:37:6f:42:7a:80:0c:b4:1a:5c:0f:93:
be:6d:e4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:19 2025 by rpki-client