Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
File: zxTbNzCF4owNm3S-e46JdAuV-fo.mft (raw, json)
Hash identifier: VW+3S/pXlSCIlhv2CglrAzjPAvA6LKtv6e3frLVr9IY=
Subject key identifier: B7:9F:34:7E:C7:7D:1A:AF:E3:B1:51:8C:12:49:7A:AC:EB:69:A0:1A
Authority key identifier: CF:14:DB:37:30:85:E2:8C:0D:9B:74:BE:7B:8E:89:74:0B:95:F9:FA
Certificate issuer: /CN=cf14db373085e28c0d9b74be7b8e89740b95f9fa
Certificate serial: 0199FBEA8938FAEC46C28404DF3281CC0043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
Manifest number: 0CDD
Signing time: Sun 19 Oct 2025 10:01:15 +0000
Manifest this update: Sun 19 Oct 2025 10:01:15 +0000
Manifest next update: Mon 20 Oct 2025 10:01:15 +0000
Files and hashes: 1: zxTbNzCF4owNm3S-e46JdAuV-fo.crl (hash: Jy026EQpw24ld2qMDFNwAmCn4sWbESyprQpxEDhe1Vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:89:38:fa:ec:46:c2:84:04:df:32:81:cc:00:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf14db373085e28c0d9b74be7b8e89740b95f9fa
Validity
Not Before: Oct 19 10:01:15 2025 GMT
Not After : Oct 20 10:01:15 2025 GMT
Subject: CN=b79f347ec77d1aafe3b1518c12497aaceb69a01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f5:99:63:20:1e:50:12:02:0d:4f:88:49:41:
c8:2d:e3:89:21:e7:f1:78:c0:04:b2:73:3a:2c:6c:
d7:ab:17:25:04:89:06:fb:c8:47:0e:db:05:93:2f:
8e:82:05:76:57:68:99:53:29:64:f4:f3:8e:5c:0b:
7e:48:9a:3d:5e:6f:5d:2c:98:70:06:9e:2a:5f:cc:
d6:f2:9b:d5:51:3b:fe:80:e5:a2:83:db:e6:ac:16:
bf:de:d3:5f:ef:c0:43:e9:0e:44:23:86:79:7d:f1:
f7:df:78:26:fb:12:72:cf:50:e3:a4:88:82:d8:2a:
de:22:ab:6e:67:62:87:d6:46:f6:af:e0:50:94:6a:
33:c3:16:c2:e3:1f:75:4b:13:05:3d:9e:3a:52:80:
cc:14:8f:54:74:be:56:3c:b7:71:cb:4e:d5:88:41:
c4:29:e1:fb:97:73:f3:2f:98:ab:9d:27:06:ff:0e:
f7:be:1b:52:66:0b:91:02:40:59:f9:72:53:ba:5a:
75:7d:40:28:11:e0:77:63:72:2b:b0:d6:6d:df:d4:
72:dc:b5:ad:d1:16:4b:53:1d:21:c3:11:27:bf:81:
bb:25:19:54:df:d5:59:2a:24:e9:82:bb:c3:59:a0:
c7:45:e3:66:b2:ef:21:c3:75:31:fe:a6:57:88:f3:
fd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9F:34:7E:C7:7D:1A:AF:E3:B1:51:8C:12:49:7A:AC:EB:69:A0:1A
X509v3 Authority Key Identifier:
keyid:CF:14:DB:37:30:85:E2:8C:0D:9B:74:BE:7B:8E:89:74:0B:95:F9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:23:8a:ea:ae:ca:d3:53:3b:94:8d:68:35:cd:bb:0e:d2:a5:
76:a2:9f:19:3d:1a:62:9c:37:ad:b5:16:19:c1:c4:f1:46:9c:
be:1d:43:60:51:6e:54:63:8a:80:e2:9e:06:03:52:e5:f7:13:
48:98:20:6a:99:31:57:96:8a:6d:da:4b:dd:94:f9:b9:4e:0f:
75:ad:24:61:11:0f:bc:d8:57:4c:c2:df:32:2e:3b:03:a7:6b:
95:cb:64:04:3f:f9:74:45:c4:53:59:bf:12:9d:1c:2a:cb:cb:
f6:8e:36:93:11:6e:de:7d:42:1f:e8:0f:b2:73:74:57:e4:21:
ff:cf:f8:d1:b1:40:56:cd:99:12:be:02:62:27:b5:0f:86:2c:
37:40:14:8d:86:9e:b0:72:0b:cb:2a:6b:d6:b0:05:04:7b:2e:
d0:92:81:76:11:de:cf:a9:77:29:f9:b3:75:84:b7:44:2b:aa:
69:97:ec:b2:c5:bd:68:2f:06:62:48:9f:5d:9a:e5:4e:b8:aa:
06:bc:5d:44:ad:a9:1f:79:55:f9:a5:19:8e:19:a4:cc:cc:7e:
3a:ba:f8:fa:63:18:29:26:de:2a:31:3e:2d:cf:67:53:a1:fb:
b3:f4:3a:6b:25:71:7d:bd:92:06:74:97:6d:4d:d7:bf:02:12:
68:97:be:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:24 2025 by rpki-client