Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft
File: ztSbv4TJn76HrP4bvg2_esY7Q98.mft (raw, json)
Hash identifier: dXSLMpFozYgtB9jY5JkeIKTkw5gIxAP5BYF7ZN6hAXY=
Subject key identifier: EE:C6:61:B4:78:12:05:6D:B9:2E:AA:21:8E:8B:CF:19:41:97:84:1C
Authority key identifier: CE:D4:9B:BF:84:C9:9F:BE:87:AC:FE:1B:BE:0D:BF:7A:C6:3B:43:DF
Certificate issuer: /CN=ced49bbf84c99fbe87acfe1bbe0dbf7ac63b43df
Certificate serial: 0199FE7D94A6ECD8CFF9D387046FF3B404F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztSbv4TJn76HrP4bvg2_esY7Q98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 22:01:06 +0000
Manifest this update: Sun 19 Oct 2025 22:01:06 +0000
Manifest next update: Mon 20 Oct 2025 22:01:06 +0000
Files and hashes: 1: ztSbv4TJn76HrP4bvg2_esY7Q98.crl (hash: JRhAg9DRduscrZWvyrWqIeEZucDhxnwE26APcy6m6og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztSbv4TJn76HrP4bvg2_esY7Q98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:94:a6:ec:d8:cf:f9:d3:87:04:6f:f3:b4:04:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced49bbf84c99fbe87acfe1bbe0dbf7ac63b43df
Validity
Not Before: Oct 19 22:01:06 2025 GMT
Not After : Oct 20 22:01:06 2025 GMT
Subject: CN=eec661b47812056db92eaa218e8bcf194197841c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6a:4f:30:1d:4d:d7:92:e9:1c:79:61:d1:3a:
94:39:bf:1b:e8:43:f6:f5:c7:8f:8d:e6:d9:f8:df:
d1:32:6a:36:e8:9b:9d:3e:cd:bf:ee:42:33:28:04:
8e:42:76:6b:a8:0b:13:e7:53:29:76:5a:ac:74:fa:
c9:aa:69:48:d2:fb:53:97:22:21:7f:4a:ae:db:cb:
21:38:70:c9:da:0a:af:1d:a3:bc:de:6f:15:c5:9f:
88:fe:db:72:ca:0b:92:f7:d6:62:77:fa:c4:88:01:
3c:ca:ec:cc:7d:dd:9a:14:37:9c:6c:14:9b:ec:1f:
ab:34:89:9f:df:eb:8a:43:be:0b:3f:9a:ef:7e:ae:
c9:93:43:c1:fc:c2:d1:11:c4:77:7f:a3:77:5c:9d:
50:dc:f1:16:42:e3:c8:50:b6:7f:b0:1b:6b:20:f8:
3f:1b:83:21:b8:29:3f:da:67:26:0d:21:c6:60:d8:
a6:89:9e:2e:b2:d4:76:69:15:d1:6a:9a:d1:6d:a9:
4a:70:db:6f:66:b3:b7:1b:c6:cc:1b:30:70:18:c5:
31:dc:41:60:af:80:4b:e5:23:eb:57:cd:97:df:b4:
23:e6:be:94:c7:c6:25:2a:6d:43:6f:3b:11:f3:66:
68:4b:ef:36:4d:df:21:23:39:6e:a7:ab:9f:f4:6c:
51:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C6:61:B4:78:12:05:6D:B9:2E:AA:21:8E:8B:CF:19:41:97:84:1C
X509v3 Authority Key Identifier:
keyid:CE:D4:9B:BF:84:C9:9F:BE:87:AC:FE:1B:BE:0D:BF:7A:C6:3B:43:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztSbv4TJn76HrP4bvg2_esY7Q98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:46:01:c1:a3:20:63:1a:97:2d:68:81:9c:85:6f:14:63:1f:
09:f5:c0:46:19:ba:c2:d4:d5:60:10:12:19:20:be:7b:28:a5:
9b:ee:8c:ef:37:3d:d4:7a:ad:d8:d4:e3:bb:0c:91:9d:26:bd:
7b:50:03:d6:71:d6:e2:cc:81:a0:dd:8b:cc:7a:18:58:cb:64:
46:91:bf:08:4a:7d:0d:ea:45:36:6c:a6:61:f7:5a:04:c1:8f:
df:cc:90:9d:f8:cb:83:8a:e1:2a:ec:42:9f:0d:80:8b:f4:af:
75:bd:da:5a:47:b4:d5:75:46:a8:9f:4c:db:8a:72:b5:93:97:
61:24:fe:20:11:35:7f:b6:98:1d:13:79:f8:cc:71:ab:69:f3:
d1:52:c9:13:c0:89:c9:cd:48:16:0a:0b:c8:23:4d:08:d5:58:
d8:5c:9b:e9:40:1d:ca:20:b9:99:73:63:dd:09:2a:a5:c9:a5:
af:59:f7:c3:47:e3:d6:9d:4b:9f:8f:7e:24:14:be:0d:2e:63:
bf:a5:b7:44:3b:7d:69:a1:96:0b:06:8c:96:c1:7f:9d:89:d0:
2d:e9:83:66:b8:47:e8:82:a4:6e:23:3e:de:c5:36:c4:f8:19:
94:b0:d3:a0:ed:14:95:0f:e3:2e:54:58:a3:af:cc:f2:36:fc:
6c:00:8c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:20 2025 by rpki-client