Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.mft
File: Z8i133U8dJrleBD52T87pRrgXVw.mft (raw, json)
Hash identifier: Z8vohdwS63WqvOeCA3t9zbHRDUlawci1CUwj4SQsI6I=
Subject key identifier: 3B:63:51:22:BA:A0:ED:79:A5:F5:29:0B:26:28:BC:92:23:FF:89:AE
Authority key identifier: 67:C8:B5:DF:75:3C:74:9A:E5:78:10:F9:D9:3F:3B:A5:1A:E0:5D:5C
Certificate issuer: /CN=67c8b5df753c749ae57810f9d93f3ba51ae05d5c
Certificate serial: 0199FDD9DEED437CEE595B9884239FA0A5F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8i133U8dJrleBD52T87pRrgXVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.mft
Manifest number: 0FDF
Signing time: Sun 19 Oct 2025 19:02:17 +0000
Manifest this update: Sun 19 Oct 2025 19:02:17 +0000
Manifest next update: Mon 20 Oct 2025 19:02:17 +0000
Files and hashes: 1: Z8i133U8dJrleBD52T87pRrgXVw.crl (hash: D9YLzKyrEQJNuLfauRjjWcrnhM7/q5qll3cb0+ABE9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8i133U8dJrleBD52T87pRrgXVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:de:ed:43:7c:ee:59:5b:98:84:23:9f:a0:a5:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c8b5df753c749ae57810f9d93f3ba51ae05d5c
Validity
Not Before: Oct 19 19:02:17 2025 GMT
Not After : Oct 20 19:02:17 2025 GMT
Subject: CN=3b635122baa0ed79a5f5290b2628bc9223ff89ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a6:12:5e:fd:94:13:79:54:b1:79:ed:59:f2:
50:be:c2:d2:ef:a8:20:63:5b:a7:30:fb:36:a5:09:
1a:eb:74:cc:a2:d8:6a:53:0a:24:9d:c2:f4:13:51:
cb:8e:6e:1e:14:b5:e1:e2:34:bb:4b:6e:df:7b:1a:
44:26:d5:9d:c9:32:ae:b7:aa:2b:3a:88:8d:bc:9c:
10:49:47:cf:b9:4c:38:24:5c:1a:fa:07:6b:d2:22:
31:82:db:9b:63:b2:f6:79:a0:f9:d3:d9:aa:dc:18:
6d:c6:50:7d:f9:97:68:f7:17:82:75:3a:8b:87:03:
70:85:97:9c:81:ba:82:52:b4:02:ae:9a:0b:14:4b:
41:c0:7d:33:6f:0f:f9:8c:bf:ab:c4:96:9b:ef:4a:
6a:d3:cb:d3:ab:49:c2:59:81:6e:26:ce:8f:52:fc:
30:66:35:23:1f:6a:12:68:01:8d:7f:56:a7:9d:b3:
d3:48:b3:cb:96:f9:22:50:7f:76:08:ac:85:e0:bf:
38:7e:29:ef:f0:80:a6:d1:0e:83:88:51:6b:fa:c4:
1b:95:5a:b7:af:a5:84:ab:a7:d7:24:ca:40:21:69:
92:56:a0:d0:cc:60:a7:cb:05:e3:27:c8:41:05:0e:
7e:98:11:ee:67:85:63:14:5f:08:54:db:00:87:a6:
f5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:63:51:22:BA:A0:ED:79:A5:F5:29:0B:26:28:BC:92:23:FF:89:AE
X509v3 Authority Key Identifier:
keyid:67:C8:B5:DF:75:3C:74:9A:E5:78:10:F9:D9:3F:3B:A5:1A:E0:5D:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8i133U8dJrleBD52T87pRrgXVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:55:88:95:26:34:a7:74:5f:33:bd:bc:b2:bb:4d:74:4b:9b:
6c:fe:1c:86:e1:90:2a:6b:7d:82:d3:c9:a6:41:65:72:8d:a7:
ca:88:21:9e:5f:9d:fe:21:6b:69:11:f9:e8:19:5a:46:e8:b7:
70:5f:4c:77:f8:ef:16:49:24:6b:21:cd:8e:4a:b6:17:2b:15:
6b:92:b3:b0:8f:d3:82:9f:8b:d7:2a:15:ab:49:db:53:f2:79:
25:d8:d9:28:05:ff:e8:e9:04:56:39:21:13:50:26:ec:3b:f6:
17:1d:a5:88:58:26:29:3c:f4:75:62:ea:9d:9a:b7:80:8f:57:
c6:bb:bf:5b:54:73:05:a8:51:0e:ec:ec:66:ab:44:ef:c1:0d:
67:a0:1b:c4:c2:2f:a5:89:e4:b3:63:8b:6d:be:0e:79:e3:cf:
5d:09:d7:7a:c9:df:1c:79:df:c3:b3:d8:c5:49:84:5f:27:23:
6c:66:9d:c8:53:dd:d0:a1:46:eb:8b:7a:5c:1e:dc:db:4e:b6:
84:7c:5b:07:92:8b:f4:bc:10:75:4d:c0:0e:be:15:9b:d4:d6:
7a:42:30:03:9f:8f:32:d6:c4:7a:d5:38:02:2a:cb:46:09:7e:
88:85:bc:e3:fb:e6:fc:da:36:46:e9:59:4e:0a:77:64:93:01:
0c:f1:70:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:28:44 2025 by rpki-client