Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
File: zZocvpsLS6e0fUKq1nJXFITlWV8.mft (raw, json)
Hash identifier: 0ScH3XD1lWdrekpRLBSOHO0jYmHWylSMdrnwVgA80Ig=
Subject key identifier: BE:BA:36:AA:32:4B:C5:69:08:3C:EC:F1:72:A2:CD:8D:1A:F5:A2:BC
Authority key identifier: CD:9A:1C:BE:9B:0B:4B:A7:B4:7D:42:AA:D6:72:57:14:84:E5:59:5F
Certificate issuer: /CN=cd9a1cbe9b0b4ba7b47d42aad672571484e5595f
Certificate serial: 0199FAA0EACBED8A5944E09A4ACC589BC1EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
Manifest number: 147F
Signing time: Sun 19 Oct 2025 04:01:13 +0000
Manifest this update: Sun 19 Oct 2025 04:01:13 +0000
Manifest next update: Mon 20 Oct 2025 04:01:13 +0000
Files and hashes: 1: zZocvpsLS6e0fUKq1nJXFITlWV8.crl (hash: ua9Es3ysjwppMbaFagxSiCuolhKTsK9Vs9IbbLQk46U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a0:ea:cb:ed:8a:59:44:e0:9a:4a:cc:58:9b:c1:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9a1cbe9b0b4ba7b47d42aad672571484e5595f
Validity
Not Before: Oct 19 04:01:13 2025 GMT
Not After : Oct 20 04:01:13 2025 GMT
Subject: CN=beba36aa324bc569083cecf172a2cd8d1af5a2bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7e:cc:6c:f3:b9:6b:fb:89:9e:6c:58:bf:86:
f3:09:ee:6c:f2:b1:36:d8:0c:70:51:af:af:81:f7:
16:12:45:9f:c0:88:22:33:b3:56:85:e2:ca:80:df:
24:81:b6:39:3e:e9:6a:15:eb:8c:05:df:60:0d:6b:
bd:2b:1e:15:db:55:d6:bb:f1:1a:0e:bb:d2:58:92:
24:d4:aa:38:8d:62:81:ca:23:7e:bb:66:3a:d6:23:
8c:cb:6b:1e:c0:49:05:93:da:1d:81:10:cd:1d:dc:
33:2b:58:24:d9:f8:03:3d:76:82:08:d1:38:5b:ac:
0b:36:22:44:da:fb:08:44:c0:06:a2:c2:7e:f9:57:
4b:98:8b:ea:c4:fc:c0:4f:5a:a3:1c:a2:55:96:7d:
86:a6:e3:41:e0:ad:ae:6a:ce:22:08:58:08:2a:c5:
9c:77:ba:5e:fd:c1:d3:6c:96:d8:d4:c9:59:6c:7b:
b1:1e:23:89:5a:69:7d:48:38:41:e3:ad:11:db:3d:
0d:dd:e8:e9:9c:96:c6:2c:2c:ba:6f:99:6f:78:0f:
88:90:29:d7:9d:4c:cc:67:e4:8c:c7:78:92:d7:c4:
99:21:1c:10:d9:2c:17:e2:2b:4f:dc:94:67:60:08:
44:d3:5a:4d:91:94:e8:0b:3a:b0:27:44:7a:2f:95:
ea:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BA:36:AA:32:4B:C5:69:08:3C:EC:F1:72:A2:CD:8D:1A:F5:A2:BC
X509v3 Authority Key Identifier:
keyid:CD:9A:1C:BE:9B:0B:4B:A7:B4:7D:42:AA:D6:72:57:14:84:E5:59:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e9:b2:83:70:40:d3:0f:5b:06:2c:78:1c:51:c3:80:5a:f6:
25:61:63:43:9d:f3:ba:c4:5e:09:46:c6:75:f5:a6:dc:7d:ff:
9a:d6:c9:c2:ed:18:4a:e2:03:a7:41:f5:bb:a2:93:43:14:5b:
22:ba:bf:6e:b0:b1:c6:ae:f3:05:22:5c:84:6d:6a:d7:ad:43:
7c:d7:c2:4b:b1:20:b9:2b:7b:ea:6a:e2:ff:06:d5:d6:7e:a3:
4d:c9:9c:95:9b:45:77:88:9f:3c:ba:af:36:17:b4:4a:d6:49:
39:20:88:08:88:10:40:41:d9:ad:5f:02:6d:b5:8f:21:8b:45:
1a:b7:ce:33:4d:5a:02:02:1e:a5:b5:0b:17:f5:77:d8:93:30:
19:97:5b:a1:66:1b:b5:08:10:2f:ec:f8:00:7b:e3:41:d7:97:
30:ef:e2:43:ed:1a:4c:47:53:00:72:6d:b7:22:c4:d1:d4:fc:
72:40:a9:08:d0:69:8d:5d:9d:1b:b0:0e:1c:1a:a4:22:95:eb:
6c:76:e7:b6:f8:52:dc:94:ae:1c:0b:5b:8c:59:08:45:ea:e4:
b4:b0:fc:7c:aa:17:01:8e:93:6a:a9:b5:d2:92:56:a9:44:84:
42:08:30:7e:67:bf:3b:53:59:e6:d0:d3:93:8d:5f:0e:d2:14:
08:a2:99:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:06 2025 by rpki-client