Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft
File: Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft (raw, json)
Hash identifier: s5NznJKbEMXcO9Bg4lUTFEujR3EFnQOqbyUh30yc0jo=
Subject key identifier: B7:C6:F3:1B:C4:E1:C8:93:DC:28:02:A9:19:D1:A0:05:B8:14:D5:B4
Authority key identifier: 67:F2:F0:9F:A3:8A:38:BC:80:CF:F8:2E:0C:7B:47:B3:79:16:39:8A
Certificate issuer: /CN=67f2f09fa38a38bc80cff82e0c7b47b37916398a
Certificate serial: 0199228CC6E4B0D17FCDA42E17DDA62B0BF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft
Manifest number: 0E3B
Signing time: Sun 07 Sep 2025 05:01:15 +0000
Manifest this update: Sun 07 Sep 2025 05:01:15 +0000
Manifest next update: Mon 08 Sep 2025 05:01:15 +0000
Files and hashes: 1: Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl (hash: 22RttZh4/Nb8HbRiXuetnxlMyMVUqtAdkDUgDEpp1yE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:c6:e4:b0:d1:7f:cd:a4:2e:17:dd:a6:2b:0b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f2f09fa38a38bc80cff82e0c7b47b37916398a
Validity
Not Before: Sep 7 05:01:15 2025 GMT
Not After : Sep 8 05:01:15 2025 GMT
Subject: CN=b7c6f31bc4e1c893dc2802a919d1a005b814d5b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d1:b5:69:d4:25:56:56:25:81:6c:b2:f3:c4:
87:fc:ab:ce:8a:5e:b2:c4:9b:21:06:c2:65:92:50:
ca:87:74:f5:6a:aa:10:47:6a:d4:11:74:48:ce:68:
ae:63:e0:d5:e0:68:cd:2b:d2:01:1d:49:ef:7d:7f:
83:ac:72:c2:fc:e4:ce:05:89:ab:40:8c:2d:6e:08:
e7:32:1a:43:0f:02:ff:ca:f2:9d:43:da:24:e5:6a:
59:9e:b4:b6:18:62:1b:7e:1b:0e:a7:c2:e6:0d:d7:
56:b0:93:8e:f6:7d:17:7e:fc:48:a8:50:39:45:8b:
80:e1:9c:39:2a:3c:51:d0:67:b7:4a:fb:13:84:06:
3d:aa:a8:11:8e:08:65:75:46:a6:39:c6:2e:1c:03:
d0:5b:0d:f1:a6:f6:c4:70:94:df:b4:1d:25:ee:c8:
a4:3e:cd:34:3c:31:b1:4d:72:12:82:47:65:cf:bc:
80:15:15:c8:8d:fa:ae:7e:37:86:67:62:24:75:9c:
fc:7b:07:14:a7:a9:88:0f:fb:e7:fe:db:40:fd:06:
a3:2e:7f:ff:91:d7:f1:ec:80:38:25:7d:ec:59:9a:
3e:2f:58:35:30:a2:89:c6:b0:e1:bf:f1:6d:2a:ba:
60:4c:1b:44:ee:c4:d9:f2:40:6b:65:5f:83:18:fb:
0d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C6:F3:1B:C4:E1:C8:93:DC:28:02:A9:19:D1:A0:05:B8:14:D5:B4
X509v3 Authority Key Identifier:
keyid:67:F2:F0:9F:A3:8A:38:BC:80:CF:F8:2E:0C:7B:47:B3:79:16:39:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:3c:57:10:87:a7:70:02:e0:04:6d:80:87:64:d7:4c:bc:e2:
60:f1:8d:7f:6b:bc:67:74:a5:0f:98:10:1a:70:3b:b1:9f:7f:
25:08:37:21:43:39:19:ff:69:ad:90:d8:90:0a:3d:ac:84:4f:
a4:08:e5:a1:48:97:14:01:aa:42:38:fc:f2:e9:59:9e:88:ef:
dd:9e:de:c7:cb:7a:b2:7f:c1:91:1a:e1:9b:be:90:88:bf:12:
2f:f3:38:10:15:0f:49:ea:d4:32:28:9a:35:23:0e:1b:f7:67:
a4:6d:4f:f1:db:e3:2c:a2:18:c1:a9:e2:54:62:99:9a:7b:61:
74:5a:4e:2c:b5:a3:e2:12:00:f6:ab:d0:bb:6d:dc:31:b8:1c:
e5:65:6a:5b:94:d3:b2:7f:04:6a:05:7e:2e:c0:67:49:da:6a:
54:a0:8c:7d:67:2e:5e:37:16:50:b4:7b:35:15:71:fd:4f:b5:
84:de:7a:c6:c8:6e:76:eb:59:4a:5d:cf:98:cb:ce:d8:89:10:
12:cd:d6:3e:2c:1e:d7:47:4d:51:e2:3e:47:ee:2c:09:f6:1e:
59:b4:c7:6e:1f:7c:99:98:79:cb:4f:c4:f0:1d:0b:d1:11:f7:
5b:a3:f6:01:96:0d:02:23:9a:ff:09:6f:fb:05:f8:41:d5:ed:
28:a7:32:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:49:57 2025 by rpki-client