Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft
File: Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft (raw, json)
Hash identifier: hvBK6avLJHolduwZHWmybNDv2DaESVt4U1UzE0cIlRw=
Subject key identifier: CF:16:8E:73:DF:48:06:FE:37:6B:11:1F:8E:55:46:5D:C3:42:47:DE
Authority key identifier: 67:F2:F0:9F:A3:8A:38:BC:80:CF:F8:2E:0C:7B:47:B3:79:16:39:8A
Certificate issuer: /CN=67f2f09fa38a38bc80cff82e0c7b47b37916398a
Certificate serial: 019A70A4E829A077DD2358D8550074881BF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft
Manifest number: 0EE8
Signing time: Tue 11 Nov 2025 02:00:46 +0000
Manifest this update: Tue 11 Nov 2025 02:00:46 +0000
Manifest next update: Wed 12 Nov 2025 02:00:46 +0000
Files and hashes: 1: Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl (hash: ZMPfkZF8JsF1ODmQn+gJwQR0DuyfRs+QozaPr0zXm88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:e8:29:a0:77:dd:23:58:d8:55:00:74:88:1b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f2f09fa38a38bc80cff82e0c7b47b37916398a
Validity
Not Before: Nov 11 02:00:46 2025 GMT
Not After : Nov 12 02:00:46 2025 GMT
Subject: CN=cf168e73df4806fe376b111f8e55465dc34247de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:45:f4:fd:07:94:c6:c3:34:35:2b:ae:f6:f4:
c2:89:13:12:de:d8:bc:90:c4:3b:9b:f7:7f:0c:90:
29:1d:86:d1:36:31:b0:d4:28:38:c1:84:be:da:08:
c1:5c:78:ea:42:34:07:94:49:dc:43:4e:18:93:60:
4e:6c:91:f9:a4:2b:2a:f2:2f:b5:59:6b:6d:0f:1a:
46:69:5a:75:2c:3f:e1:85:94:53:b4:0c:e5:7f:48:
18:13:88:9e:f7:62:68:3d:18:bc:89:46:8c:08:fc:
1c:0a:69:88:8e:1c:65:2e:66:76:4a:b9:b5:40:87:
0a:ca:b0:84:a8:14:08:44:d9:9a:f1:1b:55:19:7e:
b0:1f:fe:38:57:05:6d:a1:63:62:b6:5f:6e:53:5a:
09:f0:93:73:ec:f5:21:ca:a4:c0:ea:6f:9b:0c:5c:
bd:76:b3:ac:7d:b9:b4:cc:4f:06:1e:13:a8:ac:d1:
fa:56:2c:42:9f:c3:1c:a2:36:c9:b5:45:3b:eb:d7:
78:1d:7c:bd:d2:2f:c0:0b:23:82:ef:c5:db:7f:a3:
a5:ff:c6:94:af:98:22:a5:37:f4:8e:fe:de:4a:4d:
9a:47:6e:57:23:29:b9:a5:67:32:e4:9e:10:3e:14:
8a:ac:b6:ce:d0:a8:dc:bd:96:62:96:87:1a:13:d1:
c3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:16:8E:73:DF:48:06:FE:37:6B:11:1F:8E:55:46:5D:C3:42:47:DE
X509v3 Authority Key Identifier:
keyid:67:F2:F0:9F:A3:8A:38:BC:80:CF:F8:2E:0C:7B:47:B3:79:16:39:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:f9:6c:30:6d:d5:d5:57:6d:81:59:42:d1:12:40:84:a7:53:
4b:b6:72:96:c8:f7:bc:9b:fe:39:2b:3e:d6:a5:7e:b4:d4:97:
cd:0b:71:81:bd:9a:fc:a6:be:99:5d:ed:7c:47:cb:ee:e0:db:
25:d7:29:dd:64:13:32:bb:81:7e:36:ad:de:99:7f:4b:67:1d:
54:12:77:f4:a0:02:6c:2a:ad:49:99:1d:2b:7f:91:76:2e:9f:
23:55:18:24:57:58:ab:02:89:99:9f:66:7f:bf:8c:09:eb:a0:
ef:0c:da:ae:37:b0:cc:fe:8d:3c:9f:89:91:03:3a:c4:22:cf:
a9:e0:54:06:71:a7:dc:d0:65:c7:15:cf:30:d7:9f:43:96:e0:
f5:d0:31:70:ef:7d:8a:7c:a5:9f:00:5c:7b:e4:1e:fb:ac:ad:
9b:54:24:cf:57:ab:09:fc:b3:16:c1:87:f9:48:ef:be:f1:da:
32:3c:f6:99:8b:39:44:fb:50:2c:94:76:68:dc:6e:52:28:f2:
3c:0e:bc:ba:ae:28:41:be:a5:79:70:4e:e4:aa:fd:05:ae:6c:
9a:25:ba:dd:9d:f4:b2:71:ed:b2:4c:f6:66:8c:29:85:24:28:
92:88:af:2b:d6:49:b1:de:90:84:66:95:27:c6:ec:b5:1a:59:
01:63:6b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:12 2025 by rpki-client