Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft
File: zfyNbNSfmv4mTVQumpYU89SsHJ0.mft (raw, json)
Hash identifier: Deo1aNdqwT6n+Sa8J7kCJSdrwuRGXRajPlIIINTSS0s=
Subject key identifier: C3:3B:A3:67:90:FA:07:44:1F:5D:7E:D0:93:8A:F0:1F:EC:65:54:6D
Authority key identifier: CD:FC:8D:6C:D4:9F:9A:FE:26:4D:54:2E:9A:96:14:F3:D4:AC:1C:9D
Certificate issuer: /CN=cdfc8d6cd49f9afe264d542e9a9614f3d4ac1c9d
Certificate serial: 019921B1FF3A759F1A5CC624E4B7A1C996B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfyNbNSfmv4mTVQumpYU89SsHJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 01:02:17 +0000
Manifest this update: Sun 07 Sep 2025 01:02:17 +0000
Manifest next update: Mon 08 Sep 2025 01:02:17 +0000
Files and hashes: 1: zfyNbNSfmv4mTVQumpYU89SsHJ0.crl (hash: 06WlP9K3VcxYkbsQxrFVKT1BoFSKfKY5hZNGFqEBgRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfyNbNSfmv4mTVQumpYU89SsHJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:ff:3a:75:9f:1a:5c:c6:24:e4:b7:a1:c9:96:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdfc8d6cd49f9afe264d542e9a9614f3d4ac1c9d
Validity
Not Before: Sep 7 01:02:17 2025 GMT
Not After : Sep 8 01:02:17 2025 GMT
Subject: CN=c33ba36790fa07441f5d7ed0938af01fec65546d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:78:57:f8:b2:7b:8f:f7:cd:86:86:e8:ef:3a:
3d:a7:62:ce:f0:b2:c3:cc:3e:22:15:2d:f2:aa:d8:
7c:57:62:f4:05:08:bc:6c:fe:8b:de:24:89:ae:28:
06:8c:fe:d6:1b:ab:da:61:3e:ba:b9:8f:ff:6e:29:
c5:f1:02:bc:23:ea:02:70:9b:e0:fa:12:29:e5:8a:
c3:86:cf:cd:3a:80:f2:cc:9b:95:53:fe:41:24:f0:
39:0a:13:78:8c:db:10:1f:05:b4:02:08:61:da:95:
97:ba:09:bb:5c:fb:40:e4:a1:bd:f3:0d:31:27:ce:
86:32:ef:f0:f3:e2:06:94:b6:53:7e:39:53:d6:92:
dd:f7:3a:d4:12:63:45:df:53:f4:9d:47:2b:11:e9:
df:b9:60:fc:46:98:20:57:92:06:7d:be:7e:df:19:
28:48:8e:fb:bc:ca:2a:11:d2:23:9f:09:30:94:2c:
fb:d5:b0:d6:d3:5c:b9:18:10:16:4a:c7:a2:21:b4:
62:4b:03:94:ad:ae:db:d3:02:a0:ae:54:2a:04:f0:
9f:fa:09:f3:58:ef:3d:89:9c:63:70:eb:60:8a:2b:
17:26:b9:74:12:9d:bd:d7:e8:28:13:75:0a:c6:6b:
fc:28:be:97:0b:7e:a2:25:ba:06:be:3d:e7:9d:0a:
81:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3B:A3:67:90:FA:07:44:1F:5D:7E:D0:93:8A:F0:1F:EC:65:54:6D
X509v3 Authority Key Identifier:
keyid:CD:FC:8D:6C:D4:9F:9A:FE:26:4D:54:2E:9A:96:14:F3:D4:AC:1C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfyNbNSfmv4mTVQumpYU89SsHJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:e4:65:6d:a7:6a:0f:82:db:27:eb:59:ac:e3:5f:3d:af:2b:
5b:55:d3:71:49:2c:8b:79:94:10:8f:21:ff:b7:ce:ca:f6:aa:
e3:29:59:26:65:27:e5:76:09:b1:c3:27:da:93:f7:22:d9:f0:
9a:60:36:7f:b0:e8:b7:f4:be:8d:e7:76:c8:b9:fd:aa:e4:37:
9f:6e:ba:f4:47:9c:bd:f0:ee:3e:d0:e3:ad:7a:0b:26:8e:ac:
a4:e4:7b:9e:2e:f8:f8:a0:53:57:e5:01:b3:43:d7:f8:6b:97:
05:1e:b9:bf:e0:c3:23:4b:e7:97:9b:b8:92:31:fa:65:10:f6:
c7:48:ae:86:d7:14:eb:3e:ce:35:cc:5d:88:aa:d1:bb:b3:90:
52:a4:21:2c:04:64:74:c5:29:7d:d4:24:2d:21:ff:22:96:7d:
e4:2b:01:2a:7d:8f:56:e7:e2:dc:8e:e2:5b:1f:a6:58:92:7a:
37:26:9a:a3:b9:f1:75:d6:65:c1:be:b7:69:69:a4:eb:3c:39:
be:16:93:df:f9:95:cb:c3:c8:a6:d8:81:2c:1a:7b:91:a9:df:
fa:09:37:d4:dd:ca:cb:d2:29:86:5e:91:32:db:d8:9e:d6:39:
cb:af:26:2f:40:dd:6f:bc:27:4d:d6:e8:6b:ef:f7:c7:2d:01:
0b:59:37:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:54 2025 by rpki-client