Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.mft
File: z312VOh85PlnktVlxW4ZH0Ten1o.mft (raw, json)
Hash identifier: zcN4WsRkkrQO+8qqBMxoGz/0SWb55dXBWCn3Xp+P6p4=
Subject key identifier: 02:33:93:1F:A7:C7:B3:00:5C:94:13:5F:AB:04:D0:6B:1C:A7:FB:2D
Authority key identifier: CF:7D:76:54:E8:7C:E4:F9:67:92:D5:65:C5:6E:19:1F:44:DE:9F:5A
Certificate issuer: /CN=cf7d7654e87ce4f96792d565c56e191f44de9f5a
Certificate serial: 019922FA606989804EAE139C5DBADA4C2C42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z312VOh85PlnktVlxW4ZH0Ten1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.mft
Manifest number: 0F83
Signing time: Sun 07 Sep 2025 07:00:57 +0000
Manifest this update: Sun 07 Sep 2025 07:00:57 +0000
Manifest next update: Mon 08 Sep 2025 07:00:57 +0000
Files and hashes: 1: z312VOh85PlnktVlxW4ZH0Ten1o.crl (hash: 2LlN19CCQtbOOUzhS09D4j1QMB8YmqIdytEQSgcT6HM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/z312VOh85PlnktVlxW4ZH0Ten1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:60:69:89:80:4e:ae:13:9c:5d:ba:da:4c:2c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7d7654e87ce4f96792d565c56e191f44de9f5a
Validity
Not Before: Sep 7 07:00:57 2025 GMT
Not After : Sep 8 07:00:57 2025 GMT
Subject: CN=0233931fa7c7b3005c94135fab04d06b1ca7fb2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7a:2d:a6:06:81:d7:41:ca:5e:64:1f:c0:67:
c6:4b:f8:08:b9:a8:25:07:47:7d:96:8d:bb:fa:d9:
0a:e8:2e:fa:6b:c1:9f:a2:1b:4b:58:6c:59:b1:d9:
2c:de:b9:d0:32:3e:4a:c5:cb:f6:19:01:c0:45:c6:
f7:c6:95:67:13:ab:67:58:11:5e:fa:3e:04:b5:1e:
df:90:ba:df:64:50:35:98:61:46:0b:e9:a2:d6:1b:
36:37:3e:fe:14:b6:ff:5b:3c:12:2e:12:be:33:57:
2b:1d:5b:98:69:56:5b:30:84:08:86:76:22:b7:77:
fa:ec:85:1a:b5:f4:42:e7:d9:15:28:a8:69:87:14:
30:07:c1:8e:77:90:fe:e4:29:45:85:59:b5:67:c1:
3e:72:4a:ea:e3:48:0d:8f:a1:cf:5e:65:e9:48:ad:
2d:c7:db:7e:9e:b4:33:6c:5b:80:2a:87:0b:98:1d:
d6:86:1c:17:4f:41:ef:19:69:cb:c4:c2:c5:ed:0c:
a9:e9:ed:fa:af:17:a7:b6:2d:b1:2c:3c:b9:3c:65:
7e:f4:cb:c4:92:95:01:61:d9:07:e4:3e:0e:e4:15:
8e:b0:43:34:a9:93:b5:a6:a6:ce:da:e0:1a:57:e0:
fd:8e:ee:9f:0d:4e:45:bc:fb:02:21:ca:4d:65:92:
41:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:33:93:1F:A7:C7:B3:00:5C:94:13:5F:AB:04:D0:6B:1C:A7:FB:2D
X509v3 Authority Key Identifier:
keyid:CF:7D:76:54:E8:7C:E4:F9:67:92:D5:65:C5:6E:19:1F:44:DE:9F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z312VOh85PlnktVlxW4ZH0Ten1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:35:3e:3d:b7:f2:c3:08:ee:bf:38:a7:45:79:b7:c3:79:8f:
e1:92:dc:ba:27:52:10:2e:c3:62:a0:42:32:4d:09:5a:a2:6b:
bc:4b:12:8e:6a:12:86:2c:8a:6c:d6:89:4c:84:2b:a5:a0:b4:
1f:d7:31:3d:94:3e:54:38:28:ee:43:c8:a0:be:ab:9c:ad:c6:
dc:91:33:e3:3a:90:12:f3:b7:88:b6:46:d7:9e:a6:54:d0:31:
bf:e7:35:7d:42:b6:4f:12:d4:5a:84:40:a6:8a:51:5e:88:a6:
7f:9e:0f:0b:c5:3b:ec:a5:9c:d7:21:88:e6:0a:20:02:e4:74:
65:3b:bc:09:4a:78:35:c7:37:23:a9:7c:38:86:f2:53:89:46:
0a:55:79:11:e5:77:5a:23:11:7d:71:8a:44:ef:71:a2:fc:4f:
e4:09:6c:bf:97:67:a3:1b:f0:30:ef:18:7a:a6:28:fa:26:a5:
af:b7:f5:f2:7d:ef:b9:bb:13:6a:2a:80:01:40:ab:3f:0d:a3:
20:c5:60:63:50:4e:b1:4f:6c:09:73:11:91:08:f7:ef:01:f6:
81:11:0e:ba:1c:eb:68:ad:eb:f7:21:43:22:11:ca:84:6a:09:
8d:8f:b2:ae:e2:30:2d:86:e3:e5:f3:a4:92:81:fc:27:8e:6e:
d4:53:c2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:22:48 2025 by rpki-client