Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
File: 1-zuztKtv_1iN20zyr-bVrEZVe7k.mft (raw, json)
Hash identifier: xFQzKSBScOf+FcIFvEEDWAr9AvvqU7Yg/k7Bm+pIuFc=
Subject key identifier: 31:1B:6F:46:24:5A:86:8C:8F:2D:6C:54:03:4F:6B:B3:89:3D:45:3C
Authority key identifier: FB:3B:B3:B4:AB:6F:FF:58:8D:DB:4C:F2:AF:E6:D5:AC:46:55:7B:B9
Certificate issuer: /CN=fb3bb3b4ab6fff588ddb4cf2afe6d5ac46557bb9
Certificate serial: 0199221F26C49CE029CA7A5317AF6389B259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
Manifest number: 102F
Signing time: Sun 07 Sep 2025 03:01:30 +0000
Manifest this update: Sun 07 Sep 2025 03:01:30 +0000
Manifest next update: Mon 08 Sep 2025 03:01:30 +0000
Files and hashes: 1: 1-zuztKtv_1iN20zyr-bVrEZVe7k.crl (hash: rwIYoj1Us7Mgy567aLgVMCqEYioEHIZLvY3Yco587TM=)
2: pQlM2OtK0QxqZYQEu_V-X_TzrUw.roa (hash: GdjsGztAnCLXoyesv/dDZLz4ADxr8P9UdhbYUeTe7Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:26:c4:9c:e0:29:ca:7a:53:17:af:63:89:b2:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3bb3b4ab6fff588ddb4cf2afe6d5ac46557bb9
Validity
Not Before: Sep 7 03:01:30 2025 GMT
Not After : Sep 8 03:01:30 2025 GMT
Subject: CN=311b6f46245a868c8f2d6c54034f6bb3893d453c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:19:27:31:1d:5d:0b:47:55:d1:0b:37:80:0e:
39:f8:36:e4:e9:00:6e:a9:2b:2a:f2:72:82:9c:26:
0e:d3:9a:3d:91:2b:90:f7:d3:cd:d1:e0:83:a4:dd:
7c:1f:50:02:50:9e:07:eb:ce:e8:0c:f8:97:57:ac:
92:60:4e:6d:2a:e7:54:d1:67:e5:ca:95:6f:d3:06:
20:81:79:d2:ac:79:74:3e:7d:b3:10:25:4c:33:2d:
94:7e:9b:70:17:63:86:d0:96:ee:2a:14:86:50:4e:
14:51:63:4d:4f:84:5c:62:b9:f4:8a:a5:85:dc:cd:
a2:6a:4b:ff:47:b7:79:ce:25:47:80:96:db:b1:f7:
1e:b7:d3:4b:4f:d2:7b:40:29:5a:95:1e:34:8e:d7:
c6:d1:32:64:b2:b1:6c:b0:02:37:3d:de:0e:fc:74:
73:3e:13:d1:6f:fd:a7:d3:1b:68:71:98:da:1f:2f:
f1:99:dd:10:2a:07:db:04:9e:5d:49:8a:13:15:9f:
a2:1f:a7:3b:66:82:9c:92:73:28:f4:e4:c7:b9:22:
01:0e:77:be:1c:b4:26:44:1f:7f:d7:fb:ca:6e:8b:
b8:44:18:76:15:28:1a:1d:24:6c:cd:3b:b4:37:03:
1f:b7:fd:10:97:85:8e:94:81:a0:74:57:e6:2e:37:
b4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1B:6F:46:24:5A:86:8C:8F:2D:6C:54:03:4F:6B:B3:89:3D:45:3C
X509v3 Authority Key Identifier:
keyid:FB:3B:B3:B4:AB:6F:FF:58:8D:DB:4C:F2:AF:E6:D5:AC:46:55:7B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:06:ed:df:0c:5c:22:eb:a9:9d:3f:c0:2e:fc:93:94:d9:98:
c9:4a:d3:85:e5:9a:8c:a9:58:a4:3e:ea:1f:3c:7b:36:af:19:
7e:7f:34:26:07:a0:c3:d3:6d:db:30:74:09:34:87:03:93:f1:
61:b9:35:5f:ec:34:39:63:d5:64:60:5f:e3:38:49:a9:f1:0b:
43:9f:b2:f2:f6:3a:76:fc:b8:a0:d0:c4:12:78:d9:ad:1b:bb:
23:82:62:d4:a8:e9:d5:1a:0a:f1:9d:a6:81:4d:02:27:49:c6:
e2:75:12:7a:e9:db:b1:a4:6b:7d:34:2e:bb:5a:95:94:f4:fb:
f1:96:d5:ee:28:5c:bd:83:34:61:5b:2a:f6:0b:84:7e:df:54:
72:a8:f5:3e:cd:ee:0f:fa:94:f6:a6:4e:21:ba:ad:21:9d:0f:
bd:66:f2:fa:41:48:fe:c8:17:1a:f8:31:ca:9a:92:64:76:f2:
e9:c4:97:25:be:59:d7:1b:02:14:87:ea:44:6c:48:06:35:df:
35:d3:3e:0b:fb:87:e1:c0:76:8b:a6:99:0f:64:3e:4b:07:dc:
c0:d5:3d:43:67:0f:63:1b:88:44:ac:51:ef:76:05:79:5c:27:
e6:fd:6a:76:ad:55:f9:81:f0:b3:8b:82:92:83:8d:76:90:38:
94:d2:49:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:18 2025 by rpki-client