Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.mft
File: d6dcTie5EIG4MB56fE_ZA-AmGGI.mft (raw, json)
Hash identifier: qBrFM+VNVg/iRe7EtGuvpzECT0dd+PNy2Rdkt1aJDwE=
Subject key identifier: 3F:47:FD:A7:EA:E1:11:A6:EA:AC:A5:04:0A:19:B0:28:69:51:CF:0E
Authority key identifier: 77:A7:5C:4E:27:B9:10:81:B8:30:1E:7A:7C:4F:D9:03:E0:26:18:62
Certificate issuer: /CN=77a75c4e27b91081b8301e7a7c4fd903e0261862
Certificate serial: 019A71B7CB61FD1AE3C7B925E6283218BEAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6dcTie5EIG4MB56fE_ZA-AmGGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.mft
Manifest number: 069E
Signing time: Tue 11 Nov 2025 07:01:01 +0000
Manifest this update: Tue 11 Nov 2025 07:01:01 +0000
Manifest next update: Wed 12 Nov 2025 07:01:01 +0000
Files and hashes: 1: d6dcTie5EIG4MB56fE_ZA-AmGGI.crl (hash: FqI+nrvkP2AatiYCgJE2smptq5VWA+fUrcShDck4qcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d6dcTie5EIG4MB56fE_ZA-AmGGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:cb:61:fd:1a:e3:c7:b9:25:e6:28:32:18:be:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77a75c4e27b91081b8301e7a7c4fd903e0261862
Validity
Not Before: Nov 11 07:01:01 2025 GMT
Not After : Nov 12 07:01:01 2025 GMT
Subject: CN=3f47fda7eae111a6eaaca5040a19b0286951cf0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a9:3c:99:31:1e:74:0f:11:a9:59:cc:8c:65:
83:fd:c5:cc:3d:76:57:3a:c1:ba:4f:50:e5:92:72:
ac:75:a3:50:40:71:d5:9f:1a:56:6e:e4:47:0d:63:
a0:ac:56:da:ff:84:87:91:fa:c6:f8:06:1d:cb:a4:
3e:49:f4:5b:b8:18:bd:12:ce:e4:40:ef:c7:5e:36:
a5:57:e1:d0:c3:af:09:65:54:2b:9d:12:5b:9b:0a:
13:d3:a9:13:3a:03:08:49:c5:66:d5:22:c5:ce:9e:
5c:4e:2a:af:74:28:c8:04:bd:35:2e:80:c1:2c:d6:
ef:f6:d9:ae:cf:c2:7c:d3:5b:f0:51:68:39:9c:25:
a4:b4:58:aa:56:c7:90:d0:bf:e7:e2:3a:f5:31:86:
f9:ac:ec:5f:a1:6b:18:6a:38:cb:45:08:6b:8a:2f:
48:5f:91:ba:f0:ce:22:e2:15:08:c0:43:e7:7d:1c:
4c:79:81:7b:e0:c6:1b:30:4d:39:ce:ef:ca:07:ff:
a3:81:72:b7:3d:4f:25:7d:7e:a9:b1:d1:9b:c8:16:
6b:eb:c2:df:0d:07:43:7a:5b:a1:41:54:b1:be:e7:
1d:37:70:78:79:1b:5c:63:2e:b6:bc:bd:2a:95:b4:
78:de:49:bf:e9:5d:40:68:ef:ff:a3:ff:59:7f:f9:
b1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:47:FD:A7:EA:E1:11:A6:EA:AC:A5:04:0A:19:B0:28:69:51:CF:0E
X509v3 Authority Key Identifier:
keyid:77:A7:5C:4E:27:B9:10:81:B8:30:1E:7A:7C:4F:D9:03:E0:26:18:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6dcTie5EIG4MB56fE_ZA-AmGGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:48:ad:c2:b6:8f:7a:f8:e9:e6:e4:d0:8f:c4:57:80:20:0f:
0f:9b:24:8c:06:77:ee:5a:51:d3:d7:fb:53:c9:c8:34:a5:ac:
03:92:9e:4e:55:0e:02:37:95:5e:f8:88:9b:06:c8:d6:29:2e:
cf:40:d0:c7:46:e6:75:f8:b8:23:6e:13:74:71:12:0f:0f:3f:
b6:cc:17:1d:02:75:eb:50:95:e4:31:48:2b:c2:b1:16:43:9d:
bd:0e:de:87:36:5e:ac:ef:b3:16:54:5c:f8:3c:82:3e:a1:be:
86:ca:5f:88:61:61:65:c9:e5:85:eb:e1:df:db:44:58:04:a3:
66:83:3a:90:a3:64:d4:cb:e6:43:29:6b:99:29:3b:8b:c4:ee:
94:f5:40:31:4c:9f:db:ae:0b:9f:43:d1:c2:64:0e:b6:6a:4e:
78:a4:90:da:c5:a9:fb:fe:67:4f:74:1e:0d:67:dc:84:86:b0:
0e:79:32:57:92:3f:16:f3:0c:96:fc:f5:9b:aa:f0:15:f8:cb:
ab:b2:d4:95:e3:a3:38:5a:ef:6c:c0:4c:93:30:85:d0:34:0c:
81:e6:ea:8c:7f:fe:86:38:00:79:8c:a5:d8:4c:b9:27:3c:5c:
9f:3e:60:08:98:95:e8:bd:d6:6e:2e:a7:ab:fb:81:6d:84:de:
17:aa:a6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:51:51 2025 by rpki-client