Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
File: zxTbNzCF4owNm3S-e46JdAuV-fo.mft (raw, json)
Hash identifier: dY5dxrZpcx4ixSQpbWtDXRbnlbdDDGjRs/SNRudj1ks=
Subject key identifier: F2:E2:7D:5F:76:0A:AE:2D:97:02:7A:86:30:AE:6D:71:6D:0B:9B:96
Authority key identifier: CF:14:DB:37:30:85:E2:8C:0D:9B:74:BE:7B:8E:89:74:0B:95:F9:FA
Certificate issuer: /CN=cf14db373085e28c0d9b74be7b8e89740b95f9fa
Certificate serial: 0199239EF4E54CFB8F6BAB7F6430F3B89C88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
Manifest number: 0C6D
Signing time: Sun 07 Sep 2025 10:00:43 +0000
Manifest this update: Sun 07 Sep 2025 10:00:43 +0000
Manifest next update: Mon 08 Sep 2025 10:00:43 +0000
Files and hashes: 1: zxTbNzCF4owNm3S-e46JdAuV-fo.crl (hash: Jns8WMawIgY6XgB/7nxI4hsOncuhuoM7ogOMxoTYOnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:f4:e5:4c:fb:8f:6b:ab:7f:64:30:f3:b8:9c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf14db373085e28c0d9b74be7b8e89740b95f9fa
Validity
Not Before: Sep 7 10:00:43 2025 GMT
Not After : Sep 8 10:00:43 2025 GMT
Subject: CN=f2e27d5f760aae2d97027a8630ae6d716d0b9b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0c:16:c6:a3:11:3d:86:54:33:35:26:49:92:
a4:df:fd:b9:ae:d2:24:4f:39:a5:91:f2:be:d9:31:
70:eb:5f:3c:29:bd:73:d9:bd:e3:0d:fa:09:98:cc:
1e:b9:af:f0:ad:b4:93:a7:1a:fb:e4:ef:47:92:7b:
91:b8:0a:72:39:11:3c:7f:1a:28:98:c3:49:45:be:
ae:5c:0f:ba:d8:0e:ad:88:cf:44:63:0c:af:5e:41:
b4:6c:a1:87:1e:d8:0f:8b:1d:16:8e:47:4e:95:9d:
60:a4:cd:b3:40:3c:4c:dc:7f:74:9e:37:e7:5f:db:
e0:0e:eb:6f:3a:91:87:95:54:37:a8:aa:f5:be:71:
eb:9e:bb:99:26:96:04:27:09:60:84:db:36:8d:f0:
93:b8:4b:94:75:b2:ba:79:8f:a7:66:ef:08:f4:b9:
f8:db:ab:82:bf:44:a1:ef:30:44:e2:7b:5c:a5:76:
b2:34:be:5a:56:ee:32:24:be:be:92:e9:c5:0e:90:
05:d1:21:fb:e7:6e:a7:4f:d9:dd:d4:d2:35:49:cb:
c7:68:78:ce:a7:ba:77:77:22:0f:17:f6:75:ad:04:
ff:49:4d:1a:31:44:00:02:ea:81:14:ec:58:87:7f:
d1:c7:52:12:70:67:30:13:ff:1a:a7:27:1d:36:fd:
a7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E2:7D:5F:76:0A:AE:2D:97:02:7A:86:30:AE:6D:71:6D:0B:9B:96
X509v3 Authority Key Identifier:
keyid:CF:14:DB:37:30:85:E2:8C:0D:9B:74:BE:7B:8E:89:74:0B:95:F9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:04:77:e4:9a:6e:ac:89:23:ed:11:0d:c3:58:08:71:22:3d:
74:11:bb:ed:bc:69:bf:c2:4b:89:bd:fd:e4:34:a7:01:bd:33:
53:66:1a:49:ed:3b:17:fc:2b:09:6c:b7:13:e2:6c:18:4c:b2:
98:d4:cf:ee:84:c4:91:88:76:8d:84:75:da:c6:77:ba:63:cc:
4f:f3:ff:a1:30:c7:62:f4:3c:86:6d:75:96:ea:16:73:41:30:
34:91:5e:67:60:62:e2:89:51:f1:d4:d7:b5:77:68:c0:6c:af:
54:b6:17:83:6b:04:aa:e5:f9:6d:25:9d:d8:b0:8d:80:e8:dd:
2b:10:3d:c1:e1:c0:91:56:f2:4d:46:cd:af:af:0a:40:a6:b2:
02:75:ad:cd:77:e3:b6:07:c9:de:4f:be:ff:9e:e2:1d:df:2e:
6a:28:4e:f3:67:a2:71:02:9d:f2:9c:33:16:7b:6c:01:5e:11:
04:56:dc:a1:07:d5:aa:e9:4e:6e:ee:38:c8:9c:97:1b:b2:10:
be:3f:f1:89:e7:9e:17:18:09:2f:04:ac:8e:2e:da:bb:3d:94:
b7:c1:a9:8e:bf:1c:a2:fc:57:bf:11:ad:19:5a:2f:cf:75:12:
37:1c:4d:87:1f:d8:8c:a1:f7:cf:39:f0:f2:2b:28:59:60:4a:
79:ff:1b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:22:53 2025 by rpki-client