
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft
File: ztSbv4TJn76HrP4bvg2_esY7Q98.mft (raw, json)
Hash identifier: jjCPfQ4o1VBxfzV7DXoDH4meVZrXdjiMIYGvgm94Kx8=
Subject key identifier: B2:FB:91:7D:E7:6A:B7:D7:01:3C:49:A1:F1:B8:EE:78:5A:92:88:70
Authority key identifier: CE:D4:9B:BF:84:C9:9F:BE:87:AC:FE:1B:BE:0D:BF:7A:C6:3B:43:DF
Certificate issuer: /CN=ced49bbf84c99fbe87acfe1bbe0dbf7ac63b43df
Certificate serial: 019922551E925B566D67C96895581D90C43B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztSbv4TJn76HrP4bvg2_esY7Q98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft
Manifest number: 166D
Signing time: Sun 07 Sep 2025 04:00:27 +0000
Manifest this update: Sun 07 Sep 2025 04:00:27 +0000
Manifest next update: Mon 08 Sep 2025 04:00:27 +0000
Files and hashes: 1: ztSbv4TJn76HrP4bvg2_esY7Q98.crl (hash: FvMaOYzngh7UQbukR8ibTSyTpZIruX8Wchp2zQ+0vag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztSbv4TJn76HrP4bvg2_esY7Q98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:1e:92:5b:56:6d:67:c9:68:95:58:1d:90:c4:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced49bbf84c99fbe87acfe1bbe0dbf7ac63b43df
Validity
Not Before: Sep 7 04:00:27 2025 GMT
Not After : Sep 8 04:00:27 2025 GMT
Subject: CN=b2fb917de76ab7d7013c49a1f1b8ee785a928870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:16:16:18:b0:00:c3:30:eb:5d:bd:a6:ad:15:
49:ac:cd:5c:45:9d:f5:52:9d:33:3e:46:62:23:3d:
b0:38:82:12:eb:b0:88:80:3c:33:91:e6:75:06:d9:
fd:8d:06:06:23:79:c8:fe:21:5e:f0:45:c1:e7:55:
d9:44:cf:3e:d7:e6:12:8b:48:60:be:3a:21:ad:2a:
ca:10:03:d3:12:85:71:17:ea:18:ef:d4:74:ec:0c:
3b:b4:e8:99:8e:8e:7f:15:89:74:60:ff:e6:e3:cc:
d9:80:46:e1:98:cc:9f:25:7f:d5:71:4a:0b:fb:6e:
f0:0d:ac:50:96:c9:83:08:c1:8a:e9:34:95:45:23:
21:c9:9b:c2:61:ae:bc:bc:8b:c3:0f:d4:9f:9f:88:
f9:6a:d9:06:b8:66:81:5b:3b:58:9f:c3:57:77:87:
23:a3:52:b2:69:6c:8b:04:97:b3:92:1b:c6:75:d7:
43:29:f5:0c:f0:1c:9c:d6:6b:bb:8c:10:08:b8:32:
4f:14:b0:a9:d6:ce:38:81:e1:18:8a:18:c6:de:cd:
f4:9d:a2:5b:0d:ef:e1:f3:13:60:e9:da:ca:c2:8a:
d1:11:70:40:a5:43:09:d8:90:16:1b:37:5e:6c:70:
e5:60:44:28:bd:10:c8:44:4b:f8:e9:c6:2a:aa:42:
60:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FB:91:7D:E7:6A:B7:D7:01:3C:49:A1:F1:B8:EE:78:5A:92:88:70
X509v3 Authority Key Identifier:
keyid:CE:D4:9B:BF:84:C9:9F:BE:87:AC:FE:1B:BE:0D:BF:7A:C6:3B:43:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztSbv4TJn76HrP4bvg2_esY7Q98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:2a:8f:66:af:64:08:f5:3e:8c:1e:23:d6:26:8e:5c:1d:7e:
ea:4c:55:fa:dc:5d:24:2c:da:78:c9:37:77:31:2f:f6:a2:ee:
15:12:a6:14:a0:12:b2:9f:43:6b:3a:1d:d1:6b:69:51:5e:5d:
c3:ca:8a:5c:26:74:5e:d5:7e:4c:ea:04:32:14:46:2d:53:fc:
27:36:6a:1c:5c:af:0f:b9:77:cb:ea:9b:8d:1b:88:5b:cf:df:
08:94:f1:ce:62:f7:53:7e:b6:ac:92:05:7f:23:5a:87:b8:f9:
48:32:d9:a4:0f:d1:9e:41:aa:d9:47:ea:56:fb:95:11:64:a8:
37:f5:4e:cd:3f:69:81:a5:1e:90:c2:b8:22:9f:47:63:26:43:
88:93:51:b5:1d:f2:75:dc:05:e4:cc:9d:15:52:95:22:0a:48:
5e:6e:f5:b6:4e:c4:4c:18:a7:3c:a1:62:d2:64:7f:31:e6:b1:
8a:0b:b4:eb:29:3e:87:ad:9f:42:5f:b1:e6:01:80:79:4f:8e:
a1:22:68:25:28:e8:15:83:2e:f4:f8:ba:37:de:e1:49:c0:f9:
ac:78:3b:48:78:85:26:58:05:64:27:f1:29:2d:e3:f8:1d:5f:
9d:67:06:b8:86:4e:a3:32:25:0d:87:cc:ca:82:21:a8:a2:2e:
5b:fd:5a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:24:57 2025 by rpki-client