Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft
File: zb7dtaniq1M0dBCLfIAPgTLxDiE.mft (raw, json)
Hash identifier: KLUlAPPI0J44AcIcGLx5t82V0l7ZGXNNfa07bI800oY=
Subject key identifier: 3E:80:0E:AB:1D:9C:62:EA:FA:4C:E9:DC:8F:8B:12:B0:B9:06:69:10
Authority key identifier: CD:BE:DD:B5:A9:E2:AB:53:34:74:10:8B:7C:80:0F:81:32:F1:0E:21
Certificate issuer: /CN=cdbeddb5a9e2ab533474108b7c800f8132f10e21
Certificate serial: 019A4F623BDE838E296624CB855152C2458E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zb7dtaniq1M0dBCLfIAPgTLxDiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 15:00:29 +0000
Manifest this update: Tue 04 Nov 2025 15:00:29 +0000
Manifest next update: Wed 05 Nov 2025 15:00:29 +0000
Files and hashes: 1: zb7dtaniq1M0dBCLfIAPgTLxDiE.crl (hash: 1WzdD6xZAh3D/sXTh49lX3TTNrF53H4wwoWd0pGMAGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zb7dtaniq1M0dBCLfIAPgTLxDiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:3b:de:83:8e:29:66:24:cb:85:51:52:c2:45:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdbeddb5a9e2ab533474108b7c800f8132f10e21
Validity
Not Before: Nov 4 15:00:29 2025 GMT
Not After : Nov 5 15:00:29 2025 GMT
Subject: CN=3e800eab1d9c62eafa4ce9dc8f8b12b0b9066910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:58:d7:83:dd:a1:e7:a8:06:45:b6:06:44:49:
72:a5:d4:1d:b7:c4:22:bf:c9:6b:cf:57:31:e1:1e:
25:85:29:88:9f:35:72:a0:3f:73:17:00:fd:59:38:
81:9f:96:77:be:59:99:63:46:00:bf:ce:9b:cc:30:
a7:12:1c:7e:b9:56:60:a6:7b:16:1e:99:c9:2e:93:
92:fc:ca:4e:6e:4c:80:c3:e2:2a:be:e4:d3:a6:ca:
a3:94:2b:d5:93:ce:fb:6f:5d:15:69:63:13:51:62:
d2:41:78:0e:96:08:58:07:c8:40:c5:09:d6:21:6c:
20:5a:8b:c9:14:27:82:8a:82:ae:92:f5:a3:79:9e:
72:4d:ba:64:8e:bc:07:b7:00:12:d4:6f:3a:64:08:
e0:39:08:f2:ec:80:1f:f9:da:4a:46:78:a2:b9:0f:
fe:91:ac:8d:74:fb:2f:da:52:24:f3:46:b7:7a:5a:
33:3b:09:d6:92:6d:cc:78:dc:76:43:21:49:5d:a1:
83:6a:d3:28:d6:a4:58:ad:e5:dd:77:0c:96:d0:33:
d4:be:32:99:d8:ab:27:a2:7e:16:04:06:a3:e5:36:
d3:87:79:81:ba:99:94:4c:bc:c2:6a:8d:fe:58:2b:
d9:29:c7:d5:f3:52:15:d5:eb:4c:f6:c4:c9:49:3b:
63:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:80:0E:AB:1D:9C:62:EA:FA:4C:E9:DC:8F:8B:12:B0:B9:06:69:10
X509v3 Authority Key Identifier:
keyid:CD:BE:DD:B5:A9:E2:AB:53:34:74:10:8B:7C:80:0F:81:32:F1:0E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zb7dtaniq1M0dBCLfIAPgTLxDiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:33:1f:01:c8:2b:fa:b1:f8:40:ad:e0:2b:89:a4:30:00:09:
0b:11:83:fe:7d:36:72:fa:44:ee:8b:d9:26:2a:b7:89:7f:bc:
64:a0:9d:94:bb:75:2c:ff:91:c9:92:fd:b0:cc:ae:10:4d:69:
fd:3f:89:1d:f0:ae:ed:ca:60:b9:44:42:01:15:29:dc:c7:22:
69:f2:4c:5e:bb:fa:0c:fb:8c:76:af:2b:ea:bb:d9:5f:0d:74:
3d:f7:fd:d9:da:9d:40:2f:c1:7e:94:2c:33:53:d1:42:70:ed:
97:34:4f:fa:32:0e:2b:50:45:50:3a:a0:5a:45:89:51:1e:89:
41:df:b2:2f:ad:ae:b0:2c:fb:c4:16:6d:27:6a:97:0c:aa:2a:
6c:73:6c:16:9b:44:88:da:1e:f7:b7:78:7d:99:39:47:d9:16:
33:41:07:6f:01:7b:6b:d4:4a:34:ba:7f:23:84:4f:10:ae:bd:
bd:28:26:82:b1:89:df:28:7c:93:4e:8f:a5:57:0d:56:8a:a9:
48:1f:0a:58:60:dd:f2:49:61:ce:df:9c:63:c3:22:54:42:eb:
d5:4b:e7:44:46:15:f0:87:14:13:ea:88:8c:ee:b3:83:a9:5e:
07:71:1b:f0:ea:fa:8f:42:cc:e7:45:5e:00:6f:84:79:8f:c9:
1c:5f:47:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:08:02 2025 by rpki-client