Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.mft
File: z312VOh85PlnktVlxW4ZH0Ten1o.mft (raw, json)
Hash identifier: XFvNGhZhQhQQE84KddkHDPnv82hGel0zy9rQwVo/n8Q=
Subject key identifier: 42:FA:EE:08:7B:F0:00:1B:DF:D2:72:67:DC:80:8E:CB:D9:1E:2C:C3
Authority key identifier: CF:7D:76:54:E8:7C:E4:F9:67:92:D5:65:C5:6E:19:1F:44:DE:9F:5A
Certificate issuer: /CN=cf7d7654e87ce4f96792d565c56e191f44de9f5a
Certificate serial: 01987CE503FDBF6B0264BE300843430CCBCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z312VOh85PlnktVlxW4ZH0Ten1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.mft
Manifest number: 0F2D
Signing time: Wed 06 Aug 2025 01:00:40 +0000
Manifest this update: Wed 06 Aug 2025 01:00:40 +0000
Manifest next update: Thu 07 Aug 2025 01:00:40 +0000
Files and hashes: 1: z312VOh85PlnktVlxW4ZH0Ten1o.crl (hash: NPClvmCMfXMLuzdS9BNez7NuYF1Z+FPP8SXwlVIcWQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/z312VOh85PlnktVlxW4ZH0Ten1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:03:fd:bf:6b:02:64:be:30:08:43:43:0c:cb:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7d7654e87ce4f96792d565c56e191f44de9f5a
Validity
Not Before: Aug 6 01:00:40 2025 GMT
Not After : Aug 7 01:00:40 2025 GMT
Subject: CN=42faee087bf0001bdfd27267dc808ecbd91e2cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f0:e0:e8:b4:24:7d:8b:cb:07:f5:dd:99:9e:
d2:1f:6b:b6:f5:be:13:67:d5:91:aa:d7:70:aa:e6:
17:0e:a7:4e:e5:40:61:67:f3:e7:83:3f:d4:f1:43:
5b:8e:b5:a5:2f:54:66:d6:bb:3d:35:0b:20:70:82:
13:a3:8f:b8:1c:8c:0f:6a:68:96:6c:ea:e7:19:12:
42:bc:6c:1b:77:24:62:f0:98:1e:61:b1:a4:31:a6:
c9:37:11:cd:df:2f:f1:41:c5:0b:fa:9f:a6:ce:ac:
1d:db:f9:df:9f:01:b5:ff:99:57:a7:fe:26:b7:34:
02:82:91:84:0a:0e:4c:e7:63:87:a6:a5:0c:49:83:
30:b1:1d:b3:e2:88:f5:a0:1b:37:53:4b:fb:3d:e8:
3b:fd:c2:e5:e3:c3:19:09:4e:5b:ff:1e:97:42:07:
c9:7f:99:13:51:4d:71:7b:de:a1:fb:f8:e2:29:84:
fc:f0:b9:69:42:ce:26:df:60:c8:42:81:1b:7a:47:
15:ec:fd:73:40:6e:71:2d:38:3a:a5:ba:f4:ca:44:
e9:fc:92:93:95:a8:69:ed:b0:ea:61:94:e3:f9:3c:
00:f4:e6:7a:81:a8:33:4c:52:aa:32:93:dc:1c:c8:
0a:4c:69:94:4e:cb:e4:19:cb:99:6e:03:64:f4:fd:
99:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:FA:EE:08:7B:F0:00:1B:DF:D2:72:67:DC:80:8E:CB:D9:1E:2C:C3
X509v3 Authority Key Identifier:
keyid:CF:7D:76:54:E8:7C:E4:F9:67:92:D5:65:C5:6E:19:1F:44:DE:9F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z312VOh85PlnktVlxW4ZH0Ten1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:fc:bb:8d:8a:05:d3:c3:c4:95:52:cb:d5:7e:80:ae:72:50:
09:a5:bc:e2:10:0d:f8:7c:2d:10:43:dc:3a:b6:a9:bc:bc:7d:
9f:bf:7c:fb:fa:d6:e5:33:41:90:06:5e:bf:e2:b4:66:8a:5b:
cb:12:f1:1e:d4:ab:f3:b1:b0:d5:b8:5c:4d:35:3b:e1:f0:98:
82:d1:f5:5e:e2:75:c7:06:a1:60:75:18:47:60:6d:18:7a:87:
28:77:cb:71:a1:6e:98:dd:0c:f8:16:fe:86:e1:13:a0:1a:28:
54:da:2a:85:fc:fb:e8:71:07:84:53:eb:83:15:3f:5f:76:4e:
77:a8:65:18:2c:b0:bd:75:91:81:08:eb:aa:b3:10:4e:0e:92:
ab:7c:a6:76:05:f6:81:85:8a:c8:8f:45:47:d0:e9:68:32:03:
23:be:00:a9:52:8a:c2:e7:f4:74:0b:38:7e:17:ff:a8:f3:e0:
ac:bd:25:74:33:cd:f4:14:cc:e6:a3:c0:48:14:89:9a:f4:13:
55:02:5e:2c:3c:55:58:00:17:1f:e1:c8:96:cd:4e:94:aa:34:
a8:50:be:21:44:91:be:7d:9c:62:50:73:82:c0:05:6a:7c:32:
82:6e:15:9d:62:a5:8b:25:22:57:e7:90:a9:14:eb:5c:cc:9d:
9f:78:7a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:26:07 2025 by rpki-client