Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.mft
File: zfDoJMYqWSimUCFO8z6Md-fB_40.mft (raw, json)
Hash identifier: 7gERcHVaV5ZXZn8h0L3BGOZXyTJxGYS46jc8E/gU268=
Subject key identifier: 77:BE:5E:71:BE:45:34:8C:10:0D:4E:43:88:AA:83:F6:2A:14:2E:00
Authority key identifier: CD:F0:E8:24:C6:2A:59:28:A6:50:21:4E:F3:3E:8C:77:E7:C1:FF:8D
Certificate issuer: /CN=cdf0e824c62a5928a650214ef33e8c77e7c1ff8d
Certificate serial: 019A4D07BF305952359DFAC524BB26DAB70D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfDoJMYqWSimUCFO8z6Md-fB_40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.mft
Manifest number: 10AD
Signing time: Tue 04 Nov 2025 04:02:24 +0000
Manifest this update: Tue 04 Nov 2025 04:02:24 +0000
Manifest next update: Wed 05 Nov 2025 04:02:24 +0000
Files and hashes: 1: zfDoJMYqWSimUCFO8z6Md-fB_40.crl (hash: ieozPUEIBe7eUiQwEvGHejdhOJy+8eviUZqxmUY8qaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfDoJMYqWSimUCFO8z6Md-fB_40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:bf:30:59:52:35:9d:fa:c5:24:bb:26:da:b7:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf0e824c62a5928a650214ef33e8c77e7c1ff8d
Validity
Not Before: Nov 4 04:02:24 2025 GMT
Not After : Nov 5 04:02:24 2025 GMT
Subject: CN=77be5e71be45348c100d4e4388aa83f62a142e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:52:d7:ea:42:38:e0:3a:81:d0:c7:ef:f7:fb:
66:8b:1c:bc:b1:97:85:42:e4:e1:f1:b0:45:a1:e9:
61:32:24:53:2a:67:82:b9:d4:5e:5c:07:a2:a4:b8:
b7:fe:7e:6f:1d:66:70:6a:97:3e:43:fe:a4:c8:bb:
a2:40:cb:b5:01:eb:d0:28:0c:3b:d3:05:bb:86:5d:
7e:d4:42:18:28:09:b0:3e:0d:e4:5e:fb:c5:88:d3:
45:70:d2:d2:29:5b:ce:09:e2:11:f9:f1:b1:66:22:
4f:cd:25:73:63:f2:fa:5e:1b:74:68:93:6c:93:55:
95:ef:c9:1e:4b:30:f1:0b:be:19:91:5f:9b:16:2d:
b0:1c:59:56:26:09:b6:63:27:75:93:43:46:93:37:
ca:d5:b2:25:5b:84:ab:69:4f:81:a1:f1:8a:29:49:
74:73:1c:87:40:89:c6:54:ff:47:af:66:7f:cd:f2:
4c:ba:0d:c6:d6:00:14:7b:e3:ba:a4:8a:a3:69:7c:
64:5e:f6:39:1a:be:c8:0a:2d:34:14:f6:96:43:fe:
cb:db:2e:84:b8:9e:8c:cb:49:ee:ca:e2:95:d9:f8:
34:77:83:f0:e8:5f:93:20:30:a7:e4:b3:fa:98:0e:
47:84:03:0a:0f:06:89:ce:04:3f:a9:fb:ed:20:cf:
ec:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:BE:5E:71:BE:45:34:8C:10:0D:4E:43:88:AA:83:F6:2A:14:2E:00
X509v3 Authority Key Identifier:
keyid:CD:F0:E8:24:C6:2A:59:28:A6:50:21:4E:F3:3E:8C:77:E7:C1:FF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfDoJMYqWSimUCFO8z6Md-fB_40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:e5:0a:0b:83:34:a7:4a:30:be:c0:20:8b:5f:04:6d:47:96:
2b:bd:ee:f3:d1:5e:49:0c:69:f8:6f:be:62:58:af:b1:5e:06:
c1:0c:72:60:2b:dd:f7:a0:89:88:8a:f8:59:14:06:f4:1d:7c:
ef:35:d5:57:cc:23:7d:53:13:26:ef:b1:00:65:54:65:dd:b1:
15:0f:63:79:1c:d0:6b:90:60:cd:d3:89:68:d4:f4:e7:a4:83:
b2:25:8e:7d:30:91:3c:b1:41:87:3c:1c:32:19:d6:ae:39:3a:
d4:a4:48:e4:76:67:57:76:24:63:c4:7b:18:1d:d4:a7:5c:cd:
fa:bd:54:1a:64:67:0b:1f:a5:7f:0e:ac:98:1e:16:56:23:ab:
3a:c5:2a:18:76:49:fc:d4:5b:c3:da:93:2a:2d:f2:65:44:84:
96:08:42:4f:f7:c9:04:9c:9d:fa:23:2b:53:53:86:83:0d:68:
e3:ed:90:91:bf:97:da:76:6f:35:6c:65:c5:51:d6:e1:f0:0d:
51:d6:51:e8:fe:20:08:ec:6e:dc:5b:6d:1d:30:9d:bb:99:79:
a3:9e:78:5a:8c:c3:8b:79:92:fe:35:80:7b:d8:d7:6e:93:ef:
7d:38:b7:d7:1d:00:a0:a2:bc:af:b8:3f:68:40:f7:c3:56:bb:
9c:bf:99:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:18 2025 by rpki-client