
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.mft
File: z3F496AF-Td59GjTS628zBuc6lA.mft (raw, json)
Hash identifier: qtfWUAxUus85QcIAki8VQFi9zqpnz1XZYqHLKA5oc+o=
Subject key identifier: B7:4C:0F:09:97:6E:85:A1:E9:7F:4D:22:21:FC:0A:6C:81:91:89:22
Authority key identifier: CF:71:78:F7:A0:05:F9:37:79:F4:68:D3:4B:AD:BC:CC:1B:9C:EA:50
Certificate issuer: /CN=cf7178f7a005f93779f468d34badbccc1b9cea50
Certificate serial: 019887D6E95B23423E8F11503625A8694F4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3F496AF-Td59GjTS628zBuc6lA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.mft
Manifest number: 0EDF
Signing time: Fri 08 Aug 2025 04:01:05 +0000
Manifest this update: Fri 08 Aug 2025 04:01:05 +0000
Manifest next update: Sat 09 Aug 2025 04:01:05 +0000
Files and hashes: 1: z3F496AF-Td59GjTS628zBuc6lA.crl (hash: oQa+TVvW9ZScZnHN4vQC+FMjf5Be/guzle0sAHEDhAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3F496AF-Td59GjTS628zBuc6lA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:d6:e9:5b:23:42:3e:8f:11:50:36:25:a8:69:4f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7178f7a005f93779f468d34badbccc1b9cea50
Validity
Not Before: Aug 8 04:01:05 2025 GMT
Not After : Aug 9 04:01:05 2025 GMT
Subject: CN=b74c0f09976e85a1e97f4d2221fc0a6c81918922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0f:a2:fd:7e:08:ea:b2:7d:b0:f2:57:5b:7a:
3a:ca:73:ea:d3:0f:b4:9c:33:0d:77:a4:66:cb:e7:
03:c3:8c:3c:3b:c7:e0:36:42:9a:ca:6c:b6:f7:a2:
d5:8d:75:ba:85:30:c1:24:a4:55:0f:bc:52:6d:7e:
ac:ca:b1:9b:d3:52:95:7d:c6:25:d7:04:87:27:af:
98:df:48:45:20:53:96:ba:34:57:3f:7c:18:10:40:
3c:25:1b:f3:58:7a:d7:eb:b5:46:ed:6f:26:61:1d:
8a:0b:0d:04:8a:02:fb:78:fe:56:c2:ec:0e:47:8f:
c9:3c:79:5f:fb:5e:73:21:67:ed:41:e7:15:07:a6:
2f:60:7f:92:9c:d5:ea:bc:b9:81:bd:f8:61:8a:43:
66:d5:3c:fc:e6:5a:2d:25:59:c6:2d:ba:40:d4:d0:
3f:22:5f:14:26:ce:09:7c:91:c3:06:59:4c:7e:6b:
65:70:e8:10:1f:f6:36:a8:e7:6e:3a:9b:34:db:27:
e6:13:06:e5:6f:cf:a6:8e:d7:41:93:b6:c8:b5:9f:
d4:9b:b6:95:19:6f:01:f9:2b:e2:34:6f:7f:b4:e4:
a8:7e:7a:4a:66:3f:60:43:5d:b2:33:fa:a6:46:90:
62:29:28:8b:3c:4f:ad:ee:56:6d:72:a5:ea:35:d4:
de:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4C:0F:09:97:6E:85:A1:E9:7F:4D:22:21:FC:0A:6C:81:91:89:22
X509v3 Authority Key Identifier:
keyid:CF:71:78:F7:A0:05:F9:37:79:F4:68:D3:4B:AD:BC:CC:1B:9C:EA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3F496AF-Td59GjTS628zBuc6lA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:64:7c:b0:e6:25:e3:d0:36:6e:44:88:86:24:c8:c5:db:ec:
9d:94:33:16:cc:03:da:3e:25:5d:84:2b:6c:a1:83:bd:58:3d:
27:32:2c:7f:aa:1f:b7:76:4c:5f:fb:1f:af:e5:5a:37:78:81:
8e:45:79:81:29:0f:c9:30:42:72:8d:33:71:4f:58:9a:bf:e3:
53:38:19:9f:19:48:98:81:f2:42:b1:80:78:36:de:c9:42:7f:
df:95:96:4d:62:70:44:ae:cd:1f:02:2e:c7:f5:b2:63:31:4f:
a2:89:da:6d:b3:38:b7:cb:70:27:fe:9c:c1:7e:d1:2f:db:0a:
7d:68:b9:c1:c0:d9:3e:e0:ea:a3:fa:86:6e:a7:d8:91:27:fd:
d9:81:c1:a2:ea:c7:1f:d9:cd:37:86:5f:96:e7:99:5a:bf:3a:
aa:1a:ba:c5:21:2a:f0:e2:bd:32:16:53:c5:b5:f5:f3:28:43:
86:7c:74:7a:4d:43:38:5a:44:8f:fe:ea:b2:60:75:fc:84:9c:
9f:54:06:04:3a:df:28:86:3d:c7:df:d8:79:f2:c0:6b:4d:39:
25:38:f8:31:bd:59:82:82:67:a6:9e:26:0d:e8:2e:ce:6f:f3:
de:21:aa:80:9d:1c:bf:8d:dc:8f:bd:f7:c2:19:f6:01:c3:a8:
f3:bf:e8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:00:58 2025 by rpki-client