Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
File: z2sdziLtzI0bE3M48rfikFxKixI.mft (raw, json)
Hash identifier: Szt9RAowuHr17uYV0RqKsNKBka4jAH51G2WUyCg8JOo=
Subject key identifier: 8A:2C:83:44:CB:92:C0:CA:4B:29:B6:12:64:0B:5D:8D:97:F5:4D:55
Authority key identifier: CF:6B:1D:CE:22:ED:CC:8D:1B:13:73:38:F2:B7:E2:90:5C:4A:8B:12
Certificate issuer: /CN=cf6b1dce22edcc8d1b137338f2b7e2905c4a8b12
Certificate serial: 019A4F62733FE68F2F453E7E33DFAA856B91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 15:00:43 +0000
Manifest this update: Tue 04 Nov 2025 15:00:43 +0000
Manifest next update: Wed 05 Nov 2025 15:00:43 +0000
Files and hashes: 1: z2sdziLtzI0bE3M48rfikFxKixI.crl (hash: q1EEe2aN1RqdxIiPZygUKD3yorfgYKuXBxlhAoZXIAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:73:3f:e6:8f:2f:45:3e:7e:33:df:aa:85:6b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6b1dce22edcc8d1b137338f2b7e2905c4a8b12
Validity
Not Before: Nov 4 15:00:43 2025 GMT
Not After : Nov 5 15:00:43 2025 GMT
Subject: CN=8a2c8344cb92c0ca4b29b612640b5d8d97f54d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b0:ea:9e:ad:14:2e:4a:19:74:46:bd:f8:d7:
83:f5:d4:f6:6a:71:88:99:5e:35:1b:f6:2a:b2:24:
af:b4:d6:94:00:d4:82:8c:61:79:1a:0f:b0:92:4c:
16:28:6b:60:7b:a5:3e:c6:78:63:eb:e7:0c:10:34:
06:22:de:58:04:ba:8f:11:bf:1d:55:ef:d0:e2:ba:
60:e9:4d:f7:02:88:0c:a5:ea:bf:d9:f5:73:f1:e0:
e6:69:b6:5e:8a:64:13:95:10:b3:48:6b:3c:15:b0:
5e:dd:4b:fd:58:a9:0b:b5:c2:c5:52:5b:dd:9b:be:
61:b1:e5:02:e9:86:27:3b:ea:84:5f:42:2b:80:26:
d4:a2:a3:52:88:d8:56:93:94:2d:66:2d:ae:e3:21:
ae:dc:c1:6a:b1:2a:ae:4e:8f:bc:ee:5d:e4:ba:91:
e1:ec:f6:d5:e8:b1:13:b3:06:9d:56:f5:76:5f:37:
40:66:82:33:dd:28:38:79:b3:55:fe:91:bf:7f:bb:
15:58:8d:20:be:50:ff:61:bc:e4:7f:e7:32:fd:7b:
c7:ba:26:27:22:a1:92:78:9e:41:cc:d7:e2:47:a4:
5c:32:62:1d:5a:be:e4:31:0e:47:ba:80:28:16:57:
5b:6f:2e:47:41:6f:2c:f7:64:9c:ec:11:f8:a8:25:
6f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2C:83:44:CB:92:C0:CA:4B:29:B6:12:64:0B:5D:8D:97:F5:4D:55
X509v3 Authority Key Identifier:
keyid:CF:6B:1D:CE:22:ED:CC:8D:1B:13:73:38:F2:B7:E2:90:5C:4A:8B:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:10:20:82:f7:3b:79:1e:e5:e7:bd:5e:b3:b3:38:99:a3:7c:
7b:0b:72:ce:1d:75:d4:15:48:66:1a:c0:77:b1:d8:c2:f0:8f:
62:4d:d7:99:19:71:de:63:04:4a:c5:12:1e:52:53:f2:28:a6:
77:7d:77:9a:61:11:5c:8a:d1:60:cc:c3:db:5b:75:16:7e:d7:
cf:56:ee:7f:81:48:86:6b:33:2a:81:bd:72:fa:98:5d:be:e9:
8a:1e:41:18:09:dd:06:16:d9:0c:b6:eb:26:13:67:2d:1b:af:
32:da:20:c0:59:5b:bb:3b:63:8f:75:89:9c:7f:15:c2:6c:41:
53:a8:4f:a7:ce:d4:e3:83:e0:66:d0:6f:cc:d2:46:60:a2:4c:
0c:59:f8:fd:92:be:28:fd:1c:06:58:92:e6:95:43:a8:23:21:
6a:d6:cf:a9:36:ce:59:2b:cd:43:3c:89:39:48:44:2f:2d:5e:
c0:17:bd:05:74:26:61:8f:6c:35:ac:18:6e:e1:ab:d2:44:ed:
65:65:6a:5d:b2:eb:2f:78:7b:2b:e1:f1:eb:d0:a5:07:4e:b0:
82:17:fc:c4:fb:1a:00:68:c6:a5:d8:6f:99:16:09:ff:ce:6e:
61:82:b7:b3:08:4f:b3:4f:59:fe:1e:21:63:00:22:16:18:7b:
8f:dc:45:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:24:18 2025 by rpki-client