Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.mft
File: Z8i133U8dJrleBD52T87pRrgXVw.mft (raw, json)
Hash identifier: ygvsfjIj4DnjM3QMwmUepJGnEL9qcCSLX1wCkOFX3eE=
Subject key identifier: B6:6C:E4:2C:DC:A6:8F:D4:4D:06:FA:45:7B:16:A3:09:48:AF:9B:A7
Authority key identifier: 67:C8:B5:DF:75:3C:74:9A:E5:78:10:F9:D9:3F:3B:A5:1A:E0:5D:5C
Certificate issuer: /CN=67c8b5df753c749ae57810f9d93f3ba51ae05d5c
Certificate serial: 019A4EF47F9E50D14A201B3CA8274C458093
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8i133U8dJrleBD52T87pRrgXVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.mft
Manifest number: 1009
Signing time: Tue 04 Nov 2025 13:00:37 +0000
Manifest this update: Tue 04 Nov 2025 13:00:37 +0000
Manifest next update: Wed 05 Nov 2025 13:00:37 +0000
Files and hashes: 1: Z8i133U8dJrleBD52T87pRrgXVw.crl (hash: RX6t/dyb82Kjtc5o/DGQKq7OMPxqSBt8TWrcFrJezro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8i133U8dJrleBD52T87pRrgXVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:7f:9e:50:d1:4a:20:1b:3c:a8:27:4c:45:80:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c8b5df753c749ae57810f9d93f3ba51ae05d5c
Validity
Not Before: Nov 4 13:00:37 2025 GMT
Not After : Nov 5 13:00:37 2025 GMT
Subject: CN=b66ce42cdca68fd44d06fa457b16a30948af9ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a4:d2:32:38:af:8b:cc:a5:58:67:3c:34:68:
90:78:7b:1a:96:6b:1f:03:e6:d7:7a:70:ea:7e:f5:
9d:b2:dc:1f:ca:04:3a:b5:60:9b:05:1d:25:01:f1:
e6:19:23:d9:81:e0:c8:86:14:67:a1:9d:ee:f0:68:
02:a3:a2:6b:5f:b4:d6:b9:3a:76:23:c7:80:7a:27:
03:60:09:28:3e:3f:97:37:ea:3a:2c:97:55:17:e6:
07:cb:55:84:aa:d5:a6:b2:c4:d9:04:d1:95:cd:bb:
56:e7:53:bb:ba:eb:15:e9:8e:9e:e1:32:96:80:78:
c2:7a:00:29:2c:db:84:0a:90:b8:6d:04:a6:ae:07:
73:9a:b7:5a:6d:b5:5b:fc:7e:26:1b:2b:58:45:c6:
e2:b8:da:95:21:ad:8e:fe:26:9f:f6:05:f1:45:f2:
17:08:7d:75:ab:cd:89:c2:e4:4d:f2:cb:e8:29:52:
53:36:b3:96:16:3d:82:1c:97:eb:04:31:2f:13:29:
27:e8:bf:53:25:f4:d4:07:a5:ad:42:05:5d:aa:8e:
18:c2:af:8e:b0:41:c8:ee:19:ef:ec:57:ac:af:24:
59:04:1f:85:28:a6:f5:b9:81:4a:ca:60:04:f3:c9:
d2:bf:00:d7:73:eb:6b:3b:4e:b6:ca:f6:71:cb:04:
47:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6C:E4:2C:DC:A6:8F:D4:4D:06:FA:45:7B:16:A3:09:48:AF:9B:A7
X509v3 Authority Key Identifier:
keyid:67:C8:B5:DF:75:3C:74:9A:E5:78:10:F9:D9:3F:3B:A5:1A:E0:5D:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8i133U8dJrleBD52T87pRrgXVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:49:d4:f2:4c:f2:75:e3:1e:ed:3a:47:80:84:83:65:ab:0b:
ee:a4:58:67:42:1d:e4:78:4c:13:75:f8:86:99:ee:45:38:09:
b2:f5:68:6c:ca:37:a4:f4:e0:96:15:83:42:e0:7a:42:15:d9:
73:1e:bd:0b:97:3a:b9:d5:7e:19:71:c2:cb:10:1a:b7:05:72:
b4:21:a4:72:ce:0d:fe:b9:4c:c4:25:22:34:1d:79:6c:7e:87:
19:aa:50:b4:71:0c:94:eb:cb:c3:e6:53:64:ff:36:b3:7f:3e:
73:5b:76:e1:73:0f:b3:67:61:43:5b:62:89:4c:da:a1:03:77:
7b:bc:3c:5b:30:ce:68:77:f0:3c:18:da:48:b4:b0:77:25:02:
d7:71:e1:37:da:75:07:7f:85:5f:5d:f8:7f:f2:3c:d7:93:34:
d4:4f:e7:e6:d7:d7:22:66:c3:62:88:50:b2:f8:83:ed:ca:e0:
32:9b:e7:21:c1:73:33:d8:97:5c:81:86:18:ea:d9:e6:a2:e4:
b1:87:07:8c:65:cc:cd:cf:af:54:9d:1f:b7:44:fa:ca:9b:a8:
76:aa:bf:ad:ad:1e:04:9f:af:a8:ce:c3:d3:b6:f9:d6:54:2c:
71:89:04:96:dc:de:46:68:1c:9d:83:ee:80:62:2e:5a:f5:88:
63:bb:74:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:09:00 2025 by rpki-client