Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft
File: FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft (raw, json)
Hash identifier: wLJiuZP/EwcNH3paOSI1D4DH5G30YyXMK1u28a0MR/A=
Subject key identifier: 22:C8:43:01:E5:6F:87:FA:8D:97:8E:90:C7:7D:51:96:4D:E0:9B:BC
Authority key identifier: 14:D0:84:3B:24:5F:C2:73:5C:F2:47:50:4C:4F:1B:D8:55:FF:CE:FC
Certificate issuer: /CN=14d0843b245fc2735cf247504c4f1bd855ffcefc
Certificate serial: 019A4D06BCBACEB4F42E43590B88B76D61D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNCEOyRfwnNc8kdQTE8b2FX_zvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft
Manifest number: 0D90
Signing time: Tue 04 Nov 2025 04:01:18 +0000
Manifest this update: Tue 04 Nov 2025 04:01:18 +0000
Manifest next update: Wed 05 Nov 2025 04:01:18 +0000
Files and hashes: 1: FNCEOyRfwnNc8kdQTE8b2FX_zvw.crl (hash: YUBYYKxkdYyxrcvwuM+JfFvGdeyWT0mxRNr8TzDH8iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNCEOyRfwnNc8kdQTE8b2FX_zvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:bc:ba:ce:b4:f4:2e:43:59:0b:88:b7:6d:61:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d0843b245fc2735cf247504c4f1bd855ffcefc
Validity
Not Before: Nov 4 04:01:18 2025 GMT
Not After : Nov 5 04:01:18 2025 GMT
Subject: CN=22c84301e56f87fa8d978e90c77d51964de09bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5e:69:be:3e:ce:85:c8:2b:29:2a:b3:5c:f3:
b2:e9:49:14:23:ab:5b:a8:53:0a:e3:ca:f3:47:33:
ad:fe:5a:af:39:ef:cb:5a:5c:1c:f5:b2:ca:37:87:
e1:6e:d6:4f:ea:75:3c:66:ec:55:d1:2a:e2:4e:78:
1f:1c:34:dc:47:c8:ca:92:08:ef:11:2b:69:4b:0f:
5b:ad:e4:4e:bf:94:97:75:17:15:4a:59:cb:ce:c2:
96:e5:93:40:c8:df:fa:35:0d:9f:37:b9:51:18:57:
f5:af:e1:bb:43:c2:8b:36:c1:5c:a9:cd:e3:09:7d:
16:c4:39:82:34:be:c3:11:01:c6:6d:07:05:9f:a5:
31:ff:6d:b8:92:7a:63:35:57:04:ea:9c:b0:6e:60:
81:dd:22:fd:7e:c4:7f:1b:af:a2:19:94:c0:22:cf:
59:85:53:1d:83:72:15:e2:89:fa:e3:c6:7a:b0:f2:
3b:14:a4:fc:a3:5c:d2:f4:ae:17:25:7d:cf:38:d3:
92:10:04:70:8c:8a:38:99:8e:cb:d3:e6:e5:f7:e9:
11:ef:97:1e:99:2b:88:67:67:d0:ad:70:45:33:7e:
ea:47:89:8f:ae:fc:62:ab:2a:6a:3b:7a:7c:cb:62:
f5:ae:11:79:8d:91:9e:5f:49:48:55:0d:e5:20:74:
30:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C8:43:01:E5:6F:87:FA:8D:97:8E:90:C7:7D:51:96:4D:E0:9B:BC
X509v3 Authority Key Identifier:
keyid:14:D0:84:3B:24:5F:C2:73:5C:F2:47:50:4C:4F:1B:D8:55:FF:CE:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNCEOyRfwnNc8kdQTE8b2FX_zvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:57:48:e6:a7:4c:22:0d:5b:1d:d0:8c:05:74:32:bf:ae:39:
72:f8:fb:03:4e:5a:0f:01:d6:f4:3b:32:3f:84:b9:7c:f5:bf:
d6:81:bc:9f:50:bd:6c:07:ef:6c:52:ec:48:97:8a:61:b3:8b:
be:49:5d:ad:4f:fb:0e:68:a3:10:64:54:ec:cd:4a:e0:c2:92:
78:46:6a:65:70:75:00:9a:88:2d:f0:51:30:9e:7d:2d:99:57:
f0:4f:cc:dd:6f:f9:4f:ad:a8:fa:74:c3:9c:4d:8b:cd:75:fe:
8c:c7:a1:ad:60:14:b5:e4:0f:11:9f:de:d0:d2:27:45:f5:c7:
67:e1:70:4d:18:98:a3:9a:58:ee:93:69:7f:8e:3e:76:67:41:
ee:b3:31:07:ba:14:ac:6e:82:95:77:d8:a3:f6:5b:e4:08:42:
ed:40:b2:f9:4f:ec:0b:a4:c7:15:49:ef:8e:d8:29:72:05:46:
4a:ad:99:c8:4d:0c:b8:c9:a7:9e:d8:76:11:34:3f:be:b7:3b:
69:2f:2a:87:f3:5d:2c:f0:a3:bd:e8:ab:8f:09:ec:04:c9:52:
3b:3f:9b:83:f6:cb:e8:36:28:95:f5:e4:cb:9b:50:75:39:43:
58:fc:e2:fa:4a:1c:66:85:f3:55:a4:c7:e4:ed:db:d9:c9:07:
65:2c:3c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:57 2025 by rpki-client