Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft
File: FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft (raw, json)
Hash identifier: lnLzILdPbUsXWMBXJuWVA3AcxmIIAtr9SMpRRDL9SfA=
Subject key identifier: CA:29:E8:F8:BE:1E:A1:C8:16:40:52:74:D8:5C:80:8E:06:A3:3A:F6
Authority key identifier: 14:D0:84:3B:24:5F:C2:73:5C:F2:47:50:4C:4F:1B:D8:55:FF:CE:FC
Certificate issuer: /CN=14d0843b245fc2735cf247504c4f1bd855ffcefc
Certificate serial: 0198A23CC75DBF743A68F13978701BBA281D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNCEOyRfwnNc8kdQTE8b2FX_zvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft
Manifest number: 0CB3
Signing time: Wed 13 Aug 2025 07:02:28 +0000
Manifest this update: Wed 13 Aug 2025 07:02:28 +0000
Manifest next update: Thu 14 Aug 2025 07:02:28 +0000
Files and hashes: 1: FNCEOyRfwnNc8kdQTE8b2FX_zvw.crl (hash: HrdfqclZV22SR6r4uP4LMqzXzwKRks7tXVh9Sn3wbZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNCEOyRfwnNc8kdQTE8b2FX_zvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a2:3c:c7:5d:bf:74:3a:68:f1:39:78:70:1b:ba:28:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d0843b245fc2735cf247504c4f1bd855ffcefc
Validity
Not Before: Aug 13 07:02:28 2025 GMT
Not After : Aug 14 07:02:28 2025 GMT
Subject: CN=ca29e8f8be1ea1c816405274d85c808e06a33af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ad:54:93:fa:fe:9a:3f:4d:cc:0f:ab:d2:8e:
e9:d2:0a:84:9f:9f:cf:31:0b:e6:38:b3:c8:d4:3f:
b8:97:ed:f7:d2:ff:92:87:2b:fa:63:b3:f9:29:9f:
46:5f:32:de:e7:bc:f2:87:35:14:77:16:51:e7:f9:
d7:ff:91:75:7c:69:5a:4e:22:e8:96:fb:09:ef:0f:
d0:66:1f:97:3f:8a:ad:14:ca:7f:7b:5e:a4:90:09:
0b:83:80:b2:21:7d:2b:4c:b7:52:a0:05:c3:27:fe:
62:82:07:f8:bf:47:a5:6b:34:46:c2:f8:f0:41:b6:
65:7c:2b:8a:60:8d:b9:5e:22:14:a1:9f:57:c9:1e:
bf:b2:34:0a:1e:9b:ea:7f:4d:60:5c:d1:05:13:cf:
e1:ce:e0:3c:20:ea:23:e1:00:ad:d2:55:09:61:66:
66:50:3e:70:0b:3f:fc:8b:c0:68:e3:67:ed:b2:a2:
9c:1b:b7:53:ab:c6:a4:83:c6:71:f3:92:82:f7:b5:
5a:e0:b4:dd:f3:3c:4a:0a:5b:91:c6:6d:10:f3:8d:
08:b0:e7:c0:9e:56:c6:20:6f:8a:02:7e:1f:82:9d:
50:15:ea:3c:6c:0c:52:0b:eb:c6:06:7d:a0:51:dd:
60:30:01:3c:88:d8:04:b9:b7:15:72:37:09:ca:cc:
3a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:29:E8:F8:BE:1E:A1:C8:16:40:52:74:D8:5C:80:8E:06:A3:3A:F6
X509v3 Authority Key Identifier:
keyid:14:D0:84:3B:24:5F:C2:73:5C:F2:47:50:4C:4F:1B:D8:55:FF:CE:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNCEOyRfwnNc8kdQTE8b2FX_zvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:73:95:13:32:98:bc:32:11:41:5a:52:a4:dc:d3:15:a7:23:
a6:b7:6c:02:71:19:67:0a:4d:0d:a7:c8:98:e8:a3:0b:a9:8e:
b8:7d:f6:28:a2:c4:3e:60:57:35:24:60:e1:12:85:5b:66:c5:
f1:d4:54:53:22:e0:57:59:b3:f1:22:de:c0:77:1b:db:42:57:
f4:e0:3a:cf:c0:a6:41:23:c2:ec:fa:65:f4:37:06:68:37:16:
b9:2f:eb:9d:52:b7:38:12:99:93:f1:10:0f:60:11:7a:16:de:
7c:2e:f0:49:c1:d8:26:b6:28:8b:0c:53:8e:1b:c3:b5:57:29:
c7:68:0a:1a:e0:d3:59:66:fe:82:e9:fe:af:c9:c0:4c:7d:42:
0d:e1:36:fe:3b:46:e6:20:a9:21:5f:84:87:16:94:4d:2d:41:
27:81:7f:2d:86:52:88:e5:13:c1:40:3a:a4:3d:66:ee:9e:e6:
7d:8f:f0:a3:08:ab:4c:88:ef:ef:53:15:86:07:b3:7b:a6:bd:
ee:40:c9:95:b6:14:76:e2:aa:0e:b6:5d:2f:f4:1c:ef:20:96:
20:1f:bd:f5:55:85:77:c7:87:c3:c9:b5:00:e5:7f:a7:5b:6c:
00:d6:af:b0:c4:ee:ef:28:c8:a4:52:7b:2e:5f:62:dc:53:4f:
5f:79:38:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 08:48:35 2025 by rpki-client