Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft
File: ZvEr0F_5yRriI48ykBy6rhwzcP4.mft (raw, json)
Hash identifier: 2XrIfp122w3PkJTkFAIWks/5tyHcoMBBAG83gphJAyE=
Subject key identifier: C3:D4:EE:98:51:FE:C5:97:F8:C0:29:B2:B4:FA:E8:0A:3A:DC:BA:CA
Authority key identifier: 66:F1:2B:D0:5F:F9:C9:1A:E2:23:8F:32:90:1C:BA:AE:1C:33:70:FE
Certificate issuer: /CN=66f12bd05ff9c91ae2238f32901cbaae1c3370fe
Certificate serial: 019A4D744D259BE9F499BA108B17B2B0AE92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvEr0F_5yRriI48ykBy6rhwzcP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft
Manifest number: 0800
Signing time: Tue 04 Nov 2025 06:00:58 +0000
Manifest this update: Tue 04 Nov 2025 06:00:58 +0000
Manifest next update: Wed 05 Nov 2025 06:00:58 +0000
Files and hashes: 1: ZvEr0F_5yRriI48ykBy6rhwzcP4.crl (hash: 9xvXL14LLPh9UxdHVRx29/CXP3KXNM+Dp+5VpmW4XN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvEr0F_5yRriI48ykBy6rhwzcP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:4d:25:9b:e9:f4:99:ba:10:8b:17:b2:b0:ae:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f12bd05ff9c91ae2238f32901cbaae1c3370fe
Validity
Not Before: Nov 4 06:00:58 2025 GMT
Not After : Nov 5 06:00:58 2025 GMT
Subject: CN=c3d4ee9851fec597f8c029b2b4fae80a3adcbaca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:99:9b:f5:3f:d9:3f:b9:3a:89:e2:24:b7:fe:
e7:ee:a4:68:88:3b:46:66:95:cc:45:b5:f0:d1:b4:
50:f4:ed:04:e9:a0:ad:fb:54:ef:cc:9c:b9:ca:c9:
b6:5e:9d:3a:99:ef:5f:0b:53:7f:9e:e8:b7:b5:de:
46:f5:4b:ba:0e:d9:50:00:54:7e:5d:c2:7a:d8:ef:
59:11:b8:35:1c:d3:f5:da:f6:ac:83:81:f8:8c:43:
92:c1:30:13:1d:cc:08:cd:0b:1d:28:02:4c:42:7f:
6c:53:fd:5c:45:90:a4:98:91:eb:20:9b:d1:4a:6e:
63:ee:76:82:ae:de:15:da:c4:dc:b2:4c:ed:7f:bc:
b1:06:bc:51:af:bf:f6:6c:48:18:da:10:25:e4:75:
7e:84:63:18:84:0f:21:d3:45:38:b9:ce:ab:2c:ed:
52:77:e3:de:fe:b4:72:b6:b8:f6:05:58:20:b6:9b:
9e:0f:b9:cf:92:1b:ab:04:e7:e2:a6:eb:ad:32:13:
71:fc:da:fc:29:14:15:92:45:de:82:73:64:6f:7d:
3b:df:cf:1f:eb:65:85:17:41:06:ce:c7:6a:4a:c6:
c0:c7:4c:9b:8f:41:08:e5:da:de:bb:d3:cf:43:73:
1d:31:9b:79:76:3d:fc:ac:64:f1:e2:17:da:0b:dc:
29:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D4:EE:98:51:FE:C5:97:F8:C0:29:B2:B4:FA:E8:0A:3A:DC:BA:CA
X509v3 Authority Key Identifier:
keyid:66:F1:2B:D0:5F:F9:C9:1A:E2:23:8F:32:90:1C:BA:AE:1C:33:70:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvEr0F_5yRriI48ykBy6rhwzcP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:90:e1:13:64:a9:70:e6:2f:8a:9c:76:fd:44:25:a9:f4:e1:
fa:31:94:b4:e0:e8:6d:6c:e6:f2:e5:a6:79:59:ae:33:c9:f7:
33:52:ad:fd:e8:82:01:34:82:c1:a2:69:86:25:da:79:f9:fd:
a1:38:ea:0b:1f:c1:28:24:72:63:71:c8:3a:b6:c2:13:d4:7e:
f2:d7:d9:45:f2:0b:a4:7a:b3:ce:12:e8:8b:54:37:f8:8f:c7:
6a:f5:a7:e0:25:c4:c3:a9:5b:07:fd:10:34:0d:6f:68:b0:1f:
72:bf:76:8c:c4:52:0a:5e:b1:e9:7a:59:ad:69:26:9c:d6:2c:
93:a5:92:08:1f:97:96:74:3e:ed:64:d4:4b:7f:17:11:d5:22:
8d:06:c0:ac:39:dc:0b:d2:22:bf:0a:47:5a:08:40:07:55:1f:
3f:c3:5e:14:98:78:38:e2:82:51:1a:9c:9d:48:fc:42:87:ec:
7e:56:fe:93:bb:b3:e8:0d:75:05:d9:ab:a3:5f:39:63:86:d9:
fb:ec:63:ed:50:0a:a8:ba:6c:e6:4d:37:a0:ff:61:56:68:f6:
2b:bb:64:df:a2:5a:02:3b:5c:be:85:b1:9c:84:b5:de:fa:56:
76:22:c3:e8:ba:de:0d:a5:dd:7c:64:33:9c:e9:b4:cb:3d:7b:
0d:ea:1c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:22:23 2025 by rpki-client