Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft
File: zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft (raw, json)
Hash identifier: GO4F3yBCW0Mck1RsCIk7x8QRtSXAckIKLHV7ptDDd+g=
Subject key identifier: 33:F1:5F:C1:19:0E:AB:E3:D5:2D:AC:D8:FB:C4:DF:48:14:04:6D:1E
Authority key identifier: CE:2B:CC:10:D1:6B:0F:ED:28:55:E9:29:5F:C4:09:D6:50:7B:43:D6
Certificate issuer: /CN=ce2bcc10d16b0fed2855e9295fc409d6507b43d6
Certificate serial: 019A522C6708E08B616CF4E9D5DCFA7CB969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft
Manifest number: 020A
Signing time: Wed 05 Nov 2025 04:00:32 +0000
Manifest this update: Wed 05 Nov 2025 04:00:32 +0000
Manifest next update: Thu 06 Nov 2025 04:00:32 +0000
Files and hashes: 1: 157MYG0IejEjRYj-j1k-QApt6pw.roa (hash: /mAnw2Tqo4MtXrtGStA4rPK8XkvjiW+Q+8q7MR/8qbg=)
2: zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl (hash: JMZFmZQunOW0DJ625Ffkd6+3NBYznzr1k20N2u8EN30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:67:08:e0:8b:61:6c:f4:e9:d5:dc:fa:7c:b9:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce2bcc10d16b0fed2855e9295fc409d6507b43d6
Validity
Not Before: Nov 5 04:00:32 2025 GMT
Not After : Nov 6 04:00:32 2025 GMT
Subject: CN=33f15fc1190eabe3d52dacd8fbc4df4814046d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e9:6f:bc:b1:b9:87:2e:5f:43:7f:0c:3f:ae:
86:30:19:d8:03:64:5d:08:5b:44:a6:b7:55:72:b2:
66:a3:65:8f:68:56:6e:ec:f3:ee:eb:b0:3e:f3:15:
6b:eb:3e:f6:7f:70:f4:54:54:dd:83:ca:85:3c:8d:
e8:50:12:c7:5c:71:17:da:ad:bf:a0:b4:90:eb:03:
1a:0a:cd:c3:2f:0e:eb:57:f4:cf:22:84:16:62:20:
1a:34:ce:11:2a:ef:07:b8:75:d2:64:c7:6a:22:fb:
15:62:3a:e0:97:3c:a2:98:10:db:f8:88:80:cf:4c:
d1:bd:5f:8b:49:9f:58:ac:66:15:0e:58:68:84:d9:
7b:53:b2:93:d2:fc:62:0b:f5:03:22:db:f3:33:b5:
8b:83:16:30:a4:82:56:a9:a0:61:35:0c:e3:5e:29:
bf:7a:7b:7b:7f:e2:8d:f2:ba:65:b1:b4:ba:78:68:
f9:c1:7d:ba:71:7f:88:2d:cd:7b:ca:d7:9c:70:04:
9f:eb:1b:d4:71:22:c5:80:bf:04:e9:66:21:47:4d:
c8:31:c3:0d:1e:b9:55:11:c7:91:31:b8:80:94:ea:
63:99:54:64:19:73:51:a1:a5:15:8d:e4:eb:18:85:
05:82:a5:bc:67:b6:f4:4b:08:f6:ee:b5:e3:ef:28:
08:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F1:5F:C1:19:0E:AB:E3:D5:2D:AC:D8:FB:C4:DF:48:14:04:6D:1E
X509v3 Authority Key Identifier:
keyid:CE:2B:CC:10:D1:6B:0F:ED:28:55:E9:29:5F:C4:09:D6:50:7B:43:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:1e:79:04:c1:ec:99:5f:42:6f:47:31:fc:66:d5:0a:e8:07:
43:8a:0d:54:06:1f:0b:b4:b1:f1:bc:03:9b:f2:68:d9:59:bb:
f3:57:b7:46:0c:33:38:e1:fc:de:20:4d:da:8b:19:b7:bb:b3:
95:c6:dd:78:37:d8:9d:44:30:85:3f:c9:2b:c1:ef:e7:0e:a4:
bd:70:33:9c:83:ba:25:a1:12:94:82:26:40:68:11:49:4a:4c:
34:dc:8a:62:79:c7:a0:c3:83:a6:6c:4c:be:bf:5b:ac:88:c4:
ab:d3:bc:22:29:64:3c:04:4e:b8:22:94:65:24:e2:6b:14:87:
2a:3f:d8:a6:13:cc:35:62:5b:ba:a9:e5:e0:71:d7:cf:d1:4d:
fc:2b:56:60:bb:ae:0e:d3:48:9f:fb:48:93:be:60:e3:26:67:
e0:b4:eb:cf:15:11:3a:88:e8:c5:60:e9:e9:a4:02:26:b9:0d:
69:c8:72:a4:f1:69:9c:2b:7a:bd:ef:f5:ef:1f:28:9b:c8:7d:
60:fb:0a:22:f4:66:d0:d2:7c:04:e4:d6:2c:96:7d:4e:01:0c:
79:c6:06:60:3a:c7:9c:92:04:0b:2f:f1:7f:22:b0:0e:32:75:
a2:91:a2:5b:fb:93:ed:43:73:85:8f:26:85:7f:f4:86:12:7d:
e2:e5:eb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:48:51 2025 by rpki-client