Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
File: Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft (raw, json)
Hash identifier: MvqcV+GuU8pj1U5jDJJmsGkwaQ/2UtgSyu6NW8fzRW4=
Subject key identifier: 70:E7:44:B7:4C:FB:FD:4B:73:9F:08:D6:43:AE:B2:E5:B8:D0:37:9C
Authority key identifier: 66:FB:77:27:D6:4A:51:8C:7C:D4:85:E4:82:3E:E7:8A:9E:29:10:08
Certificate issuer: /CN=66fb7727d64a518c7cd485e4823ee78a9e291008
Certificate serial: 0199FEEB9D136C48C72193D59AA3D4A8E21D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
Manifest number: 0FBC
Signing time: Mon 20 Oct 2025 00:01:17 +0000
Manifest this update: Mon 20 Oct 2025 00:01:17 +0000
Manifest next update: Tue 21 Oct 2025 00:01:17 +0000
Files and hashes: 1: Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl (hash: CgwIB1mHx14vxXFTpyx9o+XfzG20SNwiL+iYlxef7ag=)
2: qdrDiBktURajjlk4oiqN9piQBiA.roa (hash: XK33AjhLnejYmOacprLZoYaTNO5MSW3e9jm0PB6V7KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:9d:13:6c:48:c7:21:93:d5:9a:a3:d4:a8:e2:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66fb7727d64a518c7cd485e4823ee78a9e291008
Validity
Not Before: Oct 20 00:01:17 2025 GMT
Not After : Oct 21 00:01:17 2025 GMT
Subject: CN=70e744b74cfbfd4b739f08d643aeb2e5b8d0379c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:58:54:de:3a:8e:ff:d5:72:fe:3e:6b:b7:b9:
47:90:9d:af:f7:58:b5:13:4e:9d:aa:8c:99:48:de:
24:48:a8:d6:87:7f:2b:53:fe:93:52:e8:4a:f3:f3:
a2:89:08:76:f5:24:47:b3:be:26:31:70:a6:bb:88:
92:57:5c:ca:c4:e0:02:41:8c:17:c0:c8:67:2f:74:
60:34:4e:88:bc:bc:9c:cc:6f:57:51:f8:e2:17:3f:
1e:4b:ba:ad:9e:d0:4a:c9:d6:00:93:82:44:ad:e7:
82:d0:fe:8f:02:42:9c:59:4c:e5:8e:21:ac:f0:c3:
f5:05:5a:c2:09:6b:14:27:07:e6:5a:cb:85:86:63:
aa:5b:7d:6a:a2:49:55:e3:31:9a:86:cd:fd:80:12:
c4:3a:4d:ae:ef:d1:7e:52:d8:2d:3d:9f:2b:f0:19:
91:5f:81:fb:46:53:90:65:5f:a5:6f:85:d6:dc:d9:
1c:39:4f:e9:30:e1:3a:db:74:96:5c:9d:e2:c3:ae:
f8:a2:c4:44:3b:15:e1:74:20:8b:cf:87:97:a1:df:
65:3a:3c:66:80:fd:db:73:55:b3:78:42:45:17:63:
53:cb:0a:04:dd:a3:64:14:9b:ad:9c:90:4f:22:fb:
f0:a8:16:6e:bd:27:7e:dc:cf:62:ed:c4:46:4b:79:
05:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E7:44:B7:4C:FB:FD:4B:73:9F:08:D6:43:AE:B2:E5:B8:D0:37:9C
X509v3 Authority Key Identifier:
keyid:66:FB:77:27:D6:4A:51:8C:7C:D4:85:E4:82:3E:E7:8A:9E:29:10:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:34:30:a9:df:8e:7d:83:40:5e:5d:96:48:4c:9e:31:6f:51:
23:da:4e:69:4f:df:c9:fa:b5:86:b4:bc:4c:86:e6:e1:06:8e:
0b:c7:c2:ef:5c:a2:44:8d:ae:7a:89:72:de:21:75:a5:63:89:
89:f9:b7:fb:cf:d7:c5:16:cc:4c:0b:a2:56:9d:a4:bb:7a:a3:
d7:04:ca:97:7f:ee:03:bd:17:06:e3:97:65:85:a2:b6:63:1b:
5f:ce:4c:cc:89:ea:e0:be:15:66:08:e1:91:b4:0a:c7:5a:fc:
0a:a2:39:1c:5f:c9:95:a0:d1:23:40:6a:e5:61:d0:7e:c7:7c:
3f:82:32:f9:9d:a7:be:fd:0d:b4:91:0f:f5:0d:ca:8a:0c:ca:
6d:dd:e9:10:9d:44:cf:b7:0e:a3:32:fb:c2:fa:f1:96:08:d2:
a7:69:d7:fa:69:99:18:50:6e:cd:03:92:c5:4a:b1:e0:32:42:
c4:7d:44:05:d4:83:67:01:e4:cb:bb:97:27:dc:b9:34:26:46:
bd:83:e1:db:da:cc:e4:96:68:01:37:1f:76:55:eb:54:3e:ab:
46:d4:de:b0:2b:ef:f1:5a:c1:30:4e:d0:82:e8:3b:11:d2:ab:
f7:1b:5e:e2:e4:00:19:7e:f5:63:3d:73:1c:c0:03:85:8c:c4:
26:37:96:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:11:40 2025 by rpki-client