Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft
File: FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft (raw, json)
Hash identifier: WUM5B8MVmq/pq2NY6B7a9ZXRlFcR6KjGC8EA0UsA+Rc=
Subject key identifier: 30:4B:3F:CA:B2:43:50:99:1F:07:9B:D6:66:F3:2C:0C:80:1B:AC:26
Authority key identifier: 14:D0:84:3B:24:5F:C2:73:5C:F2:47:50:4C:4F:1B:D8:55:FF:CE:FC
Certificate issuer: /CN=14d0843b245fc2735cf247504c4f1bd855ffcefc
Certificate serial: 0198D65FE70E5E2E0ADA2740DCFB488FBE6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNCEOyRfwnNc8kdQTE8b2FX_zvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft
Manifest number: 0CCE
Signing time: Sat 23 Aug 2025 10:01:05 +0000
Manifest this update: Sat 23 Aug 2025 10:01:05 +0000
Manifest next update: Sun 24 Aug 2025 10:01:05 +0000
Files and hashes: 1: FNCEOyRfwnNc8kdQTE8b2FX_zvw.crl (hash: dBmv1gxpI+sspR60p6ttx2SbEELKsfF1vxcydlG0F0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNCEOyRfwnNc8kdQTE8b2FX_zvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:e7:0e:5e:2e:0a:da:27:40:dc:fb:48:8f:be:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d0843b245fc2735cf247504c4f1bd855ffcefc
Validity
Not Before: Aug 23 10:01:05 2025 GMT
Not After : Aug 24 10:01:05 2025 GMT
Subject: CN=304b3fcab24350991f079bd666f32c0c801bac26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:89:eb:1a:7f:29:37:1c:b0:a0:0f:75:2d:21:
01:9c:24:c0:02:99:d4:89:0f:d6:8a:b2:5c:58:9f:
e8:77:c8:98:bb:85:06:d9:1e:f7:2a:20:07:b8:e9:
50:10:88:91:ad:14:47:c8:97:00:6d:6f:45:25:3c:
35:a8:f3:0b:b1:07:4d:24:0d:1c:49:13:98:1b:86:
92:d3:bd:d1:86:18:56:e5:ad:7b:4a:35:4b:5e:b7:
76:18:5c:df:1e:e5:d9:53:41:73:01:da:ff:bc:c2:
48:89:a7:30:8e:4a:0b:3e:47:30:db:33:eb:c3:60:
f1:2e:ca:3f:c3:ec:3d:3f:ca:43:8c:fe:63:b1:92:
94:1c:39:cd:57:2b:66:76:a4:20:d7:61:b4:7b:24:
e3:c4:e9:0b:9c:dd:47:40:7e:e7:d2:64:f7:31:5f:
2b:b6:b8:8b:f5:21:e1:c1:18:ad:c0:e7:32:54:d1:
77:30:14:df:fd:6a:fe:0c:b8:13:de:8b:e0:ea:ff:
fb:e3:31:88:84:9c:48:53:f8:40:68:04:6c:0f:17:
f9:9d:d2:4e:00:4f:6a:44:1a:87:8c:0a:4e:8d:f6:
0b:a4:fa:c3:a0:49:17:3b:11:26:06:7a:28:fc:fc:
0b:26:ea:23:50:8c:42:af:85:95:41:b5:48:e8:e4:
03:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4B:3F:CA:B2:43:50:99:1F:07:9B:D6:66:F3:2C:0C:80:1B:AC:26
X509v3 Authority Key Identifier:
keyid:14:D0:84:3B:24:5F:C2:73:5C:F2:47:50:4C:4F:1B:D8:55:FF:CE:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNCEOyRfwnNc8kdQTE8b2FX_zvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:82:e8:cb:13:b8:8c:2a:05:36:b9:a3:d4:2b:92:82:11:5a:
27:5c:98:f2:24:22:e6:84:30:69:32:74:23:f5:e4:8a:1f:43:
8a:32:b0:12:fc:13:85:48:1c:a7:68:3d:be:04:d5:2d:c0:5d:
d6:57:bf:cf:97:86:b2:49:80:05:11:74:29:29:39:19:db:fc:
19:76:7e:e7:6d:3e:46:f4:be:ff:ba:0c:a3:8e:7e:e3:93:b0:
a6:2b:fe:08:ce:66:7d:ea:89:15:0e:8e:85:d0:18:36:98:96:
e2:e1:7e:26:17:72:dd:28:0c:ff:0d:59:6f:f1:1f:c8:43:56:
c6:3e:7e:03:90:f6:6f:3a:e6:cd:00:a1:bc:6e:b0:13:86:4e:
61:ab:00:59:e9:ee:e8:95:c2:ac:3c:ab:a6:0f:01:ba:57:27:
3e:d9:c5:aa:2e:8d:f3:f2:6f:22:dd:34:37:fa:55:bb:d3:45:
4b:0f:d7:58:48:a9:89:36:44:95:b6:24:c0:88:93:20:46:c8:
55:bd:06:a2:c3:af:fa:fb:ce:f4:ec:e3:46:c7:f0:ef:28:ec:
2c:64:ca:1b:90:54:58:f3:be:08:24:e4:5c:e9:d5:bf:e4:f2:
12:30:87:93:f2:94:b5:bf:f1:91:c4:59:33:21:1d:90:64:d6:
c9:bb:79:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:19:30 2025 by rpki-client