Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft
File: FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft (raw, json)
Hash identifier: HWSzcpuxdnmAfm4mrtu4j1VcVfsnNKUegceWGsqXQP0=
Subject key identifier: 1F:FA:49:05:BD:93:3E:09:F6:32:72:3B:38:77:77:88:F0:16:C7:61
Authority key identifier: 14:D0:84:3B:24:5F:C2:73:5C:F2:47:50:4C:4F:1B:D8:55:FF:CE:FC
Certificate issuer: /CN=14d0843b245fc2735cf247504c4f1bd855ffcefc
Certificate serial: 0199FFC8A5E86D60EC7489CF10BD3F9A45D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNCEOyRfwnNc8kdQTE8b2FX_zvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft
Manifest number: 0D68
Signing time: Mon 20 Oct 2025 04:02:43 +0000
Manifest this update: Mon 20 Oct 2025 04:02:43 +0000
Manifest next update: Tue 21 Oct 2025 04:02:43 +0000
Files and hashes: 1: FNCEOyRfwnNc8kdQTE8b2FX_zvw.crl (hash: 97em6P+14wS9ZrWzgkI29jMEwkO3MuZFNBDYIANZ7pU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNCEOyRfwnNc8kdQTE8b2FX_zvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:a5:e8:6d:60:ec:74:89:cf:10:bd:3f:9a:45:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d0843b245fc2735cf247504c4f1bd855ffcefc
Validity
Not Before: Oct 20 04:02:43 2025 GMT
Not After : Oct 21 04:02:43 2025 GMT
Subject: CN=1ffa4905bd933e09f632723b38777788f016c761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a8:30:07:41:c4:b4:ec:ab:04:bf:f8:5a:a0:
83:8a:61:00:82:ab:61:97:0b:63:b9:53:c5:65:34:
ee:db:c2:23:d4:6e:1f:5b:b2:5c:ad:02:ad:1c:14:
3b:aa:af:53:80:6a:19:e9:8f:15:18:75:91:7e:45:
06:3a:18:93:0a:06:52:75:fd:61:77:cf:0b:b1:cd:
7b:a7:5c:ae:62:e1:54:c5:14:f1:33:25:9b:9c:32:
ca:9f:d2:06:c8:e7:91:e1:20:20:f1:db:5c:eb:e5:
42:96:81:87:d1:a5:cc:32:a3:a6:6c:b2:5c:d7:26:
ce:5e:09:a8:ea:cf:06:21:aa:ea:3a:3b:35:c7:69:
2c:b8:f4:04:89:c8:cd:a8:c7:55:66:08:e2:3e:ed:
3f:ee:85:4a:c5:68:a3:3f:9a:55:b5:4d:a2:c4:59:
2d:72:49:98:04:c4:25:90:cd:83:88:f3:47:d4:60:
59:a3:12:71:71:06:07:27:b0:27:fc:51:f9:c7:78:
9c:e9:c0:ed:44:4b:68:7e:e8:ec:2d:1c:9c:6a:9e:
29:26:16:a7:fe:0f:c8:57:24:39:fd:c1:11:4c:80:
ac:eb:ee:98:8b:41:63:e9:62:81:5e:e8:5f:63:69:
61:0e:75:a8:85:63:2b:d5:67:2a:a5:34:ee:9e:b2:
8f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:FA:49:05:BD:93:3E:09:F6:32:72:3B:38:77:77:88:F0:16:C7:61
X509v3 Authority Key Identifier:
keyid:14:D0:84:3B:24:5F:C2:73:5C:F2:47:50:4C:4F:1B:D8:55:FF:CE:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNCEOyRfwnNc8kdQTE8b2FX_zvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c0:ce:0c:f8:44:ed:73:41:99:91:53:f5:4c:6b:2f:3d:69:
b5:1d:da:55:84:67:39:07:01:33:38:8c:78:74:32:c4:a3:8c:
f2:ae:af:c5:31:74:7f:b9:54:5e:05:08:74:e6:10:42:34:5a:
65:43:a7:b3:db:d6:e8:4f:37:e6:b5:7c:59:c4:4d:c1:f3:a4:
20:88:c7:56:d2:51:fa:6d:3e:c0:b9:00:09:4e:9b:ae:e1:8b:
1a:ed:e7:73:d7:39:2a:fa:3c:a6:35:e7:d2:00:a2:6c:b9:6a:
f7:46:e7:d5:60:79:8f:55:d1:c4:a3:a1:b1:a9:c3:27:72:02:
fb:7a:e4:e3:b3:13:7d:8e:59:31:50:c3:3e:5f:82:40:1f:38:
16:6d:72:ef:2f:b2:ac:51:4d:ed:07:7e:3a:8e:2f:97:af:8d:
77:df:0c:f9:69:d5:d3:77:35:86:be:a1:50:37:8b:7e:ee:bc:
c4:12:81:37:63:9d:49:29:ea:43:fd:73:95:08:d9:bd:9e:bb:
8b:cf:be:76:a6:3b:dc:5d:47:37:fa:a4:2c:85:20:10:24:2b:
8e:17:e1:62:5f:b8:4e:ba:40:af:09:06:8b:c0:78:b3:45:35:
f2:09:92:c7:f7:97:98:83:7d:c2:73:be:13:05:e0:cc:95:ad:
c1:1b:03:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:01:40 2025 by rpki-client