Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft
File: FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft (raw, json)
Hash identifier: /Ehxm2D/6ccDil2u+Qsg/xIJxXw3Ierk3bteLS46OO8=
Subject key identifier: D6:48:15:B4:53:5C:52:80:AD:3F:40:F1:24:D0:57:41:14:B6:52:20
Authority key identifier: 14:D0:84:3B:24:5F:C2:73:5C:F2:47:50:4C:4F:1B:D8:55:FF:CE:FC
Certificate issuer: /CN=14d0843b245fc2735cf247504c4f1bd855ffcefc
Certificate serial: 0197B88EF0F179B4460AF8D3E6CA96CE9015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNCEOyRfwnNc8kdQTE8b2FX_zvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft
Manifest number: 0C3A
Signing time: Sat 28 Jun 2025 22:01:04 +0000
Manifest this update: Sat 28 Jun 2025 22:01:04 +0000
Manifest next update: Sun 29 Jun 2025 22:01:04 +0000
Files and hashes: 1: FNCEOyRfwnNc8kdQTE8b2FX_zvw.crl (hash: IHLe05+EzGjurKKI1GH0wQww7l+GITJ+WXg0sexJ6e4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNCEOyRfwnNc8kdQTE8b2FX_zvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:f0:f1:79:b4:46:0a:f8:d3:e6:ca:96:ce:90:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d0843b245fc2735cf247504c4f1bd855ffcefc
Validity
Not Before: Jun 28 22:01:04 2025 GMT
Not After : Jun 29 22:01:04 2025 GMT
Subject: CN=d64815b4535c5280ad3f40f124d0574114b65220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:81:39:88:e4:59:ce:1f:78:1d:78:77:3b:ba:
fd:c0:a3:0e:dc:49:f7:19:85:f8:4e:64:1e:31:79:
34:50:9c:fd:00:ae:ea:11:ff:31:8f:36:af:e2:0b:
4c:4e:14:e2:ed:b2:37:00:ac:d4:3d:0a:d3:4a:0c:
cf:ad:6d:f7:2c:95:b8:50:29:c4:d5:96:2a:eb:f2:
47:b6:8c:9a:33:0d:46:15:a3:c8:42:b0:75:28:09:
0a:86:cd:db:85:57:fe:44:36:07:4f:ae:66:e7:6f:
d9:6f:12:7d:03:3e:a9:78:84:a5:87:30:93:84:2b:
cc:35:5b:21:a5:ef:b4:ee:2a:98:e7:f2:d5:5d:43:
a3:a0:66:ec:d3:f4:91:dc:ef:1e:15:82:33:f2:9c:
27:b5:58:8a:61:59:ee:8c:d8:66:1d:02:86:16:6d:
85:d1:7c:cd:39:c8:f0:24:0f:f6:a9:c4:e6:88:0c:
93:62:e9:70:20:96:db:8e:d7:cb:95:c2:08:dd:76:
f0:ca:69:a6:fe:51:5b:7c:27:65:65:e3:d0:89:d3:
c8:87:52:ae:2a:bf:09:4c:ab:65:4e:5e:8d:f0:41:
04:74:c7:0d:f8:62:e5:ba:8b:06:0c:0c:c0:f6:33:
e5:75:20:b1:cc:a7:39:a6:7f:83:dc:27:83:23:6d:
3e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:48:15:B4:53:5C:52:80:AD:3F:40:F1:24:D0:57:41:14:B6:52:20
X509v3 Authority Key Identifier:
keyid:14:D0:84:3B:24:5F:C2:73:5C:F2:47:50:4C:4F:1B:D8:55:FF:CE:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNCEOyRfwnNc8kdQTE8b2FX_zvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b2:ce:22:79:50:d9:55:d1:1c:a4:18:3d:9f:f8:f9:41:f3:
c6:04:ae:72:af:cf:4d:27:81:a3:52:77:6b:43:8e:7f:79:dc:
76:bd:14:fb:40:4a:83:ab:ac:a9:75:41:e5:6b:c4:7b:34:f0:
02:8d:05:82:5f:ba:84:15:12:1b:7d:58:b1:e0:17:0b:70:14:
fa:d0:e8:75:cf:20:e7:b9:31:c7:e5:be:50:3d:a9:27:3f:14:
22:5f:27:07:30:1b:e9:3b:0c:e4:69:d8:9c:52:0c:a7:3f:71:
af:04:2b:dc:c3:db:fe:40:c2:c5:53:d1:d5:51:95:8b:12:6b:
39:27:96:23:79:6c:b5:53:03:45:cf:cb:97:45:e4:b5:92:24:
7d:ce:51:2a:91:fb:f9:db:34:ed:1a:ff:2f:90:12:93:28:93:
c7:97:6e:09:1b:0a:4b:52:ea:b0:f5:b6:0a:f5:de:64:17:b0:
4c:89:e1:b2:b0:88:4a:b8:98:5e:ab:2d:b6:81:07:21:0b:4a:
b2:e9:cd:73:62:bb:65:d0:4c:e7:89:e4:4c:17:cd:48:53:6d:
17:71:9b:64:5c:3e:9a:a3:ec:28:3d:30:50:0f:7b:71:c3:98:
06:6d:64:6d:95:e7:7c:63:17:93:27:f8:9a:28:e4:0f:10:0a:
5d:28:3a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:32:59 2025 by rpki-client