Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft
File: ZvEr0F_5yRriI48ykBy6rhwzcP4.mft (raw, json)
Hash identifier: VsiSgfR+warf/i8p0SUapGgQUHpV8xIDC4vUQMxRK6Q=
Subject key identifier: C5:9B:1E:14:E9:0A:DB:03:F9:88:D9:91:66:3E:0F:1E:50:87:1F:19
Authority key identifier: 66:F1:2B:D0:5F:F9:C9:1A:E2:23:8F:32:90:1C:BA:AE:1C:33:70:FE
Certificate issuer: /CN=66f12bd05ff9c91ae2238f32901cbaae1c3370fe
Certificate serial: 0199FC58584810DF4F3C0C86D210725DCEB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvEr0F_5yRriI48ykBy6rhwzcP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft
Manifest number: 07D6
Signing time: Sun 19 Oct 2025 12:01:12 +0000
Manifest this update: Sun 19 Oct 2025 12:01:12 +0000
Manifest next update: Mon 20 Oct 2025 12:01:12 +0000
Files and hashes: 1: ZvEr0F_5yRriI48ykBy6rhwzcP4.crl (hash: zbQE37kTY/1PlVUIHM6CcZwspOBMo+uXPG0aUfKaO/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvEr0F_5yRriI48ykBy6rhwzcP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:58:48:10:df:4f:3c:0c:86:d2:10:72:5d:ce:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f12bd05ff9c91ae2238f32901cbaae1c3370fe
Validity
Not Before: Oct 19 12:01:12 2025 GMT
Not After : Oct 20 12:01:12 2025 GMT
Subject: CN=c59b1e14e90adb03f988d991663e0f1e50871f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0e:e2:ce:86:59:a7:41:26:cb:07:e9:83:15:
31:3c:65:ff:7a:af:4c:9c:d1:c5:6a:95:0a:a7:4e:
75:da:a7:da:16:fc:2a:72:0c:4b:4c:c3:c5:12:dc:
9e:86:a3:4e:c6:aa:87:df:39:6f:95:11:3b:27:e5:
dc:7a:24:a5:36:de:e8:b6:d2:61:38:6f:ee:6e:0a:
6f:8e:cd:6a:41:6c:69:b2:33:a4:11:39:6c:25:2d:
77:f1:9e:0b:06:ca:61:cc:ac:91:38:a0:c5:f4:cb:
a6:57:33:7b:41:b1:ad:17:c6:bd:d4:90:16:8f:4f:
cd:6e:1c:12:72:22:72:b8:e6:01:f9:2c:77:b6:39:
1f:49:1e:23:0b:ba:0c:e5:43:f2:15:74:e6:50:3e:
05:18:a9:00:5b:ae:f2:11:53:b4:21:5d:41:ee:8e:
68:a7:8f:71:49:ca:95:de:f2:2a:54:70:de:33:c1:
43:53:0d:32:2e:45:6a:1b:97:8f:f2:4d:d3:a4:87:
6b:f8:0e:71:c7:29:2f:41:68:1c:d4:3b:f4:8e:81:
54:1f:c1:e2:bd:c7:79:f4:4c:ed:56:e7:ed:4e:bd:
ff:2e:d9:d8:9d:b1:88:3e:95:93:2a:e2:37:5e:7f:
a4:31:a5:23:1d:f8:d4:28:fd:bd:65:6f:96:de:2d:
af:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9B:1E:14:E9:0A:DB:03:F9:88:D9:91:66:3E:0F:1E:50:87:1F:19
X509v3 Authority Key Identifier:
keyid:66:F1:2B:D0:5F:F9:C9:1A:E2:23:8F:32:90:1C:BA:AE:1C:33:70:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvEr0F_5yRriI48ykBy6rhwzcP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:28:60:de:ec:97:e4:ae:7d:dd:7d:be:1a:ea:eb:02:38:89:
56:78:a7:79:5d:a6:cc:20:c3:aa:17:c4:a5:5e:2f:14:51:37:
e3:91:c7:6a:48:2a:31:80:37:49:a3:f7:c7:11:4a:b4:8f:00:
52:90:15:02:7e:77:f4:3a:2f:bc:17:91:c6:ee:51:83:59:ea:
74:ef:64:ef:00:42:c1:91:b5:b0:c5:31:96:9c:a6:84:43:89:
70:eb:f9:73:9c:3a:89:72:f5:ca:7c:86:d0:b9:07:80:15:32:
1e:23:b9:3f:2b:a1:65:79:6b:c2:1f:36:1c:b6:2f:f1:cd:89:
27:c3:0c:c7:ef:c2:b4:91:e0:f7:1c:b1:98:dc:85:b7:c6:43:
38:72:b9:4a:4a:ea:26:e4:6c:5f:ff:12:07:f6:ae:13:f4:43:
d3:02:92:9b:3e:7e:ea:89:e3:f3:eb:5e:e4:62:ee:b1:17:1a:
2f:5d:05:66:98:ef:dc:8f:5f:e9:13:ad:2d:f6:b4:39:a9:fa:
f4:8e:04:bb:9e:6c:19:d2:d7:51:3d:a7:d5:26:f2:6f:65:ad:
65:b8:3b:8d:13:7f:42:9d:9d:17:a7:49:68:f4:75:5a:5a:3e:
a5:fa:b9:6f:53:af:d3:6b:59:60:28:be:c6:6b:b2:28:1b:f6:
74:2c:bb:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:43 2025 by rpki-client