Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft
File: zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft (raw, json)
Hash identifier: 59GEwMHlFNFKR0L5Q5DPP9hBuej6eG1aDsBAGM5CdP8=
Subject key identifier: D7:EB:F7:63:D4:1D:62:97:67:65:FC:CB:2A:49:88:D7:CD:BA:4F:37
Authority key identifier: CE:2B:CC:10:D1:6B:0F:ED:28:55:E9:29:5F:C4:09:D6:50:7B:43:D6
Certificate issuer: /CN=ce2bcc10d16b0fed2855e9295fc409d6507b43d6
Certificate serial: 0199FB4606858910B4C0D24C2012869F8715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft
Manifest number: 01DD
Signing time: Sun 19 Oct 2025 07:01:34 +0000
Manifest this update: Sun 19 Oct 2025 07:01:34 +0000
Manifest next update: Mon 20 Oct 2025 07:01:34 +0000
Files and hashes: 1: 157MYG0IejEjRYj-j1k-QApt6pw.roa (hash: /mAnw2Tqo4MtXrtGStA4rPK8XkvjiW+Q+8q7MR/8qbg=)
2: zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl (hash: 6G+M0C1BUAw14017+5SP1A76w7HHKO0tc+LQIx7PiwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:06:85:89:10:b4:c0:d2:4c:20:12:86:9f:87:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce2bcc10d16b0fed2855e9295fc409d6507b43d6
Validity
Not Before: Oct 19 07:01:34 2025 GMT
Not After : Oct 20 07:01:34 2025 GMT
Subject: CN=d7ebf763d41d62976765fccb2a4988d7cdba4f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fc:e9:99:a0:e8:72:00:fc:e8:99:0a:8e:fd:
7e:89:1b:83:10:60:dd:28:8e:24:46:0c:db:9f:7c:
11:6b:50:88:d4:02:9f:ed:04:e5:e8:aa:3f:5b:ba:
27:ca:f6:e9:af:b3:00:55:11:9a:f9:90:1c:99:d3:
78:2f:5f:c8:20:61:6b:6d:e3:21:54:be:d6:c0:b2:
03:a9:ba:1e:6c:26:c3:0a:cc:c6:0b:07:a9:cc:15:
64:a9:ca:50:49:42:86:93:53:fc:66:03:d6:8b:8c:
e4:d2:22:55:0f:13:63:c2:db:b3:66:85:a8:81:0c:
4f:cb:56:c9:d2:c7:16:98:f9:d6:38:0d:c9:ba:b9:
43:2a:dc:96:04:df:d2:7c:1d:ce:23:69:59:00:07:
9a:f2:94:e9:6a:b8:3e:a1:da:46:2a:32:69:b7:cd:
f7:6e:e9:57:4e:f0:bc:ee:64:13:5e:81:68:62:0d:
ea:14:9f:22:18:e0:64:1d:ec:1f:1a:8b:bf:b4:80:
1a:82:12:08:c4:f9:b7:44:7e:a0:d8:59:a1:8f:05:
af:29:60:aa:15:0a:61:ae:94:c8:80:5f:c8:36:23:
7a:d3:39:e8:44:85:3b:66:e8:21:99:3d:57:02:73:
66:37:54:2d:39:fd:f8:5f:e7:c3:4c:8f:ec:ed:e8:
c3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EB:F7:63:D4:1D:62:97:67:65:FC:CB:2A:49:88:D7:CD:BA:4F:37
X509v3 Authority Key Identifier:
keyid:CE:2B:CC:10:D1:6B:0F:ED:28:55:E9:29:5F:C4:09:D6:50:7B:43:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f8:96:53:aa:bb:6f:75:6f:c7:0e:89:3f:ed:72:df:28:b3:
4b:03:22:e0:9d:6c:35:e9:cc:a8:39:03:84:0d:ff:c9:c8:68:
94:0d:91:e6:74:dd:67:54:3c:b1:0b:ab:02:95:a1:9c:8b:26:
53:c4:62:b5:b7:02:a6:d9:3d:6b:13:42:7e:d1:59:e5:a0:04:
a0:82:2e:4f:25:dc:2a:3e:48:45:8d:49:b9:49:8b:f0:cc:78:
c5:bf:55:f2:ee:0a:c4:57:a1:ee:02:f2:86:6a:37:04:f4:54:
d1:08:5a:60:1d:25:0d:e6:3f:4d:89:a2:b8:34:81:18:cd:f4:
0f:44:8a:4a:24:1e:ba:54:32:f7:99:48:a0:e9:2e:49:d9:87:
75:e8:9b:7d:15:be:d0:ac:43:a6:14:c8:4b:dd:31:12:ac:57:
b6:3d:15:12:fb:61:05:44:ef:ca:f9:53:e7:a9:6d:27:f6:b5:
33:b3:1f:3b:4f:a9:36:04:3e:a6:ce:6c:64:64:90:81:20:a3:
b3:c2:6f:f4:78:12:ad:73:93:c4:ae:43:7a:d7:04:4b:10:5e:
a4:34:cb:2d:c3:4e:c0:6d:fd:8d:9a:c5:58:49:f4:5d:af:60:
b2:7a:c5:94:e7:93:fe:42:db:33:e6:c1:2a:88:8c:e4:4c:94:
8a:0d:05:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:50 2025 by rpki-client