Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
File: Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft (raw, json)
Hash identifier: t63boNqtiv+bn9Q0oMAvEgKYbW4TFEqCUww2jI5d/Co=
Subject key identifier: B1:F1:CD:6A:D6:AB:2A:07:DC:23:76:2C:DC:CE:7F:32:86:3A:D6:C2
Authority key identifier: 66:FB:77:27:D6:4A:51:8C:7C:D4:85:E4:82:3E:E7:8A:9E:29:10:08
Certificate issuer: /CN=66fb7727d64a518c7cd485e4823ee78a9e291008
Certificate serial: 019A29673C84C2E8B3E39C369C9A5019D663
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
Manifest number: 0FD2
Signing time: Tue 28 Oct 2025 06:00:22 +0000
Manifest this update: Tue 28 Oct 2025 06:00:22 +0000
Manifest next update: Wed 29 Oct 2025 06:00:22 +0000
Files and hashes: 1: Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl (hash: +iJDAXD6ZbNn89F5uSwRMjT8zF2q+FAQbgofkQ0AlLo=)
2: qdrDiBktURajjlk4oiqN9piQBiA.roa (hash: XK33AjhLnejYmOacprLZoYaTNO5MSW3e9jm0PB6V7KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:67:3c:84:c2:e8:b3:e3:9c:36:9c:9a:50:19:d6:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66fb7727d64a518c7cd485e4823ee78a9e291008
Validity
Not Before: Oct 28 06:00:22 2025 GMT
Not After : Oct 29 06:00:22 2025 GMT
Subject: CN=b1f1cd6ad6ab2a07dc23762cdcce7f32863ad6c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a1:e9:42:2d:1b:e8:e1:2f:18:f1:af:ba:1e:
08:c6:6c:70:d1:88:b3:44:f3:c0:af:35:ca:68:23:
f1:a8:51:b3:74:07:14:85:2e:d6:51:90:bd:b0:3e:
ae:de:fd:2d:33:18:df:76:63:9b:3d:85:c1:bc:36:
fe:d8:d1:eb:d0:95:cf:f3:24:aa:e4:fe:db:36:aa:
42:b7:35:b5:f7:fb:6a:da:f2:93:2e:32:9f:65:34:
2b:d8:a3:80:64:1f:92:8b:68:0e:4c:47:fd:8d:03:
6d:25:af:0c:76:06:cd:27:5a:f5:a0:8a:89:f4:ff:
7e:87:c1:ce:fd:d3:5c:97:4a:22:94:9d:7a:c0:56:
aa:f8:9b:96:db:2e:70:47:49:0d:81:c8:7d:f2:e9:
91:37:c7:e9:bc:b7:e4:fc:be:c1:fd:d9:4f:90:98:
f2:5b:c0:21:1a:d7:16:8b:a3:6a:ce:fe:2f:b1:64:
0d:18:6b:b6:b6:dd:ae:93:b1:52:5e:94:41:56:e5:
e3:c2:f5:4b:e8:75:6d:1b:b1:d5:66:c1:d0:bf:9d:
a6:7a:f8:e3:45:e7:89:8c:02:36:e0:63:86:0b:18:
85:f1:58:ce:77:47:1e:c4:2d:d0:cb:d6:50:54:47:
64:7e:c1:75:82:e1:37:df:f1:6c:36:87:77:e1:9e:
d2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F1:CD:6A:D6:AB:2A:07:DC:23:76:2C:DC:CE:7F:32:86:3A:D6:C2
X509v3 Authority Key Identifier:
keyid:66:FB:77:27:D6:4A:51:8C:7C:D4:85:E4:82:3E:E7:8A:9E:29:10:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:cc:f8:7a:55:d0:29:75:af:a7:63:3d:35:ae:7b:be:39:79:
55:c0:f7:e9:bd:5e:be:e2:db:f3:c7:6d:54:01:0e:fa:82:e8:
e6:a4:a7:ca:2c:48:cc:11:7a:8a:cc:72:34:11:ea:b4:47:8f:
18:d1:c1:29:5e:eb:da:34:8f:21:5a:5a:71:fe:3b:c7:e7:0d:
bf:c7:d0:d2:df:dc:b5:63:b4:41:c8:64:b7:ee:eb:26:6f:a1:
9d:02:f0:e7:6c:07:f1:3c:76:6f:1d:91:0a:d2:eb:94:dd:de:
18:e8:21:a3:67:d2:80:27:f5:b1:28:92:a4:57:c0:a1:38:25:
70:cf:19:84:9a:a7:5a:d3:93:0c:af:a4:f8:f2:24:0b:14:04:
c5:4a:01:bf:b2:55:ad:0b:ab:1f:4a:ad:09:40:54:d3:7b:3a:
b3:39:f4:bc:2d:d6:a8:f3:29:19:ea:78:e5:56:81:ac:ae:45:
df:ec:b8:5f:fa:ca:eb:cf:de:85:78:39:15:bd:b9:90:3e:c2:
bd:7d:0d:ec:78:d1:00:57:88:9e:46:ec:91:4d:2d:55:0c:ab:
07:1d:e9:cd:74:9c:29:42:be:83:af:be:ce:a5:d3:71:08:5c:
44:43:51:1d:c0:2b:a8:ce:a5:9b:fd:63:d6:9d:d6:7f:c3:83:
4f:01:2e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 13:39:11 2025 by rpki-client