Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft
File: FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft (raw, json)
Hash identifier: WTDp0HglOHqDVfSEwsi0rfRgB5N55wU4cIiSZ/hy6OM=
Subject key identifier: 02:E1:4F:9B:93:3C:5D:A9:30:C4:68:08:1B:91:26:BD:C0:0D:F1:A6
Authority key identifier: 14:D0:84:3B:24:5F:C2:73:5C:F2:47:50:4C:4F:1B:D8:55:FF:CE:FC
Certificate issuer: /CN=14d0843b245fc2735cf247504c4f1bd855ffcefc
Certificate serial: 019A71B91273341D9B293973261E8E2267D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNCEOyRfwnNc8kdQTE8b2FX_zvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft
Manifest number: 0DA3
Signing time: Tue 11 Nov 2025 07:02:25 +0000
Manifest this update: Tue 11 Nov 2025 07:02:25 +0000
Manifest next update: Wed 12 Nov 2025 07:02:25 +0000
Files and hashes: 1: FNCEOyRfwnNc8kdQTE8b2FX_zvw.crl (hash: Be5ygPcDNIl/D2pqj+JtDtgPDe5VLr4Bzlw5pxinlY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNCEOyRfwnNc8kdQTE8b2FX_zvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:12:73:34:1d:9b:29:39:73:26:1e:8e:22:67:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d0843b245fc2735cf247504c4f1bd855ffcefc
Validity
Not Before: Nov 11 07:02:25 2025 GMT
Not After : Nov 12 07:02:25 2025 GMT
Subject: CN=02e14f9b933c5da930c468081b9126bdc00df1a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:24:98:48:55:fa:44:52:1e:ec:f8:d4:64:b7:
d3:49:20:cf:01:fb:86:88:24:76:97:47:f7:0c:d5:
83:ae:8a:39:c9:17:04:17:f8:df:61:fb:62:fd:8d:
a5:a3:e5:8f:26:d5:b8:a3:7c:df:c3:62:f4:68:ed:
2d:c4:fc:dc:c1:75:5a:15:ae:e7:a1:2e:b1:44:21:
41:6d:a4:b2:25:b9:d4:3a:5e:10:b6:aa:04:4f:ac:
25:81:06:55:a8:39:48:a9:9c:f3:f7:c2:45:c2:b2:
71:2b:63:df:4d:86:d5:e1:94:00:d1:8b:8e:22:65:
ba:c0:61:58:23:81:0f:8c:f9:66:47:13:28:77:25:
90:6b:1d:38:72:20:06:64:bc:92:7e:af:85:1c:d4:
b7:54:a0:f8:5d:db:5c:e4:90:93:0d:64:49:de:70:
d4:7b:5b:18:ef:72:bc:fc:f9:53:af:0d:8f:40:5a:
f2:47:bf:be:c9:37:b4:67:31:e2:b8:f3:ee:69:6d:
af:42:09:92:d7:19:66:d6:f4:ab:0d:41:a4:29:13:
ea:3d:69:ea:6b:ed:ee:e3:b5:15:3e:00:fd:07:6a:
df:a2:21:08:56:28:5c:69:33:68:60:38:20:ef:9f:
18:84:91:d3:ae:a8:e9:4d:83:c6:2e:b4:8d:84:9b:
c2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E1:4F:9B:93:3C:5D:A9:30:C4:68:08:1B:91:26:BD:C0:0D:F1:A6
X509v3 Authority Key Identifier:
keyid:14:D0:84:3B:24:5F:C2:73:5C:F2:47:50:4C:4F:1B:D8:55:FF:CE:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNCEOyRfwnNc8kdQTE8b2FX_zvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:da:6b:b9:f0:ee:d8:17:e3:1a:30:de:8b:c3:5f:c2:5a:fd:
96:30:3f:b2:bc:05:26:cb:f6:68:98:8a:b7:31:e4:99:58:67:
d5:7f:78:64:a0:8f:25:40:95:08:18:84:2b:60:27:93:10:f1:
b2:c3:5d:b0:a5:4d:8e:59:0d:c3:07:d5:56:30:72:bd:19:e0:
32:36:ea:d8:9b:ce:8b:81:01:83:87:0a:89:75:2a:5d:cd:ca:
57:87:a9:8a:a3:ad:df:1c:05:24:0f:35:c1:f4:6c:cd:60:6d:
95:a0:f4:43:10:94:67:d1:5d:19:48:a1:ae:2d:ee:d7:ae:9e:
d9:1a:cf:7e:1f:93:6d:06:5a:9d:19:b3:9d:dd:72:0c:4c:b9:
a2:91:a2:64:60:0f:f5:b3:2a:f6:3e:cb:12:60:b2:8b:18:45:
d5:0f:c0:0b:fc:51:45:61:80:da:61:03:cb:8c:e2:2e:4a:8b:
e7:99:8d:bb:b3:b1:40:9f:89:51:90:e9:01:0a:69:60:59:28:
47:c8:8b:11:2c:80:31:74:38:e1:6c:58:47:fa:ca:77:7e:5c:
e5:cf:bf:c7:18:23:d2:36:2c:89:3d:c7:8e:e3:2b:72:57:6f:
3e:5b:65:7b:73:78:a9:11:a1:71:81:ae:25:7a:de:da:23:89:
45:3a:78:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:55 2025 by rpki-client