Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft
File: ZvEr0F_5yRriI48ykBy6rhwzcP4.mft (raw, json)
Hash identifier: e7swH+iOq3Q6SHddpgH/38QbFMXO0ltm8qe8qubmtEw=
Subject key identifier: 4B:7F:B4:CF:29:D7:F5:EE:40:59:1E:E0:B2:66:34:E2:1E:2D:BC:91
Authority key identifier: 66:F1:2B:D0:5F:F9:C9:1A:E2:23:8F:32:90:1C:BA:AE:1C:33:70:FE
Certificate issuer: /CN=66f12bd05ff9c91ae2238f32901cbaae1c3370fe
Certificate serial: 019A7225F9303BBE1B33C0024EB2E7958EE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvEr0F_5yRriI48ykBy6rhwzcP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft
Manifest number: 0813
Signing time: Tue 11 Nov 2025 09:01:22 +0000
Manifest this update: Tue 11 Nov 2025 09:01:22 +0000
Manifest next update: Wed 12 Nov 2025 09:01:22 +0000
Files and hashes: 1: ZvEr0F_5yRriI48ykBy6rhwzcP4.crl (hash: MZ66mOxU5fZjK7yCpHp47Q/hrR/BIvzds39bYRGz+/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvEr0F_5yRriI48ykBy6rhwzcP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f9:30:3b:be:1b:33:c0:02:4e:b2:e7:95:8e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f12bd05ff9c91ae2238f32901cbaae1c3370fe
Validity
Not Before: Nov 11 09:01:22 2025 GMT
Not After : Nov 12 09:01:22 2025 GMT
Subject: CN=4b7fb4cf29d7f5ee40591ee0b26634e21e2dbc91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:62:51:c3:1b:31:43:e7:e2:50:4a:17:e3:a9:
43:bb:fa:f1:e7:b0:3f:5d:0e:b5:e6:d3:18:88:22:
82:93:7f:a9:bc:8d:22:de:3c:7a:7b:66:3e:39:90:
24:e5:c0:69:bd:99:03:d3:8a:c5:ab:3d:ce:d5:36:
4f:db:33:8b:d0:e7:08:c5:5f:b2:39:8e:f2:b1:0f:
81:df:c7:1e:b6:31:d3:44:4c:e5:36:c8:3e:98:f5:
0b:91:c3:5c:ce:16:4f:7f:2a:66:74:5e:fc:01:35:
a0:7c:ef:7e:fa:53:e1:24:87:86:91:86:2c:c3:b2:
fd:75:04:0d:a4:4b:d5:b1:d6:e6:d2:3e:dd:6e:f9:
ed:4f:38:91:7d:bb:37:b9:26:f5:1b:7e:c6:1a:87:
80:cf:9f:38:9d:bd:c9:7a:87:9b:c3:d5:e6:bd:b9:
65:f3:c2:cb:40:8a:d8:8d:31:10:80:e4:a3:f6:76:
df:35:b7:45:82:c6:75:4d:a4:ec:63:36:c3:ec:75:
3a:73:6e:c5:b5:b2:9d:58:70:0a:81:87:6b:cf:e0:
b4:f3:db:79:d1:cf:0f:c5:64:ec:1c:b7:d2:c6:14:
c6:c7:e8:fc:1f:8e:3f:1e:f6:ce:77:48:b4:ae:f5:
e1:7b:8e:a2:71:28:e9:93:d7:90:1a:e3:b2:93:25:
1e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:7F:B4:CF:29:D7:F5:EE:40:59:1E:E0:B2:66:34:E2:1E:2D:BC:91
X509v3 Authority Key Identifier:
keyid:66:F1:2B:D0:5F:F9:C9:1A:E2:23:8F:32:90:1C:BA:AE:1C:33:70:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvEr0F_5yRriI48ykBy6rhwzcP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a5:00:bc:e8:b4:fe:09:4d:5a:e4:63:e4:cf:2b:a7:2a:b4:
53:6c:0e:90:3d:aa:46:1e:16:ff:0b:c6:5d:f1:eb:c1:b8:dc:
eb:30:4f:05:10:dd:75:59:9b:ac:09:5a:e5:f5:89:af:6a:92:
7f:d0:42:09:9c:7f:2e:a5:26:1f:c9:8c:1a:37:ba:f0:92:85:
5e:c8:60:16:ae:06:75:0b:94:b3:c4:be:ec:79:96:f5:02:3f:
81:09:56:9d:cb:8f:ba:99:fb:b9:41:3e:d3:4a:ac:21:b2:b9:
79:f4:83:b6:1e:32:4d:f7:3b:f8:dc:c9:bf:aa:7c:32:3f:c3:
fe:6b:23:7c:26:b4:09:d6:fb:8f:e2:1a:93:2b:6e:22:a4:34:
bb:a2:a0:00:07:83:08:f7:87:ea:c4:8f:c8:e4:34:1e:59:57:
78:37:bf:c2:27:28:d8:f4:95:28:57:ab:c2:75:4a:4f:83:12:
06:f4:b2:de:f6:dc:80:48:fc:02:cf:5f:a6:74:62:0b:93:c8:
75:4a:8d:61:47:eb:85:66:b3:2a:8d:82:a7:ca:f7:e0:79:87:
93:0b:58:4c:8a:51:9c:c0:06:9d:08:01:a7:02:80:6c:5d:eb:
cf:a4:b0:ab:0e:09:9f:a4:9e:57:3f:35:41:37:81:47:94:9f:
07:4e:22:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:01 2025 by rpki-client