Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
File: ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft (raw, json)
Hash identifier: tKfHMlHe8BuQIw2yuV5GtsUYady4eIzE+O44KpxYQjo=
Subject key identifier: 36:F2:C1:47:6D:E1:6A:1E:79:11:3F:29:BF:7B:B6:42:EC:23:3D:58
Authority key identifier: 66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13
Certificate issuer: /CN=66f90e75df98afb43019ce750350e769b99fbc13
Certificate serial: 0199F9579BEC6F11C675D3F5501B2C8EE4CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
Manifest number: 16E3
Signing time: Sat 18 Oct 2025 22:01:32 +0000
Manifest this update: Sat 18 Oct 2025 22:01:32 +0000
Manifest next update: Sun 19 Oct 2025 22:01:32 +0000
Files and hashes: 1: ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl (hash: rAVuIZgwSL/ZEfS9+QPnf+LzIBBFD4Jz4i//ad+05hc=)
2: hMmPM9uQjSpja4bSUK9zc_akA0w.roa (hash: hrlNP/K4kHD/OY4z6+CaOp00xjs5GduVuaQsaUliKXM=)
3: hq1zxN1P7ODqyzoFL2dWnE0-qB0.roa (hash: dCbnfgImnpSOcXJjI96J3fJxTUfan9KZXuyelbOpBm8=)
4: kXDtSEP8wehej7ozup3ULNF_kxE.roa (hash: pFGVv12QjKqbl/zBNnLTn7joQ5O/ICyXPOVOcqhZ97Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Oct 2025 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f9:57:9b:ec:6f:11:c6:75:d3:f5:50:1b:2c:8e:e4:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f90e75df98afb43019ce750350e769b99fbc13
Validity
Not Before: Oct 18 22:01:32 2025 GMT
Not After : Oct 19 22:01:32 2025 GMT
Subject: CN=36f2c1476de16a1e79113f29bf7bb642ec233d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:11:7b:fd:76:95:28:1f:16:7c:ea:0c:3d:f1:
c3:f3:99:99:b8:e6:f0:41:58:69:1c:75:f5:3f:ce:
b8:83:3f:f4:82:0b:2b:61:d4:79:3e:6a:63:36:df:
6b:ea:39:fc:96:3e:d6:b4:d3:3b:e8:bd:72:c0:84:
ac:a5:b0:8d:21:49:83:83:9b:9f:e7:cd:6b:73:c8:
43:24:53:a3:90:41:dc:70:69:23:d4:e8:ae:2d:c8:
a9:9c:71:05:9b:6a:98:df:a9:99:fe:35:5e:b0:33:
8c:07:1b:7e:f2:8b:90:84:af:39:24:9f:e3:8b:4b:
9d:da:13:cd:f8:07:c4:97:56:f6:c9:b4:a5:b0:00:
9a:da:0d:5c:8e:45:68:ca:65:54:4e:d5:81:bd:c1:
a0:f4:03:1c:97:ca:eb:af:ca:53:49:81:31:47:20:
4d:dd:06:ba:55:96:e7:68:04:03:c7:98:b1:c9:2c:
9d:70:d9:b3:9d:d4:3e:7c:d4:40:8f:d7:ef:b4:e8:
9f:85:d6:44:f1:e5:68:37:07:26:73:1b:87:10:13:
6c:42:02:1a:8e:90:18:a7:7b:17:dd:a0:e2:8e:2b:
86:1e:76:9f:ac:34:7a:b4:b0:cf:c4:9f:95:f0:7e:
7d:82:e7:4d:02:b2:20:1b:73:d0:ca:bc:3a:f8:7c:
89:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F2:C1:47:6D:E1:6A:1E:79:11:3F:29:BF:7B:B6:42:EC:23:3D:58
X509v3 Authority Key Identifier:
keyid:66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:d5:57:f5:4d:40:dc:37:34:5d:c8:d3:84:b0:f7:a0:f7:34:
37:e7:57:52:04:3b:35:f9:d6:b3:bd:c1:21:51:26:1c:2a:db:
78:a1:a7:e2:ce:f4:c9:6c:ac:9d:39:76:58:86:2d:4b:37:2f:
dd:89:e4:15:74:d2:3c:0e:15:1c:c4:0d:a5:10:91:05:fd:bb:
c3:99:77:57:2f:05:c2:81:3f:20:1f:99:8d:57:a9:0f:9f:c3:
1e:47:b4:1f:c9:eb:b4:ce:fb:60:de:18:be:da:f5:1f:60:78:
00:c4:c8:09:4f:59:a4:ec:a8:23:03:8a:6d:c1:fc:4d:f7:5b:
05:a1:0e:bd:8f:29:dd:b1:a8:30:4c:9c:68:6c:31:3f:2d:37:
b4:e7:63:aa:99:4e:b5:06:96:2d:ee:9f:20:8b:ab:d1:65:45:
0f:12:89:84:41:6d:40:a9:36:c3:ed:fd:5a:12:87:25:06:da:
90:25:1d:92:6e:3c:74:a4:0b:68:23:30:1c:3e:b6:dd:0e:5f:
b8:7d:64:42:c2:9b:a8:52:7a:62:40:15:87:90:1b:a2:4f:24:
0a:fe:84:57:fb:80:52:88:cb:1f:c0:cd:35:00:86:8b:65:94:
7b:62:ee:7f:63:83:89:91:8c:dc:98:33:f4:44:07:3a:58:c4:
25:92:c1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 03:09:57 2025 by rpki-client