
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
File: ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft (raw, json)
Hash identifier: 5s8L+nTmF1m4SRKWyxpsqRCcESRzgZnT6UAa0LNQMtA=
Subject key identifier: 09:D8:7E:32:08:43:FD:B0:A1:12:C0:79:1C:59:10:55:C9:0C:EF:D6
Authority key identifier: 66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13
Certificate issuer: /CN=66f90e75df98afb43019ce750350e769b99fbc13
Certificate serial: 01995154CED83742E608C9D2E2E7C27898F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
Manifest number: 168C
Signing time: Tue 16 Sep 2025 07:02:16 +0000
Manifest this update: Tue 16 Sep 2025 07:02:16 +0000
Manifest next update: Wed 17 Sep 2025 07:02:16 +0000
Files and hashes: 1: ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl (hash: hkGiFccX+9TctVQLOwvkoh7udFf1NVv6f30HdahLlyY=)
2: hMmPM9uQjSpja4bSUK9zc_akA0w.roa (hash: hrlNP/K4kHD/OY4z6+CaOp00xjs5GduVuaQsaUliKXM=)
3: hq1zxN1P7ODqyzoFL2dWnE0-qB0.roa (hash: dCbnfgImnpSOcXJjI96J3fJxTUfan9KZXuyelbOpBm8=)
4: kXDtSEP8wehej7ozup3ULNF_kxE.roa (hash: pFGVv12QjKqbl/zBNnLTn7joQ5O/ICyXPOVOcqhZ97Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:51:54:ce:d8:37:42:e6:08:c9:d2:e2:e7:c2:78:98:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f90e75df98afb43019ce750350e769b99fbc13
Validity
Not Before: Sep 16 07:02:16 2025 GMT
Not After : Sep 17 07:02:16 2025 GMT
Subject: CN=09d87e320843fdb0a112c0791c591055c90cefd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b9:97:a1:25:d8:e8:f4:1d:1d:62:4b:08:aa:
f3:5b:dd:23:22:c5:bb:b4:6b:1d:28:82:5b:ed:95:
f5:82:d6:0b:c7:80:c5:38:ff:37:18:b2:d1:da:44:
10:2f:c0:da:e2:e1:f2:4a:90:ca:dd:2b:53:3b:b7:
6f:6e:b6:9a:f0:84:7b:b8:2e:85:4c:5a:a4:bc:d1:
92:3b:bd:5c:50:f2:5d:69:ff:80:55:2d:f8:93:32:
4e:eb:28:eb:85:92:f6:84:da:c4:d4:e1:e3:52:d0:
c7:cc:7e:dc:e5:85:40:8a:69:3e:c4:55:5a:f7:8c:
d4:cd:0f:c2:11:79:bc:ed:2f:4c:29:95:49:a7:b9:
a5:69:a2:e0:d9:32:64:94:9f:8f:5d:09:6b:95:c0:
b9:2c:77:92:fa:e5:d6:28:17:7b:fa:8c:8b:a7:d2:
d5:c1:12:0e:a0:c8:13:d0:bb:08:0d:33:8b:79:e9:
b9:29:22:bf:f9:60:29:08:5a:06:7a:51:39:57:73:
be:be:ab:58:09:1c:c0:21:da:0c:a2:a2:06:d5:43:
7f:99:52:d6:87:13:b5:b6:ce:eb:f3:66:9b:9c:71:
26:7f:d2:14:68:b5:83:eb:68:65:93:a4:27:d1:64:
f6:fd:66:7b:16:3e:b2:a7:04:b0:87:f5:81:9e:f4:
8f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D8:7E:32:08:43:FD:B0:A1:12:C0:79:1C:59:10:55:C9:0C:EF:D6
X509v3 Authority Key Identifier:
keyid:66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:35:b6:c0:a1:02:97:24:23:53:0a:fa:30:5e:32:96:01:bd:
b8:99:68:b8:9a:f6:ab:8a:b9:a7:25:6f:99:e9:55:12:31:94:
ed:a1:34:c7:67:47:5b:6e:42:92:10:25:3e:e4:72:69:cb:e9:
e0:df:28:f3:e9:5a:65:ba:47:22:ed:4e:10:ae:37:e2:f8:64:
43:d3:71:c0:2f:77:fa:cd:44:7a:27:87:d0:26:82:2a:ac:de:
65:09:8b:5d:66:95:c8:0f:2a:4e:6a:3d:85:a2:9b:90:cf:57:
7f:06:fd:38:6d:bc:f2:dd:53:bf:82:b7:49:d5:80:0c:61:61:
aa:28:84:97:3d:cd:be:4a:2d:b2:14:bb:55:ed:a1:b1:0d:98:
12:d4:e8:ad:76:4d:c4:08:21:b3:a7:65:54:84:11:0b:57:1a:
3e:5a:c8:b6:78:4c:ee:d0:88:e7:6b:1d:79:fe:f9:94:fc:85:
8a:62:3a:25:42:93:93:9a:82:88:82:65:6a:69:76:7e:44:ec:
0f:25:e4:77:6a:15:8d:49:04:71:73:f8:82:e7:83:d5:a9:7a:
4a:93:f4:9d:d0:d5:5e:11:95:ec:b4:20:de:ab:1d:98:ff:bc:
3d:d0:51:68:e9:09:f9:44:3e:5a:e9:c0:c6:f1:ef:7f:eb:72:
25:19:60:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 13:36:16 2025 by rpki-client