Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft
File: zvRG_kRyumlPwimCmKT40VWZXhY.mft (raw, json)
Hash identifier: 8KbjUB+HoHdbY6wTTZ5JKwnkjp2//NPVBLMdsX6N3WA=
Subject key identifier: CE:A8:CD:AB:42:FF:E0:B5:A0:5C:22:6C:C1:F6:32:7B:8F:50:08:DB
Authority key identifier: CE:F4:46:FE:44:72:BA:69:4F:C2:29:82:98:A4:F8:D1:55:99:5E:16
Certificate issuer: /CN=cef446fe4472ba694fc2298298a4f8d155995e16
Certificate serial: 019A714A3363E355659EF138EA2CCBD9DD4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvRG_kRyumlPwimCmKT40VWZXhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft
Manifest number: 0111
Signing time: Tue 11 Nov 2025 05:01:19 +0000
Manifest this update: Tue 11 Nov 2025 05:01:19 +0000
Manifest next update: Wed 12 Nov 2025 05:01:19 +0000
Files and hashes: 1: zvRG_kRyumlPwimCmKT40VWZXhY.crl (hash: /96ZalQzvQ9qFgmBRZvIbMaCDSKx7eL1ZFOIXVCbEsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvRG_kRyumlPwimCmKT40VWZXhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:33:63:e3:55:65:9e:f1:38:ea:2c:cb:d9:dd:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef446fe4472ba694fc2298298a4f8d155995e16
Validity
Not Before: Nov 11 05:01:19 2025 GMT
Not After : Nov 12 05:01:19 2025 GMT
Subject: CN=cea8cdab42ffe0b5a05c226cc1f6327b8f5008db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8f:14:80:bd:ce:dd:8c:38:93:73:e1:fd:9b:
48:2c:af:0d:93:d7:4d:cc:1f:3e:7d:74:7e:60:99:
3d:92:cf:85:21:ac:ed:c3:92:39:14:b7:e5:c6:20:
ce:bc:fd:82:75:a6:88:7a:aa:2b:a6:a7:90:e4:02:
2d:0d:00:08:d4:fa:f2:9a:58:c0:33:39:a8:3d:6c:
af:53:93:fa:8a:5f:c8:17:25:18:06:22:d3:f5:48:
68:1c:99:a7:4d:70:a7:65:f9:d6:89:a4:cd:b7:c3:
3e:f5:d6:77:4f:b8:6a:8e:cd:a5:b5:8b:e0:8d:f0:
91:17:6f:61:13:23:12:d2:7d:86:a7:47:b7:28:57:
91:81:d2:fa:b2:19:32:cf:9d:f1:71:16:5f:e4:01:
22:3a:fd:22:ce:cb:37:63:a9:07:52:cf:fb:a7:2c:
01:69:4b:38:26:70:88:2a:10:06:a2:9d:df:e1:95:
f1:0b:61:b5:41:ed:51:92:ea:13:cb:e9:d9:4a:9a:
ed:b0:66:db:c9:20:de:95:ce:fa:01:1a:0e:15:e2:
81:f6:53:e3:bb:6c:a3:0d:2b:1e:9c:7e:50:bd:91:
11:75:c1:58:f4:b7:f2:2d:2e:5e:74:06:6f:1d:95:
b8:9b:12:ce:09:69:56:f4:05:8c:ac:a9:8e:c4:7d:
81:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A8:CD:AB:42:FF:E0:B5:A0:5C:22:6C:C1:F6:32:7B:8F:50:08:DB
X509v3 Authority Key Identifier:
keyid:CE:F4:46:FE:44:72:BA:69:4F:C2:29:82:98:A4:F8:D1:55:99:5E:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvRG_kRyumlPwimCmKT40VWZXhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:56:31:9e:14:f8:5a:95:53:94:e7:92:c5:43:fb:bd:f3:5c:
14:52:0b:bc:16:62:ee:53:27:b5:59:c7:d4:95:9a:2a:c2:12:
30:e9:99:62:53:59:c4:78:4f:33:41:40:75:02:43:6a:71:83:
cb:96:7d:28:1a:12:b5:9a:6b:c7:6b:5b:e2:e5:84:13:46:0d:
79:bd:0f:1a:d0:fb:89:95:51:07:57:4f:51:8f:99:1c:fa:7a:
1c:70:14:a8:5b:bd:0b:63:e1:08:22:5c:1c:d9:e3:19:1b:cd:
93:b6:2c:78:3b:31:8a:91:93:fc:ec:64:e2:dc:b8:cb:3c:a6:
af:4e:1e:66:36:28:7e:ae:c3:0b:36:b5:eb:be:cc:07:2e:da:
14:7c:44:a5:e7:9c:10:62:d8:6f:a8:b2:b0:b4:8a:88:52:11:
94:07:7b:3a:36:60:7e:b4:3b:a5:e8:af:90:98:bd:46:3d:83:
a3:16:6c:96:2d:c8:d6:88:88:01:14:e9:43:5d:7d:67:f7:69:
7d:da:26:74:e6:47:e5:ea:aa:7b:16:04:57:97:52:1d:4c:69:
8c:3f:d3:e3:16:54:af:dd:e9:4a:39:f8:10:75:94:03:69:39:
70:e3:c6:81:9f:a5:20:00:af:a5:83:33:5a:11:f3:fa:d3:ba:
ec:3b:44:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSjNj41VlnvE46izL2d1MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZjQ0NmZlNDQ3MmJhNjk0ZmMyMjk4Mjk4YTRmOGQxNTU5
OTVlMTYwHhcNMjUxMTExMDUwMTE5WhcNMjUxMTEyMDUwMTE5WjAzMTEwLwYDVQQD
EyhjZWE4Y2RhYjQyZmZlMGI1YTA1YzIyNmNjMWY2MzI3YjhmNTAwOGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq48UgL3O3Yw4k3Ph/ZtILK8Nk9dN
zB8+fXR+YJk9ks+FIaztw5I5FLflxiDOvP2CdaaIeqorpqeQ5AItDQAI1PrymljA
MzmoPWyvU5P6il/IFyUYBiLT9UhoHJmnTXCnZfnWiaTNt8M+9dZ3T7hqjs2ltYvg
jfCRF29hEyMS0n2Gp0e3KFeRgdL6shkyz53xcRZf5AEiOv0izss3Y6kHUs/7pywB
aUs4JnCIKhAGop3f4ZXxC2G1Qe1RkuoTy+nZSprtsGbbySDelc76ARoOFeKB9lPj
u2yjDSsenH5QvZERdcFY9LfyLS5edAZvHZW4mxLOCWlW9AWMrKmOxH2BLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6ozatC/+C1oFwibMH2MnuPUAjbMB8GA1UdIwQY
MBaAFM70Rv5EcrppT8Ipgpik+NFVmV4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenZSR19rUnl1bWxQd2ltQ21LVDQwVldaWGhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81MDg0MmEtZWQwMi00YTlmLWE3ODkt
OTAxMDA2YmMxZmQ4LzEvenZSR19rUnl1bWxQd2ltQ21LVDQwVldaWGhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy81MDg0MmEtZWQwMi00YTlmLWE3ODktOTAxMDA2YmMxZmQ4
LzEvenZSR19rUnl1bWxQd2ltQ21LVDQwVldaWGhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAlYxnhT4
WpVTlOeSxUP7vfNcFFILvBZi7lMntVnH1JWaKsISMOmZYlNZxHhPM0FAdQJDanGD
y5Z9KBoStZprx2tb4uWEE0YNeb0PGtD7iZVRB1dPUY+ZHPp6HHAUqFu9C2PhCCJc
HNnjGRvNk7YseDsxipGT/Oxk4ty4yzymr04eZjYofq7DCza1677MBy7aFHxEpeec
EGLYb6iysLSKiFIRlAd7OjZgfrQ7peivkJi9Rj2DoxZsli3I1oiIARTpQ119Z/dp
fdomdOZH5eqqexYEV5dSHUxpjD/T4xZUr93pSjn4EHWUA2k5cOPGgZ+lIACvpYMz
WhHz+tO67DtELg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:28 2025 by rpki-client