Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
File: ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft (raw, json)
Hash identifier: 29RRSbGDi85WWCYrR8utGA5LPg5VavIw8RnKaU1nebY=
Subject key identifier: 7E:EE:B4:79:A4:E2:D0:80:3C:68:D0:7B:2E:B9:85:7F:7B:2B:FD:68
Authority key identifier: 64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95
Certificate issuer: /CN=64aec8024caa103a8412696c7e72f77803cd8695
Certificate serial: 0197B6A0E082B095987F66C2759BDEC6AC13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
Manifest number: 0FF5
Signing time: Sat 28 Jun 2025 13:01:25 +0000
Manifest this update: Sat 28 Jun 2025 13:01:25 +0000
Manifest next update: Sun 29 Jun 2025 13:01:25 +0000
Files and hashes: 1: ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl (hash: F0hC1vszhmfd1ocdEVVds0jBszc5U0c2R5m+wHkd1Z8=)
2: jPXJlh-t4_XYR3J0eKKhQRTzmMQ.roa (hash: LCBAN0N7xGJeaqTX5AAQMXZtcLuwBKPNcwcKiOcd8Dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:e0:82:b0:95:98:7f:66:c2:75:9b:de:c6:ac:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64aec8024caa103a8412696c7e72f77803cd8695
Validity
Not Before: Jun 28 13:01:25 2025 GMT
Not After : Jun 29 13:01:25 2025 GMT
Subject: CN=7eeeb479a4e2d0803c68d07b2eb9857f7b2bfd68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ca:c0:c9:2c:0c:89:3b:b2:37:65:be:92:d5:
53:63:68:12:27:3f:44:57:ed:9a:1c:ae:b4:d2:f8:
3b:58:1d:66:a3:6e:ab:2c:f0:c9:b6:08:cd:8a:0f:
99:aa:79:af:de:f9:0f:12:9e:10:74:ac:c6:56:d5:
2b:b4:d3:9f:08:61:07:77:e1:30:1a:28:ed:ba:50:
da:11:dd:8d:11:cc:6e:2b:c6:29:e5:fc:d8:e5:e5:
d2:a5:64:b9:4f:2c:bf:3c:2b:86:17:0b:d9:38:9e:
0c:f4:b9:8e:7b:b6:e6:ef:6d:9d:ce:65:0f:b6:8b:
b0:6b:6c:41:5b:d8:c4:c1:83:5d:e4:23:75:fa:2e:
45:78:b3:62:47:3d:af:d3:07:fc:25:70:63:19:6a:
0c:4a:e8:ae:46:0f:94:39:3d:4f:f1:9f:67:10:27:
43:cb:3f:e8:60:d5:f3:9c:7e:23:3c:d2:43:24:48:
4d:f1:2c:52:7d:9a:5e:94:bc:67:8a:46:9d:c3:27:
af:27:ff:68:40:a9:65:4f:a4:d8:53:d2:21:d9:e3:
61:85:5a:ad:72:11:1b:04:ad:10:e8:10:84:c9:d1:
5f:c6:9b:b3:f3:bf:59:bc:ec:cf:58:b2:87:8e:66:
83:d9:0c:30:f5:b2:1a:5a:08:db:d9:3f:23:11:a0:
a3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:EE:B4:79:A4:E2:D0:80:3C:68:D0:7B:2E:B9:85:7F:7B:2B:FD:68
X509v3 Authority Key Identifier:
keyid:64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a4:7d:d9:6a:3a:ce:c7:42:10:a1:02:5e:f3:73:e0:c9:07:
2f:62:0d:3f:ef:e7:95:a4:de:a9:c5:d7:f1:ea:09:8a:94:ce:
1c:65:20:09:a8:25:1b:3b:d8:a0:6f:fb:98:a5:c0:10:ea:fc:
75:d6:40:68:35:be:f4:67:98:37:d3:67:ac:8d:22:73:c3:ce:
9e:f6:7c:6f:46:5d:0c:ce:b0:41:a5:46:9d:03:da:71:a1:47:
66:96:32:06:69:51:40:77:39:40:e5:c4:c0:dc:03:f7:09:ff:
01:b5:66:c4:ec:d5:f8:00:e9:14:61:8b:07:7d:e0:47:86:55:
ae:58:9c:2d:58:33:1e:7f:0c:e4:78:d5:58:f9:1d:cc:a2:01:
88:af:53:a2:90:31:4a:91:f7:72:f2:38:a0:7a:c7:85:09:37:
38:15:55:c5:34:50:01:d8:88:e9:e2:4f:e5:40:0b:81:91:fb:
b9:0f:aa:c0:91:86:8d:c9:04:78:bf:21:f0:27:c7:9b:0d:40:
27:59:f8:8d:e9:54:5a:b7:89:03:6c:99:05:bc:54:e0:3f:0f:
96:9b:dd:e1:d0:48:27:0b:69:38:44:02:80:87:55:96:11:f0:
d4:8c:99:cd:c9:77:8b:ae:62:21:6e:75:8e:c4:15:07:a4:1e:
1f:b3:b0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:22 2025 by rpki-client