Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/efa127-3629-4c5f-998f-ba2e2ece774d/1/ZEXzBZOZaa2QDVjfmskeenW0MY4.mft
File: ZEXzBZOZaa2QDVjfmskeenW0MY4.mft (raw, json)
Hash identifier: lzOC9BJ54z8/O0UZOkCGWl2HbniXQFowY5avruBm9X0=
Subject key identifier: A5:68:E4:1C:4D:06:4C:04:2D:85:B4:F7:50:B1:AF:72:6C:F8:D7:E1
Authority key identifier: 64:45:F3:05:93:99:69:AD:90:0D:58:DF:9A:C9:1E:7A:75:B4:31:8E
Certificate issuer: /CN=6445f305939969ad900d58df9ac91e7a75b4318e
Certificate serial: 0197B88FA86F85404F51D823B5D7B55241C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEXzBZOZaa2QDVjfmskeenW0MY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/efa127-3629-4c5f-998f-ba2e2ece774d/1/ZEXzBZOZaa2QDVjfmskeenW0MY4.mft
Manifest number: 1010
Signing time: Sat 28 Jun 2025 22:01:51 +0000
Manifest this update: Sat 28 Jun 2025 22:01:51 +0000
Manifest next update: Sun 29 Jun 2025 22:01:51 +0000
Files and hashes: 1: ZEXzBZOZaa2QDVjfmskeenW0MY4.crl (hash: okBPa0qBBKJ/+UQ7wforI1L2ZuQyN59OmM/IMHVbOhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/efa127-3629-4c5f-998f-ba2e2ece774d/1/ZEXzBZOZaa2QDVjfmskeenW0MY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/efa127-3629-4c5f-998f-ba2e2ece774d/1/ZEXzBZOZaa2QDVjfmskeenW0MY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZEXzBZOZaa2QDVjfmskeenW0MY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:a8:6f:85:40:4f:51:d8:23:b5:d7:b5:52:41:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6445f305939969ad900d58df9ac91e7a75b4318e
Validity
Not Before: Jun 28 22:01:51 2025 GMT
Not After : Jun 29 22:01:51 2025 GMT
Subject: CN=a568e41c4d064c042d85b4f750b1af726cf8d7e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f6:62:44:35:d1:58:90:7e:bc:d8:76:d4:f8:
b1:df:6d:f6:b4:c9:7e:7b:0c:08:9c:9b:ea:e8:b5:
18:0d:e4:05:9f:30:d4:98:ba:35:5c:25:f5:fa:71:
4a:35:1b:9e:57:e6:54:05:38:64:4b:f5:5d:77:c2:
8f:d4:05:80:4d:24:0c:ea:49:02:5b:44:d8:f3:49:
08:2e:74:82:ab:08:b6:9b:bb:8f:41:f1:8a:68:f7:
d2:0c:8f:8f:e0:29:09:4c:04:19:ae:1d:51:f6:1a:
99:8e:3d:76:2d:d7:9a:54:9b:94:ec:91:ab:45:1a:
ca:66:da:85:c8:0b:41:dc:5d:8c:cc:46:92:a3:53:
51:ad:4a:b0:6d:13:14:22:df:6f:69:b0:82:bd:ab:
ff:ca:47:fd:13:0e:07:f0:2c:17:a8:75:0b:88:38:
26:3f:20:66:cc:17:9c:46:5a:b4:28:fe:1a:45:37:
ba:37:d8:a1:6e:04:4a:a6:20:97:ab:82:a4:c9:c0:
e1:92:75:4a:fb:cb:fb:0e:1a:85:c3:cb:5b:06:36:
43:3f:20:9d:27:33:91:0e:94:26:b9:51:37:40:92:
9a:41:6a:04:13:99:14:76:6b:66:5f:4e:6f:cd:e6:
41:83:8b:52:ef:aa:58:e8:8d:ec:8b:77:64:22:cd:
84:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:68:E4:1C:4D:06:4C:04:2D:85:B4:F7:50:B1:AF:72:6C:F8:D7:E1
X509v3 Authority Key Identifier:
keyid:64:45:F3:05:93:99:69:AD:90:0D:58:DF:9A:C9:1E:7A:75:B4:31:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEXzBZOZaa2QDVjfmskeenW0MY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/efa127-3629-4c5f-998f-ba2e2ece774d/1/ZEXzBZOZaa2QDVjfmskeenW0MY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/efa127-3629-4c5f-998f-ba2e2ece774d/1/ZEXzBZOZaa2QDVjfmskeenW0MY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:57:71:30:5d:f9:73:e8:37:6d:38:e0:80:c4:6e:42:7a:4b:
ed:8d:90:ad:bb:b2:58:06:5f:69:fe:81:fa:92:c0:1e:3f:4d:
22:b0:07:fd:7a:67:43:03:0f:0c:21:e9:f6:94:99:47:ad:4d:
8d:ca:55:cd:ed:03:50:5f:cd:14:10:5a:10:f8:4f:b7:98:50:
67:20:19:53:b1:bc:a5:4c:a6:3e:1e:e3:09:a8:44:b1:5c:e8:
23:95:39:33:ad:54:41:67:a7:4e:0e:d2:31:d2:68:93:b4:5a:
c6:25:53:11:a8:fc:30:7c:a9:c0:18:6d:06:6f:88:de:06:96:
3f:35:d5:ab:c7:35:ca:b5:ba:c5:c4:73:a3:e3:f0:c6:d9:e6:
52:93:3c:07:c1:f8:5c:84:17:c0:b3:1d:9f:ee:c4:ee:b1:eb:
e5:89:1a:bc:a8:75:00:1b:17:be:18:de:d9:60:de:92:07:fe:
79:5a:c5:78:bd:34:99:72:f9:ea:6d:e2:75:af:82:6a:80:b7:
9a:76:e5:0a:aa:51:fa:77:db:27:44:58:84:1d:79:fe:92:13:
26:39:e0:a2:9c:40:d6:82:c7:ac:e0:8a:e4:da:8b:95:80:c8:
80:04:68:3e:d1:8a:11:ca:e0:fc:49:fc:22:6c:ff:a4:a9:d0:
fd:e8:99:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:01:14 2025 by rpki-client