Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft
File: ZZM7eU5VgCwQRah18DOqDKdKD74.mft (raw, json)
Hash identifier: AyfTDhlW4mnvCiWO3x5Kd84Dbhi/Ip1hitcCfIHTTeo=
Subject key identifier: F8:EA:0A:60:EB:53:CF:FF:F5:72:5D:5B:00:E8:B8:40:C3:0B:1B:E1
Authority key identifier: 65:93:3B:79:4E:55:80:2C:10:45:A8:75:F0:33:AA:0C:A7:4A:0F:BE
Certificate issuer: /CN=65933b794e55802c1045a875f033aa0ca74a0fbe
Certificate serial: 0197B77C0371AAC973DCEFCD1B6A7E0E0B7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZM7eU5VgCwQRah18DOqDKdKD74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft
Manifest number: 131C
Signing time: Sat 28 Jun 2025 17:00:47 +0000
Manifest this update: Sat 28 Jun 2025 17:00:47 +0000
Manifest next update: Sun 29 Jun 2025 17:00:47 +0000
Files and hashes: 1: ZZM7eU5VgCwQRah18DOqDKdKD74.crl (hash: fW1hd4iWfOBNlfAnUoA42W+RuK4lYABc5pUc1Vt0lpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZM7eU5VgCwQRah18DOqDKdKD74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:03:71:aa:c9:73:dc:ef:cd:1b:6a:7e:0e:0b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65933b794e55802c1045a875f033aa0ca74a0fbe
Validity
Not Before: Jun 28 17:00:47 2025 GMT
Not After : Jun 29 17:00:47 2025 GMT
Subject: CN=f8ea0a60eb53cffff5725d5b00e8b840c30b1be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:42:98:fa:f9:3c:aa:ab:18:38:29:59:45:19:
06:ec:0a:aa:7d:9b:b8:c1:66:28:c4:14:e8:28:67:
26:d7:93:a3:f6:4c:af:64:57:a1:ae:27:a2:00:b5:
08:d9:70:09:e9:a7:dc:12:06:d7:8c:9c:84:25:da:
19:7b:91:bf:18:1f:9a:1d:d0:a2:62:25:98:88:3b:
00:35:fe:1d:df:a6:0e:11:17:7c:f1:6a:ad:a9:8e:
77:93:c7:38:8a:2b:af:3b:f2:25:30:04:69:1f:ed:
b0:5a:ed:8c:66:f3:8a:a6:73:a3:7d:ed:c0:1e:e0:
05:0b:1c:2d:7f:94:44:a9:75:52:5d:d5:9e:89:97:
39:a8:5e:85:63:ad:80:0a:e0:95:e5:00:d7:04:aa:
6e:c6:21:8e:f9:55:e8:4d:0c:69:98:bb:40:4f:c9:
3a:2f:7d:ef:54:cb:7a:06:35:aa:ce:92:9a:1b:71:
76:e8:ed:3f:69:ae:68:74:ac:23:29:04:55:66:89:
35:a7:7d:dc:f8:6a:d4:a5:79:06:90:55:4e:78:20:
bd:9a:bf:e3:ec:c0:79:48:ef:e4:21:47:1f:55:c0:
ba:87:7b:12:db:ce:a4:9d:87:98:c7:53:d6:a3:c4:
04:9c:df:72:92:30:8b:73:f3:a6:ca:ec:6b:06:c9:
8d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EA:0A:60:EB:53:CF:FF:F5:72:5D:5B:00:E8:B8:40:C3:0B:1B:E1
X509v3 Authority Key Identifier:
keyid:65:93:3B:79:4E:55:80:2C:10:45:A8:75:F0:33:AA:0C:A7:4A:0F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZM7eU5VgCwQRah18DOqDKdKD74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:00:a5:25:03:a2:f5:94:89:3f:6d:57:7c:ac:18:eb:e4:c1:
a1:1d:91:31:db:37:b4:59:a1:05:ef:fa:7b:e3:cb:6b:46:23:
0a:74:ae:f7:2e:84:05:1b:e5:d5:81:c4:e0:f3:16:5f:7b:57:
ad:cc:14:0a:a7:d7:01:f8:c4:98:fd:56:db:55:06:d4:f0:46:
d7:9d:2a:81:45:20:34:54:10:13:fb:1b:3a:4a:60:9e:89:b7:
33:35:8f:81:1d:c9:fe:60:1c:79:ce:a1:b5:c2:56:6e:4c:2f:
80:59:9b:c9:d7:cd:04:34:e5:04:a2:bc:93:81:7d:83:e8:d3:
0b:b0:6a:cb:22:ca:69:24:96:fd:86:f1:51:cc:1e:1c:b2:98:
a3:20:25:dd:01:49:90:94:f2:be:67:1f:d5:8e:24:ca:0a:74:
4e:52:ea:ea:58:74:82:f3:88:80:5c:40:fb:c1:ec:5c:b3:26:
76:b9:28:5d:ef:92:b0:a2:b0:25:24:56:42:c8:62:fb:65:3d:
d5:7e:76:e1:4e:3f:bd:03:dd:26:6e:07:54:7b:f3:00:4e:2e:
93:0b:7a:bc:97:ff:76:87:3b:f4:95:52:65:05:a3:f5:c0:95:
27:b2:21:a4:ec:4a:18:53:9d:3a:d2:75:56:d1:60:ac:61:09:
4b:d9:a7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:42:22 2025 by rpki-client