Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
File: ZGHiGIOECxNlwzhXExO30yqtnFc.mft (raw, json)
Hash identifier: p8gkcqOH21dlrEMNIzQ11Eus4wzx4VsJdc7eLlyAILE=
Subject key identifier: 61:6B:5C:62:64:DE:9B:61:9E:51:8B:1F:A3:FA:56:CC:39:24:A7:F9
Authority key identifier: 64:61:E2:18:83:84:0B:13:65:C3:38:57:13:13:B7:D3:2A:AD:9C:57
Certificate issuer: /CN=6461e21883840b1365c338571313b7d32aad9c57
Certificate serial: 0198D65F41775E74681BC51614BAF2A0166A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
Manifest number: 0789
Signing time: Sat 23 Aug 2025 10:00:23 +0000
Manifest this update: Sat 23 Aug 2025 10:00:23 +0000
Manifest next update: Sun 24 Aug 2025 10:00:23 +0000
Files and hashes: 1: ZGHiGIOECxNlwzhXExO30yqtnFc.crl (hash: bazpT4TDh9l7EMNd6XK9NE8uJsxw5do1E0GOz3rRKGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:41:77:5e:74:68:1b:c5:16:14:ba:f2:a0:16:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6461e21883840b1365c338571313b7d32aad9c57
Validity
Not Before: Aug 23 10:00:23 2025 GMT
Not After : Aug 24 10:00:23 2025 GMT
Subject: CN=616b5c6264de9b619e518b1fa3fa56cc3924a7f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:55:d5:bb:b4:6e:cd:3d:c7:ae:b4:00:5d:fe:
15:ac:79:c4:9b:44:39:8e:1d:ae:45:4f:6a:c1:dc:
61:e2:71:03:ea:99:8e:c7:07:b1:92:ca:4c:6d:b4:
46:b2:bc:30:e7:f0:fa:2c:eb:d6:b5:24:86:a7:bf:
0e:0b:62:f0:ed:61:00:13:9d:d4:bb:bb:b1:74:1f:
bb:02:b3:db:77:ba:4c:cd:e3:f7:93:4f:db:68:41:
43:92:2a:ca:5f:d0:ee:55:9b:1e:94:3b:ce:34:09:
83:06:72:56:2b:fc:96:0b:55:0b:49:59:e3:90:b4:
d1:5b:bf:89:ef:27:c7:08:2f:f0:34:ea:61:92:3d:
b1:0d:b5:59:08:7e:aa:a9:bb:17:56:57:99:59:e5:
dc:7e:b6:d5:f4:61:df:f2:5e:30:2d:e8:20:d8:9d:
80:7c:a2:94:1c:b7:d6:1d:60:af:c2:51:2c:be:8c:
f1:5b:ec:01:e4:a1:b2:80:9b:20:ac:38:a0:96:20:
f0:36:2c:45:ac:bb:07:84:79:60:94:d4:ef:ca:9c:
e9:57:22:c6:7b:9b:f9:38:58:3f:d4:f8:ff:92:c7:
b3:6d:22:d0:98:3d:d2:40:52:e6:0c:a9:09:0d:36:
2a:1b:f4:c5:c7:d0:fa:e7:93:47:3d:99:de:83:d8:
0a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:6B:5C:62:64:DE:9B:61:9E:51:8B:1F:A3:FA:56:CC:39:24:A7:F9
X509v3 Authority Key Identifier:
keyid:64:61:E2:18:83:84:0B:13:65:C3:38:57:13:13:B7:D3:2A:AD:9C:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:34:e3:c0:85:c3:2a:a2:c6:cc:4b:8b:e5:1a:58:f8:49:46:
19:c3:30:3e:21:e4:19:b6:48:6e:f6:6c:7c:e0:22:ac:fd:49:
77:82:87:d2:db:b4:fa:e8:0d:41:fa:83:14:bf:15:f7:50:16:
8a:44:91:d0:06:b5:c5:64:eb:b6:2c:d7:cc:8e:09:df:d2:8c:
b2:1a:5d:f8:11:2b:5f:08:73:b7:37:6c:68:88:0d:22:7e:c5:
4b:a9:d9:8d:5e:4a:33:73:29:7f:02:7d:ff:0f:9f:71:e4:28:
83:35:c3:6c:ff:a1:b4:44:28:65:18:98:35:98:35:e8:19:04:
8e:82:24:e7:90:6e:21:59:e2:82:9b:49:01:07:e9:2a:53:8d:
6d:21:9e:3d:8f:80:0e:b7:53:73:48:16:00:3e:dd:0f:1c:4c:
db:32:25:b9:47:bb:17:8b:e1:5b:e4:23:34:91:93:17:29:06:
e6:85:d4:86:75:78:3c:36:97:08:26:c3:1f:a4:37:0a:9f:a9:
01:06:af:bf:8b:e5:68:fa:5b:93:41:93:a6:cf:fb:b7:f3:59:
11:3a:c1:9b:a4:48:0e:56:b1:c2:4d:a1:17:86:c1:36:8b:df:
7a:e6:76:92:62:02:fe:d2:4e:ee:63:b5:c5:fa:ac:4e:70:29:
c2:7b:a2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:00:39 2025 by rpki-client