Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
File: ZGHiGIOECxNlwzhXExO30yqtnFc.mft (raw, json)
Hash identifier: EKGscaHgq/vyexXxFyPZB4Ew+qDWTA2BNePlMBDgpJU=
Subject key identifier: C0:12:AE:F2:64:00:40:7F:FD:FE:B9:73:95:5D:46:18:E5:E3:7C:7F
Authority key identifier: 64:61:E2:18:83:84:0B:13:65:C3:38:57:13:13:B7:D3:2A:AD:9C:57
Certificate issuer: /CN=6461e21883840b1365c338571313b7d32aad9c57
Certificate serial: 0199FBEB085945A0E904E8D0A458381B2257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
Manifest number: 0821
Signing time: Sun 19 Oct 2025 10:01:48 +0000
Manifest this update: Sun 19 Oct 2025 10:01:48 +0000
Manifest next update: Mon 20 Oct 2025 10:01:48 +0000
Files and hashes: 1: ZGHiGIOECxNlwzhXExO30yqtnFc.crl (hash: Ldji/YqKrD+MMwxcl+KPiE1oqgEEuHu7yKyTjzek78A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:08:59:45:a0:e9:04:e8:d0:a4:58:38:1b:22:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6461e21883840b1365c338571313b7d32aad9c57
Validity
Not Before: Oct 19 10:01:48 2025 GMT
Not After : Oct 20 10:01:48 2025 GMT
Subject: CN=c012aef26400407ffdfeb973955d4618e5e37c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:48:1d:80:21:b6:da:d6:1d:e5:43:ef:ae:b8:
66:a7:3b:c5:54:e8:16:f2:cd:4e:5b:ab:10:fe:ca:
83:f9:95:a4:c8:82:23:77:3d:94:47:24:37:50:18:
0d:af:1d:8d:64:52:97:c1:72:0b:01:6d:6c:3c:2c:
f9:03:d5:42:e0:e8:20:4c:1f:7d:fb:bd:dc:8e:a5:
78:ac:62:17:24:3e:0f:15:68:d3:c6:d7:ab:de:39:
f2:e5:5d:29:f2:91:76:4d:4a:a9:a2:3f:67:a9:c5:
9b:9b:35:ee:90:a2:b0:fa:8e:f8:7e:b3:f8:4e:36:
1f:86:a2:55:6d:39:3b:3d:95:bd:66:bb:db:10:79:
24:f3:0a:64:2a:e0:ea:1b:23:b8:e5:c3:ab:5b:1e:
7a:f1:b7:74:f1:ab:a5:5f:f0:01:81:cf:60:ee:7b:
ff:75:ae:61:ee:5c:d7:1e:1c:46:45:0e:63:ed:bd:
08:65:8a:f9:c3:6e:71:69:e3:a6:db:38:34:2e:24:
63:1e:3e:8f:40:26:ea:e9:97:88:43:ef:64:c6:72:
3a:1c:6d:42:1f:18:cd:59:57:5e:07:90:47:7b:e0:
f0:fa:c4:d0:4a:05:3e:a3:dd:45:2b:ee:5f:63:70:
a1:be:93:ed:5d:6a:99:02:b7:d5:90:71:ac:e6:ad:
1b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:12:AE:F2:64:00:40:7F:FD:FE:B9:73:95:5D:46:18:E5:E3:7C:7F
X509v3 Authority Key Identifier:
keyid:64:61:E2:18:83:84:0B:13:65:C3:38:57:13:13:B7:D3:2A:AD:9C:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:20:16:5e:68:76:10:64:64:74:27:63:f7:63:89:ec:e7:4c:
11:05:ab:4d:d1:35:2a:0d:19:59:c0:01:2b:50:e1:66:ee:f6:
ea:6c:1d:d5:53:98:03:00:ec:a7:85:3c:70:b5:45:da:ed:7e:
36:03:a2:56:18:ec:b0:87:6b:b1:dc:10:b2:77:21:c5:1f:ae:
4d:ad:a2:a2:f7:ed:f7:e8:a2:60:55:f2:3e:f6:02:43:62:eb:
00:7a:13:ee:f5:79:98:00:aa:21:b8:8f:dc:a9:56:31:4d:b2:
15:26:86:4d:04:a0:63:82:d8:80:58:27:9f:36:8f:a3:eb:b0:
4c:87:5b:e7:80:9f:4f:b6:eb:8a:21:ae:76:3a:5b:b1:03:3c:
51:41:09:a7:48:ef:91:8d:40:cf:c3:1c:99:66:12:69:8f:28:
14:00:60:5a:f4:2f:ab:7a:2e:c7:12:fe:4b:7c:97:cf:c3:32:
10:4f:80:1e:d1:be:4b:e2:3c:06:66:5d:f0:54:f2:7b:6d:86:
40:8f:6c:ba:6d:28:2b:3a:5d:42:22:98:88:ee:e9:d2:2a:65:
62:4c:9f:77:03:33:52:4b:06:58:ad:d5:80:12:d8:2b:e2:cd:
bb:fb:24:d3:c0:7a:da:be:81:96:0d:8c:3a:e7:6f:1d:01:26:
87:2d:5b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:54:29 2025 by rpki-client