Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft
File: ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft (raw, json)
Hash identifier: TvowDiYqeW3bW4YOzrME7esu+x0FXOspBuOut9gVF3g=
Subject key identifier: 46:A1:FD:42:37:52:09:C2:EB:6D:E4:26:6C:FF:B4:4D:D3:D4:96:A0
Authority key identifier: 65:74:84:CC:96:E0:45:03:45:79:45:69:1D:68:14:EC:D6:60:96:E3
Certificate issuer: /CN=657484cc96e04503457945691d6814ecd66096e3
Certificate serial: 0197B70F3778A2733016FEEB0056A6AE9576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZXSEzJbgRQNFeUVpHWgU7NZgluM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft
Manifest number: 07BE
Signing time: Sat 28 Jun 2025 15:01:57 +0000
Manifest this update: Sat 28 Jun 2025 15:01:57 +0000
Manifest next update: Sun 29 Jun 2025 15:01:57 +0000
Files and hashes: 1: ZXSEzJbgRQNFeUVpHWgU7NZgluM.crl (hash: 8OWPhUiNXT9wLgwnD+anxHqVvyyY7JD5LCqfrfVK7fU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZXSEzJbgRQNFeUVpHWgU7NZgluM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:37:78:a2:73:30:16:fe:eb:00:56:a6:ae:95:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=657484cc96e04503457945691d6814ecd66096e3
Validity
Not Before: Jun 28 15:01:57 2025 GMT
Not After : Jun 29 15:01:57 2025 GMT
Subject: CN=46a1fd42375209c2eb6de4266cffb44dd3d496a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0b:4b:f4:a1:f6:4e:f0:f1:59:b0:4d:81:e7:
00:db:b4:1e:16:b4:47:81:5c:05:28:ec:19:ea:f9:
6e:e9:06:96:a5:6c:7d:c1:1f:54:dd:3c:56:b4:6e:
03:3b:fa:8b:dd:1f:d9:14:fd:aa:11:36:c2:d0:d3:
d3:45:28:51:90:72:2c:a9:e3:90:7f:88:61:ac:a5:
66:54:06:2c:65:e7:34:df:48:29:d8:0d:6a:ec:66:
85:45:b0:71:9d:f0:96:34:cd:12:33:d6:cf:28:a7:
ba:8d:92:5b:57:92:98:68:fa:72:01:52:02:94:f6:
67:ce:73:bf:c4:86:ab:e9:77:05:1a:38:ec:46:08:
6e:85:3b:d9:3e:b2:53:4d:b7:c1:f5:80:4f:51:a5:
2f:69:69:87:4e:b9:9b:c5:4a:fb:81:d5:a8:33:7b:
ba:9d:96:c0:d1:1c:48:92:2c:c7:9e:05:b2:f9:4b:
e3:b6:3d:1d:79:24:d2:fe:41:7a:7f:a4:b7:35:26:
99:45:ff:82:b1:21:02:b4:57:5b:f1:b3:6f:94:78:
a7:93:a1:1e:5c:1d:55:9f:19:d8:a5:88:f7:f1:e1:
68:97:10:11:a1:79:ec:fc:f1:3d:d2:ce:64:d2:3d:
db:5d:63:1c:e4:06:c0:f8:1e:3b:a0:02:65:ce:78:
f5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A1:FD:42:37:52:09:C2:EB:6D:E4:26:6C:FF:B4:4D:D3:D4:96:A0
X509v3 Authority Key Identifier:
keyid:65:74:84:CC:96:E0:45:03:45:79:45:69:1D:68:14:EC:D6:60:96:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZXSEzJbgRQNFeUVpHWgU7NZgluM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:52:e3:96:5f:75:a2:6e:c5:0b:c1:0e:35:4a:f1:c0:d4:b6:
92:d4:a6:f1:1d:82:78:9a:98:87:62:63:05:6b:e1:99:f7:0c:
e6:c3:86:9b:e6:94:07:07:38:cd:73:80:0a:07:6d:1d:fd:ea:
91:7e:c4:c3:65:ee:61:1c:8f:9e:98:52:15:6e:72:51:41:35:
dd:ba:96:62:3c:af:f7:7b:32:72:fe:85:11:c7:ee:3a:d1:ba:
ce:c7:a3:df:9c:5f:82:d9:bf:f2:11:c7:d1:fa:4e:c4:57:4e:
60:97:e5:98:f8:c3:c4:c4:5e:95:a1:1a:0b:95:21:67:58:db:
19:f1:c4:e0:a4:7e:0f:0f:e5:5b:34:88:cd:8f:ec:64:7a:d8:
6d:f9:93:2c:7f:f2:2b:c2:28:0f:3d:26:6b:43:ff:31:8f:3d:
4b:0e:31:0a:4e:2d:ac:fb:28:8c:8d:37:8f:70:12:c3:22:3e:
fd:46:d2:66:f5:7d:f3:1e:29:1f:10:70:36:63:47:a0:0e:7c:
eb:39:b0:fc:5d:e4:e4:c0:cf:29:6d:e6:7b:97:64:ab:11:c2:
d7:28:9c:e8:d0:d5:bf:5f:a3:02:72:bb:ae:ba:02:85:68:25:
bd:5c:f4:ac:c6:2e:9b:9a:e5:12:ad:ac:63:ff:aa:54:2a:ee:
a5:58:b8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:44:41 2025 by rpki-client