Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft
File: ZWo7XAkm87RZeYDaUImcKOpqa9k.mft (raw, json)
Hash identifier: +zwlr54W/fL0v2d7pco/jfHXWl8RKy6pHe0STjzXOV8=
Subject key identifier: EA:8F:35:81:3F:40:BB:68:E2:5B:EB:1B:D7:5A:C0:34:4E:31:F8:7E
Authority key identifier: 65:6A:3B:5C:09:26:F3:B4:59:79:80:DA:50:89:9C:28:EA:6A:6B:D9
Certificate issuer: /CN=656a3b5c0926f3b4597980da50899c28ea6a6bd9
Certificate serial: 0197B70EB27DEF6DCDBA93CAB6F8F6CAAB94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWo7XAkm87RZeYDaUImcKOpqa9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft
Manifest number: 0978
Signing time: Sat 28 Jun 2025 15:01:23 +0000
Manifest this update: Sat 28 Jun 2025 15:01:23 +0000
Manifest next update: Sun 29 Jun 2025 15:01:23 +0000
Files and hashes: 1: ZWo7XAkm87RZeYDaUImcKOpqa9k.crl (hash: QdOsN7ZqsaffzpfJCkeZ4cXyZ4NoZ6JDUvXAZ20eYc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZWo7XAkm87RZeYDaUImcKOpqa9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:b2:7d:ef:6d:cd:ba:93:ca:b6:f8:f6:ca:ab:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656a3b5c0926f3b4597980da50899c28ea6a6bd9
Validity
Not Before: Jun 28 15:01:23 2025 GMT
Not After : Jun 29 15:01:23 2025 GMT
Subject: CN=ea8f35813f40bb68e25beb1bd75ac0344e31f87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:03:18:4d:5d:2f:aa:4a:b3:f4:33:f7:01:0e:
ec:96:a1:b1:6c:85:12:c4:b1:1f:eb:8c:a0:be:70:
64:84:3f:ea:82:78:4d:eb:3b:9d:38:8c:e2:42:88:
2f:97:8e:f5:73:7d:0c:ad:ad:45:6d:98:aa:d4:1a:
37:60:a8:7f:17:7b:83:df:39:dc:fd:ef:cc:32:82:
5e:78:99:cf:c2:3c:7d:2f:c9:2e:fc:64:87:19:1d:
63:be:8a:6b:4a:45:16:6b:0f:1a:36:f5:62:36:99:
32:47:37:5f:e1:38:c0:22:51:06:21:01:fe:c2:eb:
54:32:c4:5c:de:af:ee:41:51:ee:34:c0:ae:e7:d7:
51:f6:e1:35:6f:8e:3e:18:c9:11:b7:bc:9f:71:7a:
9a:81:02:8f:f7:19:fb:bf:91:03:16:bb:3c:76:0c:
6b:80:1f:62:39:4e:0d:46:4d:ee:e2:db:1e:03:09:
cd:cc:46:6b:2b:d6:06:b2:fa:dc:83:09:19:37:8b:
b9:ff:3e:37:87:e8:05:4c:4b:de:97:32:0c:3d:80:
e1:0b:44:35:b5:98:e5:88:0b:76:84:f9:31:93:54:
a1:12:01:5b:41:6d:c0:44:33:90:93:72:09:1b:54:
38:32:a2:77:4b:f9:f0:e2:55:59:4b:aa:00:f5:32:
89:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8F:35:81:3F:40:BB:68:E2:5B:EB:1B:D7:5A:C0:34:4E:31:F8:7E
X509v3 Authority Key Identifier:
keyid:65:6A:3B:5C:09:26:F3:B4:59:79:80:DA:50:89:9C:28:EA:6A:6B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWo7XAkm87RZeYDaUImcKOpqa9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:67:23:35:54:69:fd:13:4a:76:35:d9:d6:65:3f:90:44:73:
33:d8:c6:03:74:b0:a6:08:c7:53:7b:3f:aa:3d:63:32:15:cd:
2c:a9:85:7b:d6:f6:b5:3c:3e:7c:f3:44:bd:f5:9c:e1:f6:fe:
7d:40:46:3a:e6:29:d2:11:c3:be:85:70:07:61:78:90:79:94:
21:d4:1c:4a:8f:8a:c8:9a:f2:66:71:35:cf:85:68:0e:53:41:
64:24:af:0b:3a:02:44:e6:99:d8:ad:45:22:0e:a8:5e:59:1e:
47:49:cd:56:11:8d:af:5d:e7:17:2a:39:ce:e6:d9:c1:60:fd:
5e:0b:3f:6c:ac:cf:0c:45:cf:59:50:ff:a3:7e:51:b5:b4:4e:
71:0b:1a:7d:b7:44:1a:7d:d1:01:1c:0c:c7:fd:0d:b0:f4:40:
8c:ed:d9:64:b8:18:b7:1b:92:b3:73:e7:bc:b0:61:ca:70:a3:
8f:e9:cc:02:75:09:d8:f6:60:a7:8b:08:b6:c5:0e:39:85:a1:
65:31:78:ba:85:84:76:d1:3d:1b:c3:e2:34:c3:c6:31:56:bc:
bd:82:03:c8:39:bf:b6:9b:ea:4d:8c:f4:62:df:50:51:04:3a:
c0:ac:6c:4c:25:53:9d:1c:4f:2e:16:6b:ef:1d:26:f8:5d:51:
57:95:b1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:27:41 2025 by rpki-client