Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
File: ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft (raw, json)
Hash identifier: mbF0IT1uRCww2Ujhub8Yt0+0d5fW0aQ1QIL2osyrNhU=
Subject key identifier: 77:E1:CD:11:63:19:DE:0F:E1:22:4D:64:33:91:2D:43:FC:AE:7D:47
Authority key identifier: 66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5
Certificate issuer: /CN=66689087e787990916878db20d555684c22cd9d5
Certificate serial: 0197B6326943885FB3B2320FF0D784F2AFED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
Manifest number: 04F0
Signing time: Sat 28 Jun 2025 11:00:46 +0000
Manifest this update: Sat 28 Jun 2025 11:00:46 +0000
Manifest next update: Sun 29 Jun 2025 11:00:46 +0000
Files and hashes: 1: ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl (hash: TsLnmCkB7KvqFUrvDmdJYXc/I03XxkLN0II38VRIJ74=)
2: zMpvAV73BjDw8Fl29P7VCpuHc2c.roa (hash: wiQnFLVW7DG+EEkhJa3uDDbdHjfjWqUFceE8Iwhf9f4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:69:43:88:5f:b3:b2:32:0f:f0:d7:84:f2:af:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66689087e787990916878db20d555684c22cd9d5
Validity
Not Before: Jun 28 11:00:46 2025 GMT
Not After : Jun 29 11:00:46 2025 GMT
Subject: CN=77e1cd116319de0fe1224d6433912d43fcae7d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:12:05:6d:e6:3e:97:42:62:a3:67:cc:f1:97:
6d:cb:97:9d:69:f4:49:90:e0:da:cd:b0:17:ce:81:
bd:b1:98:fe:eb:5d:b2:45:29:5e:eb:2a:bb:8d:3c:
f4:f9:fc:a4:b0:73:06:8f:b6:f3:4d:49:1c:a2:9c:
ef:25:18:4e:0f:1e:7c:2d:28:f9:bd:83:46:7d:76:
84:94:e8:0e:48:ed:b3:ad:7b:d5:b8:64:80:63:54:
d0:4d:aa:ab:fb:ec:c4:5f:91:b6:27:6d:4c:42:11:
fd:1c:4e:d1:72:0c:f6:72:43:ed:14:15:50:37:09:
20:78:38:9a:46:32:33:5b:5c:7c:89:45:2a:23:30:
24:0a:36:a4:50:44:62:c7:35:5d:34:1e:60:cb:02:
73:3b:17:9b:22:ad:d0:76:ab:ba:20:5c:a1:12:81:
17:aa:cd:19:8b:a6:05:8f:4c:c6:14:0d:b2:ec:ae:
1d:8a:a3:4b:f2:77:e3:d7:da:9f:dc:6f:71:83:69:
e0:fe:e7:89:ed:ba:cf:88:17:68:b4:45:3b:05:77:
f5:66:a4:31:fd:78:62:2a:15:ff:19:51:cd:50:5f:
20:66:f6:82:59:ce:34:a2:c3:f7:4d:16:ec:61:b4:
b0:c6:5e:ac:54:e9:07:af:34:a0:4e:44:d1:5b:1f:
e2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E1:CD:11:63:19:DE:0F:E1:22:4D:64:33:91:2D:43:FC:AE:7D:47
X509v3 Authority Key Identifier:
keyid:66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:0d:90:91:39:ea:f0:de:6f:d4:e8:c1:2d:ce:ab:97:30:46:
ce:28:f8:7f:9c:d2:a8:9a:f1:67:d9:ec:38:5d:95:9e:26:2a:
6b:ad:50:7d:8a:c4:90:42:3c:74:16:30:55:07:1a:35:48:77:
9f:9e:02:84:8d:4e:f8:c2:df:be:3f:a0:c0:b3:cc:07:0e:9c:
34:50:0c:58:55:d9:b0:49:cb:7f:72:de:cf:07:5c:5f:a6:0a:
5f:c1:6f:a8:5b:9c:4f:9e:3d:d4:33:48:39:86:7f:e0:72:31:
8b:85:f0:5d:61:00:fc:67:05:21:a2:2d:58:07:2e:1a:c9:06:
1e:89:93:01:f1:60:20:37:0c:1c:a5:dc:55:9f:f4:e3:09:ba:
8b:b5:4f:89:37:25:ba:b2:c0:e1:e3:04:dd:ed:2c:93:73:bd:
62:ee:c8:51:1a:a7:6f:c8:27:41:2a:2e:ad:9d:fa:2c:86:4d:
f1:6e:1f:62:9a:80:fd:aa:69:c6:17:52:8c:ad:cf:27:83:c8:
df:7a:04:51:b9:69:29:f8:8e:92:ff:98:0a:6e:9e:04:9d:47:
9b:4f:13:7b:b5:b8:5c:2b:ec:eb:d1:ba:e6:a6:ca:02:da:a0:
f0:dc:12:9e:d1:f7:28:dd:c6:5a:18:3e:70:24:fc:f7:bc:e7:
b0:ce:fa:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:02:16 2025 by rpki-client