Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft
File: ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft (raw, json)
Hash identifier: DZ5Iq2J27AudF8t53Xo5OBaHF54np1AdF3yhpR5eJxc=
Subject key identifier: EE:89:82:59:45:E6:C8:94:84:31:2F:37:96:A6:70:5F:ED:B3:99:2A
Authority key identifier: 65:43:64:D0:C6:C9:3D:F2:80:27:48:8A:FC:BF:CF:32:97:26:39:2B
Certificate issuer: /CN=654364d0c6c93df28027488afcbfcf329726392b
Certificate serial: 0197B6A154CCD825CC645DF3757900902A67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft
Manifest number: 0948
Signing time: Sat 28 Jun 2025 13:01:55 +0000
Manifest this update: Sat 28 Jun 2025 13:01:55 +0000
Manifest next update: Sun 29 Jun 2025 13:01:55 +0000
Files and hashes: 1: ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.crl (hash: E8cIMiBqgwr7r3S84umO2a28dwWrp3cDO+/6CE3EuT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:54:cc:d8:25:cc:64:5d:f3:75:79:00:90:2a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=654364d0c6c93df28027488afcbfcf329726392b
Validity
Not Before: Jun 28 13:01:55 2025 GMT
Not After : Jun 29 13:01:55 2025 GMT
Subject: CN=ee89825945e6c89484312f3796a6705fedb3992a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d2:43:4b:54:90:68:5b:de:64:05:99:50:44:
25:dc:a6:a1:fa:94:b6:09:18:ea:e3:ae:72:96:d4:
41:21:0a:fb:1b:b3:f0:6c:b6:a9:3c:e0:c2:c7:06:
5c:e3:85:5a:6d:08:40:a4:24:1f:4e:a5:4d:f8:12:
94:cc:b2:65:fc:e8:fe:c7:5b:8a:bc:d8:25:e6:28:
52:87:5c:8f:8f:7a:13:49:c0:5b:f7:ed:1f:11:dc:
fa:d2:04:74:0b:be:6b:5a:9b:34:a1:33:38:89:2d:
7d:06:73:d1:b0:3f:09:d4:d6:bd:40:f8:01:28:c0:
9c:17:33:ed:66:fd:40:3b:15:56:47:0b:33:bb:0e:
2b:88:66:bd:9c:51:80:e4:7c:6a:9e:7f:8d:4d:58:
23:53:17:77:46:6f:b9:fb:ca:3a:e2:70:6c:35:c4:
24:e0:1b:48:62:f9:dc:ef:30:e8:c2:08:c7:14:bc:
8f:6f:e7:93:87:5b:e7:9e:94:8e:c6:a3:7b:52:5c:
6f:05:20:2a:1b:22:17:06:5b:7f:fe:7f:c3:e2:77:
9d:41:67:79:ed:93:49:2f:d5:5a:0f:cc:b4:0c:55:
1b:e3:4f:db:fa:77:b7:ec:c6:1a:56:c8:9c:c7:47:
13:d2:ca:08:fd:03:75:c4:0f:64:51:db:3b:e2:36:
2c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:89:82:59:45:E6:C8:94:84:31:2F:37:96:A6:70:5F:ED:B3:99:2A
X509v3 Authority Key Identifier:
keyid:65:43:64:D0:C6:C9:3D:F2:80:27:48:8A:FC:BF:CF:32:97:26:39:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:01:a9:e1:d2:a1:10:ab:98:5f:d4:9e:59:65:bf:58:55:1f:
ef:cf:a3:4a:93:19:cb:17:90:05:6a:4a:86:77:d0:3c:77:74:
d3:0b:eb:a2:22:81:b8:f0:3f:2f:a4:fc:9c:e5:7a:ec:bb:62:
5b:95:f9:0e:e7:a2:a7:19:27:bd:22:66:b1:d6:a1:7b:d1:7e:
31:ae:6a:6e:7a:e7:ba:a5:49:6c:a4:6f:8b:4a:f7:ce:57:23:
09:49:f8:a8:99:5d:56:52:11:e8:e8:2b:51:eb:f1:bd:a8:72:
9c:1f:2e:cf:b9:6e:99:f2:64:72:e2:f1:29:1b:0d:91:bb:ff:
a9:6f:e3:e4:5d:be:8e:17:fe:c9:63:39:4c:4a:45:6a:5b:c0:
0c:16:58:31:63:05:38:85:ef:92:8a:73:ab:4c:11:8d:10:30:
90:ea:e6:e1:e5:02:fd:52:a6:18:64:4f:e4:4f:5a:a7:23:c3:
98:1d:ad:7d:f5:fa:1c:c0:54:38:33:75:89:6b:4b:92:a9:fc:
48:f0:df:0e:02:45:4c:ac:88:81:c8:62:c2:4a:38:11:5f:f2:
b9:07:d3:c4:1d:89:29:9b:25:ec:d2:c4:34:1a:11:99:dc:f0:
eb:50:d8:96:8b:13:92:db:8f:7a:a0:c3:41:77:86:50:3c:9e:
7b:fc:3e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:58:33 2025 by rpki-client