Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.mft
File: ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.mft (raw, json)
Hash identifier: VI7pK1XLSqpVR0xZ7OnR++ZXr/fTp89n4dVJM6XI4T4=
Subject key identifier: E3:08:5E:03:1D:6D:97:E8:AB:FF:B1:86:E6:99:EC:E4:39:25:3A:21
Authority key identifier: 64:EE:04:89:15:8F:E9:5E:19:91:FD:5C:E7:25:EA:06:7E:11:A1:FB
Certificate issuer: /CN=64ee0489158fe95e1991fd5ce725ea067e11a1fb
Certificate serial: 0197B6A226A080FE8B5DC6345F087672E4B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.mft
Manifest number: 0E7A
Signing time: Sat 28 Jun 2025 13:02:49 +0000
Manifest this update: Sat 28 Jun 2025 13:02:49 +0000
Manifest next update: Sun 29 Jun 2025 13:02:49 +0000
Files and hashes: 1: ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.crl (hash: u6FDEFro6Jn8hWXchyAKK3LEyR/c62Ozb/IFYjDsOrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:26:a0:80:fe:8b:5d:c6:34:5f:08:76:72:e4:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ee0489158fe95e1991fd5ce725ea067e11a1fb
Validity
Not Before: Jun 28 13:02:49 2025 GMT
Not After : Jun 29 13:02:49 2025 GMT
Subject: CN=e3085e031d6d97e8abffb186e699ece439253a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:29:c0:77:af:4c:af:c1:61:72:fa:2f:8b:7d:
d1:04:67:e6:ae:ab:c8:ca:b8:53:ab:1e:ee:ea:08:
6b:ad:75:fc:ea:a0:8c:70:bc:90:00:b9:93:ed:18:
be:ca:98:5c:03:e2:70:76:90:fb:90:b8:58:d6:57:
5f:7d:1a:a1:bd:60:68:41:3c:5d:0c:fd:31:87:66:
62:6d:4a:c3:09:48:15:ad:57:45:c8:0a:c1:1a:31:
b0:d4:49:c2:34:50:25:11:e1:f8:2c:50:c9:05:8c:
a9:a6:62:0a:9a:14:6d:2c:73:38:fa:46:6c:4d:d9:
7d:32:7f:35:58:18:ad:8c:97:b3:87:36:b8:fe:82:
c4:fe:20:93:f8:85:67:78:45:25:3a:b4:b1:2a:7c:
17:f0:d6:66:08:5c:c9:dc:f4:db:64:cc:23:6b:5c:
22:3b:f2:c4:14:ab:47:9c:fd:ac:98:05:db:fd:28:
96:7a:4f:eb:e3:0e:52:45:a2:6e:d6:f1:12:29:7c:
9d:3a:12:ad:ea:f6:ed:1e:81:d8:fd:7a:eb:35:25:
9b:05:27:10:3c:24:42:6d:29:99:ef:f6:4c:25:22:
4d:2f:5c:ce:db:01:08:cf:99:89:43:0c:81:65:09:
1b:78:7f:50:ce:fa:27:fa:3a:35:52:8c:20:8f:92:
05:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:08:5E:03:1D:6D:97:E8:AB:FF:B1:86:E6:99:EC:E4:39:25:3A:21
X509v3 Authority Key Identifier:
keyid:64:EE:04:89:15:8F:E9:5E:19:91:FD:5C:E7:25:EA:06:7E:11:A1:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:b9:2e:90:c2:82:b9:55:b1:d9:56:1e:1a:d1:91:e6:bc:f2:
c5:98:50:ef:7d:03:e3:82:75:af:0e:e8:2c:e2:7f:8e:e9:86:
96:ac:85:72:48:f0:41:f1:6b:f1:99:ee:eb:41:87:f0:8c:88:
d8:0d:63:96:7c:4c:c0:a5:8f:55:42:f5:2f:9b:15:f5:b9:ac:
fb:92:05:7b:9a:8c:6c:63:24:99:13:11:1b:25:02:8d:ab:6f:
26:bd:38:13:83:fe:e8:24:bf:7e:b5:25:eb:21:d3:23:88:1b:
bd:93:75:18:3f:b7:55:b4:25:11:a3:68:73:f3:99:29:fb:5a:
84:43:a2:82:85:31:6e:6f:46:11:a7:1d:b5:96:00:f2:4f:0d:
1b:f7:7b:73:78:3b:a3:c6:e4:1d:ee:94:7e:13:0f:a4:da:1b:
54:20:ef:bf:d9:cd:7f:cf:f4:40:31:dc:fa:cd:bc:04:d5:65:
86:ee:a4:01:16:53:9d:fd:89:5b:42:f3:86:4b:07:f5:9a:0e:
dd:97:5c:8c:92:92:09:3f:7c:48:e9:9b:43:20:7a:94:3e:97:
0f:68:3e:f4:c1:33:93:ac:c2:2e:03:59:76:6b:65:55:3c:5f:
f2:2d:db:6b:49:ff:bf:70:8c:ff:78:85:2b:1b:30:d3:4e:9c:
fe:e4:f0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:03:07 2025 by rpki-client