Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
File: ZEZaih6OQvGmDSeBmMMgrsDz99w.mft (raw, json)
Hash identifier: SLu/i18GjfGXUcVQx2IwxzUwTgpEMOKc2UxHOMydVgU=
Subject key identifier: 97:E7:AE:03:C5:B6:2A:13:31:A4:85:35:29:98:31:8E:00:D6:28:EB
Authority key identifier: 64:46:5A:8A:1E:8E:42:F1:A6:0D:27:81:98:C3:20:AE:C0:F3:F7:DC
Certificate issuer: /CN=64465a8a1e8e42f1a60d278198c320aec0f3f7dc
Certificate serial: 0197B6A14C3A6E42E337CE21EC7577B5EF2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
Manifest number: 0A86
Signing time: Sat 28 Jun 2025 13:01:53 +0000
Manifest this update: Sat 28 Jun 2025 13:01:53 +0000
Manifest next update: Sun 29 Jun 2025 13:01:53 +0000
Files and hashes: 1: ZEZaih6OQvGmDSeBmMMgrsDz99w.crl (hash: Qk4XGtGVJX0FPKU4vXgyi8OF9278JGVrfZmYu/nLgoU=)
2: fIxoY-fKz3QLFhIfT-AmwQWcEB0.roa (hash: 6Ji4KJM6oBtjO9Pzhwf19OTNTLmIDSqTSnb+aKfxDkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:4c:3a:6e:42:e3:37:ce:21:ec:75:77:b5:ef:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64465a8a1e8e42f1a60d278198c320aec0f3f7dc
Validity
Not Before: Jun 28 13:01:53 2025 GMT
Not After : Jun 29 13:01:53 2025 GMT
Subject: CN=97e7ae03c5b62a1331a485352998318e00d628eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bd:25:04:06:11:2e:09:bf:85:dd:0c:3e:d6:
19:16:a2:bd:bc:9d:a7:12:98:fa:bb:fb:70:84:c2:
41:7d:cc:ac:d9:81:64:64:cc:a2:4d:df:06:08:ce:
2f:55:b5:3b:7e:2e:4d:1f:1e:44:a9:d3:a2:d0:06:
c7:46:1c:b1:c2:51:3f:63:5e:8a:75:cb:be:cb:f9:
75:90:a2:26:50:74:be:fb:f0:59:a9:15:46:f3:e6:
36:5e:a7:75:0e:74:f8:5d:8b:ae:ee:b2:d6:66:3d:
51:2c:d8:59:5a:5a:90:7f:fe:b2:9f:9b:9d:0e:ac:
bb:f1:12:5e:5d:40:8e:67:9a:cf:60:01:fb:1d:70:
57:4c:46:80:b6:97:16:7d:70:91:8f:44:00:10:63:
1b:a1:2d:4b:45:cd:3a:ae:95:c3:0b:e4:fd:9d:3d:
99:1e:9d:80:b0:aa:28:9a:8d:cc:01:6e:0f:7a:1a:
31:c1:00:f2:d3:0f:8a:e3:08:a0:80:f0:17:01:e4:
b5:aa:74:c0:eb:dd:92:5b:16:5b:c4:a5:28:05:ca:
26:11:28:7b:a2:53:db:ed:2d:e3:85:fb:85:14:98:
bd:a6:e5:4c:cf:5b:e6:78:d2:22:48:53:c5:d3:fa:
67:f1:fe:63:e5:d9:3a:8f:36:de:1b:f2:6f:97:3a:
c8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E7:AE:03:C5:B6:2A:13:31:A4:85:35:29:98:31:8E:00:D6:28:EB
X509v3 Authority Key Identifier:
keyid:64:46:5A:8A:1E:8E:42:F1:A6:0D:27:81:98:C3:20:AE:C0:F3:F7:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c9:0c:21:bf:3d:00:4c:00:e8:fa:65:46:6a:16:14:60:03:
7f:f0:6e:23:63:cf:f7:c9:18:08:f3:a1:55:0e:3e:54:09:be:
17:df:b9:c5:f5:97:2c:06:cc:49:94:e5:75:7f:cb:4f:92:dc:
83:26:7c:2f:26:72:29:3b:c5:dd:91:3f:18:8d:5f:54:3c:a5:
2f:1f:1c:dd:ee:33:30:4f:c8:92:40:4e:ed:29:27:1d:a9:c1:
2d:79:2b:e6:80:15:47:19:e0:62:6e:49:ca:f1:8e:28:36:0b:
bf:6d:cd:f8:91:dd:c7:8c:65:f3:f2:e7:1e:79:e0:21:fa:68:
02:8c:ac:e2:0b:24:d6:64:0a:23:8d:2d:2b:e2:a5:e6:94:59:
20:45:53:cf:8a:ca:61:2a:8a:d0:e7:17:e9:27:7b:68:46:f1:
0c:44:96:51:e9:65:e5:6e:1e:02:ed:38:26:48:eb:7f:a3:97:
07:07:83:02:ca:08:99:3e:7c:d2:50:ea:ee:c0:6c:30:b6:e6:
4d:b3:ac:cc:29:9c:8f:f2:ef:68:92:3f:1e:cd:6f:12:cb:fd:
02:48:7a:3d:a8:88:4e:51:10:94:89:b0:26:26:8b:8d:b3:a0:
76:b0:6b:7a:1f:21:43:30:a0:79:ee:03:bf:a6:78:be:ba:55:
c1:18:f5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:11:07 2025 by rpki-client