Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
File: ZEZaih6OQvGmDSeBmMMgrsDz99w.mft (raw, json)
Hash identifier: khZR/8BfCRsKYl7yLHDEIToln5nx7S35nRv6jEk7MSc=
Subject key identifier: 21:7F:45:1C:3C:67:4E:8D:51:B0:FF:99:55:2B:7B:73:4A:CC:CF:2B
Authority key identifier: 64:46:5A:8A:1E:8E:42:F1:A6:0D:27:81:98:C3:20:AE:C0:F3:F7:DC
Certificate issuer: /CN=64465a8a1e8e42f1a60d278198c320aec0f3f7dc
Certificate serial: 0199FBEC6BE3364C7CB60EDDD6A777D2D298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
Manifest number: 0BB3
Signing time: Sun 19 Oct 2025 10:03:19 +0000
Manifest this update: Sun 19 Oct 2025 10:03:19 +0000
Manifest next update: Mon 20 Oct 2025 10:03:19 +0000
Files and hashes: 1: ZEZaih6OQvGmDSeBmMMgrsDz99w.crl (hash: +5uaEDc5kfpYJMTlSuJggmJHsnSSYxp6ZgPjnbcAb90=)
2: fIxoY-fKz3QLFhIfT-AmwQWcEB0.roa (hash: 6Ji4KJM6oBtjO9Pzhwf19OTNTLmIDSqTSnb+aKfxDkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:6b:e3:36:4c:7c:b6:0e:dd:d6:a7:77:d2:d2:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64465a8a1e8e42f1a60d278198c320aec0f3f7dc
Validity
Not Before: Oct 19 10:03:19 2025 GMT
Not After : Oct 20 10:03:19 2025 GMT
Subject: CN=217f451c3c674e8d51b0ff99552b7b734acccf2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:ae:19:a1:68:f6:71:a1:69:8c:ac:22:1c:13:
83:25:e6:f0:de:27:78:3c:92:9c:87:cc:51:d5:fc:
bf:3a:2a:5c:4a:57:c9:13:ab:76:11:e4:2c:e1:30:
47:21:e3:67:62:09:97:0e:a8:94:9f:6b:3d:06:aa:
f5:49:db:38:25:38:21:0e:6c:02:70:70:e3:6f:d4:
a6:7e:04:e8:48:98:1b:06:c9:11:d0:05:2e:03:51:
5e:70:e2:dc:f3:60:3e:67:01:5f:82:f6:a6:b8:32:
3b:64:c1:a3:99:85:0c:df:0a:bf:59:0c:4c:67:5a:
6f:c1:19:0f:40:cc:f3:fa:57:f8:7e:13:31:52:c3:
93:b9:2b:0d:34:52:77:99:45:47:e3:17:45:33:08:
32:26:5e:8e:4f:be:73:2b:5f:85:e1:b2:1e:59:ce:
71:51:e5:bd:2f:70:35:d0:cc:c4:d3:68:f0:73:7c:
10:e0:94:f7:de:49:b9:5d:7e:17:cb:a3:ac:cc:f6:
33:45:1a:61:78:97:06:75:51:4b:74:9f:c8:1e:c7:
20:c0:ec:7e:f0:5b:51:b1:06:61:0b:01:13:e0:02:
76:cb:bb:3c:a7:12:96:0d:36:28:36:b2:5d:8b:bf:
2f:cf:e3:da:77:f6:9c:65:3f:1c:ca:11:3c:97:d1:
bb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7F:45:1C:3C:67:4E:8D:51:B0:FF:99:55:2B:7B:73:4A:CC:CF:2B
X509v3 Authority Key Identifier:
keyid:64:46:5A:8A:1E:8E:42:F1:A6:0D:27:81:98:C3:20:AE:C0:F3:F7:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c4:4b:7b:dc:69:f9:b2:3b:c7:41:15:8e:ba:f9:aa:a2:93:
49:91:f7:f3:f9:8f:28:36:30:57:3d:9b:a8:cd:51:96:6f:e2:
0c:40:e9:42:b4:db:e1:f0:68:ca:22:0a:8f:f3:a7:57:0e:6a:
79:1e:6b:a0:62:6b:08:58:a1:72:aa:b5:cd:90:e9:f2:45:2c:
d5:8e:dd:1a:29:4f:74:1e:67:78:ef:56:d4:68:95:0e:aa:02:
02:48:08:b8:d8:77:88:84:c5:22:63:86:30:86:1d:40:b3:d4:
e3:f4:ed:78:96:18:4d:d2:73:b9:5a:59:66:c7:8c:a7:7f:c9:
a8:0b:39:2e:a7:19:f3:cb:f0:41:dd:9f:4c:85:e3:17:ad:ee:
b1:d8:f4:24:75:9f:7d:09:35:ad:53:9b:3b:4f:91:cd:57:77:
c9:43:73:c2:09:8f:b6:f9:b5:e4:ae:6f:12:b7:bd:1c:b0:44:
87:a4:e6:1f:93:38:1e:76:2c:0f:0e:6f:b6:41:03:54:63:f9:
8c:97:de:c1:d4:51:36:45:7e:a6:6f:4d:82:fd:29:83:f9:9d:
f0:97:b2:1c:3d:ba:9c:05:ee:3a:be:f4:9c:85:09:1b:8a:8c:
9f:a1:6f:f7:9a:ba:b4:58:e4:b7:c8:da:08:fe:14:e8:9f:d9:
9e:8d:70:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:58 2025 by rpki-client