Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
File: ZEZaih6OQvGmDSeBmMMgrsDz99w.mft (raw, json)
Hash identifier: y9zD00H57BM0HVR1hqQYwmWNn1LzQm78pOAtqXiXR1k=
Subject key identifier: 16:0A:8F:DB:0A:1B:97:DF:0A:3D:FF:C7:10:DB:BA:65:2F:99:AE:DC
Authority key identifier: 64:46:5A:8A:1E:8E:42:F1:A6:0D:27:81:98:C3:20:AE:C0:F3:F7:DC
Certificate issuer: /CN=64465a8a1e8e42f1a60d278198c320aec0f3f7dc
Certificate serial: 0198D660F4DD5E3A405D890027ED8E65269F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
Manifest number: 0B1B
Signing time: Sat 23 Aug 2025 10:02:14 +0000
Manifest this update: Sat 23 Aug 2025 10:02:14 +0000
Manifest next update: Sun 24 Aug 2025 10:02:14 +0000
Files and hashes: 1: ZEZaih6OQvGmDSeBmMMgrsDz99w.crl (hash: eAP+baDAt/TJ9V3R9KmqirNPzVXEOCEo+wXzSZ1bDwQ=)
2: fIxoY-fKz3QLFhIfT-AmwQWcEB0.roa (hash: 6Ji4KJM6oBtjO9Pzhwf19OTNTLmIDSqTSnb+aKfxDkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:f4:dd:5e:3a:40:5d:89:00:27:ed:8e:65:26:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64465a8a1e8e42f1a60d278198c320aec0f3f7dc
Validity
Not Before: Aug 23 10:02:14 2025 GMT
Not After : Aug 24 10:02:14 2025 GMT
Subject: CN=160a8fdb0a1b97df0a3dffc710dbba652f99aedc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c0:05:08:db:bc:8e:52:da:bf:28:1b:bc:77:
2d:1d:01:18:36:9b:a6:12:9c:bb:80:bc:56:43:e9:
31:b7:b2:94:f8:2c:6d:23:89:98:bc:4d:99:86:e9:
40:99:55:e5:6e:b6:f4:51:27:07:05:33:a7:4f:3e:
e4:36:9c:c8:61:3d:a8:60:b5:37:56:a9:28:07:2a:
7d:49:7b:5f:7b:41:12:15:dd:e8:0c:4b:ca:29:6b:
f6:8e:3f:54:d8:64:d5:9a:a2:36:c5:59:e0:1b:f0:
b8:e7:a1:fa:23:ae:94:74:75:35:8e:22:8e:3b:bd:
6f:68:84:92:88:6f:e2:98:84:72:8b:49:f6:9a:98:
17:b8:e2:9e:9e:0e:90:2e:57:f4:50:6c:ba:59:d6:
d6:d3:1b:61:87:99:72:f6:91:fb:67:7e:ba:9c:80:
69:d9:9c:8a:20:83:1f:41:cd:a9:3d:4f:c4:be:a7:
aa:80:c8:7b:33:b9:a6:e5:f0:1d:8e:97:fd:36:e0:
86:14:d4:e4:97:82:59:77:55:28:17:2f:b0:39:40:
04:3f:f9:47:22:cb:58:30:f3:82:42:32:9f:ec:e5:
22:e1:4d:b1:bd:1a:3d:bc:2c:83:ca:ef:11:b1:8e:
ef:42:67:be:e7:2c:47:52:b6:3c:95:b1:91:1d:f1:
e6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0A:8F:DB:0A:1B:97:DF:0A:3D:FF:C7:10:DB:BA:65:2F:99:AE:DC
X509v3 Authority Key Identifier:
keyid:64:46:5A:8A:1E:8E:42:F1:A6:0D:27:81:98:C3:20:AE:C0:F3:F7:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:62:42:e1:9c:22:c9:b3:98:ed:73:e7:09:4d:93:3a:9c:29:
b0:34:4d:ea:24:7a:2f:0b:c1:3c:c1:58:e0:63:3d:00:14:e4:
ca:22:1b:45:79:90:36:8d:46:5d:fe:2f:c2:d0:67:db:28:cd:
a9:81:0a:13:c3:31:a5:83:79:ca:bb:11:3f:35:78:f4:0e:7d:
26:d7:71:80:65:a8:d1:4f:db:67:9a:ed:5d:2d:52:f1:85:37:
07:c7:1d:08:d4:d7:cd:bd:d9:84:52:f3:c6:61:14:fc:ad:b0:
83:b6:99:e6:0e:8a:45:42:7b:48:90:da:db:73:5f:51:63:e2:
09:c6:db:1a:ac:43:39:97:1e:6a:34:86:ed:a0:0d:74:e5:3f:
ac:c6:d1:9f:46:5d:97:c2:5f:c3:a4:be:ca:6a:61:ef:c9:22:
65:cf:0e:ae:29:3a:17:eb:4d:18:af:0b:7b:97:93:d1:a1:60:
8e:c6:a3:5b:6e:e5:f8:83:05:f3:bf:2e:6f:f1:c2:75:f0:fb:
7d:2a:ea:ee:53:34:a3:08:b9:ee:07:ee:9b:76:6b:41:0c:a8:
d5:1b:21:90:5d:b6:bf:95:02:c9:fb:a3:00:cf:31:fd:79:81:
bd:40:f5:a3:21:a4:5f:6a:2f:2b:70:48:87:be:f9:b7:28:13:
52:69:a6:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYPTdXjpAXYkAJ+2OZSafMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NDY1YThhMWU4ZTQyZjFhNjBkMjc4MTk4YzMyMGFlYzBm
M2Y3ZGMwHhcNMjUwODIzMTAwMjE0WhcNMjUwODI0MTAwMjE0WjAzMTEwLwYDVQQD
EygxNjBhOGZkYjBhMWI5N2RmMGEzZGZmYzcxMGRiYmE2NTJmOTlhZWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucAFCNu8jlLavygbvHctHQEYNpum
Epy7gLxWQ+kxt7KU+CxtI4mYvE2ZhulAmVXlbrb0UScHBTOnTz7kNpzIYT2oYLU3
VqkoByp9SXtfe0ESFd3oDEvKKWv2jj9U2GTVmqI2xVngG/C456H6I66UdHU1jiKO
O71vaISSiG/imIRyi0n2mpgXuOKeng6QLlf0UGy6WdbW0xthh5ly9pH7Z366nIBp
2ZyKIIMfQc2pPU/EvqeqgMh7M7mm5fAdjpf9NuCGFNTkl4JZd1UoFy+wOUAEP/lH
IstYMPOCQjKf7OUi4U2xvRo9vCyDyu8RsY7vQme+5yxHUrY8lbGRHfHmWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYKj9sKG5ffCj3/xxDbumUvma7cMB8GA1UdIwQY
MBaAFGRGWooejkLxpg0ngZjDIK7A8/fcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkVaYWloNk9RdkdtRFNlQm1NTWdyc0R6OTl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zMzhkMzMtNzJjNi00ODAyLWFlZmUt
NzBlNjBlZGJjMWU3LzEvWkVaYWloNk9RdkdtRFNlQm1NTWdyc0R6OTl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8zMzhkMzMtNzJjNi00ODAyLWFlZmUtNzBlNjBlZGJjMWU3
LzEvWkVaYWloNk9RdkdtRFNlQm1NTWdyc0R6OTl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASmJC4Zwi
ybOY7XPnCU2TOpwpsDRN6iR6LwvBPMFY4GM9ABTkyiIbRXmQNo1GXf4vwtBn2yjN
qYEKE8MxpYN5yrsRPzV49A59JtdxgGWo0U/bZ5rtXS1S8YU3B8cdCNTXzb3ZhFLz
xmEU/K2wg7aZ5g6KRUJ7SJDa23NfUWPiCcbbGqxDOZceajSG7aANdOU/rMbRn0Zd
l8Jfw6S+ymph78kiZc8Orik6F+tNGK8Le5eT0aFgjsajW27l+IMF878ub/HCdfD7
fSrq7lM0owi57gfum3ZrQQyo1RshkF22v5UCyfujAM8x/XmBvUD1oyGkX2ovK3BI
h775tygTUmmmOg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:19:33 2025 by rpki-client