Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
File: ZEZaih6OQvGmDSeBmMMgrsDz99w.mft (raw, json)
Hash identifier: 41CmbfKeso4YfXmIUBvoJxaFg2ZQAGyxNWTQw0Is6e0=
Subject key identifier: 21:68:95:00:3B:00:8A:4D:F3:67:30:C6:B9:3E:D3:A8:27:0D:6E:A2
Authority key identifier: 64:46:5A:8A:1E:8E:42:F1:A6:0D:27:81:98:C3:20:AE:C0:F3:F7:DC
Certificate issuer: /CN=64465a8a1e8e42f1a60d278198c320aec0f3f7dc
Certificate serial: 0196C15D940FC4C5E8281AEFE13AA6B93725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
Manifest number: 0A07
Signing time: Sun 11 May 2025 22:00:57 +0000
Manifest this update: Sun 11 May 2025 22:00:57 +0000
Manifest next update: Mon 12 May 2025 22:00:57 +0000
Files and hashes: 1: ZEZaih6OQvGmDSeBmMMgrsDz99w.crl (hash: ZUu4pymv1RlaInCnCgLG63BhytVAYM+ey2HC5/M+5i8=)
2: fIxoY-fKz3QLFhIfT-AmwQWcEB0.roa (hash: 6Ji4KJM6oBtjO9Pzhwf19OTNTLmIDSqTSnb+aKfxDkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5d:94:0f:c4:c5:e8:28:1a:ef:e1:3a:a6:b9:37:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64465a8a1e8e42f1a60d278198c320aec0f3f7dc
Validity
Not Before: May 11 22:00:57 2025 GMT
Not After : May 12 22:00:57 2025 GMT
Subject: CN=216895003b008a4df36730c6b93ed3a8270d6ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3d:fb:3b:9f:14:bf:08:de:82:07:82:a5:b9:
9c:02:fd:55:9e:c8:f1:62:ab:8d:89:1f:c8:77:95:
70:14:02:c6:50:50:63:a6:21:a1:d6:30:5b:b6:97:
2a:0b:63:f6:c0:1a:e9:5a:70:d7:03:d4:b1:67:8d:
ba:d4:c4:79:31:a3:fb:03:c8:0e:fd:a9:07:2a:e9:
d1:1d:7f:23:2b:d5:30:98:c9:fc:23:82:dc:6a:f6:
9e:c2:9a:30:4c:b6:93:58:7e:d5:c2:cb:56:05:80:
b5:0b:fe:91:ba:71:a3:b5:fd:3e:66:55:16:77:62:
20:03:9c:b1:5d:e9:50:34:3b:2f:17:e2:1a:ae:7f:
29:cb:cd:47:1c:2f:66:c5:c2:bd:0c:a8:01:cf:8a:
c5:9d:76:3f:f8:57:25:75:06:a5:a8:31:40:7f:a6:
9a:24:0c:21:45:66:0f:a8:07:15:14:08:b8:84:45:
f0:9a:31:69:59:97:37:4a:93:97:09:83:6a:ad:78:
50:6c:3f:a7:41:99:d2:33:d7:2c:f3:d0:8e:d0:bf:
ab:d7:4a:95:bb:78:99:84:42:63:04:9e:17:ba:09:
57:9c:51:ed:b0:e3:ee:ce:0d:ec:a7:80:3f:f6:00:
c5:17:8e:9e:46:e0:af:9d:92:78:f9:1a:bd:7e:29:
e9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:68:95:00:3B:00:8A:4D:F3:67:30:C6:B9:3E:D3:A8:27:0D:6E:A2
X509v3 Authority Key Identifier:
keyid:64:46:5A:8A:1E:8E:42:F1:A6:0D:27:81:98:C3:20:AE:C0:F3:F7:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:42:b0:f8:0b:62:08:93:30:49:8a:ea:50:e9:ba:1d:06:1b:
3a:09:d5:d5:8f:d0:ca:6e:71:4d:41:ba:36:08:23:14:b2:14:
52:02:62:61:da:53:ae:c1:13:1c:1a:91:68:a1:22:47:2b:85:
64:db:46:44:35:9e:5b:71:75:f1:f4:60:c9:af:4e:9d:d2:f6:
c9:5c:bd:c9:24:63:c2:bb:68:52:5e:49:5b:4f:3b:b2:ae:01:
59:bf:f1:cd:01:40:76:3e:81:a8:d1:c0:21:b2:3d:3c:c5:99:
01:b4:fd:42:05:58:c3:68:44:ce:ae:4e:09:b1:b3:d9:bc:86:
12:98:81:c6:86:c7:fa:26:ae:4e:3d:42:8b:cc:30:00:bd:65:
48:49:9c:41:e4:2f:8b:1a:e6:90:57:f8:05:2c:b7:bb:05:3a:
3e:c0:13:fa:1b:a7:18:f5:8d:3a:2e:93:56:4e:94:b3:02:28:
51:be:05:c0:23:27:7f:59:af:40:f3:02:4c:ef:d1:bc:42:9e:
aa:bc:85:42:b6:f3:41:53:7b:78:99:ea:a9:93:a3:4a:e1:32:
8f:d8:f9:c3:ae:12:85:4f:b4:a8:0c:c2:0d:46:0a:98:95:f2:
f3:f2:74:fc:1a:02:66:70:99:46:b9:fb:82:d8:ea:bd:10:44:
8f:18:2b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 02:14:56 2025 by rpki-client