Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.mft
File: ZLPjZgb6UsOkchyMoPszCZU0GVo.mft (raw, json)
Hash identifier: du7fN4Lm3zr20SgIxy41ZWaxlB/QtnW6IGJngU22Wsg=
Subject key identifier: B0:C3:A0:81:9B:CE:23:53:36:88:36:23:EA:D1:2A:DA:70:FA:EF:F1
Authority key identifier: 64:B3:E3:66:06:FA:52:C3:A4:72:1C:8C:A0:FB:33:09:95:34:19:5A
Certificate issuer: /CN=64b3e36606fa52c3a4721c8ca0fb33099534195a
Certificate serial: 01984B54053794D63F91B7C654CA7F3BC5E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLPjZgb6UsOkchyMoPszCZU0GVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.mft
Manifest number: 15FF
Signing time: Sun 27 Jul 2025 10:00:54 +0000
Manifest this update: Sun 27 Jul 2025 10:00:54 +0000
Manifest next update: Mon 28 Jul 2025 10:00:54 +0000
Files and hashes: 1: ZLPjZgb6UsOkchyMoPszCZU0GVo.crl (hash: lg2JuXBkt4LT+rTBXzfi3IVD+eEneQIt/2IeNasIInU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZLPjZgb6UsOkchyMoPszCZU0GVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:05:37:94:d6:3f:91:b7:c6:54:ca:7f:3b:c5:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64b3e36606fa52c3a4721c8ca0fb33099534195a
Validity
Not Before: Jul 27 10:00:54 2025 GMT
Not After : Jul 28 10:00:54 2025 GMT
Subject: CN=b0c3a0819bce235336883623ead12ada70faeff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b8:8e:0c:8c:49:c5:7b:71:b9:a7:5b:eb:56:
8a:c0:ec:15:e9:b3:28:43:c1:cf:6c:cd:06:c9:52:
da:0f:7f:8c:df:2d:3a:56:81:63:1b:bf:aa:f5:af:
0f:89:e3:88:68:43:3c:99:4e:6b:84:7b:ae:25:9b:
1f:c6:86:11:62:7f:25:d0:d2:80:1d:7b:02:5c:a6:
73:8e:f3:4e:04:21:48:58:a1:3a:f9:73:91:51:b2:
95:53:a4:91:fb:60:ea:fd:f6:68:59:50:57:11:31:
8a:e8:26:47:4a:45:e4:58:f7:11:6d:64:90:57:98:
2b:c7:71:c9:68:6f:21:4d:63:36:b5:72:52:cc:69:
0f:98:be:53:6f:d9:5e:73:5a:8b:b2:ac:09:84:21:
c9:b6:fe:52:e7:09:1c:81:a2:19:4a:87:62:07:89:
09:d7:d5:25:da:5c:ec:96:37:e2:2a:1f:87:1f:27:
44:dc:e2:ce:cf:cc:c2:ae:bf:37:45:06:c8:aa:c4:
fd:ab:c3:a3:8f:dd:6a:86:a2:92:c5:17:d7:a1:79:
8a:a9:19:e6:e2:3d:ff:7e:cf:0f:13:b3:b5:a2:a9:
d8:3d:1b:ba:e5:27:ff:1b:1a:3f:2c:b5:82:03:63:
f8:65:7f:98:45:3d:d3:6a:40:e7:9d:d7:71:92:99:
8d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C3:A0:81:9B:CE:23:53:36:88:36:23:EA:D1:2A:DA:70:FA:EF:F1
X509v3 Authority Key Identifier:
keyid:64:B3:E3:66:06:FA:52:C3:A4:72:1C:8C:A0:FB:33:09:95:34:19:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLPjZgb6UsOkchyMoPszCZU0GVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:b8:51:a1:e7:ab:3a:9c:cc:af:d9:56:5d:e3:c6:88:a4:02:
fd:e3:00:fa:db:f5:2f:c4:21:52:a7:95:b3:e6:4a:ef:c7:c9:
bd:ed:3c:c8:2f:f0:21:02:28:64:02:dd:2d:28:9f:df:04:79:
8e:91:ce:be:71:c2:b1:ab:93:ae:11:39:85:07:2d:dc:32:88:
c6:c9:a9:46:47:8f:f9:48:fb:e8:53:d1:11:7d:42:7b:17:19:
38:c2:1c:c7:4d:d3:c8:77:0c:a5:38:f7:d5:cf:8f:ad:e2:cb:
22:63:57:ce:c7:bb:38:37:e3:99:f1:06:71:55:19:52:6e:ff:
06:5c:58:d3:e0:52:5d:97:91:bf:0b:ef:79:81:d5:c9:3b:73:
a8:4a:62:b0:4b:97:b4:f5:cf:55:d9:47:51:47:7a:2e:dc:84:
36:70:c9:da:79:62:e3:07:7e:00:00:0c:2a:7d:55:3b:cc:2d:
78:72:5b:46:d7:ac:1a:ce:2e:56:8b:ca:cf:1e:40:87:5f:76:
cc:38:6c:ee:50:6d:f3:2d:a2:07:d5:af:3c:2f:97:df:67:b7:
8f:a7:50:bc:c1:46:4d:59:3f:a2:75:42:87:83:20:8a:62:19:
5f:f7:20:5e:80:b6:e4:f5:a7:4b:ca:ad:3a:79:fe:be:73:54:
a6:a9:78:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:18:49 2025 by rpki-client