Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
File: ZGHiGIOECxNlwzhXExO30yqtnFc.mft (raw, json)
Hash identifier: LHuURVxZRt+u5tP1IEXHXhOVPcb1KQ8GTE1d3NGr0YU=
Subject key identifier: B7:86:94:CC:44:95:56:A0:00:49:3D:4B:A1:D0:E0:EE:1C:01:F7:E2
Authority key identifier: 64:61:E2:18:83:84:0B:13:65:C3:38:57:13:13:B7:D3:2A:AD:9C:57
Certificate issuer: /CN=6461e21883840b1365c338571313b7d32aad9c57
Certificate serial: 0199239EF22C93436B1A3E4740C57BD90A0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
Manifest number: 07B1
Signing time: Sun 07 Sep 2025 10:00:43 +0000
Manifest this update: Sun 07 Sep 2025 10:00:43 +0000
Manifest next update: Mon 08 Sep 2025 10:00:43 +0000
Files and hashes: 1: ZGHiGIOECxNlwzhXExO30yqtnFc.crl (hash: 4djUaVqeo58PV6edwecTJ9BN1dk0HJgexniPLV3G920=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:f2:2c:93:43:6b:1a:3e:47:40:c5:7b:d9:0a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6461e21883840b1365c338571313b7d32aad9c57
Validity
Not Before: Sep 7 10:00:43 2025 GMT
Not After : Sep 8 10:00:43 2025 GMT
Subject: CN=b78694cc449556a000493d4ba1d0e0ee1c01f7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:35:97:db:51:89:ef:6a:c0:ae:8b:a2:62:38:
ef:bb:14:6a:5b:92:07:1e:b9:c9:91:b4:29:08:b8:
3f:c9:ae:8d:3a:85:08:98:ee:73:0a:0c:24:42:bd:
90:f0:22:eb:5d:74:11:5f:50:de:61:59:29:05:95:
7c:93:cd:27:be:2a:de:af:26:9b:77:64:f3:5c:e0:
a2:e1:9c:15:21:78:97:8d:14:5c:eb:76:0f:7f:1c:
3b:32:f8:1b:e3:bb:db:72:0e:2c:8d:e4:31:4c:d5:
fe:38:cb:a7:5f:e9:8d:4f:be:55:94:f5:40:3c:8c:
01:d5:be:62:2a:56:65:b8:36:53:a2:95:a5:28:e1:
75:a9:66:34:95:8b:2a:2c:5f:7f:33:dd:45:e1:46:
6e:69:34:66:a3:90:46:8e:34:44:37:64:17:07:ae:
85:9e:29:41:6f:d1:55:18:d6:21:31:23:78:a6:21:
42:40:23:ab:7d:6b:0d:d8:16:74:9b:89:0e:95:bd:
3e:94:0e:dc:b9:3d:07:f7:fd:a7:1d:31:e2:23:78:
90:55:4d:bc:1e:93:b7:0f:09:db:e7:a4:bb:e1:b6:
37:f0:a7:06:a4:2a:2f:76:fc:89:0c:fa:79:2d:1a:
ea:c7:59:64:08:bc:a3:83:70:f5:2d:e0:6b:31:73:
21:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:86:94:CC:44:95:56:A0:00:49:3D:4B:A1:D0:E0:EE:1C:01:F7:E2
X509v3 Authority Key Identifier:
keyid:64:61:E2:18:83:84:0B:13:65:C3:38:57:13:13:B7:D3:2A:AD:9C:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:3f:53:5a:2e:59:e6:46:36:db:4e:f3:34:cc:89:b2:39:04:
00:14:a4:53:33:e5:fe:d3:15:df:e8:a6:69:b2:74:3b:18:8b:
4a:b9:34:03:cb:70:be:20:27:0a:68:f3:6b:16:a5:79:50:0b:
f8:10:32:a6:97:62:62:fc:08:f7:57:8f:b0:13:09:a4:53:ef:
c9:0b:c9:40:c2:cf:d4:95:4f:59:c2:35:a0:ed:a7:6e:36:fa:
19:4d:7b:f5:c0:02:e4:b8:01:3b:7e:3a:f3:ba:01:1f:fa:f9:
ae:c1:9b:1e:6c:aa:f6:db:4b:8e:93:e7:49:2a:a0:d5:66:5d:
11:5c:ea:48:75:4f:6d:92:db:5f:65:c3:c0:4f:97:28:0c:14:
bc:0a:7a:cf:40:4a:a5:ee:ef:19:9d:0f:92:72:bf:9d:5b:fd:
ca:37:58:53:d5:fa:08:53:0e:a4:43:ce:ff:5f:59:76:06:6e:
77:45:35:1d:b6:a9:63:a9:c6:5a:e6:55:c5:93:f5:88:46:aa:
b5:af:84:f9:46:5c:49:08:60:d5:7b:38:c7:2e:e2:29:a2:7a:
79:3f:8c:e9:21:f7:de:16:bc:c9:fb:b0:cf:3c:19:d9:91:1e:
c7:d2:fd:26:18:3c:3c:cc:20:e3:34:1f:b1:8c:5d:12:e5:38:
a3:10:79:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:28 2025 by rpki-client