
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft
File: EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft (raw, json)
Hash identifier: lJNtac6galy+ztosD14u/vJYs6E6BL2UO14ejmX08qo=
Subject key identifier: 29:53:CB:FE:0A:10:4E:9B:58:59:AF:4E:3A:28:CC:DA:9A:B0:9A:91
Authority key identifier: 10:4F:99:1D:55:D6:A5:17:14:31:C7:4C:1A:A5:CB:EB:29:95:47:E7
Certificate issuer: /CN=104f991d55d6a5171431c74c1aa5cbeb299547e7
Certificate serial: 0199221E23ED85A3B8655FC0ECD5139E9189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft
Manifest number: 166D
Signing time: Sun 07 Sep 2025 03:00:24 +0000
Manifest this update: Sun 07 Sep 2025 03:00:24 +0000
Manifest next update: Mon 08 Sep 2025 03:00:24 +0000
Files and hashes: 1: EE-ZHVXWpRcUMcdMGqXL6ymVR-c.crl (hash: 0gfrtGLfHnu3B4LrMjQf7PmfUja7X2e8KlxoWb8w0p8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:23:ed:85:a3:b8:65:5f:c0:ec:d5:13:9e:91:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=104f991d55d6a5171431c74c1aa5cbeb299547e7
Validity
Not Before: Sep 7 03:00:24 2025 GMT
Not After : Sep 8 03:00:24 2025 GMT
Subject: CN=2953cbfe0a104e9b5859af4e3a28ccda9ab09a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5c:49:2b:1e:c1:4f:e0:6f:02:69:f2:5a:f1:
19:43:2a:c1:7d:b6:47:01:5b:1f:d9:05:25:9e:13:
d6:36:fb:e2:93:f6:3e:fa:99:4a:85:8d:e9:b0:34:
18:60:ab:00:d0:4e:e1:1d:7d:b2:c5:eb:ee:d6:98:
c9:5c:7b:66:1a:93:43:a3:2c:32:95:0f:e8:08:e8:
63:55:4a:b8:1c:27:59:b6:97:8b:14:c2:73:c0:d5:
e1:74:bd:02:5a:3d:44:91:e2:76:09:3a:4a:3d:7a:
fd:bc:9c:41:ae:21:6a:23:53:9d:6d:ae:c1:e4:c0:
94:f4:9c:42:03:79:a0:b7:00:80:3e:fe:bf:7d:6a:
df:d6:54:4d:dd:df:73:45:0e:62:7f:b1:d0:5b:92:
f4:46:fd:a9:fd:7c:c8:e8:47:04:a3:ad:e1:92:67:
4c:06:1f:92:bb:80:cd:46:cd:15:46:83:15:92:22:
5c:9d:4f:e8:87:fc:de:ae:ed:94:8f:d8:5d:d2:f8:
39:8f:16:48:fc:92:2b:12:90:42:a2:99:5a:73:79:
d4:7e:66:73:ae:35:d5:f8:27:29:65:bf:dc:c6:75:
11:ef:79:21:c0:36:c1:df:3c:87:d1:db:65:35:6a:
03:cd:8f:fd:f8:84:e1:b8:f4:a0:f3:b1:8f:f0:95:
51:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:53:CB:FE:0A:10:4E:9B:58:59:AF:4E:3A:28:CC:DA:9A:B0:9A:91
X509v3 Authority Key Identifier:
keyid:10:4F:99:1D:55:D6:A5:17:14:31:C7:4C:1A:A5:CB:EB:29:95:47:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:84:ad:b4:6e:7d:3d:ad:85:94:fb:7e:02:2b:ae:84:e2:4a:
88:75:8f:f2:77:d6:bd:ed:da:fa:aa:d5:1b:12:f5:a4:50:8a:
1b:b7:20:cc:27:40:2d:8f:eb:40:4d:71:23:e1:11:4d:41:3c:
a4:e9:39:d3:ac:14:fd:73:2d:39:01:ac:2e:cf:e1:c6:68:8a:
12:94:ce:5a:21:d8:22:f2:ed:5a:35:41:e6:e5:1b:3f:75:64:
2e:5e:4a:08:1f:b1:34:3d:4e:cd:04:83:8f:44:d8:34:d5:b8:
cd:02:fa:7f:53:9d:da:09:68:08:e3:52:c9:6a:86:b8:b6:73:
09:68:d8:6e:80:ed:68:41:a0:84:e1:f9:c5:15:f9:96:e8:14:
b3:f6:e6:e6:2e:6d:5d:9e:05:38:10:f6:bb:36:1c:bf:06:2d:
42:3e:7e:4e:7f:5b:d4:96:5f:1b:80:4b:fa:14:48:c8:6e:23:
1a:6c:a2:10:f7:ba:62:0e:95:22:2b:d6:be:51:19:b9:96:ba:
eb:d4:5b:3b:61:6a:e1:e2:7c:e4:13:10:5b:e0:25:8c:26:41:
4f:aa:04:2d:c1:32:e3:cd:50:b6:e6:a7:eb:e9:8b:07:a6:c1:
aa:21:b4:9a:a2:4c:bd:28:65:dd:44:e1:3e:8d:82:cc:d8:ac:
a3:27:12:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:15 2025 by rpki-client