Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
File: ZEZaih6OQvGmDSeBmMMgrsDz99w.mft (raw, json)
Hash identifier: ZUho2MvtYNsWGCCbPG8CthCo7Cle6VrAM7+Ke2cZuTg=
Subject key identifier: 87:25:5F:4F:21:7C:66:51:7E:18:F7:3B:2D:0E:DE:7D:52:93:35:2F
Authority key identifier: 64:46:5A:8A:1E:8E:42:F1:A6:0D:27:81:98:C3:20:AE:C0:F3:F7:DC
Certificate issuer: /CN=64465a8a1e8e42f1a60d278198c320aec0f3f7dc
Certificate serial: 0199180A098790CBCA713FEB214E539E36FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
Manifest number: 0B3D
Signing time: Fri 05 Sep 2025 04:02:14 +0000
Manifest this update: Fri 05 Sep 2025 04:02:14 +0000
Manifest next update: Sat 06 Sep 2025 04:02:14 +0000
Files and hashes: 1: ZEZaih6OQvGmDSeBmMMgrsDz99w.crl (hash: 2inyvdIyJExgVJNOKBP6+nG/WXtlco1/nwN97SrdODE=)
2: fIxoY-fKz3QLFhIfT-AmwQWcEB0.roa (hash: 6Ji4KJM6oBtjO9Pzhwf19OTNTLmIDSqTSnb+aKfxDkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:0a:09:87:90:cb:ca:71:3f:eb:21:4e:53:9e:36:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64465a8a1e8e42f1a60d278198c320aec0f3f7dc
Validity
Not Before: Sep 5 04:02:14 2025 GMT
Not After : Sep 6 04:02:14 2025 GMT
Subject: CN=87255f4f217c66517e18f73b2d0ede7d5293352f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:69:33:83:cb:fe:91:9a:ef:c1:8f:ee:fe:66:
b8:bd:28:0a:82:f2:b0:3d:2d:4d:5e:06:46:30:3f:
b8:70:17:f8:e8:95:12:8d:69:09:d1:01:df:ff:d5:
60:87:80:bc:92:6b:ce:24:76:73:e3:fe:b4:7a:b0:
d4:7e:a0:f3:75:b4:43:bd:7d:59:44:4c:85:b9:9d:
19:e2:c8:e2:b4:85:22:13:59:2e:50:14:f1:fe:0a:
e4:dd:9e:18:83:e9:b5:cb:56:5b:b2:99:3c:b9:42:
c7:a7:ac:c7:ce:60:94:fe:90:ea:a9:62:e0:24:96:
d3:e1:36:64:7c:b7:2d:54:c6:76:66:62:f1:09:38:
9d:01:40:21:db:0c:c5:b2:4e:7b:eb:a7:7b:56:1f:
5b:77:ba:7e:dd:36:40:77:cf:0a:8e:45:05:4a:cd:
19:3f:c5:2d:47:dc:72:a4:37:14:de:2a:09:d0:dd:
01:68:8d:c2:df:40:e0:36:b4:58:55:3b:8a:72:7f:
1e:04:1b:87:fd:92:be:88:8b:fa:62:4f:e1:5d:0b:
7d:31:b5:b5:e4:7b:18:6a:1f:6a:52:06:6b:50:78:
ca:d8:2a:c8:e5:d2:7b:17:ec:7a:d7:6d:a4:60:f9:
1c:04:47:8b:2a:3c:2b:64:fb:da:92:e3:c5:20:8a:
08:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:25:5F:4F:21:7C:66:51:7E:18:F7:3B:2D:0E:DE:7D:52:93:35:2F
X509v3 Authority Key Identifier:
keyid:64:46:5A:8A:1E:8E:42:F1:A6:0D:27:81:98:C3:20:AE:C0:F3:F7:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b0:9e:05:01:53:a2:61:43:e3:cb:7b:52:ac:68:e6:9f:14:
9f:4e:de:19:77:7c:d0:d4:94:42:17:ea:e3:a0:f3:65:d8:7c:
11:1b:e7:59:ab:8c:72:c3:3b:58:df:35:c9:e8:5c:01:a6:f7:
9c:a8:bc:23:9e:cc:bf:d9:dc:d3:fb:89:d8:72:bc:b7:f1:b6:
59:30:1e:22:47:5f:d7:86:e4:61:46:31:fd:ba:b7:9d:bf:6f:
bb:d3:42:b9:96:10:b2:7c:55:44:43:9e:75:64:da:0b:d7:e9:
85:dd:c7:4d:b7:94:69:e8:cc:fd:f6:1d:01:b8:bd:71:b1:94:
e8:ab:8d:48:b3:89:45:67:ea:e8:56:55:ef:31:b8:f0:00:1f:
b3:4c:4f:96:c0:aa:f0:26:7f:32:e3:eb:51:3f:f7:87:77:57:
99:3f:9e:27:86:49:07:7e:85:24:cf:c9:42:7b:44:57:2d:b5:
9d:8d:d7:45:13:f8:fa:17:87:8a:d2:9f:8f:62:f2:8d:5e:c9:
43:2f:ba:f2:c5:1a:5a:fc:83:0f:94:a9:c2:8c:50:ca:f4:9e:
8f:02:a0:88:b4:cb:9a:78:b3:8c:f7:b4:27:c3:9f:09:95:52:
a6:9f:19:2b:63:7f:36:cd:f8:8d:e9:aa:af:6f:fc:ac:1b:05:
77:14:65:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:04:30 2025 by rpki-client