Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
File: ZEZaih6OQvGmDSeBmMMgrsDz99w.mft (raw, json)
Hash identifier: DhM6WzjVXFeGR9hwfdII8eAYsCkU3fVcHH1WF0cfvU0=
Subject key identifier: A5:62:61:BF:A5:26:CC:AF:49:77:45:D3:90:32:76:26:78:4A:30:25
Authority key identifier: 64:46:5A:8A:1E:8E:42:F1:A6:0D:27:81:98:C3:20:AE:C0:F3:F7:DC
Certificate issuer: /CN=64465a8a1e8e42f1a60d278198c320aec0f3f7dc
Certificate serial: 01974C6942643F58BE2864A999D401132DC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
Manifest number: 0A4F
Signing time: Sat 07 Jun 2025 22:00:56 +0000
Manifest this update: Sat 07 Jun 2025 22:00:56 +0000
Manifest next update: Sun 08 Jun 2025 22:00:56 +0000
Files and hashes: 1: ZEZaih6OQvGmDSeBmMMgrsDz99w.crl (hash: /mFds6AwPYA+agIFMSz898RQ0KmkQoHm5hSRnlJrK/k=)
2: fIxoY-fKz3QLFhIfT-AmwQWcEB0.roa (hash: 6Ji4KJM6oBtjO9Pzhwf19OTNTLmIDSqTSnb+aKfxDkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:42:64:3f:58:be:28:64:a9:99:d4:01:13:2d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64465a8a1e8e42f1a60d278198c320aec0f3f7dc
Validity
Not Before: Jun 7 22:00:56 2025 GMT
Not After : Jun 8 22:00:56 2025 GMT
Subject: CN=a56261bfa526ccaf497745d390327626784a3025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:82:b4:9d:0c:8e:6a:0e:e5:06:42:1f:37:93:
6d:8f:3d:e0:79:59:e7:6b:17:cf:c8:eb:20:7a:a3:
5e:a3:de:eb:f3:51:0b:19:13:6b:26:27:cd:c5:7d:
87:b6:e0:bb:49:6a:5a:87:12:c7:47:66:30:d4:43:
81:8d:f0:90:af:bc:b7:a9:db:12:65:fd:9e:fa:e5:
6a:f0:e6:5d:44:01:3e:83:8a:6a:19:2f:54:31:77:
bf:29:0a:02:d8:4d:35:94:4f:a7:43:bb:52:6d:93:
e2:c0:4b:bb:50:05:57:c5:bb:d1:fa:08:5a:ce:79:
7f:bc:1a:e9:5f:86:a8:a1:e2:76:1e:5d:21:40:b3:
af:cc:41:b4:e1:a8:7b:0a:2f:b6:59:00:27:5d:05:
e3:f1:7f:46:c7:e0:42:0f:02:93:fa:31:e3:d9:fb:
e2:c9:af:80:44:8d:c8:4f:83:8e:2e:78:06:01:20:
9e:22:ec:9c:19:a5:82:f5:ca:21:4a:35:a1:42:35:
55:2d:61:35:e6:9a:b7:d3:eb:80:c8:a1:78:b3:73:
f3:fb:2b:8c:b2:82:8c:6a:8c:ab:88:32:49:89:8e:
b6:a5:4f:8f:73:ed:59:9c:6d:33:98:96:57:e2:a5:
47:9f:4c:e5:a9:6f:71:e3:46:c9:c9:0b:f3:6c:3e:
d8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:62:61:BF:A5:26:CC:AF:49:77:45:D3:90:32:76:26:78:4A:30:25
X509v3 Authority Key Identifier:
keyid:64:46:5A:8A:1E:8E:42:F1:A6:0D:27:81:98:C3:20:AE:C0:F3:F7:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:16:00:f7:d7:8f:d4:fc:82:13:a1:d2:ec:b6:0f:a9:aa:11:
82:4e:fc:f0:db:4f:e5:95:ca:24:a0:e7:ed:83:7d:9d:8b:de:
63:c9:22:3c:d5:e4:6c:7a:c8:7e:13:fa:50:a0:10:c3:52:d9:
d5:ff:4b:1f:62:6c:50:12:95:a7:01:ef:6c:ac:06:2d:0f:66:
e9:a1:d7:c4:83:02:2c:da:d1:d1:d7:9a:8d:56:c6:04:5c:42:
d9:71:3a:6d:cc:a2:e2:8a:2f:d7:3c:09:b6:d9:18:40:76:52:
b0:48:a7:8c:b5:b0:b8:1f:cf:37:cb:03:81:6b:99:89:ef:3e:
94:95:ce:ff:5c:e9:35:96:d8:96:16:ef:19:14:d0:62:be:3e:
6d:9c:ab:af:95:e7:b6:60:5b:58:88:ac:67:b0:f6:7b:31:0e:
dc:4c:66:4c:a2:ea:43:f4:1a:fe:c7:fc:49:5e:c4:4b:f5:89:
99:96:08:5a:da:f3:30:eb:b2:59:34:db:22:5b:42:dc:4b:f2:
cd:b7:11:54:0a:b1:22:30:83:67:87:0b:5d:1b:d4:bd:86:5d:
aa:92:e3:a1:3c:e6:df:91:61:e0:e2:74:08:c6:f8:17:23:a5:
34:4e:01:4b:39:92:41:77:5a:7b:6d:65:66:46:4d:2d:e1:c7:
77:22:a6:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMaUJkP1i+KGSpmdQBEy3AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NDY1YThhMWU4ZTQyZjFhNjBkMjc4MTk4YzMyMGFlYzBm
M2Y3ZGMwHhcNMjUwNjA3MjIwMDU2WhcNMjUwNjA4MjIwMDU2WjAzMTEwLwYDVQQD
EyhhNTYyNjFiZmE1MjZjY2FmNDk3NzQ1ZDM5MDMyNzYyNjc4NGEzMDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoK0nQyOag7lBkIfN5Ntjz3geVnn
axfPyOsgeqNeo97r81ELGRNrJifNxX2HtuC7SWpahxLHR2Yw1EOBjfCQr7y3qdsS
Zf2e+uVq8OZdRAE+g4pqGS9UMXe/KQoC2E01lE+nQ7tSbZPiwEu7UAVXxbvR+gha
znl/vBrpX4aooeJ2Hl0hQLOvzEG04ah7Ci+2WQAnXQXj8X9Gx+BCDwKT+jHj2fvi
ya+ARI3IT4OOLngGASCeIuycGaWC9cohSjWhQjVVLWE15pq30+uAyKF4s3Pz+yuM
soKMaoyriDJJiY62pU+Pc+1ZnG0zmJZX4qVHn0zlqW9x40bJyQvzbD7YdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKViYb+lJsyvSXdF05AydiZ4SjAlMB8GA1UdIwQY
MBaAFGRGWooejkLxpg0ngZjDIK7A8/fcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkVaYWloNk9RdkdtRFNlQm1NTWdyc0R6OTl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zMzhkMzMtNzJjNi00ODAyLWFlZmUt
NzBlNjBlZGJjMWU3LzEvWkVaYWloNk9RdkdtRFNlQm1NTWdyc0R6OTl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8zMzhkMzMtNzJjNi00ODAyLWFlZmUtNzBlNjBlZGJjMWU3
LzEvWkVaYWloNk9RdkdtRFNlQm1NTWdyc0R6OTl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJBYA99eP
1PyCE6HS7LYPqaoRgk788NtP5ZXKJKDn7YN9nYveY8kiPNXkbHrIfhP6UKAQw1LZ
1f9LH2JsUBKVpwHvbKwGLQ9m6aHXxIMCLNrR0deajVbGBFxC2XE6bcyi4oov1zwJ
ttkYQHZSsEinjLWwuB/PN8sDgWuZie8+lJXO/1zpNZbYlhbvGRTQYr4+bZyrr5Xn
tmBbWIisZ7D2ezEO3ExmTKLqQ/Qa/sf8SV7ES/WJmZYIWtrzMOuyWTTbIltC3Evy
zbcRVAqxIjCDZ4cLXRvUvYZdqpLjoTzm35Fh4OJ0CMb4FyOlNE4BSzmSQXdae21l
ZkZNLeHHdyKmGw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:00:27 2025 by rpki-client