Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
File: ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft (raw, json)
Hash identifier: 6r63+B2JeRZ5iyFNAfNsrnSkToyu/c9nZ68fJ+vfCCE=
Subject key identifier: AB:B0:3E:10:E3:58:BA:C2:0D:0E:54:DE:02:9E:FF:29:8D:3B:B2:5A
Authority key identifier: 66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7
Certificate issuer: /CN=66a832244d0e23f5f28b3a6def7afc01b22521c7
Certificate serial: 019A4F2B37B90AE412BCEB21115137854E29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
Manifest number: 0AF6
Signing time: Tue 04 Nov 2025 14:00:23 +0000
Manifest this update: Tue 04 Nov 2025 14:00:23 +0000
Manifest next update: Wed 05 Nov 2025 14:00:23 +0000
Files and hashes: 1: ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl (hash: gLYpNgkOfPWaifsUw5qkqr+ezq60pJuMmnbV1WrslXI=)
2: _QNn8i-0tIKLRcq_eDgA2QsLdiA.roa (hash: QiOA4Z6p5RQwq3aK0bHpaTuhZajM0dodRW/v7+6NMjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:37:b9:0a:e4:12:bc:eb:21:11:51:37:85:4e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66a832244d0e23f5f28b3a6def7afc01b22521c7
Validity
Not Before: Nov 4 14:00:23 2025 GMT
Not After : Nov 5 14:00:23 2025 GMT
Subject: CN=abb03e10e358bac20d0e54de029eff298d3bb25a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e2:a2:93:b5:14:61:eb:c2:25:40:f4:82:0d:
e1:95:0e:d6:de:80:eb:63:02:b5:9b:b1:d5:69:e4:
c6:61:b5:00:68:6c:91:27:73:ef:d1:57:08:c1:f4:
7f:3e:4f:d8:8a:c4:1f:c1:18:c2:60:6f:da:e4:3e:
ac:ab:02:29:d1:98:53:14:06:ad:64:64:ab:13:43:
39:ee:3b:35:2d:2c:37:06:bd:4c:3b:8c:03:01:04:
50:8b:b3:1e:36:90:7a:66:53:ff:4a:6d:64:de:57:
4d:d6:1b:e8:64:22:d8:b0:17:85:4b:69:59:4b:e0:
6a:23:ae:16:0b:f9:2d:b0:ea:7e:0b:2f:4e:38:51:
a6:2b:22:2d:4e:bf:65:f7:71:db:d2:e6:58:c2:0c:
b2:6c:53:0d:d8:35:21:92:70:80:a1:b5:8e:f8:13:
15:a3:df:8c:18:5d:9a:b0:35:e5:68:6f:ef:3c:ec:
e5:23:32:9e:7d:07:bb:92:e3:20:a4:ee:64:71:a3:
3d:b7:4d:a0:53:89:53:b0:27:8a:d9:4e:98:7d:8d:
56:b5:5d:d3:65:9d:ec:b4:b9:ea:50:83:e3:fc:80:
e8:4b:09:b5:d8:9e:d7:7e:b0:b8:a9:da:11:bf:ad:
ab:df:1a:3e:30:20:dc:ac:f3:40:52:d6:9b:e3:20:
71:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B0:3E:10:E3:58:BA:C2:0D:0E:54:DE:02:9E:FF:29:8D:3B:B2:5A
X509v3 Authority Key Identifier:
keyid:66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ab:a4:24:31:bf:aa:f7:21:2b:45:00:a1:70:bf:7e:4a:d2:
97:f8:40:36:6d:86:62:81:1f:a8:43:10:0f:31:84:64:9f:33:
d9:84:0a:aa:16:41:e9:f7:3f:7e:7f:98:c6:14:9e:e8:dc:6a:
e3:6b:03:b6:7f:0b:68:bb:cb:4d:81:d6:b3:0f:59:69:95:59:
44:41:d0:57:c7:bb:c9:f8:9d:78:68:86:1a:ce:36:a7:60:77:
55:9a:fd:c7:92:39:79:ab:b4:03:a6:85:37:7f:5b:3d:a7:4f:
95:75:d3:b4:37:e6:31:b6:1d:43:45:0d:4a:f1:74:13:2c:6a:
ea:ac:01:88:ab:33:fd:a5:af:d8:a3:fe:e5:e4:3c:8f:59:83:
99:e0:9c:f7:9d:44:aa:2c:ff:94:e0:c1:f9:0b:4b:a3:db:11:
c6:81:5e:2c:41:62:0a:84:a2:f1:86:49:0d:a2:0c:6e:ce:22:
19:63:16:8a:47:43:61:a7:60:0f:e6:c6:6b:c8:91:8a:af:f8:
81:2c:20:8c:9d:92:e2:f2:f1:17:3f:16:ba:e9:43:0e:cf:4d:
d2:cf:4b:8f:88:3c:e4:18:f8:a6:f4:54:90:ab:29:99:74:8a:
d7:6f:84:be:2d:a9:f3:b7:dc:8b:97:0f:ad:8d:69:9e:8e:ce:
2b:08:2d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:33:41 2025 by rpki-client