Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
File: ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft (raw, json)
Hash identifier: rhBlgTgNBNCE9RquCkjC5KUKA+S/Ujw9pyPOPs/BVl0=
Subject key identifier: FB:9E:64:A3:38:AF:20:2D:5E:3D:5A:D3:B2:CD:C8:1E:15:47:4C:9D
Authority key identifier: 66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7
Certificate issuer: /CN=66a832244d0e23f5f28b3a6def7afc01b22521c7
Certificate serial: 0198819DA7DD1F4F88F55EF51EBB713D6D18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
Manifest number: 0A07
Signing time: Wed 06 Aug 2025 23:00:49 +0000
Manifest this update: Wed 06 Aug 2025 23:00:49 +0000
Manifest next update: Thu 07 Aug 2025 23:00:49 +0000
Files and hashes: 1: ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl (hash: DTbHQaW9Mo2GCDkVEubzqvbVe5SD9+pkwhBOClpHG4k=)
2: _QNn8i-0tIKLRcq_eDgA2QsLdiA.roa (hash: QiOA4Z6p5RQwq3aK0bHpaTuhZajM0dodRW/v7+6NMjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9d:a7:dd:1f:4f:88:f5:5e:f5:1e:bb:71:3d:6d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66a832244d0e23f5f28b3a6def7afc01b22521c7
Validity
Not Before: Aug 6 23:00:49 2025 GMT
Not After : Aug 7 23:00:49 2025 GMT
Subject: CN=fb9e64a338af202d5e3d5ad3b2cdc81e15474c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d6:ad:8d:4a:df:08:74:ca:83:95:2e:c6:4b:
02:44:8c:df:aa:47:cd:5c:19:01:33:01:03:d2:c3:
c8:2d:ff:6a:5d:c6:e4:89:25:33:50:eb:c2:c0:32:
97:dc:9b:ce:85:30:27:8d:92:d9:a8:fc:34:3a:a7:
e2:60:10:81:f1:aa:46:9d:8c:75:35:b5:7a:2b:2a:
c5:50:1d:18:ec:83:9f:be:e6:a7:af:7f:58:99:25:
fa:c8:26:6e:82:a0:72:58:1d:05:a7:99:6d:a8:de:
f7:14:2e:cf:ad:c5:1e:68:0e:45:c8:65:54:92:f7:
62:bb:89:06:09:c8:0e:96:48:0f:57:b8:d2:08:4b:
54:10:5c:2b:ed:02:39:8f:12:18:04:90:a8:5c:54:
8a:4a:51:ad:ae:00:db:e4:cd:40:6a:8c:62:09:2f:
7c:65:06:4c:19:3b:5e:a3:b5:ab:76:f9:69:d5:41:
12:8a:a2:2d:48:82:2a:15:8f:e7:2b:c7:0c:a9:27:
93:b7:09:1b:5d:04:b8:6c:89:ce:e3:ae:2e:46:81:
98:3f:10:a0:1b:59:e4:42:70:b1:8c:66:29:68:b6:
d1:ae:dd:87:48:a5:26:78:e7:d2:3f:88:08:04:cb:
16:21:14:f5:96:8d:16:58:fd:df:9a:19:08:c2:d6:
84:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:9E:64:A3:38:AF:20:2D:5E:3D:5A:D3:B2:CD:C8:1E:15:47:4C:9D
X509v3 Authority Key Identifier:
keyid:66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:34:21:2c:7d:2c:e4:f7:92:34:65:18:b8:d5:6f:79:cc:f1:
76:53:58:72:ca:6f:1e:4a:85:69:d7:c9:d1:2a:8d:84:32:9e:
cb:d4:b1:7e:bb:5e:9a:c0:79:09:b0:16:53:71:e1:50:be:53:
46:f5:40:39:49:8f:c1:42:b9:14:d0:57:6a:a9:b6:35:1c:8f:
50:16:29:d9:d1:29:85:69:2c:2c:24:97:16:4e:42:1d:44:f3:
63:04:6f:bc:4a:bc:4a:97:96:15:16:8e:85:42:bd:d4:40:97:
ba:85:54:79:58:9d:48:bb:20:30:41:fa:9b:43:79:48:69:47:
96:02:b9:02:48:76:a1:59:7e:15:a4:27:7d:b4:6b:e8:98:45:
55:d0:58:1c:b5:1b:ee:ad:3d:cb:23:0c:93:13:1d:90:6c:cb:
33:09:41:4e:aa:45:87:2f:02:c2:ff:0b:02:97:55:25:6e:0d:
b8:c3:f5:1a:7d:7b:f5:9d:8c:48:55:eb:6d:4f:48:79:89:8c:
c5:82:cf:a2:29:e2:da:20:c8:c5:bb:77:f2:bc:ba:8e:8c:93:
8b:20:7f:39:17:4f:fa:45:07:fc:dd:c8:17:5a:d9:36:9b:ac:
73:30:d0:dc:2c:04:eb:ea:6a:d6:0a:c6:10:25:c7:d2:64:8a:
bb:33:60:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:39:34 2025 by rpki-client