Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
File: ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft (raw, json)
Hash identifier: qcyQcZlmyd41wH0z9R+kZ7rsIA5PHeJ1YYGAEwGsAUQ=
Subject key identifier: 58:81:34:9B:A8:55:00:0D:69:E5:72:A3:E1:63:86:D0:C8:DE:BD:27
Authority key identifier: 65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0
Certificate issuer: /CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
Certificate serial: 0198952418C12AA22D76085F554BA7FE28C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
Manifest number: 1629
Signing time: Sun 10 Aug 2025 18:00:27 +0000
Manifest this update: Sun 10 Aug 2025 18:00:27 +0000
Manifest next update: Mon 11 Aug 2025 18:00:27 +0000
Files and hashes: 1: 4GHtaL2ENr8x0dHCgzjR-2oufsc.roa (hash: SkJfNfL4xk1uCL5vaUVq92gTeEiReavJzDd3NtKKtoQ=)
2: P4Bbz81DKVf659V7Pusw5yxnCg8.roa (hash: 6mtNya9D4eJ+7094qYmfrW/oPVu6b8pgbmkAvNwldHc=)
3: ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl (hash: 0+hAVz/Yj6K/JjSVD7rJHPQ7ogqFbFHYya1kSHwCrWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:24:18:c1:2a:a2:2d:76:08:5f:55:4b:a7:fe:28:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
Validity
Not Before: Aug 10 18:00:27 2025 GMT
Not After : Aug 11 18:00:27 2025 GMT
Subject: CN=5881349ba855000d69e572a3e16386d0c8debd27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:75:2e:8e:be:fb:dd:8b:48:31:d3:be:89:c4:
77:e4:45:5c:df:ac:ae:89:13:b8:2c:8d:af:36:1a:
5f:14:95:46:a8:84:bd:a9:f3:ed:03:06:e7:0d:d0:
70:eb:ce:2d:1e:46:48:bf:fc:9a:32:7c:f6:ba:79:
b7:60:51:02:12:3b:17:fd:d3:cc:a4:27:3b:77:33:
b2:fd:e1:de:a9:99:0d:e6:9e:18:a4:d8:b6:e5:cf:
97:e2:89:ea:29:67:5b:b8:3e:f2:25:2a:6b:32:64:
44:d6:2d:b1:33:4b:d6:db:16:50:94:83:11:80:1b:
00:a5:2d:a3:95:7c:9a:ab:8d:ea:02:db:11:30:d7:
77:c4:ba:c8:99:97:84:dc:a8:12:3f:95:6e:54:0a:
fa:f8:f1:73:5d:75:ec:2a:6b:21:70:90:bb:b0:94:
9b:ac:93:3a:75:a4:76:48:d7:f3:91:e5:d9:2d:29:
47:57:98:93:84:9b:eb:ad:57:1b:c1:96:d1:09:bb:
0f:1a:88:70:a8:4a:1b:5f:2a:e1:55:76:ab:2a:07:
9b:47:c7:6a:50:fe:08:50:65:f8:9a:66:60:0c:ec:
02:5e:a7:85:5e:60:58:b5:f6:df:7d:d5:2b:3a:e9:
53:13:fb:48:68:18:8b:41:53:ad:5a:af:93:71:ad:
44:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:81:34:9B:A8:55:00:0D:69:E5:72:A3:E1:63:86:D0:C8:DE:BD:27
X509v3 Authority Key Identifier:
keyid:65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:e3:16:f6:60:49:f8:6e:2a:eb:89:1e:da:19:fb:e5:35:d0:
76:69:80:12:1e:7c:ab:00:dd:03:11:da:8a:b2:3c:18:80:8d:
73:e6:0c:7a:23:a4:ff:23:87:81:ec:c6:d0:48:b5:42:89:9c:
5a:f4:c7:0c:39:75:b0:0e:b6:e9:d4:a9:d3:21:7a:fd:54:ac:
3d:76:8a:cc:36:00:58:45:ac:c5:df:72:73:af:e7:ac:0a:a3:
0d:69:91:0f:3d:08:56:af:1a:89:30:75:0f:5d:be:a3:b1:73:
d0:c2:e1:dd:1c:d4:01:84:1c:65:2d:6f:28:27:03:af:bd:2d:
2f:bc:c8:20:9d:c9:a1:93:8a:20:d0:fc:83:13:63:fc:3b:85:
f9:17:bc:81:2a:18:5e:ac:9c:95:6b:9e:c6:9a:09:56:d5:72:
82:c6:3d:8d:59:22:66:13:9d:2c:90:af:25:ca:30:4f:6f:eb:
24:0e:43:ca:7a:9c:4c:ab:87:9b:0b:14:5d:01:7e:64:ab:1b:
06:aa:29:1d:fd:9d:7b:2f:cc:bb:c5:7a:16:27:42:4a:32:88:
57:d8:4e:2a:20:cd:9d:8d:6d:e3:f0:56:60:28:3a:7f:1c:eb:
f2:81:8f:60:4c:ee:40:79:c7:40:3c:65:50:e9:ff:77:47:f8:
6f:4d:e8:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiVJBjBKqItdghfVUun/ijAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MDYwOTY2OTVmN2U2NjEwYjE5YjA4ZTFkN2ZkOWM0ZDkx
NGE0ZjAwHhcNMjUwODEwMTgwMDI3WhcNMjUwODExMTgwMDI3WjAzMTEwLwYDVQQD
Eyg1ODgxMzQ5YmE4NTUwMDBkNjllNTcyYTNlMTYzODZkMGM4ZGViZDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXUujr773YtIMdO+icR35EVc36yu
iRO4LI2vNhpfFJVGqIS9qfPtAwbnDdBw684tHkZIv/yaMnz2unm3YFECEjsX/dPM
pCc7dzOy/eHeqZkN5p4YpNi25c+X4onqKWdbuD7yJSprMmRE1i2xM0vW2xZQlIMR
gBsApS2jlXyaq43qAtsRMNd3xLrImZeE3KgSP5VuVAr6+PFzXXXsKmshcJC7sJSb
rJM6daR2SNfzkeXZLSlHV5iThJvrrVcbwZbRCbsPGohwqEobXyrhVXarKgebR8dq
UP4IUGX4mmZgDOwCXqeFXmBYtfbffdUrOulTE/tIaBiLQVOtWq+Tca1EIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFiBNJuoVQANaeVyo+FjhtDI3r0nMB8GA1UdIwQY
MBaAFGUGCWaV9+ZhCxmwjh1/2cTZFKTwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlFZSlpwWDM1bUVMR2JDT0hYX1p4TmtVcFBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9mNWJhYTQtZjY3MC00Mzg1LWJjMzgt
YTQxNTI1NThkMThjLzEvWlFZSlpwWDM1bUVMR2JDT0hYX1p4TmtVcFBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9mNWJhYTQtZjY3MC00Mzg1LWJjMzgtYTQxNTI1NThkMThj
LzEvWlFZSlpwWDM1bUVMR2JDT0hYX1p4TmtVcFBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzuMW9mBJ
+G4q64ke2hn75TXQdmmAEh58qwDdAxHairI8GICNc+YMeiOk/yOHgezG0Ei1Qomc
WvTHDDl1sA626dSp0yF6/VSsPXaKzDYAWEWsxd9yc6/nrAqjDWmRDz0IVq8aiTB1
D12+o7Fz0MLh3RzUAYQcZS1vKCcDr70tL7zIIJ3JoZOKIND8gxNj/DuF+Re8gSoY
XqyclWuexpoJVtVygsY9jVkiZhOdLJCvJcowT2/rJA5DynqcTKuHmwsUXQF+ZKsb
BqopHf2dey/Mu8V6FidCSjKIV9hOKiDNnY1t4/BWYCg6fxzr8oGPYEzuQHnHQDxl
UOn/d0f4b03o/w==
-----END CERTIFICATE-----
Generated at Sun Aug 10 20:59:41 2025 by rpki-client