Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
File: ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft (raw, json)
Hash identifier: oVr2AjekxG1lLAd7pyev67grP2JZ4D63076H00NBww4=
Subject key identifier: 61:81:26:BA:88:0F:E9:3C:A9:E6:B4:16:B1:F9:55:47:9B:18:5D:9E
Authority key identifier: 66:A1:D1:A0:17:80:2E:5C:57:DA:59:78:54:4F:C5:37:40:3D:A7:3A
Certificate issuer: /CN=66a1d1a017802e5c57da5978544fc537403da73a
Certificate serial: 0197782EC39C3D8B3803B3886055C94062EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
Manifest number: 08A8
Signing time: Mon 16 Jun 2025 10:00:19 +0000
Manifest this update: Mon 16 Jun 2025 10:00:19 +0000
Manifest next update: Tue 17 Jun 2025 10:00:19 +0000
Files and hashes: 1: ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl (hash: oQnzdl5H7O/2kwkuOoXhx1zQ44FWBV5aMUJpJXfqonA=)
2: hJbdYVF-sB2ARWcr3wLM-Bolskc.roa (hash: p8HLFjhLNYXJBjvp0Ydq3UNKZlQk3vcyaOZBKxCq5jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:2e:c3:9c:3d:8b:38:03:b3:88:60:55:c9:40:62:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66a1d1a017802e5c57da5978544fc537403da73a
Validity
Not Before: Jun 16 10:00:19 2025 GMT
Not After : Jun 17 10:00:19 2025 GMT
Subject: CN=618126ba880fe93ca9e6b416b1f955479b185d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d3:d3:4b:e8:eb:a1:b3:f2:27:f6:fb:2c:d8:
79:75:1f:d4:db:e1:80:c0:3a:9d:85:62:8d:e2:5a:
86:85:16:ea:84:9b:71:64:95:86:66:bc:9b:8e:d6:
50:6a:33:2a:3d:e5:1e:75:55:81:8a:90:3b:42:f9:
f0:1f:e3:2b:99:ba:35:75:79:65:17:ea:f1:49:da:
1b:f5:5c:b6:0b:47:52:c0:eb:e6:b5:27:50:76:99:
22:33:be:dc:e5:e7:ca:b5:5e:1c:d6:a0:69:b4:a5:
b2:45:0a:3f:2e:dd:41:48:03:67:de:a9:50:db:ff:
62:70:b1:c9:8a:20:a9:89:59:7b:ff:35:d1:05:f4:
d2:4c:04:19:48:46:48:2e:f9:8a:76:c2:5f:d2:49:
7f:23:8f:95:db:49:22:43:eb:ac:d7:f1:ef:ad:cd:
4c:12:96:b4:8e:49:05:cd:3d:76:2f:0e:38:5e:12:
de:b4:e6:c1:d4:f6:11:6f:db:c9:8c:fb:bb:43:e1:
d6:92:81:9e:1e:c1:c6:49:65:2a:1a:6d:91:d6:11:
f4:56:23:65:e0:eb:db:b5:c1:78:c2:a4:81:45:f6:
03:7d:f1:4b:35:16:7a:25:56:b4:f3:80:8d:d6:be:
36:b8:3d:5a:d9:a0:37:35:e8:60:17:e0:57:6d:18:
ec:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:81:26:BA:88:0F:E9:3C:A9:E6:B4:16:B1:F9:55:47:9B:18:5D:9E
X509v3 Authority Key Identifier:
keyid:66:A1:D1:A0:17:80:2E:5C:57:DA:59:78:54:4F:C5:37:40:3D:A7:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:00:58:9a:62:b4:e0:dd:a0:2a:35:b5:b6:56:f5:c3:f9:7b:
4a:b0:b5:7f:20:18:29:43:69:00:68:6c:75:22:84:c2:3c:a1:
43:8f:54:aa:a7:26:4f:81:05:b3:71:8f:b5:97:ae:71:0f:bb:
fa:11:a0:0d:d3:26:fb:d3:b8:a2:a8:62:b5:69:2e:cf:72:cc:
37:73:10:8e:4f:08:59:40:d3:55:98:1f:70:81:f3:ea:fd:44:
6a:49:7e:e3:63:7f:45:f3:d9:a7:73:ac:ac:bb:23:a2:88:54:
ac:0c:5b:65:27:7f:6d:54:1a:10:eb:49:20:58:9e:7c:7c:25:
24:bc:74:f9:58:14:73:86:1d:b6:67:6e:9b:48:01:25:59:55:
2e:a7:ab:52:51:e0:07:f6:34:a3:3d:07:2a:f5:ed:21:94:02:
53:96:cf:84:73:ec:10:70:c6:02:01:da:51:fa:88:5a:77:5d:
a1:eb:da:67:53:73:ca:ef:8c:c0:ea:a7:40:fe:94:d7:04:1c:
7a:3c:b3:2a:dd:b1:13:7d:b0:48:3f:c1:02:44:5a:09:60:be:
b5:3a:90:71:ef:3d:ac:63:99:5a:71:1a:ab:15:53:3b:0d:17:
e0:44:fe:dd:3b:92:cf:c0:f8:09:86:de:13:e1:b2:6b:1c:dc:
52:9b:83:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd4LsOcPYs4A7OIYFXJQGLrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2YTFkMWEwMTc4MDJlNWM1N2RhNTk3ODU0NGZjNTM3NDAz
ZGE3M2EwHhcNMjUwNjE2MTAwMDE5WhcNMjUwNjE3MTAwMDE5WjAzMTEwLwYDVQQD
Eyg2MTgxMjZiYTg4MGZlOTNjYTllNmI0MTZiMWY5NTU0NzliMTg1ZDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitPTS+jrobPyJ/b7LNh5dR/U2+GA
wDqdhWKN4lqGhRbqhJtxZJWGZrybjtZQajMqPeUedVWBipA7QvnwH+Mrmbo1dXll
F+rxSdob9Vy2C0dSwOvmtSdQdpkiM77c5efKtV4c1qBptKWyRQo/Lt1BSANn3qlQ
2/9icLHJiiCpiVl7/zXRBfTSTAQZSEZILvmKdsJf0kl/I4+V20kiQ+us1/Hvrc1M
Epa0jkkFzT12Lw44XhLetObB1PYRb9vJjPu7Q+HWkoGeHsHGSWUqGm2R1hH0ViNl
4OvbtcF4wqSBRfYDffFLNRZ6JVa084CN1r42uD1a2aA3NehgF+BXbRjsXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGBJrqID+k8qea0FrH5VUebGF2eMB8GA1UdIwQY
MBaAFGah0aAXgC5cV9pZeFRPxTdAPac6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnFIUm9CZUFMbHhYMmxsNFZFX0ZOMEE5cHpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85MTU0OGItYmFiNS00NTRjLWI2MGIt
MTlmMmExZDE2MDMzLzEvWnFIUm9CZUFMbHhYMmxsNFZFX0ZOMEE5cHpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85MTU0OGItYmFiNS00NTRjLWI2MGItMTlmMmExZDE2MDMz
LzEvWnFIUm9CZUFMbHhYMmxsNFZFX0ZOMEE5cHpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjABYmmK0
4N2gKjW1tlb1w/l7SrC1fyAYKUNpAGhsdSKEwjyhQ49UqqcmT4EFs3GPtZeucQ+7
+hGgDdMm+9O4oqhitWkuz3LMN3MQjk8IWUDTVZgfcIHz6v1Eakl+42N/RfPZp3Os
rLsjoohUrAxbZSd/bVQaEOtJIFiefHwlJLx0+VgUc4Ydtmdum0gBJVlVLqerUlHg
B/Y0oz0HKvXtIZQCU5bPhHPsEHDGAgHaUfqIWnddoevaZ1Nzyu+MwOqnQP6U1wQc
ejyzKt2xE32wSD/BAkRaCWC+tTqQce89rGOZWnEaqxVTOw0X4ET+3TuSz8D4CYbe
E+GyaxzcUpuDEw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 13:09:59 2025 by rpki-client