Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
File: zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft (raw, json)
Hash identifier: A5MYXSNgLOECsecVkOFnhKGa2M75pG7Lg9lcjXYn4jM=
Subject key identifier: 8E:11:65:81:B2:65:7C:B9:6C:BB:A5:1F:08:54:CD:88:13:42:C0:8C
Authority key identifier: CD:02:D0:77:48:5A:15:E8:A2:54:A4:9E:DD:99:4D:4F:C2:A9:08:A6
Certificate issuer: /CN=cd02d077485a15e8a254a49edd994d4fc2a908a6
Certificate serial: 01988DD917547AC744799120C0596FC981E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
Manifest number: 1622
Signing time: Sat 09 Aug 2025 08:01:11 +0000
Manifest this update: Sat 09 Aug 2025 08:01:11 +0000
Manifest next update: Sun 10 Aug 2025 08:01:11 +0000
Files and hashes: 1: OcgJ9gd4XPf2cH1vwOSDk8wsWCY.roa (hash: mqfa0ZehsylIV/d7nzWZG94iCnmV9oQHVVnGpSyC+og=)
2: pdwDWOzc3QzXOsiEO7HIgZ0hQdQ.roa (hash: m/RIMhJds2RFVXbpbtSSU1vxyz5pEJiQgY8y39qh5vk=)
3: zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl (hash: 65LEdVAeSWTtOWv8V8qgbIzr1JOCAjWckOlLw1BMhV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:d9:17:54:7a:c7:44:79:91:20:c0:59:6f:c9:81:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd02d077485a15e8a254a49edd994d4fc2a908a6
Validity
Not Before: Aug 9 08:01:11 2025 GMT
Not After : Aug 10 08:01:11 2025 GMT
Subject: CN=8e116581b2657cb96cbba51f0854cd881342c08c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:98:b1:a6:e7:6f:fc:45:9b:80:32:3b:bd:4a:
6d:9d:fd:a9:8f:a6:96:5b:5e:9a:ee:6e:e0:c1:2e:
c1:cd:3a:a0:c5:f6:a4:6d:8e:63:be:3c:b0:91:20:
b0:84:a2:0b:de:eb:5c:b1:d5:ef:2a:4a:6e:46:82:
d6:8c:98:ba:74:87:ca:c2:09:93:e4:0c:12:cc:f9:
46:24:f5:a7:1e:77:55:8f:9b:bc:36:d7:4b:29:5a:
1d:eb:dd:97:94:ca:52:6a:2a:b9:c4:26:8b:84:ea:
cb:3e:89:cf:ad:25:ec:63:55:6e:e5:13:09:16:cd:
ea:ae:3d:69:c3:d1:18:20:d7:96:e3:be:c4:51:ac:
96:29:16:5b:73:0d:b6:53:90:56:87:0b:12:5f:58:
68:d6:d9:7b:fa:2a:7f:93:76:86:87:e3:04:29:a6:
80:9b:d9:ae:2a:fe:22:c8:a7:5f:55:7b:1e:df:cc:
3b:e2:6a:de:0e:4f:9b:a9:91:40:69:fa:71:dc:57:
86:03:bc:f6:89:32:c5:11:a5:93:09:f6:d6:a2:94:
95:23:0f:de:ea:90:14:ba:e1:3f:f2:42:1d:87:a2:
cf:e8:28:4b:1a:6a:09:78:6f:af:42:59:41:07:cb:
2c:3b:88:5f:74:54:66:be:86:4c:2f:41:63:3f:64:
b1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:11:65:81:B2:65:7C:B9:6C:BB:A5:1F:08:54:CD:88:13:42:C0:8C
X509v3 Authority Key Identifier:
keyid:CD:02:D0:77:48:5A:15:E8:A2:54:A4:9E:DD:99:4D:4F:C2:A9:08:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e3:9c:85:76:aa:30:84:91:63:d0:82:08:e2:b7:21:0a:48:
04:67:04:78:4f:97:75:aa:7d:84:ba:c4:4e:8f:eb:90:b3:af:
8d:87:39:7e:72:e7:49:c7:4f:4e:ad:18:54:ea:89:6c:66:29:
49:ba:a2:12:04:83:74:89:d8:6e:01:f8:f0:ee:02:6d:c6:13:
a1:ef:53:69:5b:3c:ef:0d:08:b8:e8:9f:3f:e0:21:6f:42:b6:
c5:bf:2c:90:79:e4:68:5a:2d:82:09:7b:d2:e8:96:be:07:ab:
97:11:03:fc:92:49:a9:35:50:f2:ee:bd:cc:84:a7:8b:20:2a:
51:42:9c:17:bc:64:ab:62:57:f4:66:c6:cf:06:a5:26:d4:62:
88:17:e5:c0:73:b4:85:a4:83:1f:08:1f:5d:fd:7d:91:a1:64:
84:1f:85:29:4b:3f:87:95:2d:91:82:90:01:9c:12:9a:30:67:
83:f7:c8:4c:62:3c:c7:1f:9b:3e:37:52:a4:57:30:2e:4a:aa:
31:4c:ac:cb:8b:20:e8:6d:f7:26:c7:ea:e9:11:d9:b0:03:97:
70:3c:ec:95:d3:84:db:2f:83:6f:6a:2c:d1:49:45:27:23:89:
c5:4c:4e:e3:53:b4:eb:a3:21:d4:84:d0:e6:06:98:15:ca:11:
81:5a:26:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:18:17 2025 by rpki-client