Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft
File: 1_ZqQbymh7J1jPx7scX0s0ae2HA.mft (raw, json)
Hash identifier: v4gZdLY/eq3RV3Pnap/RonF7pHTJ+5RvEE/Rg85JerY=
Subject key identifier: F5:42:A8:C1:A0:4D:25:F5:6B:35:87:4A:61:67:79:51:AE:C6:DB:77
Authority key identifier: D7:F6:6A:41:BC:A6:87:B2:75:8C:FC:7B:B1:C5:F4:B3:46:9E:D8:70
Certificate issuer: /CN=d7f66a41bca687b2758cfc7bb1c5f4b3469ed870
Certificate serial: 019873070001C28105AE04E5F3DF2DA4D2A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_ZqQbymh7J1jPx7scX0s0ae2HA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft
Manifest number: 13E8
Signing time: Mon 04 Aug 2025 03:01:35 +0000
Manifest this update: Mon 04 Aug 2025 03:01:35 +0000
Manifest next update: Tue 05 Aug 2025 03:01:35 +0000
Files and hashes: 1: 1_ZqQbymh7J1jPx7scX0s0ae2HA.crl (hash: OZq0Saq+Hlfb4uVty/5ugxLk6WgdGpHeWDGTtkpmfS0=)
2: sdPecCSO0KixXu_CzDAp6RAcnGQ.roa (hash: lK/qLvjn0531iisqXiHNH5vrvX6cngnheVb4lVEkcTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_ZqQbymh7J1jPx7scX0s0ae2HA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:07:00:01:c2:81:05:ae:04:e5:f3:df:2d:a4:d2:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f66a41bca687b2758cfc7bb1c5f4b3469ed870
Validity
Not Before: Aug 4 03:01:35 2025 GMT
Not After : Aug 5 03:01:35 2025 GMT
Subject: CN=f542a8c1a04d25f56b35874a61677951aec6db77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d8:c4:33:d2:22:a8:1f:98:5f:66:c6:3b:07:
14:c7:8d:47:27:dc:5a:b6:25:8c:49:2c:86:b3:0d:
b1:4c:a6:cc:0a:1e:e2:46:76:7e:ea:a3:53:f9:8c:
b9:08:90:92:eb:75:4a:93:a1:39:dc:90:5e:13:0f:
25:fc:8c:9d:3d:05:a4:01:05:76:08:b0:99:ed:77:
08:8b:a5:92:e8:56:6a:88:f2:d7:3a:13:65:24:ed:
01:60:8d:e3:29:c5:77:5c:f9:a8:6c:52:e6:92:4c:
49:a9:f0:64:03:32:74:8f:fc:c4:b2:64:6f:52:fd:
76:04:78:10:65:61:61:c3:dc:aa:58:7b:fa:49:75:
74:d2:9a:c9:2b:83:28:68:67:51:b5:1c:04:c3:67:
d4:16:99:4f:e0:d9:8c:33:da:88:50:07:a1:37:55:
5d:02:fc:71:49:b7:0d:00:73:2a:a8:ee:96:84:c7:
54:a7:1b:b4:aa:51:da:b7:f1:7f:60:ea:32:e3:3a:
9c:c9:69:5c:05:35:00:31:c1:9b:ae:eb:d6:35:d4:
22:14:20:08:94:a4:3e:de:8f:8c:a7:d4:44:c5:39:
87:35:fd:39:01:f4:55:6f:ae:3e:d0:20:f5:55:a2:
ba:f7:10:0f:ee:87:df:c3:4e:77:34:7c:e0:2f:cf:
ed:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:42:A8:C1:A0:4D:25:F5:6B:35:87:4A:61:67:79:51:AE:C6:DB:77
X509v3 Authority Key Identifier:
keyid:D7:F6:6A:41:BC:A6:87:B2:75:8C:FC:7B:B1:C5:F4:B3:46:9E:D8:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_ZqQbymh7J1jPx7scX0s0ae2HA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:63:18:5d:2b:0d:78:d2:a2:52:b9:6b:5a:cf:18:64:e4:d1:
18:25:8d:85:59:28:d8:ea:69:c7:59:e3:91:4d:e2:c8:37:1d:
dc:4e:f8:3e:68:fc:3d:1e:d2:6d:ec:40:34:d2:ef:7f:7a:6c:
77:fc:d6:8d:df:14:0e:c7:b5:2a:b4:b0:b1:b5:e7:68:42:b9:
76:e3:b3:14:fb:b8:8e:e6:4d:80:7e:85:3b:21:18:43:3b:77:
3a:93:99:ff:9b:17:87:66:72:12:c0:56:55:07:da:84:3d:c7:
82:ed:eb:69:00:7a:a6:b0:18:01:2b:ee:70:a7:d8:4b:e3:60:
01:b7:bf:fc:25:db:74:83:9a:fb:de:1f:f2:28:36:95:01:f8:
0b:57:d0:ee:56:55:7b:e0:4e:b9:45:81:18:9e:b2:69:5b:73:
eb:47:88:66:6e:9b:bb:70:27:ca:ce:c9:07:4e:54:8c:82:0f:
22:3e:de:ce:96:23:e3:20:68:24:36:b7:ae:5d:8a:24:9d:7d:
b8:b9:69:42:1c:fa:04:d9:36:d3:f4:ad:14:e9:a6:10:82:3e:
92:e8:82:fc:ca:b7:17:9c:6d:11:b1:f2:74:69:41:04:be:15:
96:1c:27:ea:ce:0f:ad:2c:b1:46:3b:43:ca:e7:ef:0e:40:f5:
31:c6:c8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:40 2025 by rpki-client