Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft
File: Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft (raw, json)
Hash identifier: /Z/theJcmkk9wxUV7Fx7jnQ7AZ+nXsyWhH4/3373woA=
Subject key identifier: 97:75:C3:45:43:63:44:D4:39:05:C2:45:43:F8:88:91:E5:10:98:C8
Authority key identifier: 66:AF:1C:22:4D:B2:9A:51:04:A6:1A:AC:32:F6:09:56:02:5F:AD:43
Certificate issuer: /CN=66af1c224db29a5104a61aac32f60956025fad43
Certificate serial: 01988EECA7A16D967401D5F9F135B94E4545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zq8cIk2ymlEEphqsMvYJVgJfrUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft
Manifest number: 0272
Signing time: Sat 09 Aug 2025 13:02:10 +0000
Manifest this update: Sat 09 Aug 2025 13:02:10 +0000
Manifest next update: Sun 10 Aug 2025 13:02:10 +0000
Files and hashes: 1: Zq8cIk2ymlEEphqsMvYJVgJfrUM.crl (hash: MSjujlvGwNvlQlSH4/cxd1M7wz/UEc26em3Ym87xIpE=)
2: gH87DnFCIVeDMCdzZgdgeo0PCRQ.roa (hash: pS4ieprkTVj7xtpm2D2Dk/zZSNZ4iIRcoOU3KEt530k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zq8cIk2ymlEEphqsMvYJVgJfrUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ec:a7:a1:6d:96:74:01:d5:f9:f1:35:b9:4e:45:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66af1c224db29a5104a61aac32f60956025fad43
Validity
Not Before: Aug 9 13:02:10 2025 GMT
Not After : Aug 10 13:02:10 2025 GMT
Subject: CN=9775c345436344d43905c24543f88891e51098c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:53:9b:c6:82:e4:37:1e:f6:ce:2c:44:5c:ab:
b8:51:6d:6f:fc:1f:f9:87:4f:33:7e:7b:d4:fb:7e:
6a:15:d3:ce:99:5c:ca:3c:07:bb:c0:39:c3:be:3b:
97:f6:d4:f2:07:7d:a4:c9:08:76:6a:46:5a:d4:1a:
4c:1d:8c:c1:12:60:7c:a9:37:0d:ed:51:fe:6a:3b:
98:1d:5b:cc:2d:0e:f0:6c:eb:f4:7b:1f:8e:38:c2:
93:d3:a9:1b:82:d2:85:c5:da:aa:ea:63:a5:24:4c:
2b:0a:50:bc:3f:04:e4:8a:bb:01:5f:c4:4f:a0:c4:
44:23:9b:f3:7c:09:0c:46:f6:d6:5b:b4:54:5e:8f:
04:35:74:23:63:17:a4:b2:ea:67:d1:cc:1d:a2:f6:
a9:3a:dc:15:0d:90:8c:56:9e:4e:1c:21:fa:f2:ef:
d8:c0:d6:6e:db:82:2e:49:02:d7:66:37:40:63:c1:
9d:3d:e8:f9:b7:46:3f:48:55:91:b1:20:83:1e:80:
34:93:79:05:ee:d7:e0:7e:aa:19:b4:31:b9:14:d4:
92:4b:02:ee:f0:5a:c6:30:5e:51:c9:0b:d1:12:58:
ea:da:56:73:b5:74:eb:65:e9:d4:8e:79:ee:e9:0a:
67:9a:46:ff:07:ed:a7:3e:0f:30:88:7c:a8:ce:54:
f0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:75:C3:45:43:63:44:D4:39:05:C2:45:43:F8:88:91:E5:10:98:C8
X509v3 Authority Key Identifier:
keyid:66:AF:1C:22:4D:B2:9A:51:04:A6:1A:AC:32:F6:09:56:02:5F:AD:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zq8cIk2ymlEEphqsMvYJVgJfrUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e0:24:9a:16:b3:43:25:db:67:df:fe:a8:24:ff:7f:b9:08:
74:b6:96:91:31:04:bc:51:05:4b:9a:7d:62:18:8e:ab:30:f4:
26:f3:4b:fa:35:c9:5d:b2:27:25:0b:a9:be:c0:f2:b4:f5:40:
ef:d7:6b:d8:8d:ba:d2:48:65:d1:b3:be:7a:c9:3c:56:94:2b:
8b:21:08:4d:24:ed:c8:b7:ee:62:dc:d5:37:f2:b3:bc:e8:55:
ed:d2:7a:41:d1:d7:bf:e2:71:ef:c1:fe:87:a2:03:27:11:4f:
08:ed:24:e5:24:97:ab:37:16:cc:29:cf:2c:89:86:c1:97:61:
86:82:d4:50:4a:2d:84:d7:b2:64:19:d8:68:52:21:87:96:18:
1f:4d:08:ec:08:91:65:81:f4:9d:0b:c9:53:7c:23:e1:64:35:
87:3b:11:5e:8e:55:3e:9f:0a:b6:af:32:54:5c:81:1c:ef:b9:
a9:4b:0f:f7:a3:71:41:53:50:06:cc:61:33:28:11:88:de:d2:
94:08:ac:25:8e:ab:35:b0:fe:bb:b2:e7:45:9d:c9:a4:8a:8c:
02:28:76:88:9c:79:d0:ca:87:0f:7d:f0:f1:3d:1b:00:30:68:
dd:c5:bd:79:1b:d0:e2:88:d0:ee:6d:7c:06:9d:3c:54:b7:77:
46:9a:c9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:41:57 2025 by rpki-client