Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
File: ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft (raw, json)
Hash identifier: pNCSR2/4CY4/rGK7RFeU5HM35Zvoqo3Mj3sMy41idtA=
Subject key identifier: 0E:A3:D2:BC:C0:21:75:D2:01:7C:64:AC:23:23:0A:68:36:8A:0E:A0
Authority key identifier: 66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7
Certificate issuer: /CN=66a832244d0e23f5f28b3a6def7afc01b22521c7
Certificate serial: 0198D4A7D4FC52D83AA25E592F088B7D2043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
Manifest number: 0A32
Signing time: Sat 23 Aug 2025 02:00:25 +0000
Manifest this update: Sat 23 Aug 2025 02:00:25 +0000
Manifest next update: Sun 24 Aug 2025 02:00:25 +0000
Files and hashes: 1: ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl (hash: bI0giu9GQ6njJvrwLjzVegoTx5joZb58pjbHwcbAN4k=)
2: _QNn8i-0tIKLRcq_eDgA2QsLdiA.roa (hash: QiOA4Z6p5RQwq3aK0bHpaTuhZajM0dodRW/v7+6NMjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:d4:fc:52:d8:3a:a2:5e:59:2f:08:8b:7d:20:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66a832244d0e23f5f28b3a6def7afc01b22521c7
Validity
Not Before: Aug 23 02:00:25 2025 GMT
Not After : Aug 24 02:00:25 2025 GMT
Subject: CN=0ea3d2bcc02175d2017c64ac23230a68368a0ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:94:87:d0:4f:16:3b:71:97:1b:40:6b:8e:86:
56:f0:9d:28:4b:03:42:64:fd:81:ca:d4:2d:c6:6e:
5b:f7:1e:7b:79:01:9f:83:56:8a:b5:9e:7e:c8:bf:
35:f7:40:42:cf:33:f4:46:0a:81:a3:44:b1:16:5b:
2c:b5:48:43:4a:19:c1:63:78:9d:fb:2c:0e:04:02:
66:8b:8e:0e:f3:39:c7:ea:e4:c1:3c:95:a6:8f:da:
bf:1a:7e:e1:fb:94:85:ee:3a:53:b3:84:e9:ce:c0:
a5:e9:d6:b5:3d:e9:9f:6d:79:53:e5:aa:2b:46:2b:
33:b5:db:2d:8b:4f:80:fc:5d:ce:fa:0f:3a:6a:1e:
51:ef:8e:18:e2:90:b4:16:06:c9:71:b1:28:bd:0c:
90:eb:14:2f:b8:5a:66:48:cc:a5:60:40:4d:5e:08:
6e:6b:1d:1a:92:b6:b4:df:92:e8:9b:83:cf:40:45:
a5:35:f1:de:25:7a:05:ef:15:fc:d5:e5:cf:18:bd:
bb:8a:cc:28:b0:1f:3f:a3:95:b2:dc:87:71:02:08:
7c:1f:ba:45:38:ca:2d:97:0b:61:6c:17:39:63:07:
b3:20:80:d7:db:74:1c:66:11:c1:19:58:7d:e7:45:
df:c1:08:7b:97:ae:2d:6a:be:60:83:20:8c:81:7e:
31:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A3:D2:BC:C0:21:75:D2:01:7C:64:AC:23:23:0A:68:36:8A:0E:A0
X509v3 Authority Key Identifier:
keyid:66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:f4:09:63:6b:57:5f:6f:8c:b9:dc:17:64:e1:d0:d1:f3:47:
f5:10:b6:ff:f6:ef:eb:92:1c:66:b6:ce:87:0c:13:44:f0:b6:
4b:89:61:74:35:4c:78:1a:4a:9a:24:49:ce:99:68:da:83:85:
a1:9c:30:01:33:e6:69:f9:c7:f6:1d:e4:f4:5a:5f:88:21:dd:
6e:37:ff:a1:23:fc:b3:77:ad:69:88:17:04:98:f2:0d:aa:f4:
7e:14:23:f4:66:be:bc:8f:9f:a2:70:27:cb:eb:4d:f8:40:5b:
9e:33:7e:8c:6d:ac:e5:b0:3f:51:62:58:d9:77:2d:a7:f6:9c:
f6:61:45:23:1d:c3:44:04:9f:f0:a1:da:04:63:7f:05:38:0c:
15:d0:19:c3:c1:69:52:85:22:9a:3b:b3:f3:50:e2:dd:cd:bc:
95:01:a9:ff:1e:1d:5c:21:bd:4c:84:50:fb:7c:d0:db:5c:0d:
bb:89:6c:36:37:a0:9e:72:a1:b0:4f:bb:4a:ee:05:23:ea:f2:
de:2d:94:2e:b3:14:fe:11:04:42:fe:5f:19:fc:a8:bc:ba:32:
df:3f:46:c1:a7:93:f8:51:1f:74:e5:9b:21:56:00:87:86:f8:
f1:9f:7b:5e:af:2a:48:e7:89:6e:9c:dd:73:0b:0b:f0:c4:5c:
f7:f4:79:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:44 2025 by rpki-client