Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
File: zQYCONBmjUWgQWGKxd92f1mgxK4.mft (raw, json)
Hash identifier: 0sa/ypnceoCeJoTnIMcLu+VNwUJEhDXz6jdaNg5AaJY=
Subject key identifier: A0:FE:06:BD:26:5E:D0:2C:E8:17:B4:52:41:2F:AD:2B:23:E0:C0:B7
Authority key identifier: CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE
Certificate issuer: /CN=cd060238d0668d45a041618ac5df767f59a0c4ae
Certificate serial: 0198D5BBAFD5C5A6FB8B85372570219B0977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
Manifest number: 0CD9
Signing time: Sat 23 Aug 2025 07:01:43 +0000
Manifest this update: Sat 23 Aug 2025 07:01:43 +0000
Manifest next update: Sun 24 Aug 2025 07:01:43 +0000
Files and hashes: 1: Z8HK86u_Tc2z7y-zidkbMMq2jco.roa (hash: 9ipzU/iNA87vl6CCfbIc4JupJ5JjdKNFibG14Sk7A3Y=)
2: zQYCONBmjUWgQWGKxd92f1mgxK4.crl (hash: anFtvK4sxTHBtI3fK8BXHuIq2pIaslzWSWKUIrMjFDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:af:d5:c5:a6:fb:8b:85:37:25:70:21:9b:09:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd060238d0668d45a041618ac5df767f59a0c4ae
Validity
Not Before: Aug 23 07:01:43 2025 GMT
Not After : Aug 24 07:01:43 2025 GMT
Subject: CN=a0fe06bd265ed02ce817b452412fad2b23e0c0b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:42:c3:fb:27:73:a4:ae:be:24:a4:23:3e:34:
74:11:91:fe:3e:40:d6:85:55:2d:c2:1d:a8:1c:8f:
09:6c:cf:1a:53:56:f3:9b:bf:18:8f:65:2f:ba:3d:
b3:b1:99:2a:49:dd:39:45:29:43:c7:90:74:c6:05:
f2:18:06:f9:bd:da:9e:88:06:d0:d3:b4:18:b2:9b:
e6:f1:f2:5e:65:00:76:3e:15:7e:e3:43:b2:57:ce:
56:54:00:57:66:7b:0d:4b:30:a6:b3:42:cd:b0:9f:
4e:d2:e2:f6:94:04:3a:26:06:69:a2:c2:49:86:74:
f2:02:3e:57:90:9b:d0:9d:2d:10:2f:2d:83:e7:62:
54:90:13:71:3c:65:e4:03:65:9c:28:8e:d6:ae:12:
21:27:48:63:05:ab:d0:68:b0:8a:f0:74:78:bb:7e:
2a:f4:0c:35:e2:3f:e5:26:0e:f0:05:78:8c:1c:2e:
9c:d6:b0:ec:35:8a:b1:33:dd:42:e0:38:e6:ab:08:
17:31:cc:af:6c:60:c8:0c:38:01:16:d5:4e:e4:e5:
bf:91:3f:f1:6c:05:93:ff:2a:f8:c1:1c:55:fd:89:
84:81:8f:f2:ba:d1:b3:dd:02:58:68:97:ef:d1:c9:
57:40:34:e8:53:8d:d1:eb:01:57:d7:bf:18:32:e2:
1e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FE:06:BD:26:5E:D0:2C:E8:17:B4:52:41:2F:AD:2B:23:E0:C0:B7
X509v3 Authority Key Identifier:
keyid:CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:6e:3d:88:16:8d:c5:e2:3e:3b:b7:8d:31:5c:cd:31:1f:e8:
a8:0e:56:b5:01:b6:78:94:d7:86:28:75:9b:17:97:28:0e:b7:
00:d7:4b:64:5e:69:9f:05:fa:2b:af:3f:df:a3:e4:ff:9b:9a:
69:72:1d:66:19:3e:15:53:69:9a:a4:e6:82:68:2e:8c:de:a6:
8e:27:91:3e:58:0b:68:d8:a7:28:30:7b:f8:81:dd:f2:7b:8a:
6b:c7:b8:69:f5:09:9f:b4:7e:a4:86:89:9b:f7:76:06:27:39:
e4:57:24:4a:eb:ec:05:b1:5e:7f:ae:2d:f2:5e:b4:56:33:93:
16:50:2e:7f:b1:54:fe:36:f2:df:d1:ea:49:1a:39:ee:d4:99:
71:60:c8:be:7e:7e:9c:bf:65:92:17:cf:db:46:a8:80:6a:c5:
8e:61:dc:97:20:2c:5d:22:dc:e4:f5:99:96:2e:1f:98:01:16:
02:f5:0c:7e:d8:90:28:21:60:44:71:0e:70:31:0d:96:96:f0:
ae:69:27:cd:35:4c:29:24:13:17:d0:41:7e:08:24:03:13:71:
7f:30:b7:12:d1:fc:af:9f:ab:80:85:ef:f8:02:85:98:75:37:
60:76:81:48:b5:d5:1c:52:b6:e6:d4:8d:e0:54:e1:da:db:50:
18:bf:2d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:16 2025 by rpki-client