Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
File: ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft (raw, json)
Hash identifier: cqtnTUbqEa+SX+3nEkmkvmcC+zYBbEQDsePXCJLPOVE=
Subject key identifier: 6D:0D:94:20:2A:35:19:CF:A8:4D:CF:72:95:B6:C6:E9:68:9F:3A:17
Authority key identifier: 66:A1:D1:A0:17:80:2E:5C:57:DA:59:78:54:4F:C5:37:40:3D:A7:3A
Certificate issuer: /CN=66a1d1a017802e5c57da5978544fc537403da73a
Certificate serial: 0199FBB37521B42A04C6C9629F524CB634E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
Manifest number: 09FA
Signing time: Sun 19 Oct 2025 09:01:06 +0000
Manifest this update: Sun 19 Oct 2025 09:01:06 +0000
Manifest next update: Mon 20 Oct 2025 09:01:06 +0000
Files and hashes: 1: ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl (hash: PdI1mAQzPBod7BlHKE5KIJJP+8O1y/Wmbk+4BM53rm4=)
2: kKgi-TtCN3ONXzc5dOLgjXmeD4Y.roa (hash: ThrWPeEKYfxXyDvqo92XPXVjCuwCt73viQ6BGTVTHKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:75:21:b4:2a:04:c6:c9:62:9f:52:4c:b6:34:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66a1d1a017802e5c57da5978544fc537403da73a
Validity
Not Before: Oct 19 09:01:06 2025 GMT
Not After : Oct 20 09:01:06 2025 GMT
Subject: CN=6d0d94202a3519cfa84dcf7295b6c6e9689f3a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:87:4a:19:1b:40:83:7a:5f:02:6b:b9:45:32:
16:c2:db:82:27:a6:20:20:92:e8:b1:6f:bb:e8:f7:
69:9f:3b:d1:28:b1:f5:95:e4:a6:f9:a0:e0:03:d8:
2f:f3:6b:50:3e:54:0a:0a:f4:38:64:db:59:ea:f9:
9b:41:c5:16:2b:6c:7f:16:1d:23:8c:97:ac:f8:d7:
c4:d4:f3:38:e7:97:63:35:5b:f8:4b:38:a6:7b:42:
95:54:6a:7a:80:61:a8:3a:12:94:8d:72:b6:b2:4f:
3c:41:0d:eb:e2:48:af:af:b1:6d:d0:68:42:b7:55:
8f:06:96:c8:ab:b2:1f:1a:10:87:61:a6:64:ed:a5:
fc:2c:29:4d:3c:f5:af:6a:1e:9b:cd:8f:80:19:01:
eb:85:d6:1d:e2:04:96:4a:2a:d6:13:20:04:eb:f4:
c4:f4:82:dc:a5:e4:11:88:65:e7:d6:6b:ad:c0:94:
27:81:c8:b3:ac:f5:90:2f:7d:76:de:68:a5:44:b7:
4f:5a:d9:d8:72:f3:42:f6:77:e4:10:06:24:6a:e1:
77:f4:fe:a0:12:4b:75:a2:97:2c:34:72:5d:09:03:
08:2b:43:bf:8a:0d:76:71:54:0c:66:db:ee:6b:f0:
35:18:41:b8:e3:8f:ac:90:e7:6b:07:d9:32:cf:93:
61:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:0D:94:20:2A:35:19:CF:A8:4D:CF:72:95:B6:C6:E9:68:9F:3A:17
X509v3 Authority Key Identifier:
keyid:66:A1:D1:A0:17:80:2E:5C:57:DA:59:78:54:4F:C5:37:40:3D:A7:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:ff:f0:fa:51:a6:ea:01:2f:8d:a7:0c:57:c6:f5:7a:4f:d4:
cb:88:ff:76:20:ff:70:e7:48:94:19:a5:d3:d0:5f:49:57:72:
98:65:37:de:a2:81:8e:61:06:a8:d8:8a:33:6d:6e:d1:ed:ce:
d2:84:16:8f:c3:36:f0:41:7e:a2:a5:18:e8:80:b4:6f:06:b5:
6c:98:b5:42:72:51:8c:1f:7e:20:0e:af:ce:7c:37:6b:e4:b0:
7b:07:42:61:92:c3:6b:b3:63:85:f9:72:e9:02:00:35:41:e4:
2b:2b:58:7f:ee:42:b1:bb:c6:ae:b6:52:3b:d8:b5:58:45:31:
96:9b:62:9d:63:2c:3e:2b:d3:21:81:d1:83:39:a6:73:8b:03:
e5:58:4d:4b:fd:eb:34:15:71:c7:53:0d:fd:e9:5e:44:0f:11:
5c:2a:d6:e9:03:84:34:86:47:41:e4:44:8a:91:39:11:1b:54:
a5:be:bc:2e:1f:c7:ca:8d:5b:b2:2b:87:bd:7e:72:4c:f6:dc:
da:35:07:d5:d8:f2:d9:98:7f:25:a0:e9:a8:c5:66:a5:02:80:
67:e0:e5:30:c2:6f:35:d6:cb:56:ee:2b:2b:16:9b:81:6b:5e:
99:20:ab:d3:69:28:c5:13:f1:ef:b8:81:48:3b:46:b5:4a:8c:
56:8d:ac:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:22 2025 by rpki-client