Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
File: ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft (raw, json)
Hash identifier: MpB8oEOaH/kbZ4++BOd5wmPevgp1TLJe/f5j2Ey4TBg=
Subject key identifier: F0:CB:0C:1D:31:C7:BA:46:E7:C9:15:0C:7A:29:CA:FB:EC:70:4C:23
Authority key identifier: 66:A1:D1:A0:17:80:2E:5C:57:DA:59:78:54:4F:C5:37:40:3D:A7:3A
Certificate issuer: /CN=66a1d1a017802e5c57da5978544fc537403da73a
Certificate serial: 0198D5BC230C492D83AEE630C810A5B0DE3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
Manifest number: 095D
Signing time: Sat 23 Aug 2025 07:02:13 +0000
Manifest this update: Sat 23 Aug 2025 07:02:13 +0000
Manifest next update: Sun 24 Aug 2025 07:02:13 +0000
Files and hashes: 1: ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl (hash: +JgbtrKSif8dbYETDAEY7hmJfcxI3nWSTemPy9mPay0=)
2: hJbdYVF-sB2ARWcr3wLM-Bolskc.roa (hash: p8HLFjhLNYXJBjvp0Ydq3UNKZlQk3vcyaOZBKxCq5jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:23:0c:49:2d:83:ae:e6:30:c8:10:a5:b0:de:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66a1d1a017802e5c57da5978544fc537403da73a
Validity
Not Before: Aug 23 07:02:13 2025 GMT
Not After : Aug 24 07:02:13 2025 GMT
Subject: CN=f0cb0c1d31c7ba46e7c9150c7a29cafbec704c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2c:90:e0:f9:84:ff:ba:c3:f6:cb:ee:dd:38:
4f:63:07:dc:59:58:71:e4:2b:eb:25:f0:26:8f:28:
d4:fc:7f:a1:e3:34:a3:13:5d:00:5c:4d:55:3b:b7:
bd:91:61:4e:6d:42:42:1e:34:3f:dc:92:84:3a:99:
01:13:49:6e:db:3b:73:86:b9:b4:8f:56:21:bd:27:
f4:97:91:a0:88:8a:70:b0:08:f9:ab:63:3f:de:32:
d2:31:61:1f:99:e3:7a:39:53:90:5d:68:b3:db:60:
f6:f8:b8:8f:f4:31:29:f5:fa:a5:2e:69:c4:fa:16:
4a:30:81:28:e7:d1:ab:1c:2d:83:41:7e:e1:1f:df:
8c:77:23:23:ac:8c:aa:ee:ae:6f:d4:43:37:7d:d7:
0b:38:b8:1c:7c:ce:eb:55:79:fc:bb:26:e5:49:63:
a8:cf:c1:6d:86:64:8a:4b:a9:b2:df:3e:c5:28:45:
8d:92:8f:65:50:47:f0:22:e6:13:cb:4f:1b:de:79:
2a:f4:17:2f:d5:c2:10:84:7b:cf:71:46:54:c6:3b:
d9:29:00:a9:3f:94:21:e4:58:54:e9:7b:b4:1e:ef:
36:f5:86:ac:dd:5d:fc:50:99:f1:84:53:7c:fb:69:
17:22:24:d6:79:7d:9a:f9:4a:62:92:f5:d4:7a:f1:
68:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:CB:0C:1D:31:C7:BA:46:E7:C9:15:0C:7A:29:CA:FB:EC:70:4C:23
X509v3 Authority Key Identifier:
keyid:66:A1:D1:A0:17:80:2E:5C:57:DA:59:78:54:4F:C5:37:40:3D:A7:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:77:4a:ee:1b:99:aa:32:9f:4a:3e:ff:78:8f:8f:3e:98:f4:
b3:bc:d6:51:74:35:4d:00:a2:e3:74:8a:1b:cb:1a:69:f8:ff:
35:40:52:da:a7:8d:f6:19:b0:2d:6e:e5:56:52:72:57:60:29:
77:e0:8a:ef:cd:d3:0a:b9:c5:da:6b:ca:c4:58:cc:aa:31:6c:
a3:4f:53:d8:3e:18:8e:21:94:16:93:b8:27:14:f6:f9:3f:3a:
d7:9a:96:0b:71:4b:b1:84:35:4c:72:52:bd:37:6f:53:bc:86:
66:ef:6b:3d:c0:7a:89:97:25:4b:61:5d:5c:dd:75:cf:a4:5b:
c9:3f:5d:5d:76:d9:9c:f8:3a:46:46:c9:6a:88:79:23:9d:28:
5f:af:73:e1:2c:19:49:67:1f:4d:2c:4d:50:56:69:20:49:3c:
18:74:39:19:d4:cf:9a:29:d6:f0:2c:3e:c7:bf:cb:44:d1:3a:
93:72:3b:46:f0:c9:9e:e4:aa:21:d6:0f:2c:da:44:52:5f:fb:
20:62:10:33:95:34:b9:81:17:9d:92:5c:70:48:3b:cd:c3:c9:
56:62:41:ac:62:4b:6c:fb:ee:1d:42:5d:77:10:5e:9b:2f:bd:
5a:3d:b4:38:e2:7c:9b:b5:9f:db:db:f4:27:76:88:d0:49:57:
f0:d6:08:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:52 2025 by rpki-client