Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
File: ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft (raw, json)
Hash identifier: mVvTo7rhLqyApsNarIju4BYz2y5rlLlYU7g+eCpoK3k=
Subject key identifier: 66:C4:17:3F:44:2D:D7:37:DE:4A:9C:EB:50:2F:8B:C0:63:8D:20:99
Authority key identifier: 66:A1:D1:A0:17:80:2E:5C:57:DA:59:78:54:4F:C5:37:40:3D:A7:3A
Certificate issuer: /CN=66a1d1a017802e5c57da5978544fc537403da73a
Certificate serial: 0197B9D8D064E1584A7C9A9C98B20D9A70BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
Manifest number: 08CA
Signing time: Sun 29 Jun 2025 04:01:23 +0000
Manifest this update: Sun 29 Jun 2025 04:01:23 +0000
Manifest next update: Mon 30 Jun 2025 04:01:23 +0000
Files and hashes: 1: ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl (hash: UeL6B3uyjSXkR6LnwFs5aPSnAdjzYZUbcAkM1U4rx+4=)
2: hJbdYVF-sB2ARWcr3wLM-Bolskc.roa (hash: p8HLFjhLNYXJBjvp0Ydq3UNKZlQk3vcyaOZBKxCq5jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:d0:64:e1:58:4a:7c:9a:9c:98:b2:0d:9a:70:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66a1d1a017802e5c57da5978544fc537403da73a
Validity
Not Before: Jun 29 04:01:23 2025 GMT
Not After : Jun 30 04:01:23 2025 GMT
Subject: CN=66c4173f442dd737de4a9ceb502f8bc0638d2099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2c:42:ca:86:97:ac:f7:2c:24:5e:60:11:32:
61:e8:92:d9:d2:e6:a6:58:c8:c6:42:33:50:3c:fc:
d1:7c:a0:ce:a4:c3:3c:50:e1:bf:70:62:99:7f:b7:
45:a0:46:83:9c:46:80:5d:b1:87:ce:70:05:8e:db:
59:59:68:3c:24:ee:98:89:76:a2:47:87:ec:8b:58:
56:8a:3c:d7:8a:dd:a4:4b:5a:43:0e:61:72:ca:a0:
7f:82:8a:f0:fb:91:8a:2c:3b:38:32:d1:02:7b:7f:
80:7e:6d:9a:bd:c5:9c:24:1f:61:85:9e:0d:14:c1:
68:9f:84:7e:07:72:b8:0d:cd:c5:32:65:fa:a9:96:
ed:03:cd:48:42:b2:f8:f6:ba:5f:3f:a1:60:9b:26:
10:c4:55:11:a8:10:91:52:a6:0c:96:3d:e4:b5:d0:
cd:df:45:19:cb:40:40:19:e7:cd:8f:83:f0:23:08:
e1:87:8d:13:e9:ac:47:b7:71:a1:d8:8d:5f:9b:7c:
54:0a:6b:ff:3e:6e:91:c9:f8:76:a4:29:5b:65:f6:
f9:20:48:44:c9:56:0a:6e:b0:65:0f:49:b5:fa:ac:
29:94:d6:ca:21:fd:7c:68:6a:58:80:3b:b8:13:eb:
a0:57:28:36:17:91:9f:65:a7:86:f3:87:bc:8a:ae:
77:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C4:17:3F:44:2D:D7:37:DE:4A:9C:EB:50:2F:8B:C0:63:8D:20:99
X509v3 Authority Key Identifier:
keyid:66:A1:D1:A0:17:80:2E:5C:57:DA:59:78:54:4F:C5:37:40:3D:A7:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:79:5a:0f:ac:95:2f:3b:8c:ad:39:20:55:08:02:00:dc:b5:
e9:ad:9d:8c:83:a5:0c:f7:fc:46:17:81:9c:64:f8:74:8b:90:
ac:14:32:0b:8a:f8:39:7e:47:8e:0e:5e:d4:7e:c1:34:e4:6b:
bd:c4:66:4e:0d:a1:89:35:a9:81:fa:d6:b2:df:e0:3e:91:9b:
36:99:4d:54:33:67:74:02:48:41:58:42:1b:d9:dc:99:4b:b0:
53:cd:7f:e4:50:1c:50:08:e7:1e:f1:0c:e4:16:a0:4b:10:5a:
86:e4:48:2d:a2:13:87:85:87:55:fc:0f:78:1c:1c:60:85:83:
cc:52:f4:f0:29:4e:37:b9:cb:26:45:2c:f1:37:29:e9:91:60:
3c:20:9f:17:99:7f:6d:b7:5a:cc:73:31:34:e8:dd:2e:e3:2f:
7e:99:0b:80:ef:0b:07:0e:b8:a9:f0:24:45:1e:26:13:1b:0d:
3b:5a:2b:95:71:d9:44:17:8a:3c:ba:6a:f6:31:2c:e6:da:64:
25:71:72:98:c2:2e:15:69:0f:8c:23:ba:2e:94:95:94:03:83:
c6:33:e9:57:15:89:8a:18:5b:a7:60:9d:ce:69:fa:b1:b4:8a:
1b:52:ee:03:23:54:1c:1f:0f:7d:4a:09:b9:11:1a:a9:14:48:
f3:a7:75:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe52NBk4VhKfJqcmLINmnC8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2YTFkMWEwMTc4MDJlNWM1N2RhNTk3ODU0NGZjNTM3NDAz
ZGE3M2EwHhcNMjUwNjI5MDQwMTIzWhcNMjUwNjMwMDQwMTIzWjAzMTEwLwYDVQQD
Eyg2NmM0MTczZjQ0MmRkNzM3ZGU0YTljZWI1MDJmOGJjMDYzOGQyMDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSxCyoaXrPcsJF5gETJh6JLZ0uam
WMjGQjNQPPzRfKDOpMM8UOG/cGKZf7dFoEaDnEaAXbGHznAFjttZWWg8JO6YiXai
R4fsi1hWijzXit2kS1pDDmFyyqB/gorw+5GKLDs4MtECe3+Afm2avcWcJB9hhZ4N
FMFon4R+B3K4Dc3FMmX6qZbtA81IQrL49rpfP6FgmyYQxFURqBCRUqYMlj3ktdDN
30UZy0BAGefNj4PwIwjhh40T6axHt3Gh2I1fm3xUCmv/Pm6Ryfh2pClbZfb5IEhE
yVYKbrBlD0m1+qwplNbKIf18aGpYgDu4E+ugVyg2F5GfZaeG84e8iq53EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGbEFz9ELdc33kqc61Avi8BjjSCZMB8GA1UdIwQY
MBaAFGah0aAXgC5cV9pZeFRPxTdAPac6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnFIUm9CZUFMbHhYMmxsNFZFX0ZOMEE5cHpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85MTU0OGItYmFiNS00NTRjLWI2MGIt
MTlmMmExZDE2MDMzLzEvWnFIUm9CZUFMbHhYMmxsNFZFX0ZOMEE5cHpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85MTU0OGItYmFiNS00NTRjLWI2MGItMTlmMmExZDE2MDMz
LzEvWnFIUm9CZUFMbHhYMmxsNFZFX0ZOMEE5cHpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcXlaD6yV
LzuMrTkgVQgCANy16a2djIOlDPf8RheBnGT4dIuQrBQyC4r4OX5Hjg5e1H7BNORr
vcRmTg2hiTWpgfrWst/gPpGbNplNVDNndAJIQVhCG9ncmUuwU81/5FAcUAjnHvEM
5BagSxBahuRILaITh4WHVfwPeBwcYIWDzFL08ClON7nLJkUs8Tcp6ZFgPCCfF5l/
bbdazHMxNOjdLuMvfpkLgO8LBw64qfAkRR4mExsNO1orlXHZRBeKPLpq9jEs5tpk
JXFymMIuFWkPjCO6LpSVlAODxjPpVxWJihhbp2Cdzmn6sbSKG1LuAyNUHB8PfUoJ
uREaqRRI86d1WQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 14:42:42 2025 by rpki-client