Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
File: ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft (raw, json)
Hash identifier: pZclSa3UtGkfO2oP83iIUfVHYJMPEoow4EG2+6/egf8=
Subject key identifier: 79:7F:AD:F9:3D:D2:6C:D0:78:36:50:38:9F:EC:6B:F5:91:FF:7D:2B
Authority key identifier: 65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
Certificate issuer: /CN=65a424cee2fdb0072b541438d913d26636a9b88b
Certificate serial: 0198D54E71EC61A4F6AC91244143971B87A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
Manifest number: 1651
Signing time: Sat 23 Aug 2025 05:02:24 +0000
Manifest this update: Sat 23 Aug 2025 05:02:24 +0000
Manifest next update: Sun 24 Aug 2025 05:02:24 +0000
Files and hashes: 1: ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl (hash: 7N+hiJ2rX3feJQYwYykVj4n2TU7wK7S399M21uij2B4=)
2: qyP6ZOFyUvmIxsAwvIR1crurzkA.roa (hash: ATCZOmbWRgy8PLsqpH1t1OGoSYpKTwjDGworctuzaMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:71:ec:61:a4:f6:ac:91:24:41:43:97:1b:87:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a424cee2fdb0072b541438d913d26636a9b88b
Validity
Not Before: Aug 23 05:02:24 2025 GMT
Not After : Aug 24 05:02:24 2025 GMT
Subject: CN=797fadf93dd26cd0783650389fec6bf591ff7d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:de:83:00:02:f1:a2:a2:a3:33:e2:c9:31:5e:
66:d5:fc:75:7e:50:b3:c8:e5:f9:b6:36:e5:ea:cd:
28:71:85:a5:57:7b:a4:8c:8f:73:44:6c:44:50:ba:
c4:97:68:84:9d:58:43:42:08:d5:83:2f:cc:6a:53:
41:21:be:39:02:86:c4:8e:a6:d0:d9:c7:d1:b2:03:
f8:1e:cd:5c:91:e8:fb:14:6c:78:7a:5b:4a:54:f6:
83:a8:d8:bb:18:62:b0:58:65:a5:a2:0a:28:4f:49:
8c:18:73:6e:e4:1a:cc:39:d7:4b:71:13:8d:32:bb:
a9:20:23:d8:ea:9e:e7:3a:e9:77:92:7e:8f:af:d8:
78:5f:b2:a5:13:98:38:99:ba:1e:8d:9d:37:36:78:
38:57:6b:77:14:94:d7:61:8f:7b:af:af:b9:60:84:
0d:a7:83:b5:47:3c:4e:fd:8c:56:4f:f6:50:f7:bb:
65:a9:05:3e:aa:a4:b3:8b:e3:f9:89:0a:50:9b:5d:
19:e6:5c:a3:8f:b4:12:46:a9:e7:79:33:7c:d1:42:
69:c3:13:0f:45:2a:3c:5b:8b:5f:77:5c:df:63:1d:
fa:71:51:26:13:0f:91:07:73:b3:5f:a4:7e:82:1e:
3d:f9:50:9b:47:50:e3:f2:ca:25:46:8c:13:1f:38:
0f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7F:AD:F9:3D:D2:6C:D0:78:36:50:38:9F:EC:6B:F5:91:FF:7D:2B
X509v3 Authority Key Identifier:
keyid:65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:0a:78:b1:9c:fa:58:2e:79:41:92:a3:0b:92:97:a6:e5:2f:
3c:34:ff:a4:cd:0b:1a:5b:5d:41:43:ea:b7:0d:ab:83:62:35:
da:3e:b9:34:61:f5:0b:5f:85:d2:7c:48:d0:45:94:e0:4a:af:
fc:ca:8c:fe:90:33:56:f7:51:ae:a2:44:19:3c:af:5b:3d:4d:
15:fd:88:b9:26:bc:8f:0e:5d:b7:52:ed:0c:63:a1:d2:3c:ea:
af:38:0b:90:a2:d7:80:cd:8a:26:ac:86:80:23:5c:29:14:06:
ba:59:5c:f8:59:fe:be:4e:5e:1c:26:9f:1f:9b:bc:8f:4c:3c:
3c:4b:3f:9c:dd:41:e1:9f:c8:a2:af:d4:28:16:1a:8c:eb:e3:
31:99:78:9b:e5:9d:78:50:1d:ca:6b:5e:0d:5a:c7:cb:69:d1:
e0:00:81:95:93:64:06:d3:df:37:8c:bb:26:91:b0:c4:18:0e:
5c:2e:18:22:61:6b:0c:3b:6f:91:98:6d:ae:a9:02:18:a0:20:
09:d4:bf:d9:f6:bc:e7:7a:bb:01:7c:a1:f1:f2:f6:af:55:c3:
bb:5e:05:21:b4:f6:25:fb:72:b9:24:c8:42:47:c4:2c:7c:3a:
ef:ad:bf:ae:87:37:1a:57:5e:3f:b4:97:67:c9:18:31:60:87:
36:01:af:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:49 2025 by rpki-client