Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft
File: 1_ZqQbymh7J1jPx7scX0s0ae2HA.mft (raw, json)
Hash identifier: XneFnCFMzwHZAbqSjNKYikVT1xm1exHVsTLLc+LBkRw=
Subject key identifier: 9E:3E:CD:43:04:05:A3:CD:04:97:23:BD:9D:B4:64:C0:89:57:46:54
Authority key identifier: D7:F6:6A:41:BC:A6:87:B2:75:8C:FC:7B:B1:C5:F4:B3:46:9E:D8:70
Certificate issuer: /CN=d7f66a41bca687b2758cfc7bb1c5f4b3469ed870
Certificate serial: 0198D7739FB6D6A0D2CD7C8608B26F60B5A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_ZqQbymh7J1jPx7scX0s0ae2HA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft
Manifest number: 141C
Signing time: Sat 23 Aug 2025 15:02:15 +0000
Manifest this update: Sat 23 Aug 2025 15:02:15 +0000
Manifest next update: Sun 24 Aug 2025 15:02:15 +0000
Files and hashes: 1: 1_ZqQbymh7J1jPx7scX0s0ae2HA.crl (hash: MsuxBCsQW2A35B4OUW46raujHHqwrZ6bpjERKsib77E=)
2: sdPecCSO0KixXu_CzDAp6RAcnGQ.roa (hash: lK/qLvjn0531iisqXiHNH5vrvX6cngnheVb4lVEkcTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_ZqQbymh7J1jPx7scX0s0ae2HA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:9f:b6:d6:a0:d2:cd:7c:86:08:b2:6f:60:b5:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f66a41bca687b2758cfc7bb1c5f4b3469ed870
Validity
Not Before: Aug 23 15:02:15 2025 GMT
Not After : Aug 24 15:02:15 2025 GMT
Subject: CN=9e3ecd430405a3cd049723bd9db464c089574654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f0:c0:41:1c:e4:32:fe:bc:33:70:52:11:0c:
1e:2a:a4:7a:78:98:24:86:87:3c:70:9c:e5:32:7c:
0b:ff:f6:94:eb:86:e2:f9:e7:b7:d3:70:fb:83:8b:
ec:6d:5a:e4:2b:ab:49:8a:e8:3d:04:78:21:fa:c6:
bc:1c:4c:5c:07:fd:c1:f6:36:9d:ef:67:a8:4d:15:
ad:e2:7f:88:8f:34:a2:15:52:de:57:2f:6e:9d:e3:
f0:7f:ac:e9:1e:ec:75:fd:81:df:d4:54:69:f8:c4:
6b:a6:76:1d:13:e2:75:3a:68:12:66:55:8f:7e:a2:
ee:f9:6c:7c:f4:77:3f:71:c7:7c:cf:87:68:5c:b8:
e9:f8:5c:c9:26:e8:e1:6d:d4:b6:f3:c8:be:70:7c:
ae:01:d8:66:72:d6:e0:d4:ae:33:6a:8f:c7:6a:1b:
79:63:e7:f7:04:b9:06:e0:aa:a0:e9:ee:74:b5:76:
9b:5e:3b:ec:96:58:ca:a3:fa:76:de:ef:26:df:24:
02:10:a1:e6:30:ac:65:64:61:d8:b1:39:ec:bb:dc:
f2:8f:73:b4:6b:6e:ee:a0:34:5a:53:f3:e3:d2:33:
2e:71:dd:cb:fd:e9:34:71:5a:63:67:6f:4c:2c:28:
d2:30:48:5a:29:90:c4:72:0a:66:38:5a:94:64:a1:
d6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3E:CD:43:04:05:A3:CD:04:97:23:BD:9D:B4:64:C0:89:57:46:54
X509v3 Authority Key Identifier:
keyid:D7:F6:6A:41:BC:A6:87:B2:75:8C:FC:7B:B1:C5:F4:B3:46:9E:D8:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_ZqQbymh7J1jPx7scX0s0ae2HA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d7:97:92:52:99:c2:9e:9e:f5:e9:92:92:3b:ff:53:51:6e:
8a:19:eb:4e:99:db:89:36:bf:22:07:fc:43:a0:70:cd:0b:89:
44:a1:5f:ac:5c:4f:64:40:c8:a3:27:ba:f4:7f:d6:32:ce:1d:
42:72:62:77:66:4e:7f:8f:f8:19:1e:e4:81:50:b5:2c:70:d1:
78:63:a9:89:cd:ca:19:22:8e:4e:b2:6f:59:b9:ad:04:81:86:
b2:3e:9f:08:93:6d:b9:47:9f:f9:8f:9a:42:75:5f:da:de:4c:
14:ab:88:96:42:f8:bd:8b:49:55:3a:c5:5d:98:95:83:ca:74:
3d:94:d6:89:68:4f:76:06:e5:a1:ee:4d:c9:a8:41:f1:f0:59:
65:f7:ae:8f:44:f2:5b:1d:79:4b:fe:4a:85:7e:6c:94:1f:9a:
c4:5f:56:ca:77:12:a2:1b:34:3d:f9:3b:70:a7:6f:e9:98:d0:
ad:9e:68:3a:cb:c9:30:8c:2a:d3:ca:8c:a8:d5:0c:55:c5:82:
d3:03:52:95:70:d5:0c:af:a4:15:2d:d1:e8:43:a8:45:50:bf:
a1:50:9c:05:7b:4b:10:32:57:0c:54:81:24:ff:df:6f:41:91:
f2:0b:65:0d:eb:c3:33:8c:73:a6:14:3e:90:47:35:5b:c0:3b:
05:ba:28:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:23:10 2025 by rpki-client