Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft
File: 1_ZqQbymh7J1jPx7scX0s0ae2HA.mft (raw, json)
Hash identifier: IgBTA7o8wvjX7g3ZB6cknXsrZijUgPO/ErE1fd8is4c=
Subject key identifier: 87:9D:0D:3A:70:AF:62:70:28:5E:37:44:5B:7C:F4:88:45:5C:AF:25
Authority key identifier: D7:F6:6A:41:BC:A6:87:B2:75:8C:FC:7B:B1:C5:F4:B3:46:9E:D8:70
Certificate issuer: /CN=d7f66a41bca687b2758cfc7bb1c5f4b3469ed870
Certificate serial: 0197B7B3565D5C69ECDFD46E3E8A3DA3A688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_ZqQbymh7J1jPx7scX0s0ae2HA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft
Manifest number: 1387
Signing time: Sat 28 Jun 2025 18:01:12 +0000
Manifest this update: Sat 28 Jun 2025 18:01:12 +0000
Manifest next update: Sun 29 Jun 2025 18:01:12 +0000
Files and hashes: 1: 1_ZqQbymh7J1jPx7scX0s0ae2HA.crl (hash: LyElqAzcJloAyRUYGdwV7v38bfY/u3d2e6h9QOiFw+E=)
2: sdPecCSO0KixXu_CzDAp6RAcnGQ.roa (hash: lK/qLvjn0531iisqXiHNH5vrvX6cngnheVb4lVEkcTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_ZqQbymh7J1jPx7scX0s0ae2HA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:56:5d:5c:69:ec:df:d4:6e:3e:8a:3d:a3:a6:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f66a41bca687b2758cfc7bb1c5f4b3469ed870
Validity
Not Before: Jun 28 18:01:12 2025 GMT
Not After : Jun 29 18:01:12 2025 GMT
Subject: CN=879d0d3a70af6270285e37445b7cf488455caf25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:94:29:79:fb:f4:b5:81:f0:b0:35:69:ec:cd:
ec:f3:f8:14:86:20:7d:79:4d:4f:ce:2e:2f:ad:1d:
97:ff:e4:bb:19:f1:b5:a0:42:e0:3e:3d:1c:96:8d:
32:26:48:2e:12:ed:a7:5f:96:a2:11:07:a5:4c:c5:
8d:9d:d1:a8:6b:9f:57:14:4e:ef:2c:49:ae:f9:fe:
58:00:65:d2:eb:61:a4:5f:e1:01:4f:34:56:6c:bd:
a1:43:14:93:3f:12:4f:ca:aa:b2:74:2b:e2:cb:a4:
81:f5:5b:9d:c3:99:9e:74:cd:14:ed:8c:27:35:83:
53:e6:6d:7b:26:10:e3:a7:26:bd:46:2f:67:f8:1e:
58:28:44:ea:96:db:0e:a4:b8:54:5f:e3:71:34:04:
38:e0:de:6b:d4:89:51:01:1d:3a:e2:a8:5b:ae:98:
58:58:ab:64:c5:f5:bb:fa:cd:e8:4b:08:54:85:b7:
bd:3c:41:65:03:e5:f5:0b:6f:a5:cf:49:7e:33:44:
79:10:a4:25:0a:9e:f9:72:3a:11:ca:5e:6f:bc:8e:
7b:07:5a:1f:70:6b:96:f8:95:e9:59:de:46:33:47:
19:f8:1f:a8:19:8d:bb:c7:8e:4a:74:10:85:40:52:
7b:e4:9d:bb:dd:c9:ad:05:13:dd:e8:7f:5e:e5:68:
1b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9D:0D:3A:70:AF:62:70:28:5E:37:44:5B:7C:F4:88:45:5C:AF:25
X509v3 Authority Key Identifier:
keyid:D7:F6:6A:41:BC:A6:87:B2:75:8C:FC:7B:B1:C5:F4:B3:46:9E:D8:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_ZqQbymh7J1jPx7scX0s0ae2HA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:55:39:44:87:0e:af:63:bb:2c:50:53:2e:4a:3c:5a:e6:b5:
20:50:ae:c2:7e:9f:e1:0f:cb:ac:99:b9:4b:2e:46:dc:69:62:
40:a4:f9:66:8e:b5:29:ea:f0:37:54:8b:ef:1e:66:e2:cc:3d:
5e:52:14:21:4f:1c:25:db:07:cc:84:0f:48:73:49:ce:53:0d:
9b:a6:09:3b:48:56:8a:4d:40:ee:89:ab:07:69:6d:f8:c2:fc:
44:b1:5b:38:60:37:58:4a:d8:40:4a:61:68:a3:8c:89:b6:8e:
70:e1:f3:65:70:2e:d4:55:08:30:50:58:d5:a0:24:75:21:b3:
92:11:b7:f9:4d:45:d4:9d:7f:29:58:a4:66:52:15:65:cc:36:
5d:2d:5f:ab:1a:ed:6c:be:7d:2e:1e:27:77:1f:db:58:f5:07:
0d:ef:96:20:cb:cf:05:17:6c:0c:9a:00:f0:c8:d0:92:ef:fd:
f4:6f:5f:e3:35:9e:6a:9e:e9:04:47:5b:2c:b6:1e:0e:32:23:
b1:d1:0a:89:59:76:69:97:52:3a:32:4b:66:8f:c3:87:1d:0b:
3a:27:24:8f:16:1b:58:a9:c2:d9:0a:21:f8:3c:18:2b:8f:5d:
55:86:b0:ae:c5:04:5f:2b:e7:1b:d8:ff:bf:a7:9a:90:ab:0a:
c3:86:d5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:27:07 2025 by rpki-client