Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft
File: ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft (raw, json)
Hash identifier: 9XgbGII71bMMYv0yct0h7d9Vrl2fmqt7VEdb/Qk5qmI=
Subject key identifier: D5:CD:0D:E0:34:CB:C2:AB:B5:A7:8A:02:4E:A3:8B:F6:5A:B4:14:50
Authority key identifier: 66:BA:8D:64:E9:01:B3:9B:50:1E:D3:69:3E:C2:74:30:71:38:86:E3
Certificate issuer: /CN=66ba8d64e901b39b501ed3693ec27430713886e3
Certificate serial: 0198D583BD9137931209FD4EFE95EAF27621
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft
Manifest number: 0FB7
Signing time: Sat 23 Aug 2025 06:00:37 +0000
Manifest this update: Sat 23 Aug 2025 06:00:37 +0000
Manifest next update: Sun 24 Aug 2025 06:00:37 +0000
Files and hashes: 1: Fg0QsDS_oIn0AHFloFbOWLXLPYw.roa (hash: PCZ0sNE5BS8dEXbU+ksvDG3w1iOi7xIBrn9yDW7TZ/U=)
2: ZrqNZOkBs5tQHtNpPsJ0MHE4huM.crl (hash: wmkEaITfqJlyBBSPU23Cka/tLk+lrJhny352h3Unz3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:bd:91:37:93:12:09:fd:4e:fe:95:ea:f2:76:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ba8d64e901b39b501ed3693ec27430713886e3
Validity
Not Before: Aug 23 06:00:37 2025 GMT
Not After : Aug 24 06:00:37 2025 GMT
Subject: CN=d5cd0de034cbc2abb5a78a024ea38bf65ab41450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4b:af:e8:88:80:9a:7b:39:72:2f:0e:ab:db:
8c:aa:03:e3:16:9d:dd:1e:36:92:25:5d:b9:a5:74:
42:0e:1d:84:2d:c2:70:f6:6f:9d:d5:83:ed:82:be:
85:b7:6a:42:0d:06:d7:19:2f:0e:a0:c2:35:9e:4e:
73:bd:7d:c3:8a:31:6e:f4:d9:bb:4d:9b:92:a8:65:
0d:14:79:5a:df:6d:87:d7:55:2c:ec:33:15:f1:49:
2e:42:29:9b:c9:50:c2:37:df:de:a1:e2:26:35:6f:
9b:57:12:fe:7b:49:18:a9:35:5a:4b:b8:cf:ad:e4:
06:3f:5f:99:1c:79:b0:7d:b6:d8:f4:62:10:f5:0a:
26:59:bd:95:f9:60:66:fb:9f:cc:58:10:80:ae:a9:
7e:4d:bc:3e:14:e3:09:da:5d:06:24:d8:cc:88:06:
2b:29:31:4d:4a:9a:6a:2c:10:3e:6d:f2:6f:87:be:
0b:3c:20:cb:7e:56:c5:00:c6:af:4f:c8:59:5c:17:
6d:f2:5e:70:1a:7e:fe:d9:df:c4:e1:9b:b8:18:c5:
1b:af:fa:2c:69:3e:5a:6f:0e:49:4d:01:ad:f5:b2:
17:04:0a:36:a9:dc:a6:ef:0c:a2:60:04:1e:bb:f3:
51:f2:e5:8a:ef:9c:bb:c7:8c:90:a0:50:a6:6c:0f:
26:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CD:0D:E0:34:CB:C2:AB:B5:A7:8A:02:4E:A3:8B:F6:5A:B4:14:50
X509v3 Authority Key Identifier:
keyid:66:BA:8D:64:E9:01:B3:9B:50:1E:D3:69:3E:C2:74:30:71:38:86:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:14:f6:29:5c:93:23:68:9b:23:63:aa:39:24:5d:50:09:12:
46:c0:84:a4:2a:0c:1b:0c:91:3a:25:59:c6:6b:5a:d0:73:48:
46:35:d7:09:51:d3:6c:81:f8:a9:6e:83:99:ca:2b:64:d2:2d:
45:49:72:0e:10:51:9b:31:8e:6c:1e:df:26:a8:62:90:b2:02:
0a:e8:68:13:28:a6:f9:b5:0f:6b:93:f6:01:f1:64:4a:92:17:
06:72:c4:ea:24:ea:0d:e8:f2:e5:7d:bf:10:a7:5b:69:a6:c8:
ca:bc:f4:6f:7e:72:aa:a2:e0:bb:38:9f:85:07:00:49:b2:3d:
cc:53:6b:d6:58:10:4c:f7:54:2d:2e:a4:1e:9c:e4:c9:87:cd:
d0:41:42:1c:50:f9:15:68:09:74:57:db:29:ae:d6:f6:f3:10:
dd:89:65:ce:11:20:61:78:2d:e4:6b:6f:42:c2:4f:7f:99:a2:
fd:6e:76:ca:ed:8a:13:7d:7e:bf:6a:7d:48:d4:b2:75:ee:15:
20:b5:d5:8d:3a:66:b6:be:78:da:5c:41:c9:ed:2d:64:0d:93:
4b:c1:77:0f:6e:f9:5b:43:37:c2:0b:ba:03:c2:0e:1f:4a:e0:
98:13:42:2f:32:d3:18:ed:8f:9b:f1:fb:8d:9c:1b:24:6c:0b:
df:75:46:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:07 2025 by rpki-client