Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft
File: Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft (raw, json)
Hash identifier: 6Zed9Hn2WS+ZZK4mK9m12Y/Eu1eyI7tKm0okl5pE4+o=
Subject key identifier: BC:78:11:24:21:CB:87:0A:0D:5C:CB:4A:AD:C2:D8:15:49:27:70:F6
Authority key identifier: 66:AF:1C:22:4D:B2:9A:51:04:A6:1A:AC:32:F6:09:56:02:5F:AD:43
Certificate issuer: /CN=66af1c224db29a5104a61aac32f60956025fad43
Certificate serial: 0199FC8F2472CF5E5C4A6DDCF89597F4B21A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zq8cIk2ymlEEphqsMvYJVgJfrUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft
Manifest number: 0330
Signing time: Sun 19 Oct 2025 13:01:03 +0000
Manifest this update: Sun 19 Oct 2025 13:01:03 +0000
Manifest next update: Mon 20 Oct 2025 13:01:03 +0000
Files and hashes: 1: 2f3iJSIm_gwsjLqHKwwPCgVXmU4.roa (hash: N9m+XB9yu5/umOhHO4AH3n4GJdoAiP1f7gS+JghQR/w=)
2: Zq8cIk2ymlEEphqsMvYJVgJfrUM.crl (hash: EfCEO+bAOLNli0NXEFL7Yd4OdEGkmwz/fZcbbiFQlI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zq8cIk2ymlEEphqsMvYJVgJfrUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:24:72:cf:5e:5c:4a:6d:dc:f8:95:97:f4:b2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66af1c224db29a5104a61aac32f60956025fad43
Validity
Not Before: Oct 19 13:01:03 2025 GMT
Not After : Oct 20 13:01:03 2025 GMT
Subject: CN=bc78112421cb870a0d5ccb4aadc2d815492770f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8a:72:82:83:1b:bb:ef:45:16:59:87:95:32:
71:f3:64:c3:f5:75:aa:54:0b:58:0c:60:0c:3b:96:
76:58:1d:76:96:7a:0b:c9:8a:27:2e:7f:da:03:bd:
e1:4b:b7:93:e0:b6:86:d0:db:be:67:57:93:91:30:
36:7f:f8:d8:c8:9b:b1:a0:1d:ef:cc:7c:5e:b0:d3:
5d:b3:c5:e1:e5:83:0f:f7:e4:26:fc:d5:59:20:c7:
1e:09:21:e3:05:cc:f3:76:73:a3:5b:a5:b2:6e:7d:
e2:ac:b1:7f:5f:c3:1e:f7:97:76:3d:15:8c:b3:99:
6c:39:d5:24:34:7a:14:4f:2e:a2:ae:07:2e:93:ec:
e5:69:26:99:91:6c:ca:44:e8:62:47:51:e1:84:92:
74:d6:de:0c:18:ce:e1:5c:36:ec:91:1c:3e:52:62:
fe:9a:42:65:fe:56:45:56:1b:6f:32:1c:f9:8c:a1:
7c:2c:bf:24:c1:77:11:17:ef:cf:4d:70:88:47:58:
5b:cb:9f:c5:a7:07:77:c7:10:96:e6:29:05:b9:73:
8c:00:c4:3b:23:49:52:9b:29:1c:6e:d8:ff:8f:8e:
0f:94:47:67:2b:ee:61:c3:28:78:4f:ac:27:2d:7d:
ec:2d:8b:8b:2a:55:b8:27:5d:d6:ed:01:dc:3c:84:
8c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:78:11:24:21:CB:87:0A:0D:5C:CB:4A:AD:C2:D8:15:49:27:70:F6
X509v3 Authority Key Identifier:
keyid:66:AF:1C:22:4D:B2:9A:51:04:A6:1A:AC:32:F6:09:56:02:5F:AD:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zq8cIk2ymlEEphqsMvYJVgJfrUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:46:d5:3a:42:79:c5:58:13:43:a5:3c:6c:5d:fd:5c:d3:3b:
e4:42:81:ed:d1:0e:dd:14:8c:e8:01:94:4f:92:de:c5:b3:b7:
74:0a:41:67:5a:00:c7:f5:3a:b5:01:20:ef:74:bf:81:91:c5:
88:26:eb:c5:25:ce:b8:ad:3d:fa:fe:01:a7:3e:04:f4:f0:3f:
98:49:e2:07:94:09:03:07:5b:a3:dd:d4:0c:d5:ed:f1:f9:54:
b9:65:f2:26:1f:ac:86:fc:18:50:80:c8:40:54:c0:0c:54:df:
9f:f0:e5:9f:2e:f8:ab:05:ae:9d:7b:44:e3:d2:69:40:90:9f:
7c:13:81:6e:38:f6:c6:a4:af:e2:60:f5:ef:bb:00:ec:ec:c5:
c6:13:02:92:9b:bc:df:30:d6:a0:81:b8:4f:ca:54:02:14:c4:
c7:93:2a:6c:2e:e9:7e:ba:75:b6:19:98:ad:3f:ec:ae:ab:f5:
01:62:4a:3d:41:0f:96:04:ad:7d:26:91:84:94:88:13:ca:9c:
76:bf:9d:ae:fc:3a:4a:bb:7f:d4:7d:e8:98:4c:97:b0:a8:d5:
8e:5e:3d:dd:c7:93:bd:33:79:ce:9c:08:27:25:d1:8d:a2:e8:
76:84:34:48:cb:0b:0d:62:5b:4d:e2:a9:21:1e:aa:73:4c:c3:
1e:08:05:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:54 2025 by rpki-client