Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft
File: Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft (raw, json)
Hash identifier: qZGlAYctaLL8p6BygCvJN4UzLPM70/5XqlWelTcrcG4=
Subject key identifier: 11:CB:7A:67:3D:8C:B7:18:B3:A7:8A:3A:92:C9:3E:CD:CB:B3:25:0F
Authority key identifier: 66:AF:1C:22:4D:B2:9A:51:04:A6:1A:AC:32:F6:09:56:02:5F:AD:43
Certificate issuer: /CN=66af1c224db29a5104a61aac32f60956025fad43
Certificate serial: 0198D5F1446551230C47237D7B64BA720EF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zq8cIk2ymlEEphqsMvYJVgJfrUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft
Manifest number: 0297
Signing time: Sat 23 Aug 2025 08:00:15 +0000
Manifest this update: Sat 23 Aug 2025 08:00:15 +0000
Manifest next update: Sun 24 Aug 2025 08:00:15 +0000
Files and hashes: 1: Zq8cIk2ymlEEphqsMvYJVgJfrUM.crl (hash: LKRDGcjHaF0bhLLpH+sh3DLaqUrm1ER4Z5EW1A8EMDM=)
2: gwfn3PT-MQqFFn_YZUn1VnSs404.roa (hash: c4zhho+aqNUoK7W7kOcrZMRa2YWQ2RPJhZe/PNQeRPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zq8cIk2ymlEEphqsMvYJVgJfrUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:44:65:51:23:0c:47:23:7d:7b:64:ba:72:0e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66af1c224db29a5104a61aac32f60956025fad43
Validity
Not Before: Aug 23 08:00:15 2025 GMT
Not After : Aug 24 08:00:15 2025 GMT
Subject: CN=11cb7a673d8cb718b3a78a3a92c93ecdcbb3250f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:44:58:37:82:95:49:94:28:6d:2e:ea:65:d7:
39:c5:9f:ef:0c:5c:a6:ff:50:2b:95:7a:67:a9:0e:
91:87:ff:6b:d5:db:73:f8:7a:3b:52:b4:18:55:5b:
a4:7e:3f:e6:7f:8e:c1:f7:a5:cf:ba:60:b3:b2:1b:
13:55:a9:c9:8d:6e:68:cf:00:29:08:ca:4b:ad:bb:
4c:0c:49:76:c4:3a:ff:1e:7a:34:70:bb:82:bd:dc:
e8:ef:36:26:d1:86:57:7f:09:65:e0:b6:15:29:9e:
1a:e6:c0:7a:13:14:1d:fe:c8:e9:85:a9:17:b1:99:
d8:9a:96:63:1a:b2:16:84:63:65:0d:7c:87:45:4f:
07:60:09:28:60:19:5f:3f:67:aa:2d:04:a2:b2:59:
1c:a2:2e:89:5c:00:fa:7c:2b:e3:be:b8:ea:66:aa:
f8:9b:d1:04:5b:88:62:4b:d6:35:cc:7d:ff:42:72:
02:60:04:43:3e:96:4f:de:12:33:45:c9:ff:5b:c2:
a4:b3:ab:38:ec:2d:c9:c2:64:cb:bd:96:1d:b5:89:
35:d2:7e:26:6c:29:c3:e1:f0:92:b4:33:08:b3:20:
b0:17:7d:29:f4:88:cf:ec:47:16:c5:0d:b5:d4:03:
ff:3b:23:c0:7f:ec:b6:28:ac:57:99:52:44:9f:1f:
42:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CB:7A:67:3D:8C:B7:18:B3:A7:8A:3A:92:C9:3E:CD:CB:B3:25:0F
X509v3 Authority Key Identifier:
keyid:66:AF:1C:22:4D:B2:9A:51:04:A6:1A:AC:32:F6:09:56:02:5F:AD:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zq8cIk2ymlEEphqsMvYJVgJfrUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:c3:63:0b:60:15:40:2a:e9:8c:ca:98:4b:04:f9:7b:9d:2f:
c6:c7:da:4a:1d:b6:b8:d7:cc:85:8d:85:cf:d6:86:b9:8e:4d:
35:56:23:05:41:ef:9c:36:f3:62:ab:20:8c:31:61:fb:67:1c:
7e:85:0f:5d:d5:e2:ed:19:b5:c7:68:ab:1c:21:e5:8d:f5:a9:
87:33:78:18:ae:ed:27:9a:b3:d3:b4:08:2f:0b:19:6e:96:f3:
10:80:46:c8:48:cb:42:1d:61:3c:82:6f:77:46:56:84:bd:d0:
eb:9c:4b:e7:14:45:86:32:14:9e:5a:52:4b:f8:f0:89:4a:1e:
a3:31:fa:c8:9e:5b:36:14:b1:30:c4:0c:6c:23:78:cc:e2:7a:
a5:2d:bb:6e:90:07:b1:5f:3f:81:52:b0:cd:57:65:94:a9:47:
e1:a7:87:a1:be:fe:91:98:f3:e5:c2:57:64:08:54:cb:b7:82:
82:f7:05:20:cf:0f:00:fb:23:09:77:e9:63:9d:a3:6b:db:3a:
4c:3a:b9:b3:e9:8c:43:ea:69:6c:30:34:10:ab:24:d8:34:b4:
a6:93:1c:a0:a3:77:eb:b0:70:34:8a:cc:ce:7c:23:8f:81:70:
6f:b0:b1:8e:d1:c7:1a:d9:e6:27:05:8a:37:c1:b4:77:7e:06:
e4:99:7d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:36 2025 by rpki-client