
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft
File: zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft (raw, json)
Hash identifier: tWrBi0FE9Tqiiq2BZ57QDbvFkvPSMhX9MbOYvWCoRYw=
Subject key identifier: 7D:28:B8:7C:E2:30:48:41:21:D1:FD:6E:D8:35:F5:17:4F:F6:6C:0D
Authority key identifier: CC:1A:9F:72:93:88:C1:69:BA:CC:1C:BA:F9:8E:23:6D:4E:80:8A:B4
Certificate issuer: /CN=cc1a9f729388c169bacc1cbaf98e236d4e808ab4
Certificate serial: 0198D472D6A0D3E83B04AF2E0B658475F191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft
Manifest number: 01D1
Signing time: Sat 23 Aug 2025 01:02:32 +0000
Manifest this update: Sat 23 Aug 2025 01:02:32 +0000
Manifest next update: Sun 24 Aug 2025 01:02:32 +0000
Files and hashes: 1: 1-YCQCphk32b8tDaXBmol_BTFhAA.roa (hash: vDe37BPFiFzh2DmP54Y2HTtv1UAWo0nqbWO5t7R6/68=)
2: zBqfcpOIwWm6zBy6-Y4jbU6AirQ.crl (hash: Dpnr13jIAiJ6kiumM2MVgeoqky7mvRosoArhXizTLjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:d6:a0:d3:e8:3b:04:af:2e:0b:65:84:75:f1:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1a9f729388c169bacc1cbaf98e236d4e808ab4
Validity
Not Before: Aug 23 01:02:32 2025 GMT
Not After : Aug 24 01:02:32 2025 GMT
Subject: CN=7d28b87ce230484121d1fd6ed835f5174ff66c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:89:93:13:6a:e3:aa:e6:75:f6:87:0c:2e:68:
68:4b:d9:86:86:f9:6a:96:52:33:bb:48:1b:fa:3b:
17:8e:15:40:1e:54:77:72:4a:da:28:dc:67:e3:8c:
c0:fd:01:2b:5a:46:58:46:11:60:6b:87:6b:bb:16:
f0:d6:d3:4f:2c:f2:69:1a:7d:72:79:c5:26:58:3e:
51:89:5a:82:e9:9e:87:98:48:ee:be:dc:44:4a:ed:
a2:a7:79:22:93:e8:5d:0b:8d:84:1f:6f:c4:ab:2f:
a1:fa:dc:d9:a2:b0:3c:cd:91:cb:e7:36:5c:68:74:
3a:6b:28:05:c8:0f:6a:67:ed:ff:84:8c:61:0b:bf:
c3:8e:e1:40:25:2b:f6:8d:43:32:13:d7:e9:2d:96:
2d:b7:ca:5e:4b:64:e8:2f:59:43:0c:f5:6f:f8:14:
0e:61:55:4f:c8:1a:6c:68:61:89:25:f8:64:fe:70:
9f:a9:1f:44:00:39:86:b9:3b:e9:65:5e:31:b3:13:
3f:d6:40:7b:76:0b:6d:64:9c:79:71:15:97:89:a0:
7e:03:3f:7c:0c:2d:b7:be:67:ca:ca:52:e5:7c:5f:
2e:3a:0c:77:8a:57:d6:c3:16:49:21:ab:3f:3d:10:
4a:7c:69:52:06:c8:cf:b2:13:e0:09:fc:54:08:2f:
7d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:28:B8:7C:E2:30:48:41:21:D1:FD:6E:D8:35:F5:17:4F:F6:6C:0D
X509v3 Authority Key Identifier:
keyid:CC:1A:9F:72:93:88:C1:69:BA:CC:1C:BA:F9:8E:23:6D:4E:80:8A:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:dd:cb:2e:e2:c3:0f:dc:65:6d:89:37:82:00:96:ce:ca:cc:
32:4a:0e:9a:64:04:7b:6b:cf:2b:8f:67:d7:43:e6:d8:1a:65:
0b:40:33:8a:a9:40:b0:de:9f:85:55:14:c1:c6:ca:96:70:dd:
15:f1:6b:b3:b4:f3:aa:3f:96:b8:c3:a0:ff:7d:43:04:09:52:
c0:f6:a1:97:26:ee:a3:15:7d:fa:0e:3a:f8:60:6a:70:73:87:
52:25:fe:ca:84:b6:a0:e5:73:98:f1:08:22:0a:1d:fb:70:81:
a7:66:17:8d:56:3a:dc:10:ef:c4:36:f0:d5:c6:2c:29:ac:a5:
6e:10:d5:fc:27:f6:e8:ac:2d:7d:55:f7:45:67:ea:0b:bb:34:
88:4d:74:61:f9:a6:7f:0c:c3:21:54:8b:58:61:69:c7:4d:d5:
9b:f3:c1:74:b1:1d:50:20:ac:a4:8f:98:70:3d:3b:a4:b3:14:
c3:02:bb:82:35:2d:11:0c:fd:c4:9e:45:ab:21:35:1d:f1:47:
c0:e7:64:c7:e5:ad:b7:6d:77:5b:6f:8b:ae:a3:8c:47:41:28:
24:ef:ad:ce:bd:66:32:88:59:f0:d2:5f:d5:99:41:8a:e4:bb:
0f:17:58:81:1f:b8:7b:ff:8e:a9:7f:5d:12:65:50:6c:a9:64:
17:0e:a1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:22 2025 by rpki-client