Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
File: zoqNQOQ3rfSs182zjgQCR3ouUaY.mft (raw, json)
Hash identifier: w9ZKjDhHBKSDm1v51A3Mx0dWjwrvvxp9yolA/GI4wR8=
Subject key identifier: 2A:69:8D:62:EE:4C:60:20:3F:53:93:06:82:FB:C6:1A:E3:5D:DB:34
Authority key identifier: CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6
Certificate issuer: /CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6
Certificate serial: 0197CB02E44A38F0D0BBDA413BEEE2C41AF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
Manifest number: 08D2
Signing time: Wed 02 Jul 2025 12:00:53 +0000
Manifest this update: Wed 02 Jul 2025 12:00:53 +0000
Manifest next update: Thu 03 Jul 2025 12:00:53 +0000
Files and hashes: 1: ZU0tNOC8sQ8jU4fobxNoGMM10f0.roa (hash: QwRQZ/MqRHfZYgeS/1/5p5EaEsQfSDsz5C+SoKx9QXA=)
2: tBAnS3ymUAQmGfi4CNowsEWHdl4.roa (hash: cxNoVhZk6fGnu1pynsqNRKY+P3+OdQAptw2DD5peCyU=)
3: zoqNQOQ3rfSs182zjgQCR3ouUaY.crl (hash: 0NQTi8FyQMlecXDUPT+gLMUpUIOdSKK7nY89GVlBeAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:02:e4:4a:38:f0:d0:bb:da:41:3b:ee:e2:c4:1a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6
Validity
Not Before: Jul 2 12:00:53 2025 GMT
Not After : Jul 3 12:00:53 2025 GMT
Subject: CN=2a698d62ee4c60203f53930682fbc61ae35ddb34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ae:05:f6:07:59:47:a3:34:d6:22:8a:ba:7d:
ec:2f:e6:6b:0e:2e:27:76:a0:88:67:ff:19:f1:58:
ac:aa:7b:8d:5c:33:cb:c8:04:22:f4:2c:98:c1:cd:
19:87:08:4a:31:c3:2b:04:a5:3d:27:98:b4:5a:71:
40:cb:58:23:31:db:93:a0:76:b1:d5:04:10:93:06:
97:9b:ef:e1:b2:d9:36:5b:70:04:d4:cb:8e:6b:ef:
cd:43:4d:63:e6:85:98:1a:69:f9:d9:dc:e3:33:3e:
2f:a5:66:a3:10:0f:17:6a:ef:5d:f7:45:a1:4f:04:
dd:23:86:8f:f4:be:4c:7f:da:b3:cb:b7:b3:ea:4a:
46:9c:89:df:b9:f6:dd:c3:5c:f7:7f:5b:0d:b9:c8:
91:c2:de:b4:a6:0c:3c:ef:5d:5d:bc:f7:58:e6:0f:
70:f2:65:17:59:ae:76:59:2b:0e:bb:9d:bc:40:9c:
57:ee:c0:27:34:6c:2e:a1:a3:ca:23:f9:1b:03:be:
0c:6d:cf:bd:f1:66:7f:3f:6c:4c:58:3b:51:87:c3:
29:f8:72:0a:80:f8:6c:20:92:2b:18:17:40:d5:84:
37:80:c9:d0:5f:66:10:e1:6a:32:d8:97:59:f7:ce:
d1:39:2f:f9:91:3c:e7:ee:2e:f8:9a:82:78:15:c7:
d2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:69:8D:62:EE:4C:60:20:3F:53:93:06:82:FB:C6:1A:E3:5D:DB:34
X509v3 Authority Key Identifier:
keyid:CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:cd:7f:f6:51:5f:22:15:94:d4:4b:2e:fb:50:76:4b:cf:97:
6e:85:19:a0:b7:d8:81:92:b5:76:03:fe:32:73:37:6c:86:1b:
e8:f7:bf:18:39:f1:16:01:bc:8a:a1:be:2c:e4:de:98:ea:e4:
65:f7:12:a0:e2:e5:92:2c:10:6a:ee:cd:59:67:0b:b7:e0:a0:
5f:4b:0e:ea:00:08:bf:28:31:ae:96:6e:90:90:15:dd:a8:32:
84:94:92:e4:0a:ae:43:07:bf:49:fc:78:09:dd:8c:0a:01:21:
33:d7:e3:94:d2:8d:f8:5d:eb:b1:35:69:47:c4:55:17:9c:72:
b9:c3:52:75:46:4e:07:90:21:3f:c6:ae:65:cc:29:fa:29:77:
74:ad:92:af:29:27:68:a7:54:ec:2e:d6:97:60:de:08:6b:61:
45:4c:9a:1a:b1:cc:89:71:ce:b4:6b:6a:2c:ed:e3:29:89:d0:
cd:a6:6a:c5:dd:5c:5a:23:df:29:9d:dd:71:d7:2e:75:35:60:
50:23:9f:7b:27:ac:ac:04:65:d0:ae:1a:9d:c3:69:38:bb:c7:
cd:c6:4a:64:3b:90:0c:ba:2c:08:20:08:54:21:04:69:d2:cd:
ca:8a:9b:f3:3d:b2:b1:e1:60:a6:d4:4e:8e:b6:79:fd:67:8c:
93:2a:5f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:19:27 2025 by rpki-client