Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
File: ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft (raw, json)
Hash identifier: tdQWEyA1purg+CHkgN6e/Mr6WUO+ByTJMV+xiA4wnZU=
Subject key identifier: 37:9B:91:31:9D:20:3B:EB:46:5D:7D:0A:33:B1:DC:16:3C:F8:87:F9
Authority key identifier: 66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7
Certificate issuer: /CN=66a832244d0e23f5f28b3a6def7afc01b22521c7
Certificate serial: 019847ADFD0254F710434E62543BD49CA831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
Manifest number: 09E9
Signing time: Sat 26 Jul 2025 17:00:41 +0000
Manifest this update: Sat 26 Jul 2025 17:00:41 +0000
Manifest next update: Sun 27 Jul 2025 17:00:41 +0000
Files and hashes: 1: ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl (hash: fVdmiQbFw7f3OdO1CiEZpZOUFKDuvosDMIgYbV4Qi8o=)
2: _QNn8i-0tIKLRcq_eDgA2QsLdiA.roa (hash: QiOA4Z6p5RQwq3aK0bHpaTuhZajM0dodRW/v7+6NMjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 17:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:fd:02:54:f7:10:43:4e:62:54:3b:d4:9c:a8:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66a832244d0e23f5f28b3a6def7afc01b22521c7
Validity
Not Before: Jul 26 17:00:41 2025 GMT
Not After : Jul 27 17:00:41 2025 GMT
Subject: CN=379b91319d203beb465d7d0a33b1dc163cf887f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c4:9c:e5:c8:f7:28:c8:3b:d8:d2:1e:36:52:
93:21:e1:18:6f:c0:e8:81:d5:b3:91:cd:e9:54:28:
f4:e9:60:ce:c5:3e:a7:2e:9f:8d:b1:c2:24:cc:bd:
f0:07:8c:11:d4:3a:ed:ab:bc:f5:13:74:96:1a:a3:
dd:61:8c:eb:6e:d4:fc:8c:3e:6b:72:d1:b1:36:c6:
17:d9:20:bf:83:f0:1f:5d:f9:6a:9b:63:e0:af:32:
8e:e1:f4:ec:54:8d:e5:0f:45:70:a5:ae:65:ac:3b:
52:13:b6:98:3c:7c:05:8f:d3:7c:dc:4f:e9:6c:37:
30:3f:3d:1b:d7:50:d6:e6:94:ae:e5:63:4c:c9:29:
29:f1:89:ff:bb:09:de:cb:07:a9:f3:92:94:42:83:
aa:e8:f6:5c:63:66:bf:5c:8a:11:14:be:16:8e:6c:
13:c3:d9:80:3b:ff:6c:e8:14:bf:21:ce:24:04:e9:
26:3f:df:fd:7d:eb:9f:4d:a8:73:99:9a:e7:69:0d:
d7:5b:5e:29:1b:91:39:3c:4b:4f:78:fd:03:7e:f4:
e1:df:ae:e7:bc:da:20:84:ff:57:f7:00:68:dc:ef:
6f:0c:cb:d6:69:5e:9c:92:ef:83:a7:e8:cf:48:2e:
32:20:d5:a5:7c:1f:8a:ca:27:14:f7:3e:e0:13:8a:
59:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:9B:91:31:9D:20:3B:EB:46:5D:7D:0A:33:B1:DC:16:3C:F8:87:F9
X509v3 Authority Key Identifier:
keyid:66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:bc:07:65:d4:25:f1:e7:6e:03:cc:c7:70:92:70:57:a3:b3:
9d:72:ff:e7:d2:d9:55:8d:77:1e:d4:0d:f5:38:1c:07:22:d9:
14:99:ca:b5:80:1d:14:f2:41:7e:ff:75:ec:d5:11:73:e9:b5:
6a:af:0e:43:d0:9b:55:0f:39:53:f7:e2:e0:28:7e:bd:9b:07:
7e:09:e2:92:72:dc:40:db:6b:d1:9c:0e:24:94:dc:de:b5:b3:
80:39:25:ad:f1:12:ed:70:c8:4c:9c:43:ba:1a:00:02:1c:74:
36:34:a4:66:86:cd:50:73:d3:5c:82:26:f8:92:6b:b2:56:d7:
4c:9e:11:c5:3e:7a:ca:59:9d:e8:d0:59:c1:50:ce:57:fd:3c:
25:1d:6a:46:31:02:ad:f2:60:97:16:f5:80:1f:f4:d7:0b:01:
ec:42:a8:13:d2:da:91:76:7c:17:77:46:a5:14:0f:91:2f:2e:
f3:13:37:eb:45:70:78:5b:84:6a:ba:76:7e:3d:9e:c5:be:6d:
5b:2a:87:41:d9:bd:46:4e:72:c5:77:2e:93:31:ec:f7:cd:1a:
15:ee:8c:ce:9d:04:11:08:b1:01:cb:8c:e0:3e:01:06:3a:c0:
e4:9c:15:83:7d:a9:52:a0:72:62:46:84:dd:3c:fe:46:07:b5:
8a:65:a4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:33:51 2025 by rpki-client