Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
File: ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft (raw, json)
Hash identifier: /IC0IrzGlVE/i1H7J8wDkzFZwm5cavK7OEU819FQKy8=
Subject key identifier: 3D:56:D6:31:66:64:1F:C8:BF:19:EF:BC:FD:62:75:DE:84:58:ED:75
Authority key identifier: 65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0
Certificate issuer: /CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
Certificate serial: 019847E4627445E20EAF2BDB680E65FC6AF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 18:00:06 +0000
Manifest this update: Sat 26 Jul 2025 18:00:06 +0000
Manifest next update: Sun 27 Jul 2025 18:00:06 +0000
Files and hashes: 1: 4GHtaL2ENr8x0dHCgzjR-2oufsc.roa (hash: SkJfNfL4xk1uCL5vaUVq92gTeEiReavJzDd3NtKKtoQ=)
2: P4Bbz81DKVf659V7Pusw5yxnCg8.roa (hash: 6mtNya9D4eJ+7094qYmfrW/oPVu6b8pgbmkAvNwldHc=)
3: ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl (hash: VU5fuc49kIL/hVa0uG4Czi9jk3CF1Gfw5D5fK83BpSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:62:74:45:e2:0e:af:2b:db:68:0e:65:fc:6a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
Validity
Not Before: Jul 26 18:00:06 2025 GMT
Not After : Jul 27 18:00:06 2025 GMT
Subject: CN=3d56d63166641fc8bf19efbcfd6275de8458ed75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4b:57:08:5e:ca:7d:79:56:a5:d0:d1:9e:60:
f5:6a:d2:5f:e2:27:ed:b8:3e:8e:c0:8a:65:44:4e:
dd:b1:b8:56:fc:56:0f:0e:ac:55:e3:10:25:a3:b9:
db:21:d6:df:c7:ee:df:0b:c4:88:f1:c1:a2:e4:8e:
20:40:e5:dc:80:31:77:ea:80:dd:94:3b:56:7e:90:
08:0e:e5:c1:41:d9:0b:b9:a7:57:2b:2e:06:aa:98:
d7:f2:ce:1c:ee:ab:20:ac:35:a6:d1:2e:87:a8:be:
20:40:13:e6:f5:e2:cb:bf:6a:e6:52:2f:da:c1:41:
05:de:e9:92:9f:7d:21:9b:8d:de:9a:03:2f:9f:43:
cf:6c:5f:f7:2b:bb:da:7e:69:0c:a6:6f:4b:85:16:
77:ae:ed:56:da:96:76:c3:ce:3f:75:ad:4d:ac:dd:
3b:0a:be:b6:c5:1d:6a:3c:fc:fc:fa:72:6d:06:40:
88:fe:fb:cf:32:16:f9:ef:6b:8b:63:d4:3f:c4:22:
cb:00:c1:90:c6:d4:13:28:2f:0f:c8:2e:55:a0:ca:
ab:10:80:a5:86:26:71:a6:fb:6b:99:a9:27:a4:7f:
a8:51:21:55:dd:1a:fe:da:87:81:3e:5c:cb:18:78:
50:8a:54:f2:46:24:0d:04:f1:f6:9f:52:74:ef:a6:
5d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:56:D6:31:66:64:1F:C8:BF:19:EF:BC:FD:62:75:DE:84:58:ED:75
X509v3 Authority Key Identifier:
keyid:65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:5b:a6:44:8c:21:83:fa:b7:55:ef:fd:c3:b0:e4:b7:cb:6b:
3c:69:db:a3:1c:2b:7e:b0:cb:0f:df:2a:5a:73:81:b7:78:3d:
8a:4f:3c:ec:db:93:46:29:a4:e2:26:8e:8a:14:f3:38:e8:2b:
a4:e3:fd:2f:e4:58:0f:97:c3:23:68:e0:b9:39:9e:ba:f6:19:
d7:fe:3c:0c:c6:f4:f8:59:6d:b3:5b:e7:7b:f8:65:7d:eb:37:
6b:22:e7:de:a3:12:09:6e:0b:4c:a9:ee:80:91:81:b7:a0:fa:
3f:b9:a8:76:d7:f1:17:b3:0a:ea:bf:02:b3:95:e5:89:ce:51:
f6:52:13:6f:49:cd:17:53:75:cd:0f:da:73:5d:bc:36:9c:8c:
bc:08:ce:93:62:6e:5b:0c:b3:9b:6e:53:a4:98:8a:3f:70:e5:
50:9a:06:ee:15:9a:f4:82:cb:de:5c:93:55:60:61:e2:ee:5f:
10:32:62:b8:33:0d:96:21:c8:f0:d5:e8:2e:48:97:f0:de:4c:
4a:78:e6:f8:8e:35:0e:ae:a0:fb:a8:3b:82:5b:b5:98:b4:a4:
4c:8d:ba:fe:98:93:55:71:d9:db:6e:91:bb:c3:41:03:e8:6d:
36:93:1d:07:51:cf:f4:1c:ab:e7:38:81:cf:a0:32:af:ae:2a:
2c:9e:34:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:10:40 2025 by rpki-client