Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
File: ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft (raw, json)
Hash identifier: x16gkdqx5PKHoi1o0hBvoQ04iK9WHYF961KhtF87va8=
Subject key identifier: 41:7A:16:63:25:9A:BD:50:96:36:C1:57:6E:54:7F:E7:05:37:31:76
Authority key identifier: 66:A1:D1:A0:17:80:2E:5C:57:DA:59:78:54:4F:C5:37:40:3D:A7:3A
Certificate issuer: /CN=66a1d1a017802e5c57da5978544fc537403da73a
Certificate serial: 01984AAEE42D47F0683B6FC78E435A64656A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
Manifest number: 0915
Signing time: Sun 27 Jul 2025 07:00:32 +0000
Manifest this update: Sun 27 Jul 2025 07:00:32 +0000
Manifest next update: Mon 28 Jul 2025 07:00:32 +0000
Files and hashes: 1: ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl (hash: to+GPDfB87KSQErziGr7l3/l2+7Hwcjhwu1jdcGn9uc=)
2: hJbdYVF-sB2ARWcr3wLM-Bolskc.roa (hash: p8HLFjhLNYXJBjvp0Ydq3UNKZlQk3vcyaOZBKxCq5jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:e4:2d:47:f0:68:3b:6f:c7:8e:43:5a:64:65:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66a1d1a017802e5c57da5978544fc537403da73a
Validity
Not Before: Jul 27 07:00:32 2025 GMT
Not After : Jul 28 07:00:32 2025 GMT
Subject: CN=417a1663259abd509636c1576e547fe705373176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4b:2c:11:95:80:b2:9a:ba:f5:d3:fa:c6:ee:
1c:7d:4a:2c:67:a6:66:8d:94:46:04:24:1f:ae:58:
7d:eb:82:d4:d3:4b:3a:bf:f4:0a:98:74:a0:15:22:
7f:19:3d:1f:ac:de:8c:48:69:c3:94:01:02:d2:63:
bd:f8:1d:c8:91:7b:ca:d6:8a:a4:87:0e:6d:4f:f1:
f0:87:ad:97:11:f1:c5:08:00:28:57:5f:b1:07:1b:
96:a1:dc:12:1b:aa:a3:60:70:b5:36:00:f1:d3:30:
1b:66:ef:f2:53:00:62:8d:36:f1:8d:c1:8d:83:ff:
d9:25:30:58:9d:b3:6b:96:9b:53:4b:e7:4c:e7:21:
71:3d:0e:a3:de:bb:37:6a:37:af:05:57:6e:54:75:
c4:7d:1b:81:ab:1b:be:42:25:01:bb:7d:31:4c:74:
78:bc:d4:36:7f:12:51:ac:95:c7:6b:fd:c7:9c:49:
3f:7e:29:77:c6:be:90:23:16:00:a5:4a:fb:42:22:
77:bb:91:76:a4:aa:4b:93:98:da:5b:c5:d8:a7:72:
c2:35:ab:48:0a:0b:18:90:72:48:7c:37:01:7c:03:
0b:1b:b1:36:e4:06:29:59:c2:84:9d:dd:6a:a6:1a:
11:1e:2f:84:6b:5f:63:07:d7:33:93:bb:a0:d9:a9:
e0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:7A:16:63:25:9A:BD:50:96:36:C1:57:6E:54:7F:E7:05:37:31:76
X509v3 Authority Key Identifier:
keyid:66:A1:D1:A0:17:80:2E:5C:57:DA:59:78:54:4F:C5:37:40:3D:A7:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:3a:e1:92:95:31:e7:73:56:0a:17:d2:bd:92:02:13:e3:be:
96:4c:54:f0:5e:8a:04:27:80:f9:98:d5:f3:2e:96:05:e2:37:
59:e1:38:71:9e:2e:d7:42:e4:bd:0d:37:93:26:da:4e:2d:05:
72:dc:4a:26:dc:12:fa:07:86:59:f8:d9:77:48:d6:e3:9a:9d:
bd:39:59:6e:f7:2d:fc:9c:be:48:ee:64:44:5c:dd:5f:9a:82:
f5:d8:0b:69:06:f4:3b:1a:9b:42:f1:47:60:64:e4:f5:1f:27:
5e:a5:65:35:3c:4b:a4:e5:48:63:94:88:52:40:59:55:9c:93:
bd:7e:63:f5:87:d0:b3:30:76:09:33:31:f1:80:1e:12:f1:00:
cc:17:1e:7d:99:bd:69:22:7c:d7:f4:e8:1a:be:e6:fd:2e:cb:
61:1b:9e:63:a3:55:66:77:dd:94:f8:38:56:84:72:d6:25:37:
5c:5c:c8:05:57:57:3e:e7:95:56:54:b5:c1:15:47:4b:29:0b:
80:7c:50:d1:74:d1:a9:d1:57:e1:95:53:65:28:f5:ce:bd:75:
16:a1:26:7b:f6:b6:84:e8:f8:ea:ec:c1:10:e4:dd:01:c8:5d:
ac:03:6c:71:16:6b:e6:70:c0:05:b2:9a:22:56:12:c2:83:2d:
a7:fe:4a:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKruQtR/BoO2/HjkNaZGVqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2YTFkMWEwMTc4MDJlNWM1N2RhNTk3ODU0NGZjNTM3NDAz
ZGE3M2EwHhcNMjUwNzI3MDcwMDMyWhcNMjUwNzI4MDcwMDMyWjAzMTEwLwYDVQQD
Eyg0MTdhMTY2MzI1OWFiZDUwOTYzNmMxNTc2ZTU0N2ZlNzA1MzczMTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kssEZWAspq69dP6xu4cfUosZ6Zm
jZRGBCQfrlh964LU00s6v/QKmHSgFSJ/GT0frN6MSGnDlAEC0mO9+B3IkXvK1oqk
hw5tT/Hwh62XEfHFCAAoV1+xBxuWodwSG6qjYHC1NgDx0zAbZu/yUwBijTbxjcGN
g//ZJTBYnbNrlptTS+dM5yFxPQ6j3rs3ajevBVduVHXEfRuBqxu+QiUBu30xTHR4
vNQ2fxJRrJXHa/3HnEk/fil3xr6QIxYApUr7QiJ3u5F2pKpLk5jaW8XYp3LCNatI
CgsYkHJIfDcBfAMLG7E25AYpWcKEnd1qphoRHi+Ea19jB9czk7ug2angJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEF6FmMlmr1QljbBV25Uf+cFNzF2MB8GA1UdIwQY
MBaAFGah0aAXgC5cV9pZeFRPxTdAPac6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnFIUm9CZUFMbHhYMmxsNFZFX0ZOMEE5cHpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85MTU0OGItYmFiNS00NTRjLWI2MGIt
MTlmMmExZDE2MDMzLzEvWnFIUm9CZUFMbHhYMmxsNFZFX0ZOMEE5cHpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85MTU0OGItYmFiNS00NTRjLWI2MGItMTlmMmExZDE2MDMz
LzEvWnFIUm9CZUFMbHhYMmxsNFZFX0ZOMEE5cHpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtTrhkpUx
53NWChfSvZICE+O+lkxU8F6KBCeA+ZjV8y6WBeI3WeE4cZ4u10LkvQ03kybaTi0F
ctxKJtwS+geGWfjZd0jW45qdvTlZbvct/Jy+SO5kRFzdX5qC9dgLaQb0OxqbQvFH
YGTk9R8nXqVlNTxLpOVIY5SIUkBZVZyTvX5j9YfQszB2CTMx8YAeEvEAzBcefZm9
aSJ81/ToGr7m/S7LYRueY6NVZnfdlPg4VoRy1iU3XFzIBVdXPueVVlS1wRVHSykL
gHxQ0XTRqdFX4ZVTZSj1zr11FqEme/a2hOj46uzBEOTdAchdrANscRZr5nDABbKa
IlYSwoMtp/5KoQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:32:38 2025 by rpki-client