
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft
File: zQzH_YiYsPffS53wuZMZvLKewkM.mft (raw, json)
Hash identifier: 3tTRGVFpKkqDN5Nxk2f8Bx5AtmD7XbPGalvis5+GkpY=
Subject key identifier: 66:13:73:59:68:8D:DE:D8:4B:74:33:27:D4:02:DB:FB:18:17:24:66
Authority key identifier: CD:0C:C7:FD:88:98:B0:F7:DF:4B:9D:F0:B9:93:19:BC:B2:9E:C2:43
Certificate issuer: /CN=cd0cc7fd8898b0f7df4b9df0b99319bcb29ec243
Certificate serial: 01984A77AB08060C8D4745EAB3A1E453C63C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 06:00:13 +0000
Manifest this update: Sun 27 Jul 2025 06:00:13 +0000
Manifest next update: Mon 28 Jul 2025 06:00:13 +0000
Files and hashes: 1: Wkz81xMUDLClFehnNcO08jklh9k.roa (hash: BKlpXBQEP/op0lp2TcMqqMdmqdUhy61w00wNP+uB+Zw=)
2: zQzH_YiYsPffS53wuZMZvLKewkM.crl (hash: jzzGWYy/w4n5JPM3VAD5fdWI39wbbiyM+Fo0d6sWktM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:ab:08:06:0c:8d:47:45:ea:b3:a1:e4:53:c6:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd0cc7fd8898b0f7df4b9df0b99319bcb29ec243
Validity
Not Before: Jul 27 06:00:13 2025 GMT
Not After : Jul 28 06:00:13 2025 GMT
Subject: CN=66137359688dded84b743327d402dbfb18172466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e7:a6:fa:f3:e2:9c:28:86:df:3c:fa:05:1d:
20:fe:11:c4:1c:6e:39:9f:21:fb:c9:c0:2a:f0:1f:
1f:a1:00:9b:5d:c1:83:db:67:f7:7f:aa:bb:3b:9b:
d1:1c:3b:05:dc:c0:b8:2a:6c:c5:62:0e:9b:08:8f:
5e:7a:cc:bf:e3:7d:b7:8d:19:52:56:6c:22:7d:e1:
e5:6f:fd:f7:dc:96:54:5d:70:5a:e8:91:b2:98:69:
56:ea:03:48:21:74:93:70:48:bc:61:c5:b0:cd:93:
db:cf:bf:98:82:93:79:47:84:06:94:23:19:76:29:
71:c7:e2:08:b6:11:f6:73:9d:fd:57:21:50:e8:9e:
33:53:74:d6:35:5e:12:b8:2c:0d:5d:c1:41:bb:6e:
1e:ac:84:2c:ba:c5:b7:7f:bc:04:73:fa:47:89:d7:
6b:56:27:1f:cd:70:29:95:aa:f7:35:53:76:91:70:
e9:01:da:64:82:87:0b:62:99:c5:b8:65:e3:5c:bb:
38:73:bc:3f:d0:73:b8:f3:36:fb:28:2e:8d:3b:81:
2f:a3:4d:8b:77:35:ef:38:2d:63:1f:c9:db:82:e8:
d4:cf:78:7d:46:04:e9:d1:35:65:d2:17:da:96:c7:
9e:e0:63:a0:6f:0a:6a:a1:e5:19:8f:54:05:a7:fb:
6d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:13:73:59:68:8D:DE:D8:4B:74:33:27:D4:02:DB:FB:18:17:24:66
X509v3 Authority Key Identifier:
keyid:CD:0C:C7:FD:88:98:B0:F7:DF:4B:9D:F0:B9:93:19:BC:B2:9E:C2:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:17:91:34:09:d1:fb:20:da:a7:1b:fc:17:4a:66:52:75:73:
f2:eb:d7:29:e1:a4:fb:1f:d9:d8:0f:c3:98:16:a2:e3:01:8f:
38:08:c0:59:83:36:9e:8d:90:c6:e7:4d:26:9c:e3:42:cc:80:
63:c7:34:96:16:80:6d:5d:47:70:89:f9:cc:ad:6f:ed:66:fe:
00:6a:fe:91:8f:fe:e9:20:96:00:3f:94:04:6e:ce:6d:71:f1:
d5:bc:20:42:92:00:8d:d6:d5:8d:f9:d2:8a:39:d6:b0:0b:d8:
29:1a:ce:6c:a8:e5:2a:63:88:4d:dc:33:03:10:e3:f2:95:9f:
14:b7:87:85:68:2d:17:73:4e:2a:75:ce:b8:11:4f:34:56:e5:
5c:cf:63:1b:39:8d:61:b8:55:ef:91:f1:08:53:a1:2c:0e:5a:
06:a1:b6:61:f2:0a:f4:4f:5e:7f:d4:fb:f3:3b:f7:80:e0:5e:
bd:1d:c4:c3:47:bb:84:a7:e6:bc:3f:eb:c2:f9:dd:6a:ed:6b:
40:e9:13:dc:fb:b1:9c:00:bd:a8:5b:d3:6c:02:81:13:1e:fb:
8a:ad:f6:c9:c3:40:63:8e:9e:3e:20:56:ee:c2:03:8b:cb:65:
68:5b:95:5d:dc:0b:3b:6b:c1:98:6c:a8:57:22:bf:27:ae:ac:
d2:ea:7e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:39:45 2025 by rpki-client