Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
File: zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft (raw, json)
Hash identifier: 05YsgdyvFv5yE3Kipcfd+q7Xz5ExZcX2GlA81qF4GmE=
Subject key identifier: 01:C6:68:A0:57:84:B3:6F:42:42:08:8A:E0:7F:D2:B7:DC:41:81:6A
Authority key identifier: CD:02:D0:77:48:5A:15:E8:A2:54:A4:9E:DD:99:4D:4F:C2:A9:08:A6
Certificate issuer: /CN=cd02d077485a15e8a254a49edd994d4fc2a908a6
Certificate serial: 01984A40BF2CBFF71946550049F6BA659BBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
Manifest number: 15FF
Signing time: Sun 27 Jul 2025 05:00:13 +0000
Manifest this update: Sun 27 Jul 2025 05:00:13 +0000
Manifest next update: Mon 28 Jul 2025 05:00:13 +0000
Files and hashes: 1: OcgJ9gd4XPf2cH1vwOSDk8wsWCY.roa (hash: mqfa0ZehsylIV/d7nzWZG94iCnmV9oQHVVnGpSyC+og=)
2: pdwDWOzc3QzXOsiEO7HIgZ0hQdQ.roa (hash: m/RIMhJds2RFVXbpbtSSU1vxyz5pEJiQgY8y39qh5vk=)
3: zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl (hash: izUNlDLZIcUKnR+BGAuAySQjccYlseurQpXGZOwgIWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:bf:2c:bf:f7:19:46:55:00:49:f6:ba:65:9b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd02d077485a15e8a254a49edd994d4fc2a908a6
Validity
Not Before: Jul 27 05:00:13 2025 GMT
Not After : Jul 28 05:00:13 2025 GMT
Subject: CN=01c668a05784b36f4242088ae07fd2b7dc41816a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a3:91:82:eb:df:87:40:5c:3f:e9:c0:d4:b8:
28:e5:d4:d7:7e:36:54:cc:3b:41:af:6c:10:aa:b6:
b1:f8:fc:15:82:27:f2:6a:73:3d:0a:a9:5b:7f:6b:
53:36:d2:d2:47:38:9d:10:ac:07:f7:90:fc:5a:46:
86:d4:c2:3d:8b:ab:90:b7:b3:ab:3c:e7:54:c0:b8:
5f:be:a7:95:9d:41:a0:11:ac:95:dd:a0:ea:e9:09:
a2:8c:f9:bd:b3:e6:04:ba:73:97:e1:d9:50:90:45:
b3:74:aa:11:c8:7b:60:8c:89:b4:4f:70:34:9a:32:
c5:77:b0:25:39:74:84:4a:4b:b2:6e:2b:c1:bc:bb:
a1:f4:33:0e:f8:66:6f:4b:06:98:98:d2:e6:69:6e:
90:f0:9a:fd:1d:c9:1e:8c:ff:b8:a3:ea:ba:5e:40:
26:8e:4f:58:84:c6:b3:d9:43:42:fc:82:39:21:4f:
4a:8a:e2:3f:8e:c7:40:0c:64:a3:ac:8f:42:30:5b:
17:ea:79:24:82:17:96:4f:77:ec:64:28:05:2a:14:
14:cc:50:9b:c9:68:72:6f:cf:a0:da:58:88:75:7a:
ca:aa:b3:af:d8:6e:e0:39:e4:51:0b:ad:4a:f6:44:
5b:c2:04:f4:11:bf:03:e2:92:64:18:80:fe:16:dc:
60:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C6:68:A0:57:84:B3:6F:42:42:08:8A:E0:7F:D2:B7:DC:41:81:6A
X509v3 Authority Key Identifier:
keyid:CD:02:D0:77:48:5A:15:E8:A2:54:A4:9E:DD:99:4D:4F:C2:A9:08:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:6c:72:a6:0a:cd:d5:58:c5:23:2d:87:8a:e9:b7:6e:15:93:
cb:de:43:32:c4:e1:b6:11:17:0f:06:19:ef:b2:b5:e6:be:48:
8a:26:06:6a:9b:3a:db:93:4c:99:23:c0:ce:4b:a4:0c:af:1e:
81:ea:17:3b:14:8d:e8:65:c1:8e:db:37:af:68:4b:9d:d5:67:
1b:91:c6:d0:4d:57:79:6d:74:9d:67:92:47:dc:9c:fc:da:cc:
9c:23:f5:7f:4c:38:87:17:cd:2b:b1:38:22:65:1d:51:72:1a:
54:9e:29:25:56:f3:63:92:d8:38:06:fb:be:9b:92:54:6d:07:
bb:f0:94:ab:2f:c6:29:a6:64:09:1a:f5:ca:75:3e:b3:d1:d5:
48:14:aa:49:77:cb:ec:7c:16:94:f4:20:3b:03:24:80:d6:89:
15:f8:f1:58:c3:75:b9:b2:a0:22:da:bc:2f:66:95:5c:a7:d4:
5b:0e:fb:95:12:b2:66:1d:1f:b6:fb:0f:22:01:94:83:3f:cf:
59:1a:ff:dd:72:01:ef:76:96:49:c8:c6:ea:52:aa:9e:e2:48:
a3:83:bd:0e:d8:c6:2b:ef:84:69:d6:ef:fb:e7:10:16:35:17:
ed:ca:9f:f2:d1:64:b0:bf:3f:cf:ed:71:38:d9:ee:3b:9d:78:
a4:47:31:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:39:25 2025 by rpki-client