Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
File: ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft (raw, json)
Hash identifier: lgfF2l2DtsthMFFavh3SgpXZcc+7ZRSCYd0zbcwWijU=
Subject key identifier: 78:85:35:31:6C:25:76:58:81:93:72:C8:75:F9:D2:9D:75:B8:03:D4
Authority key identifier: 66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7
Certificate issuer: /CN=66a832244d0e23f5f28b3a6def7afc01b22521c7
Certificate serial: 019A71EE91A12D29077527422318CA047602
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
Manifest number: 0B08
Signing time: Tue 11 Nov 2025 08:00:51 +0000
Manifest this update: Tue 11 Nov 2025 08:00:51 +0000
Manifest next update: Wed 12 Nov 2025 08:00:51 +0000
Files and hashes: 1: ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl (hash: kdVJ6ZYXia6gQfsDOWQOkxLTZXruRt6gYxYhnKTR/ik=)
2: _QNn8i-0tIKLRcq_eDgA2QsLdiA.roa (hash: QiOA4Z6p5RQwq3aK0bHpaTuhZajM0dodRW/v7+6NMjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:91:a1:2d:29:07:75:27:42:23:18:ca:04:76:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66a832244d0e23f5f28b3a6def7afc01b22521c7
Validity
Not Before: Nov 11 08:00:51 2025 GMT
Not After : Nov 12 08:00:51 2025 GMT
Subject: CN=788535316c257658819372c875f9d29d75b803d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8d:52:87:ac:01:a3:45:f9:3e:b0:bb:fd:ef:
c3:46:ea:9d:73:3a:27:56:86:c1:89:92:d4:05:aa:
54:18:5e:8c:5d:9c:91:e7:95:ce:15:f7:bc:f1:f0:
a3:55:c1:3e:b1:88:01:5a:59:9f:a5:a6:0d:b8:03:
95:92:4d:6c:72:09:d3:17:e5:e3:13:11:9d:02:da:
1c:71:b6:4b:45:36:a3:34:39:60:4b:32:75:21:ac:
76:ba:a1:8c:83:37:7a:33:19:b9:a6:4e:5c:f0:8f:
c7:98:d3:cb:ff:f6:f1:47:7c:54:eb:18:2b:d3:57:
91:d2:13:98:39:37:3f:43:56:14:f1:62:04:0b:9e:
32:f0:8e:8f:8c:20:56:40:71:e1:3b:d2:93:49:cc:
e5:b8:9b:85:89:92:a8:9f:4c:41:60:c8:7f:1f:96:
0d:31:a9:b1:db:33:c3:fb:6a:c2:a4:04:07:de:13:
1f:ce:cd:c2:64:76:8b:0f:74:a1:de:fb:8e:30:6f:
7a:5d:11:c2:36:22:c4:c5:f9:58:66:8b:00:00:64:
00:40:e5:b0:8d:79:f8:e4:e8:72:37:b3:8a:58:4c:
41:66:67:2e:c2:e5:82:82:6c:7d:5a:f1:71:18:7a:
e8:0d:2b:bd:e5:b0:0f:ab:c8:ae:5a:65:73:fb:b7:
ae:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:85:35:31:6C:25:76:58:81:93:72:C8:75:F9:D2:9D:75:B8:03:D4
X509v3 Authority Key Identifier:
keyid:66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:b1:86:21:fc:88:1a:50:8d:d9:85:cc:c9:7d:75:50:06:4b:
e2:9a:a8:25:30:53:b9:2d:3f:cc:9e:9b:bc:41:ea:98:22:e6:
64:f8:e0:bb:3c:7a:37:83:f0:77:0d:70:32:27:10:19:1a:a4:
c7:65:35:f3:76:09:81:28:36:8f:b7:9b:f1:a9:9e:f7:8c:8c:
84:7e:ec:94:73:40:b0:bb:ef:7b:6a:e7:a9:28:d6:42:6f:e2:
82:7c:10:0e:30:1c:f8:a6:9e:5c:40:a4:9b:23:8b:01:3a:34:
cf:1f:8c:86:83:f4:32:3d:0a:f0:b8:4f:fe:c4:8b:c9:b4:f8:
e2:d8:e6:a5:8e:df:2c:68:b1:25:68:82:dc:01:72:4c:a8:3c:
cb:2e:76:09:7c:93:24:f2:26:38:84:01:1f:29:55:50:c3:e7:
09:61:7c:0d:a8:71:28:99:bf:c6:27:15:1a:46:c9:c7:4b:7d:
86:6c:e1:14:8b:17:4b:d7:cf:75:c3:8e:68:41:15:13:e0:c2:
9b:47:15:d7:ec:ab:2a:aa:32:d2:eb:cd:c1:64:5a:1d:29:24:
e4:41:f6:32:65:8d:01:d4:49:64:fa:ea:33:97:d0:01:7a:4d:
8c:52:a5:03:b2:b1:18:94:ff:4d:0f:a9:b9:1a:1b:69:10:34:
f4:26:fe:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:16 2025 by rpki-client