Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
File: ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft (raw, json)
Hash identifier: om4OhvGBsceil2RUkp4xPHy1R5Wa2pe+IfqjRe6dyW4=
Subject key identifier: 59:23:FA:90:DF:D8:EB:E4:B4:B4:E7:2E:C7:DA:B9:D6:FE:92:8F:86
Authority key identifier: 65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0
Certificate issuer: /CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
Certificate serial: 0199356DE5979508B2D801F435B3F139C178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
Manifest number: 167C
Signing time: Wed 10 Sep 2025 21:00:18 +0000
Manifest this update: Wed 10 Sep 2025 21:00:18 +0000
Manifest next update: Thu 11 Sep 2025 21:00:18 +0000
Files and hashes: 1: 4GHtaL2ENr8x0dHCgzjR-2oufsc.roa (hash: SkJfNfL4xk1uCL5vaUVq92gTeEiReavJzDd3NtKKtoQ=)
2: P4Bbz81DKVf659V7Pusw5yxnCg8.roa (hash: 6mtNya9D4eJ+7094qYmfrW/oPVu6b8pgbmkAvNwldHc=)
3: ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl (hash: u+L0dfRDqoeMKMlaW+/jkCRI8YJLfXvh6wuTU3vqSBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:6d:e5:97:95:08:b2:d8:01:f4:35:b3:f1:39:c1:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
Validity
Not Before: Sep 10 21:00:18 2025 GMT
Not After : Sep 11 21:00:18 2025 GMT
Subject: CN=5923fa90dfd8ebe4b4b4e72ec7dab9d6fe928f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ef:3b:4c:8a:81:11:75:6e:58:92:64:83:11:
63:f8:10:f4:65:3f:33:67:f1:53:6e:47:72:4d:3a:
9c:af:49:c6:e2:92:94:d7:7b:d2:93:bf:24:e9:24:
f1:d4:f4:9d:55:93:93:56:7d:37:0b:ec:e2:ed:a4:
da:70:61:4b:de:3d:f7:54:da:51:c8:d1:31:e4:c0:
44:9e:18:d1:6e:47:35:1a:cd:6c:d8:10:e1:e6:81:
66:e3:80:57:ea:52:3b:da:04:b3:43:83:4c:d8:df:
b5:c6:df:1e:cb:f8:07:04:2c:a2:29:88:30:0a:7c:
11:d3:c8:94:e3:e7:72:d3:94:c4:a3:d6:cf:82:21:
42:ef:dc:56:1d:56:f3:37:48:d2:dd:f2:1e:c3:29:
11:ac:74:1d:4e:f0:02:55:e6:e3:a2:fb:d2:39:f5:
5d:7d:f9:50:79:0a:51:a4:f3:16:bd:fc:15:68:43:
2f:d5:65:00:6e:63:ee:25:3c:37:c8:2e:d5:53:6f:
8d:fd:6b:89:7b:a3:b7:47:47:59:78:dd:df:9b:c8:
c8:c3:29:37:0b:19:9e:c7:23:65:99:d7:c7:b2:19:
c8:90:ff:f6:33:10:b9:03:54:a4:60:a3:fe:4f:be:
13:fa:26:1c:62:73:57:44:5d:14:28:e6:24:4d:c9:
07:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:23:FA:90:DF:D8:EB:E4:B4:B4:E7:2E:C7:DA:B9:D6:FE:92:8F:86
X509v3 Authority Key Identifier:
keyid:65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:53:00:b2:1a:5b:57:29:16:cb:9e:65:e1:04:62:cc:79:70:
6e:cd:c8:50:6b:0f:34:b8:32:a9:ac:45:03:77:ff:0a:cc:31:
ac:2c:61:24:86:a4:fa:4a:e6:5e:8f:f8:8d:42:6f:d2:92:60:
96:b9:78:16:05:cb:5f:53:4c:e0:67:33:93:7f:9d:d5:da:b1:
b3:05:f5:3d:dc:89:52:1d:1d:67:7a:b8:d3:de:87:5c:89:8b:
9e:7a:3a:5d:df:f3:46:85:b5:11:a9:a9:0b:c3:6d:28:d0:bf:
ab:c7:30:a4:0d:e6:72:82:00:9f:ba:24:5f:d8:9f:bb:ea:ae:
5d:3f:e4:dc:86:ce:d2:41:1e:c9:37:e0:96:54:a4:bb:2f:59:
fd:b6:0c:b3:9a:43:e9:46:87:72:a1:53:2c:9d:d9:2b:4d:94:
9e:b9:5b:82:af:4b:01:2a:cf:af:68:12:6d:9f:18:55:f1:ad:
69:da:e8:b3:7d:ec:c5:3d:81:83:24:37:d8:d3:c0:3e:fa:cc:
2a:11:0e:0c:ad:df:be:46:69:2d:00:26:bd:40:c8:67:04:9f:
ff:5d:6e:47:b7:a3:c6:0d:69:59:30:58:86:76:69:e9:5a:5d:
c4:20:2b:49:06:4e:c9:26:88:12:80:03:37:42:7b:ef:38:15:
c7:c2:31:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 01:07:45 2025 by rpki-client