Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft
File: 1_ZqQbymh7J1jPx7scX0s0ae2HA.mft (raw, json)
Hash identifier: xyKDm6SCjlwmk4p5YXjn2W6YecN5gprMNgadKxlOVSQ=
Subject key identifier: FB:88:ED:E5:B4:59:0F:EC:DE:C2:6C:02:95:1D:5F:AF:C2:7D:FD:06
Authority key identifier: D7:F6:6A:41:BC:A6:87:B2:75:8C:FC:7B:B1:C5:F4:B3:46:9E:D8:70
Certificate issuer: /CN=d7f66a41bca687b2758cfc7bb1c5f4b3469ed870
Certificate serial: 019922C32421E7F65A151C86E82D2119D4E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_ZqQbymh7J1jPx7scX0s0ae2HA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft
Manifest number: 1443
Signing time: Sun 07 Sep 2025 06:00:37 +0000
Manifest this update: Sun 07 Sep 2025 06:00:37 +0000
Manifest next update: Mon 08 Sep 2025 06:00:37 +0000
Files and hashes: 1: 1_ZqQbymh7J1jPx7scX0s0ae2HA.crl (hash: /NpD8eMw+dBFf0bP6xUtlMFWpsF0JMqvl4Cr813Rn0g=)
2: sdPecCSO0KixXu_CzDAp6RAcnGQ.roa (hash: lK/qLvjn0531iisqXiHNH5vrvX6cngnheVb4lVEkcTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_ZqQbymh7J1jPx7scX0s0ae2HA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:24:21:e7:f6:5a:15:1c:86:e8:2d:21:19:d4:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f66a41bca687b2758cfc7bb1c5f4b3469ed870
Validity
Not Before: Sep 7 06:00:37 2025 GMT
Not After : Sep 8 06:00:37 2025 GMT
Subject: CN=fb88ede5b4590fecdec26c02951d5fafc27dfd06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:50:bd:13:6a:99:7c:c3:44:fa:47:33:25:22:
3d:2e:9b:c8:ad:0e:f2:f7:97:e6:61:7f:51:ba:b0:
c2:2e:36:5c:bc:48:3c:17:8c:fc:96:1c:e4:e8:37:
21:b7:2c:c1:af:08:a9:b9:86:5e:2a:cd:e0:a1:6e:
18:4b:a7:2f:f3:7a:c8:d2:ab:0a:24:32:c6:99:47:
8b:75:80:99:6f:e3:3b:a3:15:61:c1:86:77:bb:3d:
d4:23:7d:f1:a7:57:41:4a:15:91:d4:22:10:31:57:
eb:97:d8:a0:12:18:06:34:05:79:18:7f:34:47:c9:
87:0f:bd:44:02:cc:8a:4c:50:ca:72:0b:bc:e8:02:
43:43:34:c4:e6:4c:44:7c:2d:cc:03:71:c3:b4:c9:
69:19:6b:6e:be:55:5d:ae:33:02:bd:2e:a7:ae:8a:
56:a5:20:83:1e:80:ec:01:80:17:2d:df:0d:de:23:
f7:ad:d7:86:10:4d:5a:f8:78:af:75:1f:c0:85:27:
4c:4c:54:07:6f:b1:ad:1c:34:f1:37:c1:1d:18:e3:
e5:81:35:85:ac:a2:bc:c7:eb:4d:70:a4:13:5b:7c:
90:46:bd:d2:a1:12:d2:49:90:67:09:1f:81:02:fa:
d2:81:41:53:31:9e:49:74:41:d3:c8:f0:cb:73:84:
ee:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:88:ED:E5:B4:59:0F:EC:DE:C2:6C:02:95:1D:5F:AF:C2:7D:FD:06
X509v3 Authority Key Identifier:
keyid:D7:F6:6A:41:BC:A6:87:B2:75:8C:FC:7B:B1:C5:F4:B3:46:9E:D8:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_ZqQbymh7J1jPx7scX0s0ae2HA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:86:52:4c:b6:af:e5:f7:42:b7:fd:77:4b:02:79:02:a7:98:
8f:02:b8:79:3d:65:7f:ff:a4:b8:62:2d:0b:fc:07:50:43:b7:
b1:7e:bf:e4:27:d9:0e:7f:4c:6e:5b:c2:60:c2:95:ed:87:a3:
47:43:b4:31:5b:8a:69:b4:fe:f8:d3:5a:f5:73:6f:40:44:79:
8c:de:f8:13:31:2f:39:2f:97:fc:83:96:11:d3:12:77:b5:75:
3c:3b:50:15:98:e0:1f:e0:98:58:76:84:d4:40:4f:93:cf:00:
79:be:ca:aa:44:63:f3:58:f4:4d:ac:75:73:82:99:a5:02:39:
7d:34:18:01:76:46:d6:a9:12:7a:4f:fc:b3:6c:34:af:a1:3d:
d2:21:b5:d7:0c:0c:4f:dd:77:72:43:00:48:1f:b9:a7:11:8c:
23:28:40:75:42:d5:d7:83:e1:f6:b0:09:d8:3f:d2:9d:62:8b:
60:94:01:8b:18:26:39:37:28:26:9d:bc:7d:f3:60:d6:19:61:
75:6b:e2:80:c7:d0:77:31:1f:ed:ee:0d:59:38:65:fd:0f:e7:
57:33:48:a6:be:b1:f2:12:d2:e8:3b:6b:ca:9f:70:0f:8e:73:
52:86:3a:3c:b7:01:50:0c:86:ea:f2:99:d0:70:24:6b:05:71:
fc:2a:0b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:38 2025 by rpki-client