
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
File: dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft (raw, json)
Hash identifier: DFNFXj8llhAiwPRNgfy7YV6gAC8/flp9k5Qwfuv5W2g=
Subject key identifier: 70:2C:A2:0B:0A:51:8B:5A:14:6F:67:A5:6D:78:01:0B:CC:24:75:41
Authority key identifier: 75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63
Certificate issuer: /CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63
Certificate serial: 019921B049B83E0C8A2C22EB7147A46FFEB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
Manifest number: 0A97
Signing time: Sun 07 Sep 2025 01:00:25 +0000
Manifest this update: Sun 07 Sep 2025 01:00:25 +0000
Manifest next update: Mon 08 Sep 2025 01:00:25 +0000
Files and hashes: 1: dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl (hash: UWSQBKx12U/p0z/G2KiIJ4zNtiSED7CNRS1eImKMZn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:49:b8:3e:0c:8a:2c:22:eb:71:47:a4:6f:fe:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63
Validity
Not Before: Sep 7 01:00:25 2025 GMT
Not After : Sep 8 01:00:25 2025 GMT
Subject: CN=702ca20b0a518b5a146f67a56d78010bcc247541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:42:b9:7f:f8:9a:6b:c5:7c:76:0f:ef:fb:20:
e1:b6:71:29:f3:6b:14:f7:d2:6c:32:4b:87:04:5d:
2c:e9:01:88:42:40:99:06:04:00:db:19:53:cf:46:
a4:60:ff:41:34:80:1c:d0:88:97:fd:eb:3c:5f:2f:
59:86:13:8e:58:84:b7:30:b9:c7:12:5c:67:b9:e6:
37:85:a2:2a:18:76:31:9d:28:91:bb:fa:57:4c:df:
5a:8b:af:ac:10:cf:ae:4b:86:e7:fb:5a:0d:ef:50:
2f:29:51:61:0f:7c:ee:a8:50:2d:29:f5:28:10:9e:
e2:d1:04:fa:92:57:27:30:a2:bd:f1:9f:39:ff:15:
f1:e9:d1:00:e0:67:68:0a:34:c5:5c:17:b9:94:8b:
73:47:c3:ba:f8:82:15:11:e2:f6:c6:b4:27:a3:37:
ee:9c:b1:73:f4:79:07:ce:eb:e9:5f:42:a1:de:1e:
ba:ef:09:68:42:ef:95:37:18:19:5e:8a:13:7a:17:
dc:48:ea:c9:89:cd:92:8f:31:8b:df:41:ae:b0:a3:
be:6a:78:49:be:f3:f0:3e:54:5a:cc:91:f5:1c:19:
2a:a6:f2:2b:3f:b9:f7:03:cb:0a:0a:ec:ab:91:ed:
75:07:82:af:4c:46:ea:95:55:24:0e:16:a7:57:bb:
85:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2C:A2:0B:0A:51:8B:5A:14:6F:67:A5:6D:78:01:0B:CC:24:75:41
X509v3 Authority Key Identifier:
keyid:75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:73:60:21:e2:89:0b:2b:9b:b9:2c:b2:ed:23:0c:ee:f1:24:
69:ab:20:42:40:a5:c4:d0:8a:14:1f:75:72:1b:72:73:45:4a:
68:4b:b1:a0:28:48:ca:e4:fe:9d:3f:9f:a9:5d:8b:16:a2:34:
e2:ca:dd:ab:1c:0a:7b:61:7c:dd:19:97:aa:1c:88:54:36:20:
0b:af:99:bc:12:6b:d7:86:a0:d2:78:94:c3:77:e2:f8:7a:48:
9b:ff:5f:37:b5:d6:98:d0:68:1f:e2:bc:3d:92:a7:81:4c:1d:
22:76:48:1f:be:2b:da:13:2b:93:17:f3:aa:61:13:83:d5:84:
c8:fc:c7:c9:39:3c:7b:f1:ee:ee:f0:b6:00:f8:3c:58:8a:5a:
52:75:1f:fc:20:c4:0e:89:bc:52:9d:a9:f7:d5:60:76:87:18:
20:0a:39:df:26:b0:9a:fb:af:5a:e6:ee:99:6e:65:26:c3:6a:
4e:d5:2d:1f:2b:5a:9b:75:41:c7:67:02:35:a7:ec:f6:9f:9f:
1f:43:91:d9:1b:e7:9d:44:8b:19:8c:6e:78:af:ff:8d:13:2e:
94:56:9e:a2:01:43:92:78:7f:c5:49:c6:8f:48:8c:33:d3:8c:
20:bc:5b:3b:7a:84:80:a2:a3:cb:16:a0:51:7c:03:d3:08:ad:
1e:c4:f0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:28 2025 by rpki-client