Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft
File: zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft (raw, json)
Hash identifier: G/q5ZlcGG6UOgpFQ7JdfCnT6luuOhdNi81uVbXJA230=
Subject key identifier: 64:E5:10:A8:01:FC:2F:CE:25:97:32:9B:EA:FE:FA:9C:DE:37:89:0B
Authority key identifier: CC:1A:9F:72:93:88:C1:69:BA:CC:1C:BA:F9:8E:23:6D:4E:80:8A:B4
Certificate issuer: /CN=cc1a9f729388c169bacc1cbaf98e236d4e808ab4
Certificate serial: 019A71B847116CCBD5ABF299C40CFC24BA59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft
Manifest number: 02A7
Signing time: Tue 11 Nov 2025 07:01:33 +0000
Manifest this update: Tue 11 Nov 2025 07:01:33 +0000
Manifest next update: Wed 12 Nov 2025 07:01:33 +0000
Files and hashes: 1: 1-YCQCphk32b8tDaXBmol_BTFhAA.roa (hash: vDe37BPFiFzh2DmP54Y2HTtv1UAWo0nqbWO5t7R6/68=)
2: zBqfcpOIwWm6zBy6-Y4jbU6AirQ.crl (hash: pOvggFsR4A1roluqGs5TVesR0Q+0CXEtREYlGpKxew0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:47:11:6c:cb:d5:ab:f2:99:c4:0c:fc:24:ba:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1a9f729388c169bacc1cbaf98e236d4e808ab4
Validity
Not Before: Nov 11 07:01:33 2025 GMT
Not After : Nov 12 07:01:33 2025 GMT
Subject: CN=64e510a801fc2fce2597329beafefa9cde37890b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d7:d9:09:b4:5a:64:6b:a0:23:a2:1a:5f:74:
10:eb:4c:a4:c6:3b:b1:be:62:7d:6b:53:3d:35:1a:
05:3d:62:38:05:3a:4f:6d:73:84:b6:63:d2:c4:ca:
e3:4b:93:44:fb:a8:8f:90:13:06:2b:0e:89:1a:c3:
65:5b:58:7e:a0:cc:81:f9:84:7f:0c:59:27:8e:cf:
c9:3e:49:43:6b:7c:36:19:cb:f0:0d:f3:0a:77:50:
d9:1b:82:16:f5:37:da:85:fe:7f:ea:42:fd:90:bd:
1c:65:43:00:67:64:49:ab:7b:0e:35:9c:d0:3a:1d:
5a:8e:13:12:a3:67:72:88:e3:f4:bb:a1:21:66:4f:
46:1c:dd:b3:2f:25:cd:1b:27:53:bc:09:78:9e:89:
12:c3:5c:77:d9:e9:33:a1:91:94:3d:5d:1a:73:5e:
1a:cb:94:1a:3c:b6:79:53:cb:d1:58:8a:3c:68:c8:
23:7f:3a:0a:6c:82:b6:a6:d5:71:57:7b:51:84:d4:
7a:79:2a:9b:60:a5:df:8b:e7:c0:79:e2:7f:98:f1:
ef:e2:b5:da:2f:54:72:36:60:c7:e4:07:5f:3d:ca:
94:ee:50:c9:4b:5a:45:c0:6a:39:16:e9:04:34:1b:
71:ed:33:aa:6f:19:7e:89:04:c6:df:a6:9b:ff:4a:
b8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E5:10:A8:01:FC:2F:CE:25:97:32:9B:EA:FE:FA:9C:DE:37:89:0B
X509v3 Authority Key Identifier:
keyid:CC:1A:9F:72:93:88:C1:69:BA:CC:1C:BA:F9:8E:23:6D:4E:80:8A:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:7d:d3:0f:43:f0:dd:8f:31:3b:7b:ff:f3:59:58:0f:1d:c3:
94:56:0f:4e:94:f3:41:99:ec:c5:1a:b0:28:ef:bd:e5:9c:95:
40:b6:72:c6:27:04:d7:00:11:9e:50:c7:5a:dc:b4:9a:8f:23:
65:f0:11:01:8a:a7:77:e6:5e:6d:1b:3d:81:37:f8:f9:04:38:
a3:28:77:87:29:67:69:dc:d6:e4:fd:cc:13:a6:73:fc:08:cc:
8b:b8:f0:b4:0d:8f:86:01:75:74:99:da:4c:3b:db:e7:6c:4e:
2e:3c:f4:69:9e:35:3e:b3:80:80:66:74:63:97:2d:37:d5:d0:
83:a4:53:cf:f0:22:c7:39:ea:67:f2:2c:d8:e3:5b:cf:b6:b0:
a6:6e:8a:6f:82:cd:ea:5e:79:81:31:1f:66:40:7f:45:fa:52:
46:8c:b9:b2:67:de:cc:80:2c:f7:86:48:2a:d1:8b:e3:43:3c:
db:5d:e4:43:67:31:cd:a0:c4:c5:f5:ba:99:54:a6:ff:de:c2:
db:8a:cc:f8:75:b3:ba:ac:d8:9b:30:b0:5f:19:c3:6f:b6:41:
c1:99:09:71:99:36:44:fc:ce:44:29:f3:de:d0:25:72:47:ec:
ac:a3:c4:5a:d8:93:8c:70:5e:98:db:d1:9a:de:42:48:35:0d:
28:69:dc:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:50 2025 by rpki-client