Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
File: ztMMJRFB3bZI0FosKEszyHxRdSU.mft (raw, json)
Hash identifier: Lz9K/0JCzjKLKXmZgH3QcDYiyYPVSqlpszOl4GrpSbg=
Subject key identifier: 0B:F3:A2:51:25:23:FF:8B:4E:75:66:10:66:5D:A7:39:9A:D6:0E:12
Authority key identifier: CE:D3:0C:25:11:41:DD:B6:48:D0:5A:2C:28:4B:33:C8:7C:51:75:25
Certificate issuer: /CN=ced30c251141ddb648d05a2c284b33c87c517525
Certificate serial: 019A72CA753797FD8C544CC4472AC4344034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
Manifest number: 1468
Signing time: Tue 11 Nov 2025 12:01:02 +0000
Manifest this update: Tue 11 Nov 2025 12:01:02 +0000
Manifest next update: Wed 12 Nov 2025 12:01:02 +0000
Files and hashes: 1: ZPgVDRI_G_wgjVLd8kNTHtjE33Y.roa (hash: uiDFhkIkjuexDSnG2oE6Dq4+/FIv/1F+pVEhj9VaU8g=)
2: ztMMJRFB3bZI0FosKEszyHxRdSU.crl (hash: LDTaGLUU8Lq73meYf2EzAKYnAJ6dbt2rqiKTeKfMC7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:75:37:97:fd:8c:54:4c:c4:47:2a:c4:34:40:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced30c251141ddb648d05a2c284b33c87c517525
Validity
Not Before: Nov 11 12:01:02 2025 GMT
Not After : Nov 12 12:01:02 2025 GMT
Subject: CN=0bf3a2512523ff8b4e756610665da7399ad60e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8e:25:40:6e:f4:98:0f:f4:ac:8e:28:fd:f1:
e9:2c:57:2c:b2:ae:0e:dd:64:16:3f:02:23:01:01:
76:bf:01:5f:8e:38:96:ee:75:ca:63:6b:e6:0b:56:
09:3e:34:06:ae:45:ec:1e:9f:82:6d:77:64:2c:34:
04:12:fb:45:30:cf:09:20:4c:f2:16:86:bf:52:21:
8a:01:0f:a4:df:ef:28:0c:0b:eb:64:a8:c3:7b:c1:
fb:81:fc:a1:75:cd:f4:5f:ca:76:ac:49:8d:0e:ad:
d5:a6:e1:df:f7:2b:e5:29:21:d2:c3:6b:38:fe:e8:
19:ca:02:d0:ce:8f:43:d6:5a:53:57:64:6a:f8:c2:
d0:11:9a:b7:71:5e:e9:1f:ad:c4:8f:82:7a:1c:87:
5d:12:52:52:42:4a:40:0a:6c:36:84:94:60:9b:17:
0d:f3:52:5b:60:e2:6b:85:ca:79:ed:ec:b2:37:3a:
4f:f5:56:1d:59:aa:a5:0d:0f:c8:1a:71:c7:db:fa:
f6:4f:e1:63:e4:4b:17:ab:b7:1c:24:ee:84:1a:94:
38:e9:28:37:ab:22:d2:68:13:07:e0:ee:7c:2d:b6:
9e:a1:fd:d8:41:13:32:a8:2c:0c:ed:f5:54:a8:83:
6d:a8:25:70:81:40:c7:58:8a:d5:8b:34:c7:6f:dd:
66:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F3:A2:51:25:23:FF:8B:4E:75:66:10:66:5D:A7:39:9A:D6:0E:12
X509v3 Authority Key Identifier:
keyid:CE:D3:0C:25:11:41:DD:B6:48:D0:5A:2C:28:4B:33:C8:7C:51:75:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:ee:8d:ce:4f:86:7c:2f:48:53:08:a1:50:b6:21:0e:51:d3:
94:4f:50:52:b2:89:10:0c:e7:3d:1c:b9:20:33:6e:58:cd:f3:
78:79:2a:3a:0f:55:df:a6:03:47:41:80:81:08:74:06:17:b4:
12:19:05:67:4d:d1:45:32:eb:e9:cb:34:ef:ad:3f:4c:67:6f:
f5:72:6d:b5:c2:d2:47:85:92:cd:a2:f7:bd:64:3a:5c:b9:d9:
50:17:dc:78:7e:a6:d1:6d:c3:9d:60:09:fe:d0:45:d2:ff:3a:
60:c8:33:07:f3:33:ec:8c:21:d0:7c:a6:f0:bf:f2:18:51:00:
c7:0e:8a:a5:49:c4:12:6a:61:5b:b7:de:8d:6c:45:31:0f:b9:
83:fd:17:0d:7a:0c:fa:e0:80:23:5a:85:d9:16:36:ef:50:9a:
36:db:ba:78:d5:2f:90:ba:5c:0d:ae:3e:18:13:b6:60:b4:47:
39:45:a1:8b:0f:88:b1:5a:3c:d2:70:3c:6c:59:d0:db:b0:f6:
26:17:58:91:d1:54:07:4e:69:9b:64:c2:8a:d2:cc:32:3c:cd:
81:71:18:e2:b0:fe:86:95:bb:dc:db:1e:c8:e3:17:30:17:71:
17:27:76:63:67:54:4c:16:03:54:87:bf:82:85:2e:ae:3d:87:
25:fa:5e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:17 2025 by rpki-client