Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/746055-223c-4ca2-87fa-e1508e0a8836/1/Zp4hLXARG0TeZvV1An4ADNRB_c4.mft
File: Zp4hLXARG0TeZvV1An4ADNRB_c4.mft (raw, json)
Hash identifier: /946g/XM8RkSPtnwc7ZpBI30n4XOkxYpsiuH27yYpRQ=
Subject key identifier: D9:06:7C:61:30:C4:65:DD:8C:18:E2:53:79:39:CA:74:35:7A:37:69
Authority key identifier: 66:9E:21:2D:70:11:1B:44:DE:66:F5:75:02:7E:00:0C:D4:41:FD:CE
Certificate issuer: /CN=669e212d70111b44de66f575027e000cd441fdce
Certificate serial: 019A71EE6A77927BB282FAB135091A3489D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zp4hLXARG0TeZvV1An4ADNRB_c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/746055-223c-4ca2-87fa-e1508e0a8836/1/Zp4hLXARG0TeZvV1An4ADNRB_c4.mft
Manifest number: 82
Signing time: Tue 11 Nov 2025 08:00:41 +0000
Manifest this update: Tue 11 Nov 2025 08:00:41 +0000
Manifest next update: Wed 12 Nov 2025 08:00:41 +0000
Files and hashes: 1: DPBiMkfZcMPnWu4HuBAMRqRAx3E.roa (hash: RRc9ujZ9wYKMEBB2jrXKo0UcJxSJ/KgGd/cdw5jOUv0=)
2: Zp4hLXARG0TeZvV1An4ADNRB_c4.crl (hash: RQjxqQD+oIt7gP/gMVNUuYnqOox/ESNa4Zk55MefPfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/746055-223c-4ca2-87fa-e1508e0a8836/1/Zp4hLXARG0TeZvV1An4ADNRB_c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/746055-223c-4ca2-87fa-e1508e0a8836/1/Zp4hLXARG0TeZvV1An4ADNRB_c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zp4hLXARG0TeZvV1An4ADNRB_c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:6a:77:92:7b:b2:82:fa:b1:35:09:1a:34:89:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=669e212d70111b44de66f575027e000cd441fdce
Validity
Not Before: Nov 11 08:00:41 2025 GMT
Not After : Nov 12 08:00:41 2025 GMT
Subject: CN=d9067c6130c465dd8c18e2537939ca74357a3769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ae:f7:84:07:fd:7d:a6:4c:19:e5:33:ff:1d:
6a:c3:d9:71:31:d3:60:2c:42:8b:b6:b7:ea:c3:bb:
de:de:2e:30:6e:07:7f:73:95:9e:08:17:47:99:28:
7d:db:5f:c2:fd:17:bc:da:a5:41:9c:d4:db:1a:46:
a3:ba:d9:78:54:6d:97:f0:df:ba:8d:1d:5d:51:56:
19:75:d3:e7:ef:7f:fd:67:e9:a7:d1:25:02:b9:a8:
33:a0:cf:9e:7d:62:f4:7d:47:60:1c:cb:07:17:4b:
15:59:f1:9b:b2:a3:7d:26:8c:93:59:89:c5:e7:db:
36:67:fc:d9:81:09:11:b3:24:eb:c4:0c:8d:34:74:
2b:41:46:5f:16:c4:8a:4b:08:de:50:b3:8e:3f:5f:
c1:c0:91:5d:44:47:c1:ed:0f:f3:12:47:82:12:fe:
17:b1:8a:8e:63:5d:6a:00:81:1b:28:40:e4:ac:8c:
9b:20:81:06:0c:24:aa:11:27:71:b2:0d:ff:ea:7d:
0c:ed:c5:e7:94:79:ab:51:a2:61:ef:5d:2c:b5:05:
c6:ea:01:09:cb:7b:92:c0:b4:dd:49:96:88:98:44:
53:03:39:52:ae:4f:84:31:72:03:c8:c6:8a:66:56:
89:54:9f:99:41:08:30:29:28:eb:54:ef:7d:1d:2d:
52:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:06:7C:61:30:C4:65:DD:8C:18:E2:53:79:39:CA:74:35:7A:37:69
X509v3 Authority Key Identifier:
keyid:66:9E:21:2D:70:11:1B:44:DE:66:F5:75:02:7E:00:0C:D4:41:FD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zp4hLXARG0TeZvV1An4ADNRB_c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/746055-223c-4ca2-87fa-e1508e0a8836/1/Zp4hLXARG0TeZvV1An4ADNRB_c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/746055-223c-4ca2-87fa-e1508e0a8836/1/Zp4hLXARG0TeZvV1An4ADNRB_c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:23:06:38:22:7e:32:9a:56:90:e7:5a:f2:e1:5b:cf:6c:2b:
b8:3a:53:15:87:c2:90:41:e4:5b:f9:83:a0:84:48:9c:73:38:
61:04:ec:38:23:32:2d:14:ca:32:e6:0d:91:c1:3e:d0:bb:c0:
03:c2:a5:88:c9:c7:a1:16:47:64:ab:dc:09:ae:33:cb:b5:a9:
31:b4:59:47:b8:53:f0:06:84:ae:f9:8a:36:eb:49:1e:76:3a:
a9:24:0f:3e:9a:0e:09:3b:d1:06:56:91:7c:5b:e9:e4:05:99:
96:17:08:f5:7a:70:84:1f:7c:b8:a7:32:9f:24:ae:cd:e8:39:
65:54:bc:42:6c:e8:85:c7:83:4a:16:5c:83:bf:cd:32:b7:aa:
5e:6b:25:db:68:b4:ea:1a:6c:21:d5:32:bf:04:e2:06:fc:41:
2f:80:f2:f8:ca:ad:17:8a:ff:c1:80:c0:5b:f1:38:97:be:34:
b6:79:e2:0c:4f:3d:26:5a:cd:72:5d:b8:b5:dc:d5:50:01:ee:
21:dd:97:3f:17:3a:e1:8b:a9:33:66:16:19:b7:fd:13:f7:b8:
20:bf:0c:ce:e2:2a:79:94:b4:bb:2f:31:13:ab:d9:b4:28:5e:
ff:c9:f0:bf:26:1e:23:e1:c7:3a:8a:0b:92:0c:cf:b3:39:7d:
78:19:bf:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:12 2025 by rpki-client