Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
File: Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft (raw, json)
Hash identifier: pCa/Wz16KP8QFbsBjiaLvxn3tiBFhVE/08o485B6FS4=
Subject key identifier: C2:E3:96:33:54:45:BB:6D:D4:7E:C4:23:BC:DD:1C:7F:E0:1F:22:E4
Authority key identifier: 66:DF:B4:31:58:D9:DD:B2:F5:B9:F2:92:37:53:BE:D3:FB:11:73:CA
Certificate issuer: /CN=66dfb43158d9ddb2f5b9f2923753bed3fb1173ca
Certificate serial: 019A72264E54131C76D67FBC187D2A35D043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
Manifest number: 1459
Signing time: Tue 11 Nov 2025 09:01:44 +0000
Manifest this update: Tue 11 Nov 2025 09:01:44 +0000
Manifest next update: Wed 12 Nov 2025 09:01:44 +0000
Files and hashes: 1: 6JYNh-n5WyyjhpESG3f33euXdz0.roa (hash: F75DJeS7+fMY7BG2ZrDAaDOIaz0HnjQabtUssq/wKLk=)
2: Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.crl (hash: qSJh64p08J+Vm6yXdgkroVAmdxQCuC9/dv2GEorCjfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:4e:54:13:1c:76:d6:7f:bc:18:7d:2a:35:d0:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dfb43158d9ddb2f5b9f2923753bed3fb1173ca
Validity
Not Before: Nov 11 09:01:44 2025 GMT
Not After : Nov 12 09:01:44 2025 GMT
Subject: CN=c2e396335445bb6dd47ec423bcdd1c7fe01f22e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cc:de:7a:bd:36:e1:12:3b:1c:9c:25:32:8d:
b3:af:be:77:1b:09:5f:f1:d8:a1:a8:ed:e1:20:f4:
4c:fc:63:84:e9:7e:02:fd:6c:4a:f4:5a:a7:d0:2c:
b5:e7:80:73:b6:98:1b:c3:63:c4:3c:92:d8:b4:34:
70:5d:ba:dd:80:31:7d:44:33:f8:fe:30:b6:ef:f0:
d4:4c:84:ce:5d:d2:d4:35:27:fe:29:0f:63:ef:b8:
70:d3:0c:b0:28:1b:9a:29:f2:f6:fd:8f:1f:a0:f8:
90:17:5b:7b:0b:21:f3:e8:03:6a:ed:d0:34:7c:48:
49:47:db:5e:54:08:4c:03:60:b5:33:d7:cc:8f:02:
b9:70:e8:22:cb:e4:e0:2e:0f:74:24:a4:a4:dc:cd:
4c:b7:c3:5f:26:1b:bb:87:6a:88:c7:d5:c0:de:de:
c3:16:e4:e4:df:0f:86:34:99:57:82:fa:7d:2b:72:
90:3a:dc:bf:9e:c0:cf:15:e2:87:73:47:8b:d7:ad:
28:5d:d1:18:63:7d:80:87:ca:91:9d:d9:43:e9:44:
59:be:3b:d1:d1:48:97:00:39:b5:ea:1f:db:da:df:
ea:ed:ab:f5:f8:3e:62:c6:a8:a0:5f:02:3e:80:b2:
b7:7e:5c:19:25:70:2b:cf:90:ae:f8:46:ff:55:7e:
0c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E3:96:33:54:45:BB:6D:D4:7E:C4:23:BC:DD:1C:7F:E0:1F:22:E4
X509v3 Authority Key Identifier:
keyid:66:DF:B4:31:58:D9:DD:B2:F5:B9:F2:92:37:53:BE:D3:FB:11:73:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:21:00:6b:c2:bc:fc:84:9b:e6:eb:2c:9f:a1:0f:16:3c:50:
a1:d9:92:87:11:a1:00:82:19:fd:fa:38:6d:2a:c9:c0:d0:f3:
1a:8f:51:f3:53:08:01:c8:fb:e3:9b:9d:92:dc:1b:ce:99:75:
9a:c3:b7:ba:ad:9a:f9:93:84:03:d1:6a:4c:f2:af:97:d6:45:
40:8e:17:16:19:14:b3:4e:fb:e1:4a:99:cd:a5:df:78:2c:77:
15:4d:66:c5:13:b0:41:9c:b0:da:1c:f7:83:c1:00:3d:0e:a3:
77:33:22:b2:3e:b1:3f:26:2f:af:49:72:7a:2f:1b:ed:06:85:
c8:ff:1f:dc:93:80:1e:cb:37:c6:9f:c8:80:74:ff:92:5d:f5:
8c:7c:9e:59:2f:31:ea:57:e4:90:42:69:68:a9:1c:be:1c:12:
c6:d8:64:7c:3f:e2:12:bb:b0:54:da:d6:67:4a:c9:67:73:b2:
b2:50:f0:35:95:b7:a1:09:25:19:6b:6f:cf:af:16:7b:38:77:
3e:85:35:9f:1a:5a:91:1f:8c:db:f4:f4:af:90:8b:89:86:1f:
8b:fb:a8:86:73:84:bb:a8:41:5e:47:7c:80:44:d3:93:86:2c:
6b:15:34:77:cb:ef:4c:65:30:63:66:50:f7:c1:94:d9:34:30:
f2:b4:74:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:03 2025 by rpki-client