Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
File: ZtioTw6M91UTepaA68xPzNIKNLI.mft (raw, json)
Hash identifier: UsRZX9cuRNX6Fr4zIsxW4z8RsbNilOczV4BGnhPsZ/U=
Subject key identifier: 39:EB:85:59:93:39:B2:D5:AA:B6:C8:15:90:97:A5:92:52:7E:86:67
Authority key identifier: 66:D8:A8:4F:0E:8C:F7:55:13:7A:96:80:EB:CC:4F:CC:D2:0A:34:B2
Certificate issuer: /CN=66d8a84f0e8cf755137a9680ebcc4fccd20a34b2
Certificate serial: 019A730183C36BD9F02E90242817EADCD1D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 13:01:10 +0000
Manifest this update: Tue 11 Nov 2025 13:01:10 +0000
Manifest next update: Wed 12 Nov 2025 13:01:10 +0000
Files and hashes: 1: P7vPWrkUt_4tI2tusoLN2OIhgCA.roa (hash: vg79/TJpONqI6MyXQJ/4Hu+xaXpkJvsU35isLPjUC8s=)
2: ZtioTw6M91UTepaA68xPzNIKNLI.crl (hash: Gu8uu658ZjBgWymAYKsQV08Lhvnm7yplNafPc2oxHUY=)
3: r6QzNtUWS8LqjO5zMkFtGGDH8lg.roa (hash: l3MXhVwlaN7WZQxmnLfdtChq7kKxEP3Qy/454Bdw0ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:83:c3:6b:d9:f0:2e:90:24:28:17:ea:dc:d1:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d8a84f0e8cf755137a9680ebcc4fccd20a34b2
Validity
Not Before: Nov 11 13:01:10 2025 GMT
Not After : Nov 12 13:01:10 2025 GMT
Subject: CN=39eb85599339b2d5aab6c8159097a592527e8667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e8:38:5a:4f:27:02:f2:bf:d7:29:a8:68:7a:
d0:d8:9a:48:cc:18:2e:4c:3d:c8:6c:a4:14:0d:88:
47:62:8f:af:05:ae:f9:f9:fa:51:3a:82:8c:41:26:
92:4d:3a:b9:10:aa:d2:2d:f5:bd:c4:20:19:29:ed:
37:a2:7e:d6:24:e3:fd:7b:34:dd:93:3f:00:68:7b:
d6:b8:7d:62:73:5c:f5:c2:8a:5e:52:9c:12:da:d6:
2c:a0:81:3d:44:27:d7:02:82:04:4c:f2:7b:b3:02:
e2:22:39:ea:9a:51:9b:fd:03:e7:76:6d:ad:00:99:
91:10:d1:ec:f3:07:98:30:a0:00:69:8d:aa:e6:78:
db:98:3e:58:e5:dd:4e:80:57:f9:77:48:3c:f8:65:
cf:b9:2b:12:31:2f:f0:14:64:5d:07:3d:03:c1:dc:
d3:89:c6:4f:65:9a:db:92:77:2e:fd:5d:8a:0c:2c:
83:19:5e:40:7e:6b:d9:3b:d0:85:e2:e4:c5:d3:6d:
79:e1:2a:15:36:f9:41:35:0c:0c:b1:d5:2a:6d:de:
ca:6e:9d:4a:f9:fa:a2:d3:aa:82:5f:67:76:5e:d3:
d3:e4:b1:be:ff:08:92:3d:2f:eb:45:17:da:74:21:
70:87:e4:1d:64:f5:3d:36:2b:96:52:0b:f5:43:c3:
75:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:EB:85:59:93:39:B2:D5:AA:B6:C8:15:90:97:A5:92:52:7E:86:67
X509v3 Authority Key Identifier:
keyid:66:D8:A8:4F:0E:8C:F7:55:13:7A:96:80:EB:CC:4F:CC:D2:0A:34:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c2:ca:d6:a1:87:62:d9:9f:71:86:54:59:d7:11:c5:66:a5:
58:10:c1:cd:1f:cd:45:94:63:46:35:c1:8f:36:be:e6:b8:b7:
08:63:ce:cb:47:39:af:b8:7c:6c:bd:d8:7c:58:1a:e6:f3:62:
17:64:55:e9:3a:6f:d1:09:db:20:15:19:96:9b:79:5f:c1:b3:
b3:e1:53:5a:c7:af:93:96:1b:c3:32:2e:a6:79:51:bc:70:8d:
a1:a0:c2:8d:0c:cb:82:13:18:15:cb:15:1a:47:b9:2e:ca:39:
14:08:ca:64:08:a9:5f:a9:e1:39:50:a2:e9:08:85:b5:62:f8:
a1:9c:a7:ca:86:c3:8f:3a:79:c6:1a:ee:94:17:98:73:bc:c4:
98:f6:86:f9:23:06:ff:53:4f:6a:ba:51:c2:c8:8e:4a:75:d0:
ff:49:ed:9b:f5:1f:7a:ad:80:6d:93:46:63:6a:a4:30:aa:35:
98:d3:0e:2b:95:08:09:2f:ee:93:d0:30:05:97:ab:ee:1e:57:
38:15:4f:26:92:4e:8d:f5:74:66:c2:94:34:b9:be:99:8c:1e:
29:01:c5:cf:77:65:fa:80:fc:b0:2a:ac:f1:c6:c6:85:34:c2:
76:ac:c8:2d:18:b4:76:2b:c7:27:dd:24:10:b5:b0:0d:a5:e6:
09:7e:22:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:36:49 2025 by rpki-client