Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft
File: ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft (raw, json)
Hash identifier: SRVSRP/7hhfEkbPFLArX2sEfWDLFcPd8JVoajRO/kqQ=
Subject key identifier: A6:7C:FE:F4:97:C4:2C:BD:7D:C1:03:33:75:5B:F2:8E:85:B4:72:E7
Authority key identifier: 66:E3:ED:06:E8:8E:55:91:D9:09:66:76:95:15:55:C0:DC:53:5C:19
Certificate issuer: /CN=66e3ed06e88e5591d9096676951555c0dc535c19
Certificate serial: 019A72CA96508952545C2CACF95168CDF1A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 12:01:10 +0000
Manifest this update: Tue 11 Nov 2025 12:01:10 +0000
Manifest next update: Wed 12 Nov 2025 12:01:10 +0000
Files and hashes: 1: 6ekzezCQTRRJ6ani1kLlgl9_UEQ.roa (hash: E8YKQ+7oKbQVBsilOuJbTsXN0BQkzpHb4tN03LRQOhY=)
2: ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.crl (hash: UVLwbK1pMipNYIQAhtp6MRJqtz9sPZF3Eupf728suao=)
3: jjkw7d-vM1Kuz3VrP2qfo9DvNCo.roa (hash: VJTPRYmj0bLLGoSUyYkDz754dQcYj27q2IKg/a+56Gg=)
4: rWTg50lIWr4eBCYZpN1g2rEsvwA.roa (hash: h6askj3XUZ9cNfHdvd89Te7uFDoO162bWotdGeS5FPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:96:50:89:52:54:5c:2c:ac:f9:51:68:cd:f1:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66e3ed06e88e5591d9096676951555c0dc535c19
Validity
Not Before: Nov 11 12:01:10 2025 GMT
Not After : Nov 12 12:01:10 2025 GMT
Subject: CN=a67cfef497c42cbd7dc10333755bf28e85b472e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:99:9b:cb:3d:ef:43:a6:65:6f:b8:04:fc:d8:
7b:2f:0f:ad:be:b6:0f:37:11:41:b9:1a:6e:c2:0c:
63:a0:20:b6:48:00:f7:c4:48:79:0c:e4:52:c8:74:
a1:6b:3b:dc:d7:da:85:b6:d7:75:72:a2:55:a4:bb:
57:06:cd:2f:43:48:9d:7e:5b:7a:ce:a0:ee:4d:2b:
f4:5f:33:0e:fa:50:19:b1:ad:40:e6:f2:e0:80:d7:
fc:09:d8:7b:bf:42:0b:0d:bf:7d:cf:04:f1:81:71:
49:35:d9:46:76:84:42:11:f5:e7:7e:5f:ef:d3:d7:
0a:35:62:05:4f:bf:2c:07:65:e3:be:98:73:55:24:
83:df:cb:c7:8c:05:b6:d6:d3:94:32:74:c3:75:ab:
a9:48:eb:b1:3f:b4:05:a0:6d:45:c7:c7:c3:1f:51:
89:d6:40:c6:29:e0:bd:83:e6:20:9d:3d:59:a1:12:
09:8b:a1:21:1d:62:0e:df:35:8d:3c:e1:9f:46:63:
f2:76:dd:06:bf:a3:66:08:80:e1:e6:b9:bb:9c:9b:
a5:dd:2d:f5:82:73:26:51:50:c3:28:30:8a:78:c6:
60:07:7d:59:8a:fb:75:e2:cc:22:45:3c:80:02:fb:
76:75:26:f0:8b:d5:3d:f4:d4:51:08:98:81:a1:92:
34:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7C:FE:F4:97:C4:2C:BD:7D:C1:03:33:75:5B:F2:8E:85:B4:72:E7
X509v3 Authority Key Identifier:
keyid:66:E3:ED:06:E8:8E:55:91:D9:09:66:76:95:15:55:C0:DC:53:5C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:6c:64:cd:3c:a7:6d:78:6f:04:94:8e:ed:a8:ad:c8:f3:6c:
6d:2f:34:d4:23:ce:b7:7a:d3:b6:a6:cd:3d:5a:1a:e7:ab:d3:
ab:26:84:d9:8f:49:72:20:40:06:45:67:ae:49:b8:ce:e5:d3:
03:ad:62:0e:84:cf:82:a7:63:59:a1:8d:24:8e:e8:eb:a3:c2:
c4:ad:6e:4b:ad:ce:a5:6d:e5:2f:20:8d:ef:d6:6f:ff:da:49:
80:14:f6:fd:14:79:a3:8a:e8:05:65:d4:3c:cf:45:bd:47:4f:
8a:3a:1d:68:d3:e0:28:33:0f:0b:36:ac:8a:36:54:d1:73:c2:
73:44:5d:96:b9:88:da:8c:f9:32:05:84:b7:39:18:4a:db:36:
7a:a2:eb:ca:03:b5:10:38:6e:4d:4e:d5:ca:5d:26:be:05:b5:
9a:30:a1:6e:f3:ae:30:4a:51:09:b8:f2:38:01:3a:a1:d5:f3:
36:44:fa:ab:76:7d:6e:7a:67:46:65:77:89:7e:46:a5:d8:9f:
9f:41:13:52:e8:96:0a:91:1b:39:1e:e8:21:28:9f:dc:11:c7:
57:95:aa:f5:e9:0c:3c:d1:a7:fe:4f:7e:8f:91:af:6a:d3:20:
71:38:26:4f:71:af:d1:bb:f7:9c:e1:0e:9a:2c:75:1a:bd:2e:
9a:ac:09:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:42 2025 by rpki-client