Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
File: Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft (raw, json)
Hash identifier: toVU0ariBWKBjPSGwVqG8THrCbIhYKHtPUvsvb4oaFo=
Subject key identifier: 8A:A9:C8:9F:1A:5B:02:7B:37:C6:06:CF:02:48:DB:61:03:DA:67:E9
Authority key identifier: 66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
Certificate issuer: /CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Certificate serial: 019A0B93853A8032E8A6B690C84E28A68831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
Manifest number: 16F1
Signing time: Wed 22 Oct 2025 11:00:08 +0000
Manifest this update: Wed 22 Oct 2025 11:00:08 +0000
Manifest next update: Thu 23 Oct 2025 11:00:08 +0000
Files and hashes: 1: 1-uxvgJ33Ep83LKDPOWyK_TQkRjs.roa (hash: DSKQp+AywW/AiTaKMnd/V3/aO8KTX7yy5Li9SZt44DU=)
2: 8VKbbYixNDCpMWrK8Sk18PBt9UI.roa (hash: Y+EwSEC1feZ0TsmplFocxAWfhhAkFX7OxAfih+EUUq0=)
3: 9iP7WJpaeB_-buLXK8znbS1Ia3M.roa (hash: WfmJ7gmjlOFm1xY2ae1k54FPRmlhbu8yzibRgq+Obrw=)
4: KO1YGIQXzqmCT0PfoP9U_bP8Ik0.roa (hash: snMWMSvb7n+P3ZpH6VNK6nVq04jDlvUE+5CJBun4qik=)
5: Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl (hash: EBNJw2tssXnj3E/g7fw+sxMVwRFS7yQW8gAzLoJ7pdU=)
6: cvFT9U6f9q2iEs9qYdY5pICL5uA.roa (hash: rpF3ncfSzctaMA19sRq+0rLTTnT49oldb4WYIOd4jLo=)
7: j97-8Fr-iu2JkstPIny1GyoUCWs.roa (hash: hG141yU64tbNFyVwR3WNdvmuMd8XffVyyIfIeXPsAX8=)
8: tOlreYPe7u67idbXYncHUQK-mIo.roa (hash: KU1u5Wpoy603w8tu9YwxwROqP4UYKqLHuGvfzTsDk/c=)
9: vsJTJNJUt5vULQK53FxCdXmG5wk.roa (hash: Tj8gi+0DcWqm3KQnTu0KBcAKSHrMVabVRmlaSv0QlNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 11:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:93:85:3a:80:32:e8:a6:b6:90:c8:4e:28:a6:88:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Validity
Not Before: Oct 22 11:00:08 2025 GMT
Not After : Oct 23 11:00:08 2025 GMT
Subject: CN=8aa9c89f1a5b027b37c606cf0248db6103da67e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7a:88:cc:d6:c9:ad:cf:64:48:ed:7c:0e:a1:
e9:dc:ce:1f:45:c5:af:83:cb:70:10:ce:19:fb:71:
9f:8e:26:fb:53:7b:e7:9a:d8:8a:b9:30:d9:23:33:
41:03:3e:f9:29:1c:ce:9a:eb:72:66:d2:ed:59:7e:
67:52:a7:c7:3c:bf:9f:38:f4:6a:0a:35:e1:2e:bc:
66:6c:66:ea:ca:f0:9a:1b:07:cc:9e:6c:89:a5:ba:
73:b4:9c:0c:6b:d1:bb:f0:6b:6f:96:81:84:d3:92:
33:c9:3e:92:ce:4b:e0:c8:9d:50:a0:4f:af:2f:c4:
95:7e:74:6d:71:e5:b4:28:dc:21:5f:5e:93:37:cb:
14:78:1f:36:54:8d:9f:39:09:71:d3:92:9d:f3:d6:
07:78:d4:48:81:25:b8:e1:83:10:3f:95:d6:fd:c7:
03:78:4e:d0:dc:5a:f4:00:c9:30:f8:11:10:93:c4:
3f:47:57:6d:67:c0:68:5c:d4:db:cb:e5:07:98:df:
de:27:83:ee:fa:bc:5e:65:84:42:e1:4d:40:7a:fc:
40:f5:2a:76:bb:ab:2d:68:c4:35:db:a6:10:f7:12:
1b:dd:b4:d2:7e:43:27:0d:51:35:e5:ba:a0:18:de:
a4:68:36:86:10:a3:ba:9f:87:8f:f8:8a:8b:99:f2:
5f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A9:C8:9F:1A:5B:02:7B:37:C6:06:CF:02:48:DB:61:03:DA:67:E9
X509v3 Authority Key Identifier:
keyid:66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d7:c0:0c:05:0d:bb:ef:c6:fc:d1:6c:20:41:50:0d:96:18:
60:3d:cd:29:b3:00:04:39:6d:73:ea:5e:30:15:fd:c8:b8:f1:
02:a4:ac:b7:27:c4:87:54:72:07:f7:23:07:01:e1:71:ec:f4:
3e:dc:6a:0f:5c:ad:c2:40:be:d4:c5:0c:57:61:6e:b7:f5:59:
97:ff:38:73:fe:e8:e5:3a:09:f4:a2:1d:74:bf:1d:c7:7e:8a:
3a:5d:ae:0b:7f:b7:c0:a2:fe:76:e4:e6:7c:43:b9:a3:ea:11:
b9:e7:74:90:1e:fa:fc:d0:07:fd:20:74:25:d8:49:5f:54:19:
24:c8:82:00:8e:bc:61:e4:71:bf:36:c6:df:c6:c4:bc:81:94:
7d:0b:31:a5:47:be:5b:ca:b6:15:21:48:99:38:38:d1:63:bd:
d5:da:16:1d:87:c1:a0:cc:da:8d:43:2c:e4:53:5d:b6:e3:78:
40:a8:88:49:4c:a2:e1:08:86:b0:1f:ad:23:c9:2d:94:3e:01:
d6:81:5d:1a:6c:6c:6d:13:4c:37:f9:cc:1b:37:0e:f8:fc:47:
3b:fc:95:5e:10:06:a8:50:79:37:e7:7a:c2:eb:d4:08:98:e6:
81:84:61:8c:60:9a:c8:3e:9a:20:0b:b6:8c:f1:19:e8:c4:55:
e0:dd:cf:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 21:33:43 2025 by rpki-client