Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
File: ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft (raw, json)
Hash identifier: ft7V8w7XqUYeLudkwPuqEgdA4SdfJlzD6e3jNIKaIk8=
Subject key identifier: 34:9C:BB:DC:67:B5:4E:F0:4D:AA:4F:78:B9:B8:8A:CE:3E:4B:29:2C
Authority key identifier: 65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6
Certificate issuer: /CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
Certificate serial: 019A4B4E5D3F440C11DB82408A49D71C7725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
Manifest number: 1073
Signing time: Mon 03 Nov 2025 20:00:18 +0000
Manifest this update: Mon 03 Nov 2025 20:00:18 +0000
Manifest next update: Tue 04 Nov 2025 20:00:18 +0000
Files and hashes: 1: DkGvgDnbdtEHDMx7b64dzBjhPco.roa (hash: 8mB0OA1c8Mmrq7iJrmaJaIVGUwLhqVKrizBW/uXLsCE=)
2: ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl (hash: 3SM5edh2U1o8WHltl4obtyWOP/hPPcUNOMkkXKqoG/g=)
3: ZiWYCsD1Dry724z5OmJJ8Oawr6w.roa (hash: pA+krdDNaZYU7n+P4r9c22BIzRTJGvLkmVz3LgTk2aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:4e:5d:3f:44:0c:11:db:82:40:8a:49:d7:1c:77:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
Validity
Not Before: Nov 3 20:00:18 2025 GMT
Not After : Nov 4 20:00:18 2025 GMT
Subject: CN=349cbbdc67b54ef04daa4f78b9b88ace3e4b292c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:db:58:69:a6:30:ba:6f:34:cc:e1:b9:2c:a8:
a0:d9:10:70:2f:bd:af:eb:10:1d:0c:29:b6:40:5e:
1c:bf:c6:86:06:52:1d:4e:31:f8:fe:4c:8b:40:ea:
ac:cb:c0:9a:c9:5a:44:ac:93:1a:7e:30:2f:74:a8:
01:95:f7:56:e2:2c:1a:a6:86:e7:d8:34:98:28:3a:
3f:4c:ba:a8:5d:ed:c1:32:3c:7b:9b:5e:d7:88:00:
35:d7:2d:10:05:38:30:fe:fc:28:02:85:be:95:a4:
c7:ad:d3:81:76:72:14:66:dc:cf:4c:f1:72:da:71:
65:20:b0:bc:52:a9:3b:e8:51:c9:82:a2:af:c6:f5:
5c:b9:2b:32:05:26:51:49:e7:8c:fe:0f:0b:c4:e0:
e1:2e:00:0b:dc:d9:ff:25:b1:c7:67:aa:0e:03:5d:
22:d2:fe:04:fc:df:4c:0a:b7:46:47:a8:38:78:70:
3c:d4:35:8a:67:2f:c7:df:75:d0:b5:65:f3:e6:e2:
72:02:d9:8d:63:03:cc:f3:37:e5:e2:16:85:9d:6f:
c7:bc:52:0d:dd:a3:72:8e:c2:16:97:6f:b1:fb:47:
a3:8b:f9:4a:a0:cb:4e:54:c6:24:ba:89:31:6e:a7:
b1:b7:16:bd:5f:86:71:61:4f:47:cd:77:45:e2:fa:
86:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9C:BB:DC:67:B5:4E:F0:4D:AA:4F:78:B9:B8:8A:CE:3E:4B:29:2C
X509v3 Authority Key Identifier:
keyid:65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f0:5d:01:3e:3f:97:60:e1:ee:de:b4:08:c6:67:79:f7:a0:
a4:3d:ff:77:47:2a:6d:02:07:1c:3a:d7:2f:3c:71:2b:3a:76:
b2:00:88:36:c6:9a:e8:b3:cb:75:3b:7c:e1:10:5e:f9:93:3b:
48:ea:3f:7e:bb:61:21:b3:63:54:49:74:00:66:99:aa:39:cd:
c8:9b:06:ed:e1:28:c6:04:ad:51:20:06:5e:c1:dd:be:28:fd:
26:73:ba:55:60:9e:3e:17:3d:df:89:17:8c:14:e9:90:fd:38:
ac:58:e0:fb:7d:2f:93:47:d0:9c:ae:cc:c5:0f:68:1a:bc:35:
90:9b:59:52:5d:9c:33:6c:a8:d9:5d:03:8a:79:3e:19:ff:c1:
51:64:32:c1:5c:db:c9:14:c3:f3:17:d2:f0:01:f5:63:79:8e:
49:20:ea:e7:18:2d:ca:14:1c:35:42:6a:b4:75:65:33:9a:2f:
d1:0f:8f:50:75:37:ad:61:eb:64:dd:4e:c5:fe:50:34:44:9c:
d9:d8:b9:97:19:de:7c:29:42:9d:d2:ac:11:20:a8:6a:6c:64:
ae:db:a6:43:69:58:df:c9:13:38:03:95:d3:2a:ec:b7:ee:3e:
a4:c0:db:37:22:e1:e0:1c:1b:2a:47:7c:0a:29:05:8f:7e:06:
c1:0f:2f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:29:11 2025 by rpki-client