Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
File: Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft (raw, json)
Hash identifier: 56NZAB+R+s32K/I50vWOLPl5xC///fciqzFxIRj3VEI=
Subject key identifier: 60:89:00:78:40:D7:78:46:72:D5:32:05:9C:5D:3E:24:FA:57:7C:D4
Authority key identifier: 66:D9:75:8B:8C:8C:37:35:83:C0:57:51:66:D6:23:43:60:0C:7F:01
Certificate issuer: /CN=66d9758b8c8c373583c0575166d62343600c7f01
Certificate serial: 019A71B860303644DE67ADDCA96BC7604A32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:01:39 +0000
Manifest this update: Tue 11 Nov 2025 07:01:39 +0000
Manifest next update: Wed 12 Nov 2025 07:01:39 +0000
Files and hashes: 1: 5hRdogkirGENwV4J_9yZhIM72Qg.roa (hash: J4uFgSp054qa3rungh3dVcHSOU8TUTMoE74wGhQ37mY=)
2: Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl (hash: nVMfjasn7V0V2bZjV7ymmJYhUab2OMpPYzoR/9kpYro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:60:30:36:44:de:67:ad:dc:a9:6b:c7:60:4a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d9758b8c8c373583c0575166d62343600c7f01
Validity
Not Before: Nov 11 07:01:39 2025 GMT
Not After : Nov 12 07:01:39 2025 GMT
Subject: CN=6089007840d7784672d532059c5d3e24fa577cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3f:05:e8:3f:b0:98:d8:43:50:0e:1e:a1:3e:
25:0c:5d:e2:7d:c4:20:41:d3:b0:b7:9b:e7:46:fa:
9d:cc:e9:aa:f1:e9:56:38:dd:56:ea:79:bc:eb:b0:
fd:e5:2b:4b:62:7c:9d:c6:cc:3a:27:52:60:a0:1d:
8c:18:1d:ed:d3:0a:03:6d:6d:70:87:e7:ba:62:14:
23:78:8c:ec:5d:49:3a:c7:e9:77:c6:fd:9b:bf:9e:
55:51:3c:55:07:3e:92:b2:9c:ed:bb:df:0c:46:f8:
c2:9c:1c:2f:57:9d:27:7a:6f:62:12:86:39:ca:ef:
6c:76:95:c0:99:1f:de:e3:82:df:13:bb:95:18:02:
8e:9d:2c:72:b2:d1:a7:e6:49:09:4d:63:63:9e:0f:
73:a0:b5:16:8d:15:c2:03:09:4c:24:41:4e:f5:4c:
a8:9c:8e:41:7c:1d:45:ee:21:21:c4:d4:86:95:ec:
04:ef:70:24:07:26:c7:bd:af:f9:7e:19:27:4a:ac:
54:67:68:a4:8b:24:a6:4b:c4:5e:67:8e:de:b6:be:
50:15:3d:20:4f:71:9c:16:34:75:81:06:7f:3e:cb:
27:25:4b:cd:7b:46:a8:1e:d1:50:f9:71:ee:e7:ec:
a3:05:ce:37:c6:b3:08:5a:c9:8c:6d:14:82:dc:0f:
38:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:89:00:78:40:D7:78:46:72:D5:32:05:9C:5D:3E:24:FA:57:7C:D4
X509v3 Authority Key Identifier:
keyid:66:D9:75:8B:8C:8C:37:35:83:C0:57:51:66:D6:23:43:60:0C:7F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:67:a5:19:a6:09:ef:91:3c:7d:fb:b3:8f:da:ef:ae:83:37:
b8:bb:52:81:cb:ec:f3:7c:5b:28:ee:69:a0:a2:67:cb:7d:19:
63:ba:43:33:3f:6b:e3:22:c7:de:f0:4d:9e:61:ba:80:a7:db:
de:6c:ae:ce:f9:18:f9:98:12:3a:69:66:e5:c2:fb:4e:5f:86:
06:e8:8c:85:ae:34:6b:5b:22:37:2a:49:d6:20:cc:84:9a:ec:
61:90:52:a6:af:e4:7b:34:a6:55:7b:09:e5:c5:0a:79:d7:50:
2c:7c:c4:93:07:45:db:9e:d9:db:14:70:eb:7e:7a:20:66:73:
82:56:36:72:4c:45:02:52:b2:c5:21:d3:39:a7:7c:86:e3:fe:
8c:14:c1:bc:75:48:72:87:a9:0c:c1:1b:7b:a0:e4:59:1f:a3:
81:f4:d6:40:8a:fa:40:2e:58:28:6f:57:38:a7:20:cd:fe:9d:
28:06:e6:07:30:03:24:91:f1:0e:ec:90:b3:80:7a:78:a1:9d:
8d:7f:3f:f4:7e:48:3c:f5:44:4c:37:0d:2f:6b:12:6a:e2:89:
34:f0:00:f7:2a:63:86:5b:eb:70:bd:9e:72:dd:a7:9b:ff:62:
ef:10:54:93:43:90:0a:4f:05:b6:fb:fc:1f:b4:c0:d5:c5:bc:
cd:5e:96:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:46 2025 by rpki-client