Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
File: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft (raw, json)
Hash identifier: mru3MeDXKU5gfZJuxzputeCGZroD0VUsYdvkVgwvhUk=
Subject key identifier: A2:87:5D:76:64:93:0E:6F:A5:A3:6B:5B:5E:DC:C4:12:5D:28:D8:E2
Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
Certificate issuer: /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Certificate serial: 01993B3979B479F28AD9E6B37478A454B657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
Manifest number: 1689
Signing time: Fri 12 Sep 2025 00:00:46 +0000
Manifest this update: Fri 12 Sep 2025 00:00:46 +0000
Manifest next update: Sat 13 Sep 2025 00:00:46 +0000
Files and hashes: 1: 08cbr85HkKL256WKPSBbjEBkUog.roa (hash: 5K7bdmLXsunQxf6ydRqaBdSla8m7yjvCwX6GQr2FyeQ=)
2: 1_VIXcn389cDhH5pQfcOHcgm1SA.roa (hash: DL+3+aiYPEstQJ/sUeRLgWJ6P/7ylF16Rs1Q6RQQLlE=)
3: AyxM3qUSp4vgIaJ1AQtSeDaW3v8.roa (hash: DID4wPyNJmFDb+hLJYcp8aWza0ytEMMJn7voP8pdhw0=)
4: GmoSLMOyGmAE3DVEod4OY1EVNkg.roa (hash: V4/CqFclfl4k9hlXoXkdtyPxDhPK8FCrQ1XJC3/zOcY=)
5: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl (hash: ZP/vTOudBJKuponiqJ98SFqZ0ZTJAN2J3ebHPNfLw08=)
6: cs1_hnr2v_RESMbUBcnLEeHdvL0.roa (hash: bQIbEK9aQwzm+EgLeePtROO+uC2BmOE2JtvqLImUO3Y=)
7: jHuaR39fBtfoSm7eKI-uPlXtnO0.roa (hash: tlJbuPplC7TVW63LZE8L9VXaV6yFo7hmKI0nyQHS7tc=)
8: kES3a_NmTCIqnMJDYdktZEAui6g.roa (hash: oWDzOnsZ0P67iTYQElx7vSfgd2r2XhuMUt+O6nZknyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 21:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3b:39:79:b4:79:f2:8a:d9:e6:b3:74:78:a4:54:b6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Validity
Not Before: Sep 12 00:00:46 2025 GMT
Not After : Sep 13 00:00:46 2025 GMT
Subject: CN=a2875d7664930e6fa5a36b5b5edcc4125d28d8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b4:d3:8b:98:b1:fd:9b:40:bc:a5:de:22:36:
8e:e0:55:14:0d:99:b1:4f:ba:e9:2f:23:04:2d:03:
a4:84:5a:31:dc:ee:2b:48:59:7d:8a:b1:c8:0b:7f:
f0:d9:79:78:8b:06:5f:67:f4:40:f1:9e:2e:f5:d8:
85:3e:16:84:97:5c:38:72:99:61:e2:10:99:b5:52:
f5:da:14:8a:2c:90:7d:6a:29:1a:bb:51:62:50:92:
b3:88:54:18:ed:69:0a:4a:44:5c:b8:e5:2c:92:ef:
5f:80:f9:ea:01:bc:c5:09:1c:74:23:71:60:3f:a2:
32:b0:72:13:a0:eb:4d:a3:91:0f:bb:cf:12:d7:d7:
72:d7:a7:c8:f2:1d:ff:f0:3c:56:8c:eb:43:15:3b:
83:3d:72:9d:1e:ac:7e:2d:53:fb:67:dc:cf:74:8d:
03:03:3c:5f:6a:07:23:e4:49:34:78:f8:86:5c:10:
5c:a4:c7:ae:02:0e:a2:20:00:08:36:60:23:d7:a0:
85:d0:68:d4:44:3c:68:3b:ab:ed:c6:18:a3:3e:03:
bf:2e:bb:ca:7b:cb:f0:47:63:e6:3a:54:20:02:d0:
e1:00:27:39:3a:af:64:a8:03:6f:37:57:7f:2a:63:
be:88:4a:a7:ce:3a:f2:93:6d:ec:55:e8:a0:4d:a0:
d2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:87:5D:76:64:93:0E:6F:A5:A3:6B:5B:5E:DC:C4:12:5D:28:D8:E2
X509v3 Authority Key Identifier:
keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f7:7c:18:bb:a5:eb:90:bf:25:7b:43:73:2e:fd:17:b1:2f:
79:1c:30:9d:54:0a:64:36:df:70:d2:d9:51:7c:4a:8f:aa:fe:
e3:2e:4a:cf:67:ad:9a:0e:a0:df:d8:f5:f2:0a:1f:e1:41:74:
63:15:53:06:cb:74:a3:64:fb:53:b7:1e:cf:33:09:1e:78:0a:
08:93:c5:d1:c8:e7:0e:ae:bb:f8:7c:8d:ae:d2:ed:dc:6c:ed:
e0:6d:8b:a2:dd:c9:8d:23:a6:86:c7:0e:63:46:de:3a:c7:1d:
47:ea:00:f7:8f:59:ef:9e:e7:52:87:b3:a7:4c:39:ca:ad:d4:
4a:9a:0d:a7:a6:43:0d:5b:d6:52:c5:2c:d0:5f:c1:a9:ed:ef:
80:6b:ac:90:bc:88:ab:ee:59:9a:b4:f0:01:62:85:17:61:6b:
7e:34:bb:cd:de:45:83:69:99:31:cb:b2:f0:22:15:8c:35:77:
2c:85:30:f5:78:e3:1c:cd:44:d1:ee:29:6c:a7:08:f8:42:b4:
a2:6d:97:57:4e:ad:22:73:f7:f2:16:32:d8:69:ee:5d:1b:02:
a7:6b:d5:55:30:0b:82:84:4d:72:f9:36:71:42:f3:60:dd:2b:
3f:fc:01:ac:bc:3a:89:24:d2:3b:b1:cf:f9:a0:fb:2b:bf:78:
ae:52:2c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 01:55:02 2025 by rpki-client