Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
File: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft (raw, json)
Hash identifier: e9O1LWrC9riaZtwqZTzoELEnk1h6lIoav6dEhRW++wY=
Subject key identifier: 34:EF:E3:9A:58:BE:A4:71:B1:A6:A5:A5:92:D8:95:F1:5B:93:FA:56
Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
Certificate issuer: /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Certificate serial: 019A71B90EBA7190E57A08625BC4823C8AD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
Manifest number: 172A
Signing time: Tue 11 Nov 2025 07:02:24 +0000
Manifest this update: Tue 11 Nov 2025 07:02:24 +0000
Manifest next update: Wed 12 Nov 2025 07:02:24 +0000
Files and hashes: 1: 08cbr85HkKL256WKPSBbjEBkUog.roa (hash: 5K7bdmLXsunQxf6ydRqaBdSla8m7yjvCwX6GQr2FyeQ=)
2: 1_VIXcn389cDhH5pQfcOHcgm1SA.roa (hash: DL+3+aiYPEstQJ/sUeRLgWJ6P/7ylF16Rs1Q6RQQLlE=)
3: AyxM3qUSp4vgIaJ1AQtSeDaW3v8.roa (hash: DID4wPyNJmFDb+hLJYcp8aWza0ytEMMJn7voP8pdhw0=)
4: GmoSLMOyGmAE3DVEod4OY1EVNkg.roa (hash: V4/CqFclfl4k9hlXoXkdtyPxDhPK8FCrQ1XJC3/zOcY=)
5: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl (hash: m3RW/V8rEWk7M1brepfscAZI/XqCuvhs8dmb/ViqlFo=)
6: cs1_hnr2v_RESMbUBcnLEeHdvL0.roa (hash: bQIbEK9aQwzm+EgLeePtROO+uC2BmOE2JtvqLImUO3Y=)
7: jHuaR39fBtfoSm7eKI-uPlXtnO0.roa (hash: tlJbuPplC7TVW63LZE8L9VXaV6yFo7hmKI0nyQHS7tc=)
8: kES3a_NmTCIqnMJDYdktZEAui6g.roa (hash: oWDzOnsZ0P67iTYQElx7vSfgd2r2XhuMUt+O6nZknyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:0e:ba:71:90:e5:7a:08:62:5b:c4:82:3c:8a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Validity
Not Before: Nov 11 07:02:24 2025 GMT
Not After : Nov 12 07:02:24 2025 GMT
Subject: CN=34efe39a58bea471b1a6a5a592d895f15b93fa56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:52:eb:05:1f:ef:7e:8a:90:3b:02:ed:5e:18:
02:97:eb:e3:d6:9d:4f:72:6e:57:ad:0b:ca:aa:b3:
59:e4:f7:15:8a:77:e0:eb:81:d8:48:dd:7f:c7:3b:
2e:ef:3f:a9:2e:d5:8c:7a:60:61:7c:ae:14:6e:05:
f4:30:54:36:8a:dc:c9:c8:a6:6f:d2:3a:b4:1c:f1:
5c:fa:bb:1d:e8:10:57:14:2e:6a:1e:38:8d:fb:8d:
d6:4d:a5:4f:af:0e:bf:d4:37:86:8b:e9:29:d2:a2:
80:12:a9:6e:f0:6f:e2:8b:55:c5:7b:13:c7:52:94:
41:97:49:e4:3c:09:ee:e0:2c:6b:0a:59:c5:48:0b:
e0:2e:3f:43:df:cd:c2:20:a7:7f:be:3d:65:8c:20:
ee:4b:7b:d9:3e:ec:ca:5f:ed:5c:14:cb:1a:3d:43:
4f:85:e2:3d:38:4e:db:3e:e7:00:02:ed:8c:e7:d8:
c6:75:a3:b7:a4:3a:40:99:87:14:3d:d6:55:b7:f9:
82:eb:14:e9:04:bc:5d:ee:b0:32:cd:4b:f7:1f:d0:
19:b0:63:77:b0:b1:b6:97:da:97:5f:23:3b:b8:3b:
68:13:c7:17:3e:8a:b9:2f:5a:65:42:d9:c7:fb:2d:
46:2b:5d:79:52:a5:b6:05:bd:21:ed:56:64:92:cb:
e3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:EF:E3:9A:58:BE:A4:71:B1:A6:A5:A5:92:D8:95:F1:5B:93:FA:56
X509v3 Authority Key Identifier:
keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f6:e6:c6:10:78:7f:2f:47:fd:01:7b:6e:d5:0d:7b:7f:b5:
67:19:27:5c:d2:aa:26:3c:43:0e:63:b2:0c:b7:8b:90:df:a9:
52:f8:fe:9c:c0:e1:ba:f1:d1:a0:d1:36:04:48:5d:d8:b9:f3:
99:78:9a:83:6b:0d:33:13:49:f0:8d:d1:bb:46:5a:63:34:42:
24:09:ce:47:9f:d0:ce:cf:3e:12:ed:b5:df:4f:7f:4c:66:49:
57:f1:94:99:05:8b:47:84:1e:5d:08:7f:78:37:8b:ca:14:45:
8a:05:0f:6a:97:8f:46:0d:ce:6f:ad:b0:d3:9f:b3:9d:e2:e2:
95:ad:aa:5e:2c:9b:41:a7:91:1d:09:26:3f:97:b5:84:67:82:
51:4f:85:41:4d:38:b1:f5:e4:78:fa:dc:9a:9d:bf:43:01:40:
84:b7:af:bc:d2:47:ae:81:c0:58:c4:35:6d:74:48:0d:88:27:
51:c4:e5:61:db:67:0b:92:cb:d4:33:36:58:58:7e:3d:d3:a3:
b2:39:f9:4f:f6:f6:c2:6d:10:b3:50:4f:39:74:15:5f:fb:f3:
1d:3f:0c:b4:1d:8e:42:d5:34:b3:a9:e1:15:ee:0e:32:dd:45:
c9:5a:87:83:c5:4c:70:c4:6d:7b:83:de:20:9a:86:e3:80:84:
93:7d:62:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:40 2025 by rpki-client