Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/8def12-897e-4e22-aa8b-834b9c10bf48/1/ZVFt3HMx4uJp3FfZx2MvJd59DG4.mft
File: ZVFt3HMx4uJp3FfZx2MvJd59DG4.mft (raw, json)
Hash identifier: IH9qCjvK/enTQxF46JI9sAI7VA+NUV05Usti666WJds=
Subject key identifier: 63:7D:4B:40:5C:FF:EA:7B:A0:01:DE:65:10:14:FE:AA:B2:9D:E1:3B
Authority key identifier: 65:51:6D:DC:73:31:E2:E2:69:DC:57:D9:C7:63:2F:25:DE:7D:0C:6E
Certificate issuer: /CN=65516ddc7331e2e269dc57d9c7632f25de7d0c6e
Certificate serial: 019A7112D24F1487A12793DB5F583237C50B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVFt3HMx4uJp3FfZx2MvJd59DG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/8def12-897e-4e22-aa8b-834b9c10bf48/1/ZVFt3HMx4uJp3FfZx2MvJd59DG4.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 04:00:49 +0000
Manifest this update: Tue 11 Nov 2025 04:00:49 +0000
Manifest next update: Wed 12 Nov 2025 04:00:49 +0000
Files and hashes: 1: 4Ce0RkzJxFf2zmOfoaUJ_gBJn-E.roa (hash: D0dPfxOksgJWe+dXu2u19DHS26MVsqfPtPHxRFo3TcI=)
2: ZVFt3HMx4uJp3FfZx2MvJd59DG4.crl (hash: TyAWJUNdGFz07To7ydsS/QzbHpzAzf0plCWWJMJOSbQ=)
3: ky6_9R6eveNvLuCWPAC-r7adSS0.roa (hash: U6nC3qpfku8imjHFuiezWbVoq5/CNzst9vKAejsjQls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/8def12-897e-4e22-aa8b-834b9c10bf48/1/ZVFt3HMx4uJp3FfZx2MvJd59DG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/8def12-897e-4e22-aa8b-834b9c10bf48/1/ZVFt3HMx4uJp3FfZx2MvJd59DG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZVFt3HMx4uJp3FfZx2MvJd59DG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:d2:4f:14:87:a1:27:93:db:5f:58:32:37:c5:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65516ddc7331e2e269dc57d9c7632f25de7d0c6e
Validity
Not Before: Nov 11 04:00:49 2025 GMT
Not After : Nov 12 04:00:49 2025 GMT
Subject: CN=637d4b405cffea7ba001de651014feaab29de13b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d7:4f:b2:6f:ab:ca:ad:01:d0:82:73:c6:bc:
24:67:17:44:f8:67:68:dc:07:95:c3:6e:88:7c:19:
12:64:93:16:f0:90:22:ce:d9:22:e0:2c:79:8b:01:
59:3c:ad:4e:56:ad:7c:56:72:c6:8c:ee:6a:b9:12:
4d:2e:25:1b:4f:09:a9:11:ea:19:f9:f9:f8:f7:89:
ee:c7:b9:35:a8:04:b1:51:10:4a:d9:ac:f8:64:85:
de:7e:78:f8:47:15:3d:25:59:b4:60:e8:9e:55:b9:
5c:d4:ae:b2:20:d8:77:9b:58:5b:c4:98:bd:3e:12:
85:44:40:02:d9:e7:cb:72:da:93:96:8b:90:3b:9e:
c2:89:77:55:d9:61:4d:6a:c8:f8:29:e5:d2:86:07:
2d:41:74:d3:f9:62:09:f5:d1:6e:f0:11:f8:65:1d:
a8:2c:89:55:f6:f2:6d:dd:48:b5:e7:2d:6c:c1:cc:
12:ad:04:70:b9:c6:6e:81:cf:81:01:2d:3a:fa:db:
45:24:19:84:81:ce:d9:92:54:9a:77:35:be:fe:22:
43:db:18:a2:1c:9c:de:62:b8:0c:62:fd:8f:39:02:
9b:88:7d:a3:8f:48:5d:f1:71:ee:e0:d4:b0:dc:92:
c9:14:08:a3:5b:50:38:a0:37:5f:e3:e7:82:b4:13:
ee:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:7D:4B:40:5C:FF:EA:7B:A0:01:DE:65:10:14:FE:AA:B2:9D:E1:3B
X509v3 Authority Key Identifier:
keyid:65:51:6D:DC:73:31:E2:E2:69:DC:57:D9:C7:63:2F:25:DE:7D:0C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVFt3HMx4uJp3FfZx2MvJd59DG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8def12-897e-4e22-aa8b-834b9c10bf48/1/ZVFt3HMx4uJp3FfZx2MvJd59DG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8def12-897e-4e22-aa8b-834b9c10bf48/1/ZVFt3HMx4uJp3FfZx2MvJd59DG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:97:09:51:b0:0a:12:7b:24:6b:e3:78:8f:37:4a:74:d2:ea:
25:7c:9a:d1:de:99:2b:2f:c8:3a:28:bf:04:71:05:77:76:b3:
24:e7:3e:9b:f9:2b:ba:64:40:88:1b:2f:a3:fa:e6:ef:b9:3d:
5d:6e:19:0d:f1:2c:12:57:d9:ea:96:9c:b8:64:70:18:79:09:
f1:41:59:d5:aa:d9:ae:fe:31:3b:d1:55:50:af:a2:25:12:4c:
c2:72:63:d2:b3:4b:50:0b:89:5e:bd:ad:14:36:e5:83:25:96:
f0:b5:f6:5d:0f:15:7d:4b:05:ee:78:53:cf:fb:da:9b:3e:a2:
dc:41:14:ef:d7:d8:09:5c:4a:20:aa:d9:b9:36:72:f0:5c:21:
8e:45:3c:38:07:40:02:d4:d3:f5:64:8f:fc:06:cf:24:c3:d0:
1e:77:6d:2f:99:d0:c0:a6:32:70:b7:be:11:fd:87:24:17:08:
a6:5d:9b:91:f8:3c:fc:05:f8:12:ef:7b:8a:7f:40:ba:a0:a8:
ac:49:11:40:5c:b5:f1:54:6a:28:6c:fe:9b:40:cc:1d:2f:d9:
9c:59:49:cd:4e:ea:fd:62:01:86:f0:ee:6d:c1:36:0b:68:1e:
2b:0c:32:9e:61:44:1f:ff:1e:00:88:b0:6a:ac:13:5a:2c:3d:
d4:a5:bd:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:41 2025 by rpki-client