Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
File: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft (raw, json)
Hash identifier: 4tT+KgyLVIcmo66/JfPeMscR5ECFzDFo3221c4jRNE8=
Subject key identifier: 43:41:02:C1:A8:24:62:14:3F:CD:32:24:B7:F4:C7:CB:8E:C6:F7:9C
Authority key identifier: 66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
Certificate issuer: /CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Certificate serial: 019A06A4A636712BC278092484441D51B4EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
Manifest number: 16EA
Signing time: Tue 21 Oct 2025 12:00:45 +0000
Manifest this update: Tue 21 Oct 2025 12:00:45 +0000
Manifest next update: Wed 22 Oct 2025 12:00:45 +0000
Files and hashes: 1: Y-fN4fkHcPUKcQjj7Sr2XkGHl3k.roa (hash: AGm7a+karsGXj1brZJla0akLv16UGZ06w+N3Iht2PgI=)
2: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl (hash: NV6ySL/NYG345mQZz4NMZRk8GFnAk/ehwsHNZ2mfnp8=)
3: vGzl2XHn-ouqEIIGqbsxm7i08EY.roa (hash: 4VVUoLGm+xrN9laAHbyRRBjWaA/AqDg3mY1vTaPgAZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:a4:a6:36:71:2b:c2:78:09:24:84:44:1d:51:b4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Validity
Not Before: Oct 21 12:00:45 2025 GMT
Not After : Oct 22 12:00:45 2025 GMT
Subject: CN=434102c1a82462143fcd3224b7f4c7cb8ec6f79c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dc:5e:8a:7a:59:d9:2e:79:12:b4:b3:6f:fc:
e8:9d:43:2d:c1:90:a0:65:27:9c:8a:61:09:a5:e6:
c6:bb:0a:59:28:ce:2f:03:c9:c4:00:82:16:39:ac:
92:15:65:f1:10:8f:07:ff:d8:1a:d6:38:a7:7e:a4:
c7:8e:d4:12:ad:37:d4:58:94:1e:b2:5e:07:72:15:
df:c9:7f:6c:da:31:f4:d0:40:de:82:38:0c:1f:d6:
33:dc:62:60:fd:6e:84:6b:5a:e0:22:20:35:56:40:
b9:21:d1:39:d4:3d:0b:44:5a:5c:2e:ae:f6:de:08:
bc:69:12:1c:3f:78:36:af:3b:96:49:65:ab:a4:e7:
13:ea:f0:c9:2f:27:ac:32:45:25:b8:46:ac:f9:2e:
b3:b7:cb:61:da:4b:6a:55:34:c6:2a:cf:cf:95:67:
bf:cf:c7:4d:20:85:b8:a5:63:06:aa:24:90:0f:56:
0c:3d:bd:5a:2d:ca:53:84:f0:fd:5f:04:af:1a:86:
b8:7f:f3:a8:00:fc:79:9c:5c:1f:39:71:f2:d0:ae:
fb:2d:24:12:d1:cd:7e:3e:8e:36:8c:5a:53:19:f5:
ed:53:c5:dc:31:8d:e1:43:db:4f:43:ca:d2:10:6c:
f8:29:14:6d:79:1f:e2:24:8f:3f:20:a8:44:21:d1:
46:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:41:02:C1:A8:24:62:14:3F:CD:32:24:B7:F4:C7:CB:8E:C6:F7:9C
X509v3 Authority Key Identifier:
keyid:66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:5c:40:01:95:aa:57:a4:d9:49:90:3a:50:77:73:5e:e5:a5:
a6:9d:b5:09:d2:5e:bb:b4:e3:7d:dc:6e:d5:16:8c:1e:87:a9:
6c:7c:bb:fa:dd:74:fc:5b:43:f8:6b:1d:a9:e0:97:c3:25:64:
a2:e2:76:c7:c3:96:c6:d6:ed:13:0d:dc:0d:8e:d3:11:6f:f2:
be:95:ee:e9:96:83:ac:3f:f1:83:90:1f:4e:8e:be:1e:bd:ee:
d4:ee:99:e6:84:ff:5c:4c:fd:8d:d9:dd:55:a4:7a:28:e7:4c:
2a:2c:ea:46:83:4a:65:eb:56:7e:4d:a9:1a:8a:94:47:46:f5:
2d:6b:b5:87:23:98:68:3d:92:ce:00:b3:ed:84:66:f3:76:2e:
bd:aa:0c:b1:86:25:63:31:45:03:ba:41:ba:b6:50:0a:ea:ea:
f6:24:ac:32:f0:d0:eb:29:71:a4:b7:05:cc:b8:ff:8e:cf:85:
9d:ac:28:f1:34:eb:25:f6:64:bc:12:1d:5c:f7:2b:bf:83:01:
f4:6a:59:ca:85:f5:1a:cd:36:aa:71:cd:1d:2d:36:ad:80:22:
60:bc:62:27:99:f8:75:b7:aa:98:3e:c5:26:72:f0:f5:99:24:
66:eb:a7:7a:d6:2e:b4:60:cd:29:6f:6f:18:d2:2f:51:ca:d6:
f0:41:00:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 13:56:55 2025 by rpki-client