Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
File: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft (raw, json)
Hash identifier: io0jxJTvqcMsgrAjM5H257TQAQ9UU/ccv36fGyMhWGo=
Subject key identifier: 4B:F7:78:E5:3C:CD:35:F9:9E:D0:B8:4B:51:5F:E4:2C:B3:46:62:DB
Authority key identifier: 66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
Certificate issuer: /CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Certificate serial: 01991B09FAB009EDA232E0BD653079A5571E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
Manifest number: 1670
Signing time: Fri 05 Sep 2025 18:01:02 +0000
Manifest this update: Fri 05 Sep 2025 18:01:02 +0000
Manifest next update: Sat 06 Sep 2025 18:01:02 +0000
Files and hashes: 1: Y-fN4fkHcPUKcQjj7Sr2XkGHl3k.roa (hash: AGm7a+karsGXj1brZJla0akLv16UGZ06w+N3Iht2PgI=)
2: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl (hash: Y2db9dNbuoU5KoT+0hYOTAs2l9kA/mOJoo/h/qGowqs=)
3: vGzl2XHn-ouqEIIGqbsxm7i08EY.roa (hash: 4VVUoLGm+xrN9laAHbyRRBjWaA/AqDg3mY1vTaPgAZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1b:09:fa:b0:09:ed:a2:32:e0:bd:65:30:79:a5:57:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Validity
Not Before: Sep 5 18:01:02 2025 GMT
Not After : Sep 6 18:01:02 2025 GMT
Subject: CN=4bf778e53ccd35f99ed0b84b515fe42cb34662db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7c:21:cb:9b:a8:2d:61:23:d1:5f:69:67:7b:
b8:a6:75:45:09:62:74:67:c6:ba:a1:ee:f7:70:a2:
00:3b:4e:f2:40:ab:df:ec:65:44:40:c1:f5:2e:1b:
ed:5d:3c:23:68:e2:7f:c3:f2:84:06:d4:49:15:59:
67:dc:a5:00:9e:72:bb:8f:f3:ff:f8:45:c9:99:d5:
1e:93:31:c4:70:63:72:13:1e:8f:cb:dc:29:f9:32:
bb:b5:3c:c7:71:e7:a4:d0:38:84:3c:04:39:4b:6d:
d0:ce:8f:da:45:71:83:6b:07:fc:67:17:99:86:5e:
9a:a1:81:9e:c8:38:27:0f:a0:52:b6:b9:d4:b7:57:
81:fe:e0:a4:57:ac:8b:61:07:ab:48:4b:54:45:d5:
c6:e2:82:81:f8:b9:b9:a7:0c:6a:e0:de:75:c8:56:
a6:27:21:dd:af:a4:8c:2e:c7:af:88:c7:cb:8e:c4:
24:c5:7a:d8:52:02:ed:e4:d7:ea:01:83:d6:fb:44:
46:46:9b:12:2f:59:5e:5e:22:0f:e5:e6:90:14:0e:
75:32:b2:bb:03:c2:db:4d:d4:94:d1:b5:4d:b7:32:
71:5b:83:3a:d2:1e:01:23:6d:f6:bf:59:c9:1e:48:
45:57:13:c8:f1:96:8c:f2:fd:f3:b4:62:98:58:b8:
a7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F7:78:E5:3C:CD:35:F9:9E:D0:B8:4B:51:5F:E4:2C:B3:46:62:DB
X509v3 Authority Key Identifier:
keyid:66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:02:f5:fe:94:d9:07:7f:b0:a6:d8:a3:d8:61:a9:13:fa:66:
59:e3:05:c2:56:4f:cb:23:ad:8c:9d:c4:11:68:5c:da:58:0c:
70:cb:92:84:e4:9d:de:08:41:83:85:45:20:ce:3c:72:40:88:
4c:6a:cb:00:46:bf:ab:54:e6:4c:ac:ea:5c:6e:4a:a4:dc:fb:
25:6c:37:70:57:40:97:84:f1:6f:a1:61:17:15:e0:c1:8b:38:
18:27:ad:5e:44:7d:6f:54:c3:b0:b3:5c:c0:7e:89:5c:50:e4:
47:a9:48:b8:48:41:fa:6e:9c:8a:31:00:44:c0:5b:ed:e2:8e:
52:6e:c4:64:9d:22:e4:20:bb:80:ac:10:87:f6:e9:0a:e6:f1:
07:ea:0a:e0:5b:5f:90:70:f5:00:c2:90:6b:bb:de:69:06:bf:
94:8c:15:0a:af:4f:14:9e:55:68:eb:90:a1:37:6e:88:65:6d:
4f:ad:9a:e8:35:52:76:5d:ea:f6:c7:ef:c8:fc:cd:ef:84:b1:
8a:21:f9:5b:3e:7d:2b:e4:4c:83:64:1b:93:81:d7:01:4c:45:
d9:75:cb:60:df:2b:fc:c4:a8:26:e6:2e:bc:45:89:66:a8:53:
f5:76:c3:2a:81:ac:03:f0:99:d7:f6:2c:2d:ba:be:1b:d9:53:
62:15:0d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 19:33:25 2025 by rpki-client