Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
File: ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft (raw, json)
Hash identifier: rnYyxvATMn8mZ4xnZqblbq7upJOmo3H1jljBiB/f7Ug=
Subject key identifier: 8C:B5:80:E6:DD:86:C6:CC:A0:0F:96:E5:9B:69:77:7C:E9:A3:CD:F3
Authority key identifier: CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61
Certificate issuer: /CN=ced755733e91203a17c3093ca5d9cb0392d94f61
Certificate serial: 019A73387DE654DDF400DA3E86A937D1417F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 14:01:13 +0000
Manifest this update: Tue 11 Nov 2025 14:01:13 +0000
Manifest next update: Wed 12 Nov 2025 14:01:13 +0000
Files and hashes: 1: Ch5O5Blqh1qLTfKnLW_PxeqErmU.roa (hash: MQWABCmJmPzBZuvJm1UdXrqjK/z2moIohkG/Rp3fZtA=)
2: E3ZC-IKUFV8dsLuSPPYjoVWBSBk.roa (hash: /bl5hl4kqSXgSNneJaVMs/G9S7DHiQCDWl5lO8OIAgk=)
3: pwCEwqx7wOXdSyzzlUjrkyZY8go.roa (hash: 6xeXkvyhUMiZNvcsvLCq5I4Gh/+dgUUld1BGQwC1oWA=)
4: ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl (hash: RumnrZtBarL4/i8PrRasv2pktjXnGXQTiGdcSneFPuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:7d:e6:54:dd:f4:00:da:3e:86:a9:37:d1:41:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced755733e91203a17c3093ca5d9cb0392d94f61
Validity
Not Before: Nov 11 14:01:13 2025 GMT
Not After : Nov 12 14:01:13 2025 GMT
Subject: CN=8cb580e6dd86c6cca00f96e59b69777ce9a3cdf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6b:bf:61:7d:3f:da:ad:47:6d:ac:2b:2c:3a:
88:55:20:43:0f:5b:44:6c:c6:0b:5a:12:b8:58:19:
30:49:91:48:02:18:fa:c5:a7:9a:30:52:22:e2:44:
50:4e:d1:a0:86:20:22:89:c7:cc:a0:bb:60:22:c6:
41:6d:3c:a9:e6:d6:e3:0c:28:7b:44:cd:a8:82:a4:
13:72:15:36:21:b6:d4:03:73:1f:65:16:20:8e:d5:
17:d2:92:f9:6b:01:31:78:10:ea:d6:49:e0:8c:82:
44:66:22:42:8e:98:80:ac:b1:02:ef:5e:71:16:e9:
c9:48:3e:b2:b1:70:f6:ec:ed:98:15:d6:8d:c4:d5:
5b:b8:2f:5e:bc:e3:a5:e5:14:d0:64:cb:35:a9:70:
9a:6f:c4:9e:c8:6d:54:af:52:c9:20:61:69:c7:2d:
a1:88:4a:2a:4a:d7:d1:00:ed:31:5e:eb:02:c9:35:
63:91:0a:aa:66:41:f2:41:a8:e9:5a:0e:d1:a2:21:
75:81:44:fd:92:3e:93:a9:89:e6:ed:00:3c:79:f0:
ce:55:cb:c3:0c:7b:46:91:35:41:cf:71:f9:52:48:
af:fc:f7:68:4d:4d:21:12:e9:45:2f:8b:33:ec:a3:
62:aa:b9:bf:0c:d4:2c:78:8a:a3:74:cf:76:3f:28:
95:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B5:80:E6:DD:86:C6:CC:A0:0F:96:E5:9B:69:77:7C:E9:A3:CD:F3
X509v3 Authority Key Identifier:
keyid:CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:32:08:72:85:88:9a:65:59:1e:2e:45:79:85:56:95:d3:fa:
bd:a9:31:0a:39:e9:fe:b4:e1:d0:51:b7:ff:4b:c8:a1:72:d7:
41:9a:7a:a6:e3:8e:67:7d:9e:3a:f9:0c:71:ad:71:a7:18:dc:
44:bb:27:91:81:b8:88:9a:8d:51:21:84:18:f5:58:86:27:9f:
6f:b8:f5:a3:b4:33:d5:97:0b:73:d1:69:48:37:bd:84:78:e7:
71:94:d0:e7:92:fa:45:1b:ed:4c:f7:74:ca:76:8a:8e:32:19:
48:37:fc:65:f2:01:c5:60:0c:93:33:0f:ce:32:9a:86:6e:0b:
2d:60:c8:97:53:fe:f8:3f:b4:c4:f6:7d:87:31:92:03:4f:b9:
39:f8:cf:b1:60:41:8a:22:44:fe:55:80:ec:fb:4a:f7:96:83:
74:5a:05:c9:b6:95:69:c9:38:e8:48:08:be:f8:bb:55:0c:a9:
21:ea:8b:df:7c:e6:4d:7f:ea:58:96:a0:af:31:c4:3d:18:88:
39:80:f5:de:4a:de:5f:7d:0d:5f:a1:47:e5:1f:61:af:70:43:
0b:31:5d:e4:8e:09:56:1a:21:83:13:ef:9d:fd:79:88:e8:24:
ac:49:ca:26:aa:50:25:6f:3f:bf:ab:fc:fe:fd:c8:46:93:89:
d8:6a:0a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:01 2025 by rpki-client