Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
File: ztMMJRFB3bZI0FosKEszyHxRdSU.mft (raw, json)
Hash identifier: uGW07hbHtq6uAfWc69KXLeWJXbS+drPLOtMxAu9YvnI=
Subject key identifier: F9:17:79:70:DD:04:38:E9:6D:5B:C0:E9:1A:33:E2:23:5E:7D:56:1B
Authority key identifier: CE:D3:0C:25:11:41:DD:B6:48:D0:5A:2C:28:4B:33:C8:7C:51:75:25
Certificate issuer: /CN=ced30c251141ddb648d05a2c284b33c87c517525
Certificate serial: 0199FCFD50CCCF760A758ADCF17390544816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
Manifest number: 142B
Signing time: Sun 19 Oct 2025 15:01:23 +0000
Manifest this update: Sun 19 Oct 2025 15:01:23 +0000
Manifest next update: Mon 20 Oct 2025 15:01:23 +0000
Files and hashes: 1: ZPgVDRI_G_wgjVLd8kNTHtjE33Y.roa (hash: uiDFhkIkjuexDSnG2oE6Dq4+/FIv/1F+pVEhj9VaU8g=)
2: ztMMJRFB3bZI0FosKEszyHxRdSU.crl (hash: t/72NeYiQoMRBAVJN0YUxsq1Cg+Z8UJG5j+XmBAtv4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:50:cc:cf:76:0a:75:8a:dc:f1:73:90:54:48:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced30c251141ddb648d05a2c284b33c87c517525
Validity
Not Before: Oct 19 15:01:23 2025 GMT
Not After : Oct 20 15:01:23 2025 GMT
Subject: CN=f9177970dd0438e96d5bc0e91a33e2235e7d561b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:16:35:09:d7:05:b1:23:a5:74:88:d3:cb:37:
65:24:3c:7d:e5:70:fc:c4:76:90:0c:47:3f:40:2b:
f6:c2:98:ec:ce:b8:ac:b0:08:e4:2b:aa:c2:2e:b5:
85:86:41:05:7d:b3:e3:7c:26:14:f6:0a:50:ac:79:
ba:d7:c5:da:44:d2:af:78:f3:b9:00:8c:37:b9:a3:
09:b4:88:1c:15:ac:17:e4:2b:80:0d:39:ef:86:4f:
b4:56:82:9a:e1:5e:72:a8:74:4d:7c:ef:aa:d2:3f:
ed:b3:ba:82:11:dd:9c:34:cc:77:9b:b5:1e:42:30:
44:b7:f2:d0:12:27:c3:93:04:d4:9f:7a:4e:6f:41:
0d:c8:33:4d:76:fb:b7:2e:c6:78:bd:1b:30:40:aa:
17:52:95:f5:01:88:2b:f5:d2:94:9f:3b:f3:41:13:
cf:29:e3:e8:48:26:c8:38:4e:06:5f:c2:c4:82:07:
b7:43:47:79:63:62:1d:7a:d1:42:a9:4b:b5:61:af:
f6:cb:93:73:e7:1c:15:6f:12:fa:f0:df:06:7a:35:
c0:08:6c:69:5e:f5:24:b1:7c:d1:9f:46:93:54:64:
73:3a:92:88:eb:e1:9e:da:9e:93:ec:e1:19:61:7c:
c7:01:4c:e8:d6:c7:c5:b3:7e:bd:91:18:33:39:9e:
ec:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:17:79:70:DD:04:38:E9:6D:5B:C0:E9:1A:33:E2:23:5E:7D:56:1B
X509v3 Authority Key Identifier:
keyid:CE:D3:0C:25:11:41:DD:B6:48:D0:5A:2C:28:4B:33:C8:7C:51:75:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ba:7d:c0:18:30:a1:f9:f6:3b:9e:f0:28:2d:30:e0:4f:f2:
b1:2d:38:4d:f2:51:d3:19:a3:7c:89:4f:80:4c:a9:70:3d:ca:
88:04:f8:9c:c4:de:9c:01:3c:82:a3:3e:03:c6:58:7e:b1:7d:
4b:31:67:ff:a0:16:ea:12:e3:ac:a5:0d:ea:8c:1c:57:a6:6b:
f1:b6:7d:b8:cd:77:92:5b:3a:75:ad:7b:0f:1b:8b:b8:1e:30:
f5:56:82:cf:67:8c:7b:19:27:23:67:a9:df:4b:3a:33:03:c8:
c8:d5:4f:eb:d8:7a:51:7d:39:e1:1b:40:c9:95:ad:8e:05:46:
d3:b6:3b:7f:86:14:c5:14:bd:2b:f4:4b:33:81:4f:f6:4e:34:
9d:1e:cc:9b:d8:b1:6c:9d:28:23:7e:bd:87:1e:14:bc:2b:b1:
2c:a2:ab:6e:b2:4a:00:c0:3b:b5:58:a0:5a:54:fb:41:06:e3:
49:c5:39:4b:7f:1c:4f:1b:8e:15:3e:86:84:e8:06:33:5c:b9:
6f:78:6e:1f:f3:2c:1b:5a:6c:63:d6:13:ab:f3:5b:25:66:b8:
0d:6f:cb:d3:ff:4e:cf:4f:7b:60:9d:5a:e1:ff:94:26:49:33:
34:23:2a:fa:d1:d4:5a:bf:73:74:e1:0b:05:24:6b:e8:57:93:
a6:36:59:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:11:08 2025 by rpki-client