Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
File: Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft (raw, json)
Hash identifier: DC8dV+w0l1/SnbqmC5HGKQJ2Epv2ggTCMlg0WjhqkjA=
Subject key identifier: 40:E6:09:26:E4:E6:05:CE:5B:23:D7:8E:A4:72:09:67:BD:C8:CA:57
Authority key identifier: 66:DF:B4:31:58:D9:DD:B2:F5:B9:F2:92:37:53:BE:D3:FB:11:73:CA
Certificate issuer: /CN=66dfb43158d9ddb2f5b9f2923753bed3fb1173ca
Certificate serial: 0199FC58C03904E5721671702EF658F4A88A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
Manifest number: 141C
Signing time: Sun 19 Oct 2025 12:01:38 +0000
Manifest this update: Sun 19 Oct 2025 12:01:38 +0000
Manifest next update: Mon 20 Oct 2025 12:01:38 +0000
Files and hashes: 1: 6JYNh-n5WyyjhpESG3f33euXdz0.roa (hash: F75DJeS7+fMY7BG2ZrDAaDOIaz0HnjQabtUssq/wKLk=)
2: Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.crl (hash: 1Q+aN9yLKy8iyETnRr5IenWvouiGdg/xHiLS2A+lJiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:c0:39:04:e5:72:16:71:70:2e:f6:58:f4:a8:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dfb43158d9ddb2f5b9f2923753bed3fb1173ca
Validity
Not Before: Oct 19 12:01:38 2025 GMT
Not After : Oct 20 12:01:38 2025 GMT
Subject: CN=40e60926e4e605ce5b23d78ea4720967bdc8ca57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cc:58:73:1d:23:18:68:6e:6b:b2:75:2e:21:
4b:74:21:44:53:f0:e1:f7:63:ef:30:a6:c0:59:76:
92:16:e5:42:9c:15:8f:83:ca:1e:86:8c:5b:fc:11:
70:00:08:4e:ea:6c:e6:1d:de:36:c7:b6:00:d7:16:
94:b2:de:ed:7d:6c:4e:64:63:3f:ea:53:4a:0d:65:
a9:6e:0f:52:c0:ae:bf:08:75:f0:fd:69:f4:fc:82:
c6:55:0d:0c:9d:af:7a:2d:e6:19:45:0c:f4:6b:04:
a8:d3:6f:02:c7:9a:a6:23:d2:92:29:ae:12:d5:21:
71:80:ff:75:1a:bd:a1:ba:97:b1:78:21:8a:aa:c9:
96:83:a5:e1:1c:87:19:c8:5a:92:7f:de:81:9d:88:
e2:5a:05:44:cf:70:9d:49:79:a5:0b:4b:42:ae:12:
0a:d4:c2:f9:5b:5b:f9:17:91:e8:be:48:1e:57:98:
5c:2a:43:16:a6:27:ae:31:b2:8f:2b:22:80:5a:07:
c5:89:db:c7:4b:e2:59:69:c0:7b:59:32:1d:11:18:
13:a7:6c:87:99:c1:9c:4d:03:f0:cf:7c:d8:d6:e1:
d2:d5:46:76:fa:3a:ac:33:75:66:93:5c:08:9b:eb:
1b:b3:4f:fa:ec:10:57:0e:b6:ec:78:8e:a3:36:d8:
a7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E6:09:26:E4:E6:05:CE:5B:23:D7:8E:A4:72:09:67:BD:C8:CA:57
X509v3 Authority Key Identifier:
keyid:66:DF:B4:31:58:D9:DD:B2:F5:B9:F2:92:37:53:BE:D3:FB:11:73:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:7e:b1:70:dc:90:ee:13:b0:50:50:c8:7b:7e:4a:95:5a:a0:
55:3c:f4:30:d5:0a:38:9c:52:9d:52:99:9b:b2:f5:23:ad:28:
91:7a:8d:2c:e3:2d:0c:e4:60:2d:2b:c4:40:87:3f:12:cc:7c:
09:55:49:b2:fb:91:e9:4e:8c:8c:15:de:29:02:d7:2d:a6:41:
ff:b7:7d:a7:b1:bc:8c:7c:3f:ad:af:49:28:16:0b:c9:d6:c2:
62:78:c0:11:7c:44:6a:0a:5a:f2:51:eb:18:e8:cc:55:e4:f5:
79:1a:59:a4:30:5b:7f:bd:b6:e7:fb:63:30:a9:db:79:65:86:
de:5d:fd:fc:5a:b5:7e:0c:55:d8:45:84:6d:41:2c:c2:af:f6:
03:67:5b:83:87:aa:b8:d2:ab:67:38:ac:10:ab:33:ea:14:b0:
52:b0:51:37:de:11:60:10:31:91:2a:94:5c:11:f8:c8:7d:14:
00:04:e5:7a:68:75:dc:6b:9c:49:f2:b9:15:e5:3f:0d:52:a2:
d0:23:cc:27:92:e2:9f:e8:d5:bf:92:56:60:fb:8f:5e:13:69:
9e:2f:3e:83:0c:db:00:fb:3b:08:38:3b:35:ac:d0:5b:e7:74:
fa:70:75:85:ae:d0:d5:79:60:9d:25:df:84:ec:ab:39:56:00:
09:e3:3b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:28 2025 by rpki-client