Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
File: ZtioTw6M91UTepaA68xPzNIKNLI.mft (raw, json)
Hash identifier: 6QnAb18RQKDKs9CZmoQY2prCFAeVEikslluzrLvnlB4=
Subject key identifier: 29:8A:DF:3F:C7:34:5B:47:4F:16:11:69:C7:85:D2:7B:10:A2:89:A4
Authority key identifier: 66:D8:A8:4F:0E:8C:F7:55:13:7A:96:80:EB:CC:4F:CC:D2:0A:34:B2
Certificate issuer: /CN=66d8a84f0e8cf755137a9680ebcc4fccd20a34b2
Certificate serial: 0199FB460F08AA7DA0087ADF202DE373BE55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 07:01:36 +0000
Manifest this update: Sun 19 Oct 2025 07:01:36 +0000
Manifest next update: Mon 20 Oct 2025 07:01:36 +0000
Files and hashes: 1: P7vPWrkUt_4tI2tusoLN2OIhgCA.roa (hash: vg79/TJpONqI6MyXQJ/4Hu+xaXpkJvsU35isLPjUC8s=)
2: ZtioTw6M91UTepaA68xPzNIKNLI.crl (hash: EFE25vBVDgcOvgWAa3TL8H89n8MbpV200W/fyw+c6Xw=)
3: r6QzNtUWS8LqjO5zMkFtGGDH8lg.roa (hash: l3MXhVwlaN7WZQxmnLfdtChq7kKxEP3Qy/454Bdw0ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:0f:08:aa:7d:a0:08:7a:df:20:2d:e3:73:be:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d8a84f0e8cf755137a9680ebcc4fccd20a34b2
Validity
Not Before: Oct 19 07:01:36 2025 GMT
Not After : Oct 20 07:01:36 2025 GMT
Subject: CN=298adf3fc7345b474f161169c785d27b10a289a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b5:27:67:07:14:c2:33:6c:ae:85:8a:7e:2e:
bf:60:92:fb:6e:1f:31:f8:bb:32:29:0e:ee:69:54:
a5:d7:8e:36:9b:f4:42:8b:b7:9c:92:59:5a:73:87:
20:ba:c3:5b:b0:9d:46:b9:fc:8f:a6:b0:0b:ee:2f:
34:34:bc:fa:0f:7e:91:19:9b:79:b6:a0:46:7d:28:
fd:55:5c:53:ef:df:b2:30:46:23:29:68:10:96:e4:
ef:14:f1:21:16:36:78:be:ec:26:65:a1:d9:b3:3e:
1b:02:3f:f0:7c:24:77:dc:09:f8:3d:31:dc:72:50:
58:61:4a:ce:c1:f7:8c:e0:1d:67:0b:3f:c0:1a:fd:
b6:8e:e1:a7:d0:3a:c7:a3:cf:7b:90:af:38:a1:77:
02:6c:39:a5:48:bf:1e:e7:d5:24:6a:11:22:4f:68:
66:e0:d7:45:38:69:0f:45:02:8f:19:63:19:f9:44:
55:d2:c5:2e:8e:f5:da:32:73:79:93:d1:ba:dd:6f:
29:d8:60:3d:51:a4:7a:4c:10:8e:b2:e4:d8:c4:84:
39:d0:f9:49:2e:27:50:12:45:23:b1:b2:e2:53:d0:
75:87:c6:3f:05:17:7c:b4:e3:fa:21:24:30:71:4a:
c8:90:ce:e9:71:5c:62:9e:30:ca:57:9c:02:6d:0c:
c7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8A:DF:3F:C7:34:5B:47:4F:16:11:69:C7:85:D2:7B:10:A2:89:A4
X509v3 Authority Key Identifier:
keyid:66:D8:A8:4F:0E:8C:F7:55:13:7A:96:80:EB:CC:4F:CC:D2:0A:34:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b8:b9:62:97:ed:cc:b5:8b:c9:e1:9d:78:ac:cc:06:d9:ef:
d9:63:1c:42:98:e1:26:b8:c7:89:1c:81:e1:21:82:40:47:0e:
b7:a1:d4:34:35:b3:36:91:45:90:c4:a7:5a:6c:4e:d6:fc:21:
cc:ca:d4:b3:1d:3d:88:ac:80:92:fc:04:55:b5:64:40:22:80:
5d:c5:fc:63:31:f3:89:0f:5a:41:ce:c5:1c:87:79:1f:3a:6b:
b9:7f:a7:c4:28:1f:cf:31:cd:c1:0b:66:9d:97:5e:74:02:0d:
1f:60:a9:74:11:8c:e5:cf:dd:4d:5c:a0:e3:27:13:2a:04:8a:
46:fe:7a:aa:e3:38:73:de:9d:c9:2e:bf:5d:26:b8:81:05:72:
28:eb:4b:b1:fc:e4:d9:5a:01:be:0b:d2:c9:1d:a3:b8:4c:d3:
69:94:c6:b7:5d:5d:53:fd:24:9a:f3:f6:84:60:f2:86:17:88:
50:17:b6:1f:7b:5a:59:f1:97:3f:b1:10:67:08:5e:80:3b:8c:
81:d5:7d:75:57:fd:6d:d0:34:39:c7:c1:f1:3d:6c:dc:67:88:
c5:86:be:ee:ed:41:18:be:d2:2c:6f:fb:25:53:9d:3f:83:3d:
9b:78:03:cc:50:52:8c:0f:df:ef:fd:44:90:7b:20:1a:be:97:
6a:7c:12:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:28 2025 by rpki-client