Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
File: ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft (raw, json)
Hash identifier: DMWZzMyhU+bEgDIKxnvWmeTkF3+hDS6424hQe008PsU=
Subject key identifier: 02:6D:87:2B:A3:30:FE:36:42:CA:CD:27:22:98:56:8E:26:A7:82:C8
Authority key identifier: 65:31:78:5B:62:34:92:ED:0C:99:ED:79:C7:DB:74:04:AD:4C:B1:71
Certificate issuer: /CN=6531785b623492ed0c99ed79c7db7404ad4cb171
Certificate serial: 0199FCC6AAEA9527A6CDE02F0098E34BDCF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
Manifest number: 0DE0
Signing time: Sun 19 Oct 2025 14:01:42 +0000
Manifest this update: Sun 19 Oct 2025 14:01:42 +0000
Manifest next update: Mon 20 Oct 2025 14:01:42 +0000
Files and hashes: 1: NAw4Jpnd5IQpS_WN2-GbTmgKl1k.roa (hash: leptyc1ArNcvItJ2wmbr4PCi0dhI2TNC9iUamda0cJ8=)
2: ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl (hash: dRqk7eqeFFhtkauwLX0M5KMCUyAdNdz6WIbVzpc8ozE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:aa:ea:95:27:a6:cd:e0:2f:00:98:e3:4b:dc:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6531785b623492ed0c99ed79c7db7404ad4cb171
Validity
Not Before: Oct 19 14:01:42 2025 GMT
Not After : Oct 20 14:01:42 2025 GMT
Subject: CN=026d872ba330fe3642cacd272298568e26a782c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:80:c1:31:c5:15:13:61:8d:98:67:97:81:df:
02:5c:7c:eb:4a:3d:17:a5:cd:33:73:1d:f6:63:b9:
24:3a:39:49:7e:49:6b:20:f6:f7:56:ec:9c:bf:ce:
89:b9:ad:26:7c:36:97:b3:68:de:10:93:b3:7f:21:
4d:14:f9:f2:ed:28:3c:f2:3f:73:42:e3:c5:c8:dc:
a3:4d:86:4d:94:6b:97:3e:81:2b:11:b1:b2:29:39:
14:11:7e:0a:41:b9:a1:89:a6:f0:6b:b5:07:45:6c:
5e:57:ee:17:8a:01:6c:6a:8a:e1:96:ce:e2:4a:e7:
09:ef:d8:d3:f2:92:b5:9c:aa:4a:d5:fb:5a:1f:32:
cd:24:ac:8c:9d:96:d4:29:4d:a5:c2:f0:8d:2e:d6:
3b:3f:3e:43:9a:b9:cf:48:ac:0b:e8:7d:41:70:26:
9b:42:8a:cc:6d:02:34:6a:c8:96:cf:8b:27:15:33:
bc:9b:c5:57:fb:16:95:5d:a8:6b:bc:a4:9b:ad:e2:
2f:77:da:9a:08:26:60:af:4b:58:30:6c:6b:1f:d5:
10:66:da:2b:c1:83:24:ec:fa:77:a8:7e:bb:93:54:
02:f8:42:4c:ff:11:18:e7:93:8d:62:91:cc:16:e0:
c5:f1:4f:97:75:f3:5a:26:80:64:ad:fc:11:6a:c4:
c0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6D:87:2B:A3:30:FE:36:42:CA:CD:27:22:98:56:8E:26:A7:82:C8
X509v3 Authority Key Identifier:
keyid:65:31:78:5B:62:34:92:ED:0C:99:ED:79:C7:DB:74:04:AD:4C:B1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:8e:ed:6e:9b:ff:b8:f2:a7:ad:28:8c:18:2d:33:12:fe:c1:
f4:de:75:eb:8a:0d:e8:b2:c7:f2:51:db:ad:bc:d4:43:84:dd:
dc:a1:49:9c:35:55:ed:be:46:81:b1:fb:7d:7f:e4:de:e2:56:
40:4e:12:63:65:86:68:01:cf:21:12:26:4d:72:e1:c3:1c:7a:
0f:5e:ba:99:42:06:6d:da:31:23:6a:43:67:89:e1:d8:98:ed:
44:3b:8b:54:9e:51:6a:e5:7a:10:7d:1b:dc:03:95:7c:e2:05:
a6:d1:11:cd:e7:88:b1:ae:ef:20:7f:c4:62:cc:26:8c:6b:46:
11:0e:c6:01:dd:0e:cc:be:31:68:29:4f:14:ab:5b:df:87:29:
b8:d3:ee:8a:cf:50:0d:ef:d6:6c:5a:32:e0:99:b4:ee:23:c8:
c1:f4:71:ee:65:e9:3b:98:13:76:7f:dd:c7:39:05:09:40:e5:
cb:d7:a9:3b:af:8c:95:bc:e7:e3:51:e7:6a:4b:90:fa:4b:7b:
10:93:63:9f:96:d0:a8:dc:b7:22:68:ed:9a:79:c5:0b:dc:7d:
e9:30:44:0f:04:63:63:45:37:7e:33:29:62:32:43:2d:2c:8b:
1d:5a:d9:c1:f4:ff:6b:b2:eb:a1:be:df:a9:cc:1e:e1:4a:f7:
dd:b2:57:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:35 2025 by rpki-client