Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
File: Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft (raw, json)
Hash identifier: +ecEzM84CjCWE4UHIX/u+RRxWVconrxLFlbDwN36fXg=
Subject key identifier: 8E:02:0D:97:0A:41:29:82:F0:5F:FD:BE:7E:6E:F5:EF:D9:26:09:41
Authority key identifier: 66:D9:75:8B:8C:8C:37:35:83:C0:57:51:66:D6:23:43:60:0C:7F:01
Certificate issuer: /CN=66d9758b8c8c373583c0575166d62343600c7f01
Certificate serial: 0199FDD8DAAF3F8C2FC0C8E1C1F7B8B539BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 19:01:11 +0000
Manifest this update: Sun 19 Oct 2025 19:01:11 +0000
Manifest next update: Mon 20 Oct 2025 19:01:11 +0000
Files and hashes: 1: 5hRdogkirGENwV4J_9yZhIM72Qg.roa (hash: J4uFgSp054qa3rungh3dVcHSOU8TUTMoE74wGhQ37mY=)
2: Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl (hash: 1rkyheRmknUn2pWpevVLI5Y7pPtBfPgSfRQmcH+9IfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:da:af:3f:8c:2f:c0:c8:e1:c1:f7:b8:b5:39:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d9758b8c8c373583c0575166d62343600c7f01
Validity
Not Before: Oct 19 19:01:11 2025 GMT
Not After : Oct 20 19:01:11 2025 GMT
Subject: CN=8e020d970a412982f05ffdbe7e6ef5efd9260941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:26:78:8e:26:87:e1:ba:42:a0:ba:85:e6:c9:
5d:44:cf:9f:e9:b8:18:bb:5a:36:85:34:10:b7:ac:
00:a0:4f:e6:57:b2:be:d7:18:76:b9:38:1a:e5:f0:
68:05:ea:a7:c9:7e:ce:9a:c1:cc:9b:62:d7:0f:54:
28:e9:e3:21:90:93:a7:a5:bb:81:4f:2d:50:be:bf:
47:47:5d:e7:f7:c5:03:83:40:28:e9:3a:8b:45:a8:
a6:c5:31:da:f8:25:1f:7f:31:31:cd:30:db:27:0a:
6e:93:07:8f:af:9c:8a:f7:26:90:39:03:63:8b:81:
de:5c:e0:c4:a4:37:46:4f:8f:a9:9e:60:ba:db:d0:
d2:e9:4d:ca:f0:1b:54:52:85:7d:b9:91:66:58:75:
97:3d:02:e0:39:64:1c:76:bc:ec:18:c7:d1:b4:39:
6f:87:80:32:c5:07:19:61:b5:9e:cf:18:ad:3a:ad:
2b:0e:73:dd:7e:4b:d9:0c:c7:a7:5f:91:45:7b:6d:
be:02:7a:28:cd:c5:42:ee:1f:ec:d7:b3:21:a2:de:
91:a7:5c:90:d7:d4:76:6d:2e:82:24:c5:03:b4:4a:
c7:ef:90:15:7b:d7:85:d0:77:bf:20:32:25:6e:70:
a8:d0:c4:d3:49:fe:7a:f3:64:15:ed:fa:b9:fe:e1:
7a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:02:0D:97:0A:41:29:82:F0:5F:FD:BE:7E:6E:F5:EF:D9:26:09:41
X509v3 Authority Key Identifier:
keyid:66:D9:75:8B:8C:8C:37:35:83:C0:57:51:66:D6:23:43:60:0C:7F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d8:a7:72:fc:c4:2f:d1:cb:d8:27:6f:68:6f:07:54:f1:81:
89:de:5d:9d:4d:28:76:57:aa:7d:f3:7b:bc:36:c2:d7:a9:1a:
6f:59:43:b8:fd:a5:66:1d:de:5b:7a:8c:88:6a:14:19:27:37:
95:ae:fc:6f:54:04:1a:ca:79:d7:37:47:29:7d:da:e2:29:37:
7c:b1:ef:35:6e:c8:6b:db:a7:b0:7e:40:0f:82:f2:29:5e:a4:
31:c0:c7:8e:a0:bb:2b:d1:5a:89:10:49:64:c1:0a:d7:5b:e7:
51:60:f7:e7:eb:94:89:eb:b3:0e:02:1d:e7:71:46:33:aa:bf:
cd:bc:c6:2a:67:84:dd:79:a0:35:5d:91:16:5b:0f:64:34:7d:
80:9f:59:94:e1:13:8c:ab:49:99:12:9b:b0:68:57:cb:01:8f:
0f:90:a8:b1:4e:e8:ff:65:c2:0b:85:cd:97:98:99:85:79:4c:
da:47:7c:db:0b:11:6e:8f:d9:f9:f8:39:fa:f4:e3:4b:09:50:
cb:46:05:6f:59:ce:63:05:b6:90:d3:f1:92:0e:e7:82:a1:98:
f5:9b:45:66:ca:71:da:65:ab:5e:0b:09:36:fd:4e:f2:81:56:
cf:d6:45:b5:a4:c7:64:bb:e7:d1:83:2f:2f:a0:a3:d3:2f:a7:
ac:34:24:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:51:45 2025 by rpki-client