Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
File: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft (raw, json)
Hash identifier: EMYhRn+1YdOpq4DSJ1lOqsWPb+WPLlFg5TNVtz36Dis=
Subject key identifier: 64:60:DF:D9:26:C5:F7:22:AE:30:3B:B9:EF:AB:8B:26:DD:19:9F:31
Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
Certificate issuer: /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Certificate serial: 0199FFC84528B03F4163D78FE3AB3EE0E565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
Manifest number: 16EF
Signing time: Mon 20 Oct 2025 04:02:18 +0000
Manifest this update: Mon 20 Oct 2025 04:02:18 +0000
Manifest next update: Tue 21 Oct 2025 04:02:18 +0000
Files and hashes: 1: 08cbr85HkKL256WKPSBbjEBkUog.roa (hash: 5K7bdmLXsunQxf6ydRqaBdSla8m7yjvCwX6GQr2FyeQ=)
2: 1_VIXcn389cDhH5pQfcOHcgm1SA.roa (hash: DL+3+aiYPEstQJ/sUeRLgWJ6P/7ylF16Rs1Q6RQQLlE=)
3: AyxM3qUSp4vgIaJ1AQtSeDaW3v8.roa (hash: DID4wPyNJmFDb+hLJYcp8aWza0ytEMMJn7voP8pdhw0=)
4: GmoSLMOyGmAE3DVEod4OY1EVNkg.roa (hash: V4/CqFclfl4k9hlXoXkdtyPxDhPK8FCrQ1XJC3/zOcY=)
5: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl (hash: 6+UiD+z/AJ9Rlwz9p0pUpQjmAp4JBQzOvKsuLRxIbtQ=)
6: cs1_hnr2v_RESMbUBcnLEeHdvL0.roa (hash: bQIbEK9aQwzm+EgLeePtROO+uC2BmOE2JtvqLImUO3Y=)
7: jHuaR39fBtfoSm7eKI-uPlXtnO0.roa (hash: tlJbuPplC7TVW63LZE8L9VXaV6yFo7hmKI0nyQHS7tc=)
8: kES3a_NmTCIqnMJDYdktZEAui6g.roa (hash: oWDzOnsZ0P67iTYQElx7vSfgd2r2XhuMUt+O6nZknyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:45:28:b0:3f:41:63:d7:8f:e3:ab:3e:e0:e5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Validity
Not Before: Oct 20 04:02:18 2025 GMT
Not After : Oct 21 04:02:18 2025 GMT
Subject: CN=6460dfd926c5f722ae303bb9efab8b26dd199f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:49:b9:6a:af:25:ea:a2:ac:40:8b:f3:d7:43:
4c:0d:7b:e3:32:c1:4d:25:88:f6:35:8f:32:7a:d8:
91:70:c7:95:7c:c7:90:d7:3b:ed:a4:d7:e7:10:b7:
c8:ef:0d:de:e7:be:9d:63:4a:79:1f:b4:dc:e8:27:
66:f3:94:84:d2:27:a1:9b:d6:55:d5:0b:97:fc:9c:
cc:11:f9:60:71:89:0f:40:c6:de:2b:45:91:8a:46:
41:d4:cb:fb:e8:69:e2:ab:81:18:1e:2f:93:f5:2d:
23:c4:b4:11:d6:31:64:b1:46:f9:e7:5b:37:0d:91:
32:1c:71:39:31:1b:70:a0:e6:c8:97:14:17:da:84:
7c:02:73:6d:18:c7:b9:c7:f0:d8:f7:be:1f:b5:b7:
b7:5a:45:2b:c3:44:a9:e0:e4:60:5a:c5:b0:66:4b:
c7:1b:aa:33:3c:79:d9:e3:2a:cf:51:60:d6:b7:34:
34:67:ae:c4:83:74:a0:fe:8a:96:11:74:8c:f1:2e:
04:f5:da:1d:e2:ce:7b:ab:35:b3:ab:bc:aa:93:a5:
6f:fe:71:39:17:fd:2a:6e:7a:f2:17:b0:e1:72:42:
ba:ac:b4:5d:9f:26:5e:84:92:34:97:9b:7e:c7:fd:
36:51:f9:60:3e:04:b6:2c:b1:db:21:93:85:25:c1:
4d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:60:DF:D9:26:C5:F7:22:AE:30:3B:B9:EF:AB:8B:26:DD:19:9F:31
X509v3 Authority Key Identifier:
keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:60:4c:30:a7:cd:6b:d2:72:c5:a4:75:89:ee:b7:22:c4:fe:
01:89:2f:63:b2:89:a7:c3:a2:6c:2c:85:98:72:db:ff:a3:0f:
8d:3c:ab:fe:4c:69:46:a4:3c:51:a3:7d:a4:74:dd:71:15:02:
33:6a:23:2e:6b:dc:0d:af:f1:a0:ac:8f:a2:44:49:2b:01:01:
8e:73:08:2c:bc:78:09:6f:af:80:00:45:96:64:99:15:d3:82:
a9:9d:91:6a:fa:ed:45:10:49:e0:df:e8:98:1a:35:bb:07:43:
6f:b7:ed:73:1b:31:82:a3:f2:1b:39:d0:df:fb:95:69:13:76:
38:22:43:7d:95:85:bb:df:45:2b:aa:60:0e:31:45:05:c0:9c:
56:62:8b:67:81:49:97:1f:f2:7c:57:a6:a5:cf:a6:59:ee:2b:
4d:a7:3f:43:eb:06:e8:32:56:74:7d:9f:59:23:ac:06:3c:e2:
a7:50:bb:74:cc:2a:63:6b:a5:ab:85:5f:e7:ff:f0:ec:d7:fe:
5c:d9:c9:b5:8a:16:a9:a3:a4:3d:51:a5:64:9c:23:09:c6:ac:
05:19:78:35:dd:3d:b7:bc:b3:7e:95:ca:1e:5c:c9:ed:3f:f6:
12:cd:c3:41:3c:49:73:bd:4a:5b:17:fd:22:82:c4:f0:1b:94:
15:0e:a7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:21:24 2025 by rpki-client