Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
File: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft (raw, json)
Hash identifier: /Xwfm5S5pkg91hyacNS1iCA+F2s+pZNYrwZ/SqxNxQ0=
Subject key identifier: 43:91:03:1F:58:2D:B8:13:AA:46:9E:9A:61:5C:5F:78:54:64:35:CC
Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
Certificate issuer: /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Certificate serial: 019A01B63401D96982C424D992CAFCFEECBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
Manifest number: 16F0
Signing time: Mon 20 Oct 2025 13:01:49 +0000
Manifest this update: Mon 20 Oct 2025 13:01:49 +0000
Manifest next update: Tue 21 Oct 2025 13:01:49 +0000
Files and hashes: 1: 08cbr85HkKL256WKPSBbjEBkUog.roa (hash: 5K7bdmLXsunQxf6ydRqaBdSla8m7yjvCwX6GQr2FyeQ=)
2: 1_VIXcn389cDhH5pQfcOHcgm1SA.roa (hash: DL+3+aiYPEstQJ/sUeRLgWJ6P/7ylF16Rs1Q6RQQLlE=)
3: AyxM3qUSp4vgIaJ1AQtSeDaW3v8.roa (hash: DID4wPyNJmFDb+hLJYcp8aWza0ytEMMJn7voP8pdhw0=)
4: GmoSLMOyGmAE3DVEod4OY1EVNkg.roa (hash: V4/CqFclfl4k9hlXoXkdtyPxDhPK8FCrQ1XJC3/zOcY=)
5: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl (hash: qhxIlL1hgt7pLv6sLHAVp6Wgj0iWD35vvO9vRr9ueXk=)
6: cs1_hnr2v_RESMbUBcnLEeHdvL0.roa (hash: bQIbEK9aQwzm+EgLeePtROO+uC2BmOE2JtvqLImUO3Y=)
7: jHuaR39fBtfoSm7eKI-uPlXtnO0.roa (hash: tlJbuPplC7TVW63LZE8L9VXaV6yFo7hmKI0nyQHS7tc=)
8: kES3a_NmTCIqnMJDYdktZEAui6g.roa (hash: oWDzOnsZ0P67iTYQElx7vSfgd2r2XhuMUt+O6nZknyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b6:34:01:d9:69:82:c4:24:d9:92:ca:fc:fe:ec:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Validity
Not Before: Oct 20 13:01:49 2025 GMT
Not After : Oct 21 13:01:49 2025 GMT
Subject: CN=4391031f582db813aa469e9a615c5f78546435cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:36:13:77:06:7c:0f:87:f0:f6:dc:68:d5:9c:
34:53:b9:bd:75:a1:d0:ba:e8:c2:94:47:36:d2:9b:
d9:37:4e:11:c2:c2:16:a2:35:cb:03:96:0c:ec:0d:
f7:98:cf:f0:44:1e:cf:8f:e1:20:f5:29:f8:13:53:
a7:c7:d1:73:84:57:be:66:2c:b7:79:bf:43:94:7a:
3d:75:c4:5f:7f:9e:5a:e4:ae:0c:69:c7:c8:51:29:
a0:86:64:16:39:80:51:f6:ab:82:d1:6a:2c:e8:e3:
4a:a7:d5:e5:ec:5f:c1:c6:ec:12:a6:63:4a:a6:10:
b7:3e:9c:2a:6c:1a:bf:04:bb:c5:af:84:e6:07:40:
33:13:b5:01:40:c2:b4:59:e4:ef:fa:d9:57:3a:f6:
c8:58:5a:14:bf:6b:a8:3d:aa:e9:1a:cc:85:f0:75:
3c:48:41:e0:27:a4:bd:c8:3a:a1:e1:5e:5c:1f:4f:
52:c9:5a:61:e5:6c:17:8d:20:43:e8:94:19:0a:ee:
88:f5:d9:e3:f7:8c:5a:ab:21:97:dc:d9:f3:64:33:
f8:1b:45:93:8b:7b:05:60:9f:f7:77:aa:d5:f3:37:
59:0d:81:b6:01:e2:0f:7a:02:84:d4:7f:73:9e:37:
8f:f7:f4:40:da:2e:39:df:4e:25:90:2a:17:b4:1d:
d8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:91:03:1F:58:2D:B8:13:AA:46:9E:9A:61:5C:5F:78:54:64:35:CC
X509v3 Authority Key Identifier:
keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:02:00:4b:37:49:75:ce:a9:06:62:a2:5e:43:30:b8:d5:b9:
fb:a5:7b:0a:11:6d:5a:f0:65:73:d2:ed:bf:ed:c6:d8:4c:51:
2f:e5:74:9f:d8:c1:7c:e1:97:b4:4b:31:f9:30:4e:cf:a9:3e:
08:9e:fd:85:f7:62:fc:78:11:c9:b5:4d:2c:b4:61:36:b6:b6:
34:8c:45:9d:19:6a:89:98:96:25:50:8d:7b:50:a1:48:2d:52:
84:ed:12:a6:18:13:5c:da:e5:52:c6:e8:7e:cb:09:e5:2b:d9:
50:f8:94:00:32:03:c8:ad:7c:43:48:25:e0:5a:0c:74:6c:43:
a2:6f:b3:20:8d:0d:11:1b:45:a7:99:6a:67:10:4c:fb:a8:6c:
2f:b0:77:a6:11:9c:d6:44:ff:a7:8a:42:ca:9f:9e:95:81:64:
6c:5f:7c:1b:0b:f9:f4:1d:3f:a5:87:95:c1:d9:c6:fd:34:f5:
eb:ff:e6:31:3f:25:f0:e1:27:a7:3d:56:3a:b5:4c:58:7a:4b:
38:4d:0d:db:80:70:74:ec:7e:f9:4a:4f:2e:a1:44:56:c1:da:
a5:14:20:28:90:86:6d:5e:87:ba:5f:51:22:50:4e:0a:a7:4f:
62:61:73:b0:cc:5c:68:8e:24:c5:39:b3:ef:e4:39:8c:93:ed:
78:35:f4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:03:39 2025 by rpki-client