Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft
File: ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft (raw, json)
Hash identifier: Sm444e2awKMm0KORJJRic43y+4IOoGhYMcRpLdt17Uc=
Subject key identifier: 8E:E7:4F:56:DF:D7:9F:16:C3:73:A3:7D:29:37:9B:57:FE:46:10:3F
Authority key identifier: CE:D4:10:EA:68:67:EF:63:F9:59:BA:D6:B2:1B:69:1C:AD:FF:87:D4
Certificate issuer: /CN=ced410ea6867ef63f959bad6b21b691cadff87d4
Certificate serial: 0199FCC6510CCBCA0EC8708B94D2A14D2E3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztQQ6mhn72P5WbrWshtpHK3_h9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 14:01:19 +0000
Manifest this update: Sun 19 Oct 2025 14:01:19 +0000
Manifest next update: Mon 20 Oct 2025 14:01:19 +0000
Files and hashes: 1: NJmmW764rdnW_zIUswA3g-8-n2M.roa (hash: uNbv9sZggt1kjUfoR4Ji7KAa4WT9RRySZVjN33ZdWTA=)
2: ztQQ6mhn72P5WbrWshtpHK3_h9Q.crl (hash: Ir9IIYEaOPoX8XRF5vWeo3vdHbun6Y268q02VwT2Es4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztQQ6mhn72P5WbrWshtpHK3_h9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:51:0c:cb:ca:0e:c8:70:8b:94:d2:a1:4d:2e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced410ea6867ef63f959bad6b21b691cadff87d4
Validity
Not Before: Oct 19 14:01:19 2025 GMT
Not After : Oct 20 14:01:19 2025 GMT
Subject: CN=8ee74f56dfd79f16c373a37d29379b57fe46103f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9f:0e:03:88:af:fa:3f:b8:91:ef:cc:de:c4:
6a:b2:89:28:77:cf:97:9a:b3:1f:f9:9a:2a:a9:ca:
93:76:5b:0e:fd:a9:fb:d8:ac:f8:87:13:82:93:52:
3f:e6:59:8e:9a:86:fb:34:21:33:41:f8:e9:fe:0e:
19:87:bd:b1:48:ee:47:ca:60:60:6d:32:42:30:52:
5d:18:8f:ea:cd:a2:31:a9:42:97:01:85:b0:e4:44:
86:63:cf:d1:2a:c7:92:02:cd:d1:5d:80:d1:e5:b3:
88:c7:9e:8b:f8:66:21:e4:6d:04:e3:61:c5:fa:1c:
c4:c3:4f:44:07:13:5a:21:2a:38:aa:31:8a:63:d6:
22:04:4b:77:7b:19:ec:bc:44:ca:ca:1a:26:ff:69:
b5:95:ce:a5:95:8e:53:e8:e6:8c:5e:a0:a2:e2:fe:
e6:92:94:3e:f3:73:99:c5:17:f8:f0:13:b0:d4:62:
e2:c0:36:80:b1:d8:c6:81:51:ad:e5:ed:4d:96:b5:
db:43:d6:65:41:98:18:49:1e:ec:18:b4:5d:e8:a2:
b2:73:94:41:91:52:f7:6f:51:22:56:2a:f3:5c:f5:
65:a6:ef:d8:20:7d:a6:a5:b4:6d:94:8a:08:60:f1:
7a:af:d4:83:9a:41:37:3e:c9:31:3d:b4:5c:16:0b:
9d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E7:4F:56:DF:D7:9F:16:C3:73:A3:7D:29:37:9B:57:FE:46:10:3F
X509v3 Authority Key Identifier:
keyid:CE:D4:10:EA:68:67:EF:63:F9:59:BA:D6:B2:1B:69:1C:AD:FF:87:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztQQ6mhn72P5WbrWshtpHK3_h9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d8:57:7f:16:d4:f2:11:33:c7:d6:b8:03:7a:b7:00:02:49:
78:e0:e6:30:c1:c1:36:e3:f7:96:53:a3:58:d7:6d:20:43:86:
9d:0d:15:f5:ff:54:ff:8e:a7:b6:66:4b:c3:28:dd:1e:33:e7:
c1:49:17:40:5e:62:83:6c:ed:cf:06:3c:4d:8a:03:bf:87:27:
a3:5e:50:fe:84:dc:41:c7:58:fe:f8:c2:2e:bc:70:e7:31:53:
2f:a3:eb:74:b0:2a:b6:06:61:91:92:72:b9:a4:94:7d:3a:a1:
3d:75:f5:2e:a6:70:ca:ba:2b:d2:a8:a4:cd:3a:4a:b7:1f:50:
84:d5:84:ff:12:63:54:7d:1c:0f:45:f2:31:ad:09:92:f2:91:
db:f7:e0:17:60:1d:22:50:58:02:87:61:50:ed:d1:f7:4b:ed:
16:d9:73:d9:b9:ee:81:bc:16:16:54:7d:1d:88:54:cd:03:42:
d1:7d:14:d4:2b:d5:f4:3a:39:82:9e:be:4e:e3:21:0c:e6:53:
3b:d0:6e:53:d0:18:e7:73:9d:3a:8a:01:5b:ab:10:79:29:be:
68:8c:b4:85:aa:80:3b:f7:72:c2:89:93:d3:6f:28:03:06:cc:
7d:6f:b0:68:ec:d5:8d:3f:ce:32:e2:9e:89:eb:92:45:91:f1:
64:3f:55:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:22 2025 by rpki-client