Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
File: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft (raw, json)
Hash identifier: ab/JFato4OeoF8ss+1/uVSZewETu8hIXDbEcebhW/7c=
Subject key identifier: 68:DA:C1:C5:0F:17:C4:A8:11:49:17:8A:E4:B2:4D:1C:C4:AD:2C:AC
Authority key identifier: 66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
Certificate issuer: /CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Certificate serial: 019A00DA746239C154A95D1EFB64A86CDD70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
Manifest number: 16E7
Signing time: Mon 20 Oct 2025 09:01:47 +0000
Manifest this update: Mon 20 Oct 2025 09:01:47 +0000
Manifest next update: Tue 21 Oct 2025 09:01:47 +0000
Files and hashes: 1: Y-fN4fkHcPUKcQjj7Sr2XkGHl3k.roa (hash: AGm7a+karsGXj1brZJla0akLv16UGZ06w+N3Iht2PgI=)
2: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl (hash: H/WCscy5z+v9MGQiOJdy9ue5mc7O3apUmMiwAaWRA8k=)
3: vGzl2XHn-ouqEIIGqbsxm7i08EY.roa (hash: 4VVUoLGm+xrN9laAHbyRRBjWaA/AqDg3mY1vTaPgAZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:74:62:39:c1:54:a9:5d:1e:fb:64:a8:6c:dd:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Validity
Not Before: Oct 20 09:01:47 2025 GMT
Not After : Oct 21 09:01:47 2025 GMT
Subject: CN=68dac1c50f17c4a81149178ae4b24d1cc4ad2cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:24:7b:1d:24:1f:4a:70:a8:5a:e3:b1:5c:1a:
dd:bd:0c:5d:b3:44:ef:ff:3f:f4:55:69:87:cc:6a:
68:c3:83:43:bd:21:f4:19:cd:48:36:34:77:b9:7b:
de:5d:0f:dc:12:a3:e3:ee:1c:2c:c4:3f:f6:25:7c:
07:af:66:9c:bd:77:21:8d:50:3d:ce:29:9c:0a:d1:
d0:4e:41:56:83:ec:11:3d:f0:fe:4e:19:2c:2b:67:
d2:e8:6b:23:e5:30:60:66:0b:5c:f6:b7:4e:8a:49:
16:d6:e6:8b:c8:44:36:e6:49:dd:2b:6f:26:6c:92:
3e:cf:e0:06:ac:28:88:83:a3:89:f2:d2:e4:4f:c1:
4f:26:21:7f:ec:5e:d3:23:24:c9:b6:3a:c7:6a:58:
89:aa:33:be:ff:15:a4:85:a6:e2:02:d5:db:d0:9f:
ac:e9:06:6f:aa:a4:60:ca:7e:42:9b:60:15:88:7b:
a3:14:6e:95:23:61:f6:c2:86:5c:4e:a9:35:1d:b6:
04:3a:75:5e:bc:e0:e8:9e:6c:6a:e2:80:46:dd:f2:
1f:49:20:c3:ad:9e:db:c9:0e:f3:b9:f8:04:75:7a:
42:76:54:ee:39:e2:eb:4b:0c:30:65:40:c5:7a:d9:
ab:b9:0c:1a:da:c8:91:34:5d:09:dd:0d:41:46:e8:
15:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DA:C1:C5:0F:17:C4:A8:11:49:17:8A:E4:B2:4D:1C:C4:AD:2C:AC
X509v3 Authority Key Identifier:
keyid:66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:44:f0:2c:54:31:d2:1d:82:81:11:55:6a:79:1a:3f:45:7b:
64:85:4a:19:40:64:1d:cc:e0:23:e9:01:07:82:9e:42:ae:67:
c0:83:7f:bb:06:c5:88:17:f7:46:03:9d:67:a2:7b:c4:29:e9:
76:b7:e7:0c:ff:02:64:14:d0:25:75:33:6e:dc:2e:db:f4:20:
09:3c:6b:80:4e:dd:73:e1:88:83:d0:48:55:c7:5b:75:5a:6f:
b0:0e:7a:53:c7:25:3c:94:9c:50:8a:fb:86:b7:26:cc:d1:fd:
7b:fb:bf:f7:d2:71:76:fc:e2:5c:22:b8:b3:b5:67:d8:cb:f4:
04:e3:16:55:de:a3:02:b3:2f:44:07:7d:ef:45:04:d9:50:9d:
5b:ed:92:d2:06:4c:bd:8b:e4:a5:a1:2d:49:e2:82:8f:14:6d:
e4:a3:9b:6a:8d:9f:2f:3e:97:cc:bf:77:f0:4b:88:b1:f8:18:
55:a1:b2:a2:29:84:ab:57:bd:d9:79:3e:ea:3b:6d:b7:90:a2:
af:91:68:af:82:58:52:86:b3:86:38:06:07:8c:78:7b:9b:f0:
99:aa:22:de:3a:9c:8a:df:5d:a2:d5:0d:8b:8b:cf:b6:2b:d2:
ca:f2:0d:a3:3f:88:47:6b:50:7a:83:3d:b9:c9:b2:18:46:c5:
e4:3c:15:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:07:36 2025 by rpki-client