Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
File: ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft (raw, json)
Hash identifier: ujfSqcDyecaw6DLsJj4AKqOctgUai1gHc5ctTeROqww=
Subject key identifier: 02:88:CF:EE:04:56:36:38:C0:09:03:68:1E:EA:CA:E9:12:D5:0E:4D
Authority key identifier: CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61
Certificate issuer: /CN=ced755733e91203a17c3093ca5d9cb0392d94f61
Certificate serial: 0199FF597F6024879821322E5B5A429C68D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 02:01:19 +0000
Manifest this update: Mon 20 Oct 2025 02:01:19 +0000
Manifest next update: Tue 21 Oct 2025 02:01:19 +0000
Files and hashes: 1: Ch5O5Blqh1qLTfKnLW_PxeqErmU.roa (hash: MQWABCmJmPzBZuvJm1UdXrqjK/z2moIohkG/Rp3fZtA=)
2: E3ZC-IKUFV8dsLuSPPYjoVWBSBk.roa (hash: /bl5hl4kqSXgSNneJaVMs/G9S7DHiQCDWl5lO8OIAgk=)
3: pwCEwqx7wOXdSyzzlUjrkyZY8go.roa (hash: 6xeXkvyhUMiZNvcsvLCq5I4Gh/+dgUUld1BGQwC1oWA=)
4: ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl (hash: UsJI6+Rg3pc6cMGSQQd8/gFXA0JdwQ3QLJz5+xbITVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 02:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:7f:60:24:87:98:21:32:2e:5b:5a:42:9c:68:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced755733e91203a17c3093ca5d9cb0392d94f61
Validity
Not Before: Oct 20 02:01:19 2025 GMT
Not After : Oct 21 02:01:19 2025 GMT
Subject: CN=0288cfee04563638c00903681eeacae912d50e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b1:6b:69:43:00:c8:12:cc:08:d5:5f:d7:20:
b7:8f:f6:59:0a:5b:e8:31:c5:90:86:62:e2:ae:68:
b0:38:1f:fc:21:59:95:b6:18:f5:65:f1:14:8e:97:
a2:c4:38:52:bb:04:0d:d0:03:7b:79:34:18:9b:11:
fa:ba:49:50:f9:1e:3e:8d:ea:77:e7:6a:cf:4a:11:
c1:bd:d3:31:23:e7:7d:ea:92:c0:e3:b5:91:5d:7d:
11:b8:f0:7f:7e:dd:eb:7e:e0:31:18:90:16:9d:48:
ac:d9:37:ec:fc:48:59:3d:d9:9e:13:e2:aa:dc:92:
35:de:ab:a3:8c:0c:73:05:69:9c:24:4e:a9:8b:64:
04:93:87:dc:78:bc:41:02:71:27:4c:b6:c6:9d:e4:
6a:f6:4a:f4:9c:7b:d1:43:f7:84:b4:eb:ff:6c:db:
d2:74:74:35:be:fe:cc:3b:28:6b:53:27:41:e4:ea:
94:fd:48:be:34:0e:cd:15:ce:58:b5:90:0d:db:ea:
10:1b:1c:e8:b0:4c:42:f6:4d:67:39:9f:3c:ba:a8:
d1:0a:de:6e:e4:cf:8e:26:2a:85:3a:a0:d9:d4:64:
ca:1e:bd:e0:49:9b:b8:da:c6:27:3d:24:c1:c7:34:
b7:44:0e:11:22:c6:58:a7:6b:84:1e:d7:b8:bc:2d:
1d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:88:CF:EE:04:56:36:38:C0:09:03:68:1E:EA:CA:E9:12:D5:0E:4D
X509v3 Authority Key Identifier:
keyid:CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:9f:80:c1:8f:bb:37:05:a8:e8:0d:cf:e3:40:eb:5a:71:24:
a4:30:4a:dd:73:bb:9d:85:36:ba:37:0d:42:96:d8:e3:11:29:
3d:77:ef:ce:1f:ff:37:57:d0:64:64:a0:12:46:cc:00:ee:bb:
8f:d4:2e:95:e4:f8:d1:8c:66:aa:6d:1a:8a:6f:fe:0b:cf:dc:
43:ca:4b:e7:9e:a8:48:fb:40:23:dc:df:e5:48:62:47:c3:18:
f1:04:3d:57:71:dc:10:40:c7:4a:cb:23:85:74:2a:48:a1:5e:
be:b3:65:88:5d:5a:99:94:9f:d0:06:4a:02:fe:d4:b2:e5:34:
47:a3:4b:86:61:e6:96:f3:e9:9c:fb:6d:b8:ba:1a:0f:fe:2e:
cb:c7:13:50:9f:7d:24:1f:f1:06:90:d9:94:96:ea:e9:3d:b2:
8b:6f:08:a1:0b:61:fb:c0:e1:55:c6:23:18:ef:55:9f:7c:15:
15:e2:de:03:8d:33:8a:47:20:37:c6:a5:e0:7e:06:47:cb:d7:
ba:53:63:db:36:54:2e:2e:65:03:7b:ad:57:cb:0d:eb:eb:0b:
9d:24:8a:18:ae:49:69:c3:9c:56:04:74:0f:ea:bd:65:fb:81:
c2:f7:35:1b:b0:22:e8:a2:06:84:02:94:cb:5f:98:b9:41:34:
9d:5c:1f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:30:39 2025 by rpki-client