Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
File: ztMMJRFB3bZI0FosKEszyHxRdSU.mft (raw, json)
Hash identifier: ck/goueDzsFQlxNje5DvFfzAW6sIug+QKiM5Uap0fxk=
Subject key identifier: FE:05:10:AD:EF:27:BC:B6:34:3E:6A:CF:53:18:B7:52:FB:CA:D3:A7
Authority key identifier: CE:D3:0C:25:11:41:DD:B6:48:D0:5A:2C:28:4B:33:C8:7C:51:75:25
Certificate issuer: /CN=ced30c251141ddb648d05a2c284b33c87c517525
Certificate serial: 019A4E18AE88E4F7D2677ECAB9B8C4F86C21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
Manifest number: 1455
Signing time: Tue 04 Nov 2025 09:00:31 +0000
Manifest this update: Tue 04 Nov 2025 09:00:31 +0000
Manifest next update: Wed 05 Nov 2025 09:00:31 +0000
Files and hashes: 1: ZPgVDRI_G_wgjVLd8kNTHtjE33Y.roa (hash: uiDFhkIkjuexDSnG2oE6Dq4+/FIv/1F+pVEhj9VaU8g=)
2: ztMMJRFB3bZI0FosKEszyHxRdSU.crl (hash: K0hqm3ZEwzoko2sNqUifMmTRgJfqDMZUEuLcoiIte7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:ae:88:e4:f7:d2:67:7e:ca:b9:b8:c4:f8:6c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced30c251141ddb648d05a2c284b33c87c517525
Validity
Not Before: Nov 4 09:00:31 2025 GMT
Not After : Nov 5 09:00:31 2025 GMT
Subject: CN=fe0510adef27bcb6343e6acf5318b752fbcad3a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:66:54:03:c4:81:dd:b8:99:af:49:68:6b:0a:
34:77:fd:6d:01:85:2c:ce:7c:6a:14:35:0c:6d:a3:
dc:4e:fa:36:f5:be:0e:6e:c3:6e:60:84:2f:21:35:
44:31:14:0d:07:29:83:e0:59:82:c3:3d:fa:b7:22:
c8:95:ba:b4:eb:f2:ea:44:9f:a9:02:95:29:7b:50:
51:b3:33:cf:a5:d9:7b:97:d3:64:f7:87:73:b1:78:
83:56:71:6f:e8:0f:9f:c2:66:fb:9c:de:9c:53:44:
9d:d2:c1:08:13:34:9a:62:5e:57:24:f2:a5:8a:48:
c9:39:da:e1:1a:86:ff:1f:6d:8c:2f:db:e8:7f:21:
59:83:16:1b:17:5f:fa:de:dc:f7:5f:28:d4:18:e1:
6d:1e:12:e9:b3:27:e1:d6:cd:55:0f:75:00:63:59:
81:94:b0:31:e3:e6:36:07:32:d3:6e:ad:8d:41:d0:
4f:90:55:3e:23:f5:4b:8a:14:51:79:73:d9:89:7d:
c1:6e:1d:27:33:13:d4:b7:42:04:94:b8:4f:ac:76:
87:85:34:b0:43:47:f7:41:aa:15:1d:0c:74:5e:df:
c2:e4:5e:9f:9f:92:e8:c5:0f:25:fd:f6:75:d9:c8:
45:35:fa:47:dc:a4:95:00:d4:44:bb:1a:7c:7d:ca:
63:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:05:10:AD:EF:27:BC:B6:34:3E:6A:CF:53:18:B7:52:FB:CA:D3:A7
X509v3 Authority Key Identifier:
keyid:CE:D3:0C:25:11:41:DD:B6:48:D0:5A:2C:28:4B:33:C8:7C:51:75:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:76:3a:20:04:85:22:3e:50:e3:64:69:e3:b3:76:9d:60:9b:
8b:9c:d6:05:af:b3:f1:24:85:d1:19:d3:cf:9d:89:8e:90:5f:
84:1b:bf:55:44:4a:27:97:e1:dd:87:6c:39:60:48:49:e7:de:
fb:d7:53:4d:3a:e3:3a:3f:8d:f7:82:3b:26:f9:5d:7d:87:9d:
5f:c9:c6:17:7b:81:89:94:1a:bd:e1:a3:17:28:16:6c:59:17:
59:72:4b:a6:de:ac:79:a6:04:9c:97:97:e1:c4:0b:2d:31:d2:
78:93:b4:1b:dc:21:fa:81:34:20:4b:ce:77:60:43:2e:92:0e:
3d:12:8e:fd:e5:ad:e4:e7:81:3c:e5:5f:f7:21:24:ef:f5:65:
ec:5a:7d:92:8f:b2:cd:59:57:cc:db:21:69:fc:ee:d2:1d:0f:
86:ec:5e:e1:d8:26:ae:e6:b7:2d:8d:1e:93:06:be:6c:18:85:
58:81:8e:30:9a:9e:1b:5e:5a:af:e6:39:57:48:2e:36:74:61:
cb:35:6a:3a:d5:ec:de:c3:d8:dc:51:6c:7c:a4:88:52:0e:c0:
ea:ef:05:13:44:ba:22:d5:97:ae:ae:c7:b3:93:eb:97:53:d2:
0b:e8:ef:18:f2:fa:ea:50:ed:8f:e9:81:ee:83:74:64:10:50:
f6:5c:47:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:17:51 2025 by rpki-client