Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
File: ztMMJRFB3bZI0FosKEszyHxRdSU.mft (raw, json)
Hash identifier: oFffYDEHfpLj5w6+tFPwzi6uIMAR4j8FFZSNob0h3cE=
Subject key identifier: 1D:1D:ED:B5:77:EC:F5:1B:94:BD:37:89:A5:AB:31:31:BD:D6:C2:A6
Authority key identifier: CE:D3:0C:25:11:41:DD:B6:48:D0:5A:2C:28:4B:33:C8:7C:51:75:25
Certificate issuer: /CN=ced30c251141ddb648d05a2c284b33c87c517525
Certificate serial: 01989D832342366E894192D7E354B3F00568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
Manifest number: 1375
Signing time: Tue 12 Aug 2025 09:01:13 +0000
Manifest this update: Tue 12 Aug 2025 09:01:13 +0000
Manifest next update: Wed 13 Aug 2025 09:01:13 +0000
Files and hashes: 1: ZPgVDRI_G_wgjVLd8kNTHtjE33Y.roa (hash: uiDFhkIkjuexDSnG2oE6Dq4+/FIv/1F+pVEhj9VaU8g=)
2: ztMMJRFB3bZI0FosKEszyHxRdSU.crl (hash: Z+aCZojk+w92xY4paye0SwKTqr62C2PEAQ5JfCts4Hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 09:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:83:23:42:36:6e:89:41:92:d7:e3:54:b3:f0:05:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced30c251141ddb648d05a2c284b33c87c517525
Validity
Not Before: Aug 12 09:01:13 2025 GMT
Not After : Aug 13 09:01:13 2025 GMT
Subject: CN=1d1dedb577ecf51b94bd3789a5ab3131bdd6c2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9a:4a:1a:9d:ca:6c:51:42:50:ad:ad:f5:c9:
31:cf:50:de:7e:b2:9d:7c:a6:f6:89:1b:78:a7:a7:
74:c4:b8:75:14:02:eb:85:30:a5:b3:01:74:3a:a4:
8f:52:e8:ae:22:70:30:7b:29:f3:54:18:74:2b:f6:
c8:4d:c9:39:32:1d:e2:24:dc:68:bd:4b:cb:b1:db:
f3:88:cb:7b:fc:69:4b:bd:d0:e7:ae:01:76:7e:de:
8e:4a:a6:57:99:c8:26:ec:9c:b5:78:8f:d4:7b:00:
ce:80:22:b6:48:2d:18:df:48:b3:f0:31:23:05:9b:
0e:ae:ea:43:3e:ed:a7:29:97:af:c9:f9:5a:d1:d6:
67:25:6c:b0:77:4f:49:2e:e0:d9:65:b3:fe:18:6d:
4c:b9:59:e5:78:84:c6:be:a2:c8:93:f4:d3:d9:c7:
b0:fe:c5:f1:ee:62:b6:7f:94:f2:d8:e5:9c:76:bd:
38:b5:05:b4:ab:a6:f0:67:95:f7:19:6a:a6:6a:93:
91:f5:56:d6:a4:cd:c2:f0:21:cf:70:0a:da:ae:11:
d3:fe:6e:ba:1f:0b:04:3e:54:b7:df:b6:4c:99:d6:
03:35:cd:12:d8:f2:5f:41:e2:9c:86:60:6a:46:83:
44:e7:4b:6b:09:80:04:85:3e:e1:a4:09:3e:05:d0:
3d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1D:ED:B5:77:EC:F5:1B:94:BD:37:89:A5:AB:31:31:BD:D6:C2:A6
X509v3 Authority Key Identifier:
keyid:CE:D3:0C:25:11:41:DD:B6:48:D0:5A:2C:28:4B:33:C8:7C:51:75:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d8:60:f5:8f:16:05:8d:28:a6:7c:b0:24:b0:36:04:5a:9d:
e5:1b:c2:65:36:5c:5e:e6:e0:9e:46:e6:de:42:57:94:ea:df:
61:99:d8:eb:c5:02:c9:17:7d:0b:72:cd:29:87:c7:f5:56:ae:
39:80:1d:50:73:43:78:43:7c:f3:84:9c:42:0a:66:38:99:f8:
67:c2:38:2f:3c:8f:6a:64:a3:5f:b1:bf:83:65:13:96:c1:52:
92:e2:cc:c7:ad:f5:9f:72:c5:f5:ae:54:ab:73:ca:12:21:41:
53:21:e3:93:e7:a9:9b:33:a0:42:0b:2c:19:76:e0:f4:2e:95:
23:63:7b:a8:c1:46:2e:f1:25:ea:96:e3:6e:b4:74:9f:ad:09:
74:77:53:ee:43:43:9d:d7:38:f6:31:f2:f2:2b:53:1d:8e:0a:
e3:3c:67:9a:0c:bf:04:41:ae:dc:c9:b7:f0:88:2a:bf:e3:68:
27:16:90:41:a2:7c:83:38:e1:bf:6c:91:2b:bb:ea:05:e9:32:
bb:eb:37:22:d3:94:03:a4:71:2c:74:7a:2d:a1:12:5d:4f:4b:
a4:de:bb:87:d1:d9:a5:f5:2e:e4:11:e0:f4:7f:04:11:63:3d:
24:f1:b1:85:5e:64:6d:62:09:b6:bd:17:ba:1c:0a:5f:2b:63:
0d:fc:67:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 14:33:32 2025 by rpki-client