Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
File: ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft (raw, json)
Hash identifier: u34yLJeFYCeZFgVj07wfjkTMoAb0gVKDy/GhID33nIE=
Subject key identifier: 62:86:16:AB:CA:89:7F:3E:7C:CC:BF:71:B6:65:B2:E4:F6:DD:E3:8F
Authority key identifier: 66:DA:C8:A8:F3:14:EE:87:9A:6A:A8:43:B6:7E:A4:7A:B1:E7:5D:EF
Certificate issuer: /CN=66dac8a8f314ee879a6aa843b67ea47ab1e75def
Certificate serial: 019A4EF4B2C87D4AC8097B6385A5ED63E0B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
Manifest number: 0797
Signing time: Tue 04 Nov 2025 13:00:50 +0000
Manifest this update: Tue 04 Nov 2025 13:00:50 +0000
Manifest next update: Wed 05 Nov 2025 13:00:50 +0000
Files and hashes: 1: ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl (hash: bylxCYVrqpQ3lKplGBJQVGZrWU1eM3k+c43y1XKOZTw=)
2: b1zoobQuYRirw6zOe3ZiWtlB_Fs.roa (hash: yoTkr3Ydr4cxPjwyqyjdE6QfCIuZ05Im31loM47LoN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:b2:c8:7d:4a:c8:09:7b:63:85:a5:ed:63:e0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dac8a8f314ee879a6aa843b67ea47ab1e75def
Validity
Not Before: Nov 4 13:00:50 2025 GMT
Not After : Nov 5 13:00:50 2025 GMT
Subject: CN=628616abca897f3e7cccbf71b665b2e4f6dde38f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4f:97:6b:b9:33:69:60:a2:a4:19:33:21:b7:
c3:16:7b:e0:d9:eb:f1:71:7d:9c:83:ea:c6:cb:59:
df:d8:a5:11:2c:a0:5e:6e:3d:17:df:c7:c1:07:7c:
05:91:3c:f6:dc:35:db:86:7c:5d:08:a6:7a:df:2a:
a3:f7:8c:15:d7:91:57:01:b8:4b:21:2e:8c:58:f8:
40:b0:30:f3:ff:dc:51:41:4d:bf:5e:97:0f:43:6d:
6d:cf:03:35:96:72:b6:19:07:c3:9f:2c:71:71:f3:
24:59:d5:6e:42:ef:cd:63:63:b1:f3:09:0f:17:c7:
74:5a:f5:50:e0:32:39:16:f3:fd:0c:ac:63:2e:e8:
42:f0:f3:97:31:89:0b:c2:5a:c6:80:59:0b:ae:f3:
a1:6c:e8:15:6f:c3:cd:94:7b:e2:44:ce:2f:8e:8d:
b0:8b:10:29:2d:56:6b:ec:10:66:0f:bd:32:e0:91:
b2:73:c5:94:26:fb:8f:d8:2a:12:f9:d6:c8:54:4b:
c2:58:e3:7d:32:5f:aa:95:80:d3:1f:03:dd:bb:63:
68:b1:e4:0f:c6:10:e8:4a:84:3a:a8:f6:fe:bf:11:
63:25:a4:f0:6e:0c:c7:f8:23:21:f0:09:52:f4:0a:
83:0f:8e:d3:19:a1:f7:af:44:54:2a:b1:a7:b6:7c:
f7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:86:16:AB:CA:89:7F:3E:7C:CC:BF:71:B6:65:B2:E4:F6:DD:E3:8F
X509v3 Authority Key Identifier:
keyid:66:DA:C8:A8:F3:14:EE:87:9A:6A:A8:43:B6:7E:A4:7A:B1:E7:5D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:91:97:81:1b:1f:c2:1d:de:6c:6b:5d:dd:7d:90:7d:8f:53:
18:40:d1:3a:53:85:17:25:48:6f:16:43:ae:e3:e3:4f:53:2e:
b8:b9:57:64:42:74:6c:96:3f:d7:39:77:37:d6:59:73:59:b7:
df:a6:f4:f3:46:44:65:a1:e4:62:37:9c:74:60:24:43:33:d8:
2e:89:cb:8b:02:f2:ec:87:2d:f7:05:2f:c2:82:43:c2:03:7d:
89:81:a5:64:39:d5:79:92:3c:ec:fa:e9:31:54:28:0c:3f:ef:
4b:9d:5f:09:fa:71:23:84:44:57:83:0d:7e:f5:73:52:3f:83:
92:51:e6:d4:2b:ac:cf:7c:60:5b:bd:34:a6:8e:24:fd:68:21:
8e:f6:01:2c:83:5d:a8:71:e6:7d:7c:00:5b:c6:90:92:43:c4:
bd:d7:a8:45:38:10:89:11:4a:29:9e:0b:07:d8:b3:cf:7b:ba:
0e:1c:09:7e:bb:36:6e:63:08:a5:4a:02:90:cd:96:6f:c7:a2:
ae:eb:03:a2:eb:5e:0b:f0:a5:df:63:3d:07:c4:fa:c6:20:64:
d1:d7:5a:46:b5:54:23:71:11:c4:55:0d:d8:62:26:97:9f:4d:
f2:64:47:87:72:3e:6c:fa:62:f2:b2:3e:e2:eb:4d:d6:02:db:
5d:9a:af:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:26 2025 by rpki-client