Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
File: ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft (raw, json)
Hash identifier: ALzPPZVquSOQ/ilkyBlp0wpM6i4jNeXXyJABL0M7CzU=
Subject key identifier: 41:7B:16:35:0A:3E:00:9C:1B:21:B4:4F:78:23:4E:19:E8:36:94:F3
Authority key identifier: 64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
Certificate issuer: /CN=64e7553292af595426ee1d7dc919a2104894752b
Certificate serial: 019A4D05F6A1DF9DF96FAAC460797D3E7897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 04:00:27 +0000
Manifest this update: Tue 04 Nov 2025 04:00:27 +0000
Manifest next update: Wed 05 Nov 2025 04:00:27 +0000
Files and hashes: 1: 2lhRfHkMgHjBgOEI871xwfstUps.roa (hash: pS6P1vzgUypkZeUsuXFw4LKxiNYTX5RfnQUo/ctpKhE=)
2: ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl (hash: rw3XYj49zuOQqfB66JEvxYYz05eIwTDzWxYO3Dx1om4=)
3: uZvIw4DMtYOiY7JlOgb63vTUcZI.roa (hash: g2eHsXH9Y/MXPOSVAzGV6O9aHOUSDc6gHQknS8yIWx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:05:f6:a1:df:9d:f9:6f:aa:c4:60:79:7d:3e:78:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64e7553292af595426ee1d7dc919a2104894752b
Validity
Not Before: Nov 4 04:00:27 2025 GMT
Not After : Nov 5 04:00:27 2025 GMT
Subject: CN=417b16350a3e009c1b21b44f78234e19e83694f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:02:02:42:4a:8b:d5:bb:5f:47:78:09:01:cd:
10:38:97:52:5b:53:82:74:98:bc:4a:0f:46:20:99:
3b:2f:e6:0e:97:5e:27:60:fd:5c:6b:35:4e:10:0a:
c1:f1:12:90:44:2a:f0:dd:1e:07:4c:e3:68:e3:ef:
36:f8:96:09:c6:6d:b1:40:ae:5f:27:46:a1:6d:bf:
44:7b:a4:66:80:96:0c:1e:62:ff:c1:45:27:bd:fd:
e6:49:94:0e:e2:cc:d3:d4:01:ea:ca:9e:bc:43:5e:
02:1b:06:0f:ca:09:6d:54:b0:84:b2:40:86:5f:22:
f8:a7:bc:33:c4:b9:38:6f:4a:8e:5a:ec:fd:c6:89:
96:a7:6a:5f:4e:f7:7b:a2:cd:11:ca:81:da:e5:e6:
54:cc:7d:5a:19:8b:5b:a3:60:99:d5:87:5f:3e:cf:
08:d6:22:b0:e8:d5:0a:b8:c8:54:c1:6e:18:fb:d2:
b6:84:0f:de:e0:0b:3a:81:d2:80:0f:e7:22:3e:e1:
91:c6:bb:49:17:15:5c:93:25:df:35:76:48:3e:6e:
19:a8:4b:f5:f5:a4:05:ad:72:74:85:73:78:ff:9a:
b2:3e:f5:30:a8:31:a8:f8:b3:44:93:07:6c:0d:69:
58:89:23:3e:d7:ef:a8:57:cb:a3:5a:16:a3:aa:f8:
b1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:7B:16:35:0A:3E:00:9C:1B:21:B4:4F:78:23:4E:19:E8:36:94:F3
X509v3 Authority Key Identifier:
keyid:64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:6c:bd:91:80:75:7d:97:21:af:5c:8d:32:20:c6:5b:31:2e:
f7:41:43:12:10:5b:33:d9:0b:4a:c5:5c:55:a5:51:e7:49:76:
38:fa:38:b1:a7:5f:67:54:ae:60:17:7a:08:d7:3f:fa:55:1a:
e4:6f:ef:fc:f0:6a:cf:01:5e:80:80:fb:5f:19:d7:3c:3c:c7:
db:ec:6b:8f:76:05:8e:5f:68:38:b6:11:19:1d:63:49:03:a7:
46:f0:3b:cf:8c:e3:92:c3:53:31:6f:61:24:78:b2:d2:ec:af:
21:22:c0:e3:4d:bb:28:8a:b6:56:6d:b3:11:ac:67:6d:13:92:
9f:94:79:35:b3:d5:3e:bf:a8:a8:cb:5d:c0:b3:a6:a0:93:7c:
8f:36:60:a5:8c:9d:75:56:06:ef:25:52:37:8c:c1:1b:7d:69:
51:fe:36:1c:70:12:1f:cb:d3:b1:df:6d:b9:2d:15:2f:ac:51:
5b:65:c5:e3:02:b6:f5:17:7f:1e:4d:67:5f:6d:16:91:72:5b:
88:eb:24:c7:68:bc:ce:fc:5b:cf:64:6f:03:74:e8:7d:08:97:
b9:8d:3d:d0:4d:a6:08:89:fb:61:0b:f4:50:6b:cb:67:1c:94:
51:3c:39:b2:b6:e9:38:ef:41:c0:29:d5:9c:ed:fe:8b:e5:b0:
8b:a1:2a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:15 2025 by rpki-client