Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
File: ZtioTw6M91UTepaA68xPzNIKNLI.mft (raw, json)
Hash identifier: gDcCrIri3+ibEoJdqk13IWnECN7//Cm7Y21VPxSpQUU=
Subject key identifier: EB:13:B9:7C:AE:5A:08:72:13:E3:A0:67:B9:BB:F5:E8:CA:BD:13:91
Authority key identifier: 66:D8:A8:4F:0E:8C:F7:55:13:7A:96:80:EB:CC:4F:CC:D2:0A:34:B2
Certificate issuer: /CN=66d8a84f0e8cf755137a9680ebcc4fccd20a34b2
Certificate serial: 019A503DA60366CD9272CFDE54E4B1D44E0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 19:00:08 +0000
Manifest this update: Tue 04 Nov 2025 19:00:08 +0000
Manifest next update: Wed 05 Nov 2025 19:00:08 +0000
Files and hashes: 1: P7vPWrkUt_4tI2tusoLN2OIhgCA.roa (hash: vg79/TJpONqI6MyXQJ/4Hu+xaXpkJvsU35isLPjUC8s=)
2: ZtioTw6M91UTepaA68xPzNIKNLI.crl (hash: 2kIaOFXLWdlstDJLHkFEeDqQ0Biqw54GZNhyM9hJv4E=)
3: r6QzNtUWS8LqjO5zMkFtGGDH8lg.roa (hash: l3MXhVwlaN7WZQxmnLfdtChq7kKxEP3Qy/454Bdw0ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:a6:03:66:cd:92:72:cf:de:54:e4:b1:d4:4e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d8a84f0e8cf755137a9680ebcc4fccd20a34b2
Validity
Not Before: Nov 4 19:00:08 2025 GMT
Not After : Nov 5 19:00:08 2025 GMT
Subject: CN=eb13b97cae5a087213e3a067b9bbf5e8cabd1391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bb:9d:7e:8b:7f:97:17:7e:b2:da:ea:5b:b3:
cb:55:6b:a5:67:8e:83:2b:ec:83:be:ee:95:a4:90:
6c:2c:86:fd:d7:47:e1:48:c1:fa:e3:f7:e1:82:b0:
c1:70:3e:1b:39:e2:21:bf:26:ea:90:00:cb:58:85:
e0:55:ca:55:38:e2:20:40:4e:00:b3:e1:8d:82:04:
4c:15:3b:19:0e:43:8a:de:8b:1e:13:f9:17:d1:31:
3e:84:17:98:a8:0c:53:f1:38:f3:8b:1c:95:3d:ec:
3c:f1:d4:42:a1:c5:80:a9:fe:b5:35:42:88:f4:a3:
b3:f5:91:69:fa:b6:b4:d0:3b:0b:4a:20:a0:a1:c3:
65:90:f0:05:75:ab:2c:d3:db:f9:36:a9:6b:0f:6c:
35:ef:5d:19:c6:56:27:82:12:10:80:57:bc:6c:c9:
7d:9b:6d:ef:97:8c:66:08:85:14:dc:ac:c9:7f:ca:
e0:87:4e:41:5b:1c:cd:9d:76:49:8d:cd:9b:c7:c6:
67:7f:a8:d3:58:53:8c:12:da:44:6b:51:53:f2:41:
15:a4:8d:bb:78:4b:b2:a9:86:80:84:8c:77:54:9a:
d5:72:1f:3a:b7:92:36:8a:57:60:bc:ef:b9:17:24:
2b:19:dd:2a:44:51:94:d4:51:b4:8f:74:f0:b3:13:
e0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:13:B9:7C:AE:5A:08:72:13:E3:A0:67:B9:BB:F5:E8:CA:BD:13:91
X509v3 Authority Key Identifier:
keyid:66:D8:A8:4F:0E:8C:F7:55:13:7A:96:80:EB:CC:4F:CC:D2:0A:34:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:6e:91:53:e3:14:85:4c:0f:15:a1:cc:67:04:88:26:0d:31:
9e:89:a9:9b:01:90:c2:d9:56:c7:1b:01:aa:71:9f:69:8f:a5:
43:a9:5c:74:3a:78:d4:bd:51:24:ba:61:9b:d1:8c:25:41:83:
e8:c1:96:0f:a2:d3:cc:6e:6d:fd:7f:7f:ff:a4:c4:2a:9a:1c:
92:6c:40:a6:67:62:e7:fe:4d:37:f3:27:4e:7e:4b:dd:86:6c:
d9:57:81:4b:f7:e8:a4:a8:49:23:64:65:dd:4a:cc:50:b5:a6:
87:bb:ac:d5:3d:5c:08:8d:1b:17:b9:94:24:c6:ff:25:05:20:
aa:4f:b6:ad:14:71:40:db:04:d2:be:ed:1e:17:b8:7f:ba:82:
80:4e:89:b6:f1:52:93:7f:7a:4a:d2:dc:b5:72:ba:b8:5e:d4:
ff:41:4b:10:0a:0e:9c:93:c0:dd:e4:41:0c:df:d7:88:ef:a6:
06:a4:da:a2:77:52:45:16:7f:f9:b4:16:5c:29:a7:ef:e7:b2:
91:a4:5e:c6:07:af:48:a3:4f:a7:c9:02:24:ed:60:7d:67:65:
01:67:5c:3e:dc:cd:dc:4f:b8:ce:10:a6:1c:c2:1e:aa:4e:b2:
0c:0a:e1:8d:3d:41:be:3e:71:c5:a7:45:9a:cf:1e:6d:bf:34:
19:b2:55:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:27:27 2025 by rpki-client