Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
File: ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft (raw, json)
Hash identifier: LFEZY6rjfvFGl/ya6Sfp2iCbcRQX73LDM5Mq/HYIUxw=
Subject key identifier: 57:88:71:47:37:5F:8E:0D:43:08:FC:A6:55:E0:74:9C:78:C3:84:35
Authority key identifier: 66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8
Certificate issuer: /CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
Certificate serial: 019A4EF5A40D90A49B13A8EFEDBEC1723673
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:01:52 +0000
Manifest this update: Tue 04 Nov 2025 13:01:52 +0000
Manifest next update: Wed 05 Nov 2025 13:01:52 +0000
Files and hashes: 1: 0eX0y1ByZozFyvqGz0EfmzMn6QQ.roa (hash: 9RKCNhJsqijEbBv8dV32/+CAVglgcAVrqc5Rx6tHl+s=)
2: PrLRWGrkGlOz391B_d1bhvHtRdM.roa (hash: Zq1F0wSxITxrY6z9+vuv+6+JvubiotTrHBEnZAFhoq4=)
3: ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl (hash: XLngczWWTCsJAPGD6zuSQbHQcnbb5odg9PdZkP52INQ=)
4: d-rt9f-dKC8oZEWyOv7rd6kbEo8.roa (hash: K8bXuYuwS4X0pfixId+iunQp5n4hsy6zV6Ye+pRdYtA=)
5: yIea70mz68MEWf7MSufqGinRRfw.roa (hash: C1KZ935qcqSwGSABodTKIPq8sxOye3X7esfEPyg6lGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:a4:0d:90:a4:9b:13:a8:ef:ed:be:c1:72:36:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
Validity
Not Before: Nov 4 13:01:52 2025 GMT
Not After : Nov 5 13:01:52 2025 GMT
Subject: CN=57887147375f8e0d4308fca655e0749c78c38435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ed:7d:f2:1b:ab:ce:49:32:06:91:cd:36:34:
e2:26:e3:5f:0f:42:8a:3e:b8:03:2e:57:ff:46:ae:
7e:60:87:8f:ab:02:f2:bc:f2:ae:b2:58:33:30:c4:
1e:d8:72:fe:65:b1:89:1a:84:32:4d:0d:35:be:ac:
d8:3f:4e:88:c3:31:69:a2:1d:31:2c:fe:8d:d5:51:
74:42:8b:82:50:7a:25:91:80:af:cb:97:e6:59:11:
7c:89:0d:ab:31:a4:ed:db:e8:1b:79:cd:ea:d6:05:
c0:97:48:64:df:5a:b5:9c:3c:dd:af:b5:a0:a0:28:
1f:8f:29:c5:b9:f0:6e:4d:5a:f5:60:9d:6d:3b:63:
20:9b:89:21:15:94:c6:7a:97:3e:23:60:71:17:aa:
01:e8:07:e3:08:0c:59:3a:f3:a4:ce:bc:5b:8f:78:
84:76:af:be:86:6e:0a:88:7c:ad:da:a3:23:33:9d:
2c:ce:82:99:b7:ee:58:e9:0c:13:4d:fa:72:25:87:
a4:05:cb:74:a2:2a:31:8a:c8:e2:78:9a:e5:c1:52:
43:68:60:2e:f4:03:16:e3:e5:55:d2:ab:d0:2c:ed:
60:5f:aa:30:e7:a4:be:72:a0:79:5d:36:60:c7:d9:
d0:1b:6b:ea:a3:1d:57:16:f1:12:40:cb:92:48:02:
4c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:88:71:47:37:5F:8E:0D:43:08:FC:A6:55:E0:74:9C:78:C3:84:35
X509v3 Authority Key Identifier:
keyid:66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e7:1f:41:ee:89:b8:7b:4a:a1:9c:eb:a8:0b:da:6b:74:16:
82:29:a5:d1:ff:a1:e9:0e:70:d1:5c:56:0b:b2:fb:7f:2f:6c:
54:f9:82:5f:0c:af:89:eb:51:2e:d4:0b:6f:90:9e:79:98:40:
eb:d3:17:40:a7:ab:52:41:83:94:10:8e:64:08:0c:bc:31:3f:
b1:01:c0:7c:49:e4:a2:19:1a:ad:8b:77:ba:71:46:f7:f4:c2:
77:1b:9e:a1:5e:df:b8:b2:21:fd:26:99:cc:d8:df:3f:18:c9:
ef:d6:01:78:b1:35:1a:9b:b0:54:ad:63:a7:9f:a9:51:62:08:
22:88:97:86:1f:e4:15:4b:41:42:70:30:2b:68:f6:cd:8a:31:
eb:ad:f3:ff:6f:0f:26:95:58:c0:1c:f4:57:bb:f7:5b:c6:23:
db:b0:74:3b:57:bb:57:67:67:d4:57:c3:25:ee:79:ad:1f:ed:
ee:b0:04:97:f2:24:cf:59:12:72:d7:7e:a9:43:e0:9a:a0:2c:
0a:ec:45:65:8f:22:60:b3:21:7f:bc:77:52:a5:36:ea:31:52:
54:85:3b:b9:df:db:40:19:90:f8:31:40:d4:63:a2:90:af:38:
37:7d:80:6a:a6:ce:13:59:c4:25:7d:90:89:ab:91:f9:ce:86:
ea:68:ab:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:14:36 2025 by rpki-client