Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
File: ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft (raw, json)
Hash identifier: gQOv28Mmodq3PdE9jgS+qpXZBQBo2+UyBrhf87cpvlU=
Subject key identifier: 38:16:EC:8F:A1:DA:FB:03:F3:1E:24:B1:09:40:C7:3F:FD:11:79:E1
Authority key identifier: 66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F
Certificate issuer: /CN=6665dd97665a23b1b183e223822b66b5ae536a2f
Certificate serial: 019A4E18B387C314F3198D59DFCAE26FF86A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 09:00:32 +0000
Manifest this update: Tue 04 Nov 2025 09:00:32 +0000
Manifest next update: Wed 05 Nov 2025 09:00:32 +0000
Files and hashes: 1: 1v8i4fKHGgVFWMzHMhW8J-xxCqk.roa (hash: 3nrn/SO1kBcjpxN/GEFTE06I2/Ei7ozh8XwfvRrFcmg=)
2: ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl (hash: BKnVpAiHJTH1uXFTS5rSbBY4/zp/9t+yeL8bC0vGs6g=)
3: clYhAW8kFlSaTpdGL_6AqwLYC_c.roa (hash: XEbICpC7LdXsG9DjCaajLcED5VcPq/8r93ZX2PiFgnw=)
4: nXVN6v3CzmLleKeTxS_kRgT2CK8.roa (hash: oJxgRFyz2Xezz+l0iWGdoRK6g6HPkdzeG09BGt4Hpn8=)
5: yAPFTHuBSG8S3cBogTgaLXQHsIA.roa (hash: Dghvk7oUxYxn4x3kqmECJ3G0zYv5Ok/s1CWEsFSe7A0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:b3:87:c3:14:f3:19:8d:59:df:ca:e2:6f:f8:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6665dd97665a23b1b183e223822b66b5ae536a2f
Validity
Not Before: Nov 4 09:00:32 2025 GMT
Not After : Nov 5 09:00:32 2025 GMT
Subject: CN=3816ec8fa1dafb03f31e24b10940c73ffd1179e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ab:fd:b1:8a:af:04:b7:03:89:35:36:82:cb:
3b:8d:95:fb:f9:04:13:92:22:93:b2:c3:fb:44:4b:
88:cb:2d:0f:cb:1b:e7:18:5a:bc:0a:70:36:8f:40:
fe:79:0e:c6:bf:80:98:19:af:d8:94:de:f9:19:a4:
7b:c4:58:ca:ac:80:52:04:6a:e1:69:ff:d8:9c:9c:
26:e2:d6:af:53:7a:64:34:40:28:8d:e8:0b:f2:af:
2f:9a:46:c3:dd:d9:a7:ee:ed:f1:03:52:35:ca:45:
e0:a3:ac:dc:12:5a:9c:da:6c:8a:9c:9f:0c:67:e7:
a6:1b:1f:8a:04:bf:09:35:9a:91:eb:27:3c:b9:6b:
0d:6a:81:3e:14:c7:22:7c:aa:53:46:7a:e8:60:14:
af:c6:4c:8d:84:7c:1e:ea:59:6a:da:7e:99:53:58:
da:8a:24:a7:e5:cc:ee:d6:90:a7:0c:be:12:ca:6c:
e8:44:db:69:db:e5:4a:70:b7:df:76:b4:fd:84:af:
a9:1c:ae:5d:44:b7:bb:ff:45:23:4f:d9:0f:4e:09:
7c:62:0a:df:60:3e:8b:d8:45:37:45:8a:42:66:c5:
73:1a:af:f0:ac:b0:6a:27:10:4f:04:6d:bc:00:a8:
3b:b3:91:16:37:51:e2:29:18:a8:8f:2b:92:5e:58:
72:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:16:EC:8F:A1:DA:FB:03:F3:1E:24:B1:09:40:C7:3F:FD:11:79:E1
X509v3 Authority Key Identifier:
keyid:66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:fc:49:a9:77:e2:b8:c6:ea:81:89:d5:e4:ec:a6:7f:cf:af:
55:e8:ce:c8:1e:c4:e1:8a:fe:5f:fa:b7:f8:3a:22:65:8a:1b:
cc:f6:fe:7e:e6:90:c6:3e:e8:56:b9:3c:f3:53:ad:55:f3:78:
19:c7:ad:64:e2:45:4c:86:6e:81:f2:7a:9a:16:1a:53:f3:8d:
93:f1:6f:e6:70:40:e3:76:8c:fb:80:49:68:f6:2b:57:31:c2:
af:97:24:3d:a3:7c:db:e1:dd:4a:dc:77:40:45:76:c4:e0:15:
7e:a1:05:18:ba:f5:69:da:c2:89:35:ed:77:d4:a3:09:65:38:
99:7b:10:14:8e:f6:0d:3a:65:45:d1:2d:e0:6b:f1:69:7c:08:
34:05:6b:01:f2:09:3a:38:85:12:7d:b5:9c:7d:09:0e:4e:7c:
cd:49:9f:ca:c8:e0:c1:d7:3e:c1:48:17:85:76:ef:86:9d:12:
f4:ce:8a:79:5d:9c:1f:fe:eb:06:42:b4:af:bb:0a:7d:ea:86:
86:ae:b9:c2:9e:b3:65:a8:9b:e2:47:2c:a4:a9:b9:73:78:c8:
2f:11:f5:1d:46:d7:a2:13:d9:30:68:48:cd:cb:66:52:c7:b5:
ef:ef:59:f3:3e:7e:b2:90:ee:ce:b5:67:62:10:d6:fe:2c:cd:
07:c0:ac:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:12 2025 by rpki-client