Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
File: ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft (raw, json)
Hash identifier: i1Th7FRYqcub35+So62u2lV/Su64/hvGY4vLQQooGlg=
Subject key identifier: 7F:77:44:80:27:71:A7:2F:B2:F0:89:47:C5:8B:68:BF:D2:1A:43:D1
Authority key identifier: 66:D1:F8:FB:6A:DD:27:2B:46:C4:06:B1:88:5C:93:29:5B:1F:4B:8C
Certificate issuer: /CN=66d1f8fb6add272b46c406b1885c93295b1f4b8c
Certificate serial: 019A51195EF24E30941EF7462E3FE919CF63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
Manifest number: 0D5B
Signing time: Tue 04 Nov 2025 23:00:08 +0000
Manifest this update: Tue 04 Nov 2025 23:00:08 +0000
Manifest next update: Wed 05 Nov 2025 23:00:08 +0000
Files and hashes: 1: 6uraY0RUo083dp6VRDIhaMr-XOw.roa (hash: 84hQ/Wr95yt1TasjhyzEMQBsJDQIG0TsCg+7NafRezY=)
2: ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl (hash: DXiCyh7v2MQTgIJAtdL+sfQeHLGWC841NNEg3s1UxJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:5e:f2:4e:30:94:1e:f7:46:2e:3f:e9:19:cf:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d1f8fb6add272b46c406b1885c93295b1f4b8c
Validity
Not Before: Nov 4 23:00:08 2025 GMT
Not After : Nov 5 23:00:08 2025 GMT
Subject: CN=7f7744802771a72fb2f08947c58b68bfd21a43d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d8:14:53:bd:ae:7a:e9:29:ab:41:86:9f:c8:
09:e3:c6:2c:f3:ac:20:f2:6a:78:79:5b:23:c8:ae:
51:85:2f:a9:f2:48:dc:88:3b:00:cb:04:e6:fc:e0:
28:27:0b:55:27:a8:87:ee:69:31:e4:9d:e8:4a:e8:
55:0e:0c:44:aa:d0:8f:bb:a5:b2:db:39:84:5a:2f:
c8:d9:fb:cc:35:6a:3b:e8:f5:0c:7e:3f:df:27:c1:
1e:a0:aa:63:5d:9a:ed:c6:5d:cf:12:b2:b8:bb:bb:
cf:2d:57:78:5b:53:84:da:8d:52:76:37:7c:46:0a:
5c:1c:8c:a7:ff:ac:7c:84:a8:d5:03:6e:aa:1e:9c:
35:88:87:8e:87:3e:46:e4:29:d7:f0:92:45:0d:d7:
6d:8c:3b:02:fd:85:ab:a7:fd:66:ef:d0:b1:4a:b0:
6e:35:a0:cf:ed:26:45:c7:6a:1d:f5:41:02:20:2c:
1c:6b:fe:c7:84:bc:fe:9e:08:5f:d5:dc:45:0e:c6:
2c:6b:a2:c7:2a:45:4a:c0:b3:1e:b7:21:b3:48:89:
0d:e7:ca:22:56:26:26:1a:91:d7:97:f8:aa:62:28:
53:c8:37:0a:aa:fb:9a:be:fc:aa:3c:af:60:95:5b:
4d:a9:1a:e5:04:ac:73:29:e9:15:92:da:ce:6f:0d:
8e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:77:44:80:27:71:A7:2F:B2:F0:89:47:C5:8B:68:BF:D2:1A:43:D1
X509v3 Authority Key Identifier:
keyid:66:D1:F8:FB:6A:DD:27:2B:46:C4:06:B1:88:5C:93:29:5B:1F:4B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:57:e4:70:91:4e:19:74:10:ed:26:34:cb:be:39:50:6e:53:
fd:77:1d:58:63:01:5c:62:f5:dd:92:f5:76:2d:ff:bd:2e:2e:
02:1c:e1:3a:63:53:4e:b6:d4:e4:cf:81:cf:f0:cd:31:37:3d:
56:36:dc:f8:35:ad:80:35:90:26:c1:c6:0a:42:d4:0a:c0:55:
4f:46:20:e3:76:41:2c:db:0a:ef:02:9d:ad:a6:3f:50:ed:dc:
fa:bd:52:0a:71:c6:67:7e:04:d7:fb:50:50:2a:85:4f:72:00:
33:cd:1f:2f:8a:04:78:e1:c9:18:32:02:35:ce:fc:97:40:06:
a1:70:71:76:d8:1d:ba:5a:c6:3e:b9:c2:fd:1f:e3:9e:f1:60:
c4:fe:a0:7e:f0:f0:65:a1:51:19:46:ab:cb:aa:c4:4c:a7:93:
8a:76:4c:af:02:3b:55:49:0c:c8:b3:86:44:88:1d:7f:99:27:
63:50:6f:97:d9:b2:91:3a:9f:06:d1:3b:32:66:91:dd:27:16:
84:28:12:ff:94:15:94:6e:c8:e7:fe:7b:f9:ce:45:33:5c:cf:
1c:25:f1:7a:9a:b4:97:c7:c8:5a:01:8a:59:1c:17:10:d9:9b:
42:a8:00:72:70:3e:28:e2:c8:ff:fa:5d:8d:cf:07:f9:5d:55:
50:1d:39:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:54:17 2025 by rpki-client