Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
File: Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft (raw, json)
Hash identifier: TvZVBwxIaaL3KnkaREvBjRUi5ohlnOe56mjXXn5hN6c=
Subject key identifier: 55:10:EC:91:A4:F9:2B:3F:6A:98:3B:AE:D8:16:4C:04:E9:23:2F:EF
Authority key identifier: 66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
Certificate issuer: /CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Certificate serial: 019A4D3CD8D954A2E3708DF53CBED10E4365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 05:00:24 +0000
Manifest this update: Tue 04 Nov 2025 05:00:24 +0000
Manifest next update: Wed 05 Nov 2025 05:00:24 +0000
Files and hashes: 1: 1-uxvgJ33Ep83LKDPOWyK_TQkRjs.roa (hash: DSKQp+AywW/AiTaKMnd/V3/aO8KTX7yy5Li9SZt44DU=)
2: 8VKbbYixNDCpMWrK8Sk18PBt9UI.roa (hash: Y+EwSEC1feZ0TsmplFocxAWfhhAkFX7OxAfih+EUUq0=)
3: 9iP7WJpaeB_-buLXK8znbS1Ia3M.roa (hash: WfmJ7gmjlOFm1xY2ae1k54FPRmlhbu8yzibRgq+Obrw=)
4: KO1YGIQXzqmCT0PfoP9U_bP8Ik0.roa (hash: snMWMSvb7n+P3ZpH6VNK6nVq04jDlvUE+5CJBun4qik=)
5: Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl (hash: PC9iV2+0gT4BAzbUjjUAKvmg7z0mT6pG8Xd9Aoo//3E=)
6: cvFT9U6f9q2iEs9qYdY5pICL5uA.roa (hash: rpF3ncfSzctaMA19sRq+0rLTTnT49oldb4WYIOd4jLo=)
7: j97-8Fr-iu2JkstPIny1GyoUCWs.roa (hash: hG141yU64tbNFyVwR3WNdvmuMd8XffVyyIfIeXPsAX8=)
8: tOlreYPe7u67idbXYncHUQK-mIo.roa (hash: KU1u5Wpoy603w8tu9YwxwROqP4UYKqLHuGvfzTsDk/c=)
9: vsJTJNJUt5vULQK53FxCdXmG5wk.roa (hash: Tj8gi+0DcWqm3KQnTu0KBcAKSHrMVabVRmlaSv0QlNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:d8:d9:54:a2:e3:70:8d:f5:3c:be:d1:0e:43:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Validity
Not Before: Nov 4 05:00:24 2025 GMT
Not After : Nov 5 05:00:24 2025 GMT
Subject: CN=5510ec91a4f92b3f6a983baed8164c04e9232fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:73:19:f3:11:ca:85:fa:3b:fc:a3:5b:b2:58:
86:6f:e6:b6:1b:c7:11:26:56:67:ad:75:e8:2c:1f:
aa:ef:6d:54:b3:43:cf:5b:b1:b7:01:42:65:a0:79:
bc:a0:ad:67:57:9d:19:13:90:21:ae:ed:80:0f:7c:
4f:9a:b0:d8:d0:07:78:4d:1b:56:f4:a0:5e:cd:67:
f6:30:59:6c:a7:40:fb:74:25:a4:7d:f1:2d:15:3c:
a4:1f:90:6d:5b:e0:9f:fb:29:e0:85:3f:ff:c4:1b:
d6:f6:61:51:69:e8:5c:80:fe:b1:d7:46:e2:4b:a3:
09:30:ca:39:2f:65:ca:f1:68:8b:9c:fd:89:06:d4:
73:8f:af:ff:63:46:85:bb:17:f7:94:0b:f1:68:b3:
a6:1f:a4:6a:40:75:a1:ae:b3:60:41:65:6f:01:ae:
38:72:c9:84:4e:b7:f7:ca:1e:32:20:a8:94:5f:d0:
9f:dd:68:8f:8c:7e:23:c5:02:b5:29:ae:fb:e3:4f:
dd:df:6a:4b:21:aa:fc:d8:4c:3d:4a:01:2d:91:bc:
4b:39:27:80:79:e3:70:52:cc:56:33:2d:9d:eb:da:
c9:02:13:e5:19:12:37:00:93:5c:ca:e2:16:92:07:
ef:e3:dc:2b:0f:68:8b:43:71:8c:3a:2c:44:a2:58:
92:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:10:EC:91:A4:F9:2B:3F:6A:98:3B:AE:D8:16:4C:04:E9:23:2F:EF
X509v3 Authority Key Identifier:
keyid:66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:23:96:17:3c:de:25:41:a4:d4:9b:82:78:4e:69:b9:78:4f:
6a:82:55:19:a2:58:13:9e:53:f7:0c:c5:8e:cc:b6:30:50:93:
f1:0e:b1:16:b0:fa:84:af:f1:98:ee:03:29:a4:9f:48:26:ee:
bb:8c:4d:12:bd:13:23:e1:73:54:eb:20:a3:d7:db:c4:0b:e6:
41:77:ec:f3:08:1f:cc:69:3f:fc:cb:e3:b8:8d:e2:76:bb:12:
dd:7d:f3:51:ec:96:94:f1:94:43:2c:4a:a8:f0:75:b7:9f:cd:
b9:d4:82:f5:c4:3d:fe:04:db:4f:04:1d:34:3d:eb:e4:64:ae:
34:55:7a:d1:ed:55:54:57:8f:7e:87:cb:94:dc:b1:7c:95:77:
d1:41:cc:02:86:52:57:52:5c:bc:9b:2b:48:7b:b3:6c:b6:28:
89:2a:34:05:2c:29:fa:42:02:84:4b:f2:f4:41:39:69:41:79:
ad:55:da:a7:1b:e9:fc:cb:11:6b:2e:77:98:5b:42:f0:48:3f:
82:2e:22:7f:ce:91:77:cc:08:92:5b:20:d3:b1:2d:5e:33:92:
48:ff:09:e8:39:d7:cb:1f:e4:38:7f:1d:d1:0f:ac:96:a8:9d:
89:15:02:b8:9a:07:ae:e8:a5:ac:f6:33:fb:28:e5:6b:d8:38:
d2:40:8b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:21:19 2025 by rpki-client