Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
File: ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft (raw, json)
Hash identifier: OsPLhJmB/8Oj93bV6CfWk1T3IalgSyN0mMJ5b785+ms=
Subject key identifier: 65:86:EF:35:03:90:F9:5D:FF:B4:D6:9C:93:2D:C4:0A:E6:56:51:C7
Authority key identifier: 65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC
Certificate issuer: /CN=65c293380bc41f52d9131585a8580038f92f5dcc
Certificate serial: 019A51BEA1A749154230906D9ADAADC12008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 02:00:38 +0000
Manifest this update: Wed 05 Nov 2025 02:00:38 +0000
Manifest next update: Thu 06 Nov 2025 02:00:38 +0000
Files and hashes: 1: DXSMQQoNY6zl2bbt_Qxl4yUZpo0.roa (hash: W1Qix1yXYt7eEDSw6BnO5hmas15FwfPB8Nypx8uQBss=)
2: ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl (hash: 1/Nz2WFJ8kiYTwbrz/E3ZoMaXA5zcmWyePnX6KcXGCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:a1:a7:49:15:42:30:90:6d:9a:da:ad:c1:20:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c293380bc41f52d9131585a8580038f92f5dcc
Validity
Not Before: Nov 5 02:00:38 2025 GMT
Not After : Nov 6 02:00:38 2025 GMT
Subject: CN=6586ef350390f95dffb4d69c932dc40ae65651c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5d:39:27:17:86:64:59:1d:64:67:83:45:cc:
3e:c3:6f:46:f9:de:fc:0f:bd:65:73:a4:f4:48:93:
78:87:57:66:f6:70:60:31:0e:30:e0:a7:5b:6f:3d:
f9:40:8e:76:f2:4b:0f:30:ce:21:95:d7:2a:05:01:
79:2c:35:b8:46:8a:09:ef:d0:40:c8:ca:7c:66:b9:
fe:52:c5:85:d0:78:e8:52:a0:ff:0e:40:25:da:8e:
1d:e3:3a:c9:86:e6:0b:57:23:71:05:0d:bf:6c:b2:
a0:7e:44:27:aa:c1:d7:de:72:9c:aa:f1:f8:bc:59:
dc:5d:a4:a7:cc:d4:b2:41:2b:a9:ac:bf:4c:33:cb:
aa:f2:e0:65:ee:bb:63:c9:ff:3e:5b:3b:bb:94:2b:
39:68:a7:e2:63:24:b3:14:e4:7d:d4:f2:4a:5e:dd:
c7:c6:bb:f7:80:2d:a1:a8:46:9b:88:92:ec:a5:a4:
a9:57:5a:53:63:72:9c:6e:43:8e:9b:89:8b:3b:a8:
47:55:63:56:e0:e7:17:f1:2e:78:48:19:35:a6:db:
71:b3:1e:c2:1c:bc:53:e4:0a:8e:30:7b:cf:16:24:
4e:df:f3:1d:2d:b7:d3:8b:60:0c:f1:d3:d7:20:f7:
36:a9:d7:22:cb:64:3c:d6:86:89:b4:30:e5:e0:ce:
96:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:86:EF:35:03:90:F9:5D:FF:B4:D6:9C:93:2D:C4:0A:E6:56:51:C7
X509v3 Authority Key Identifier:
keyid:65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:07:f2:4f:de:84:52:a1:04:4f:cc:5b:b3:5b:a6:de:53:f1:
d0:9b:88:c3:47:bc:70:29:de:31:6a:32:9d:78:6f:ff:d5:d6:
fc:ce:c5:91:ab:6e:c7:1c:c2:4d:5d:de:44:58:d4:05:70:7a:
61:12:a8:ac:0e:d7:9e:ca:e2:2a:e6:fc:20:ec:35:9e:ba:a0:
cd:eb:bf:40:58:65:8f:d2:21:6f:72:7d:df:19:37:50:f4:ed:
04:b1:32:8d:01:9e:ec:16:bb:a7:de:95:bd:09:26:e2:57:81:
12:d1:58:d9:d5:3d:57:8d:f2:27:9b:93:58:1b:87:7b:b9:82:
3d:03:af:37:55:59:9f:16:99:d5:a0:46:e1:ef:dc:81:de:a3:
db:24:86:95:73:ae:e3:fc:17:c9:df:43:da:df:77:c3:76:f4:
86:ca:f5:91:cb:e9:67:6b:13:fd:db:50:1d:2f:3f:e9:40:68:
47:3e:23:fd:d4:eb:d2:1e:ec:77:21:5d:c0:dd:fc:dd:75:73:
d4:42:83:bd:f3:61:8d:f7:43:71:ff:be:89:e2:58:de:c4:c1:
4e:eb:5d:87:47:0b:0f:6d:25:f3:00:92:6d:fb:68:1e:fc:f2:
73:79:51:f0:9e:57:1f:42:dc:4d:15:41:61:42:f5:59:d1:5f:
bb:e1:83:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:50:58 2025 by rpki-client