Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
File: ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft (raw, json)
Hash identifier: IUZ6piGTxbZacjV1q8gzOlOl4DYaWwCf8MFvn+iPRhQ=
Subject key identifier: D9:F0:CD:10:1A:DB:60:7F:D5:70:43:D0:F9:AC:8F:E2:87:19:45:95
Authority key identifier: 66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06
Certificate issuer: /CN=66d0580e1725f45de106b97f77d9cd76bc4df806
Certificate serial: 019A4C60F1C013DC1EE25BF92CCC4E335447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 01:00:13 +0000
Manifest this update: Tue 04 Nov 2025 01:00:13 +0000
Manifest next update: Wed 05 Nov 2025 01:00:13 +0000
Files and hashes: 1: HFN5MH980DuANiJdbkL6ohnJj_k.roa (hash: Em5iJ0QcHb70vMs6Q6eEnq42l8uUpkT28Ocl0kx6uPc=)
2: ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl (hash: x0OEZDN1LUVTo8kB+E/yFxoI3voa8BeVx5XqccTzgHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:60:f1:c0:13:dc:1e:e2:5b:f9:2c:cc:4e:33:54:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d0580e1725f45de106b97f77d9cd76bc4df806
Validity
Not Before: Nov 4 01:00:13 2025 GMT
Not After : Nov 5 01:00:13 2025 GMT
Subject: CN=d9f0cd101adb607fd57043d0f9ac8fe287194595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:10:5b:ca:96:54:88:72:5f:5a:25:41:4d:75:
d2:25:68:41:b7:da:ba:8b:d4:eb:9c:2e:b7:66:b0:
29:4f:e4:f5:1c:4c:9b:98:bc:68:58:92:f2:bc:6c:
1d:5d:31:b8:ef:f0:f1:43:68:00:4d:5a:83:11:c9:
3a:a9:06:b7:38:1c:43:32:d1:e6:ae:a9:75:14:f6:
12:50:df:c0:cd:4a:17:e3:33:43:51:4a:b4:a0:b0:
00:6a:f8:e2:17:13:f8:09:36:8e:ea:3e:00:43:b4:
50:df:6d:1d:1c:f1:ce:f8:ce:39:0f:b9:8e:24:67:
3d:c1:f1:65:8f:f5:fc:5a:6f:2f:8f:59:f7:92:96:
7a:37:ec:4a:30:88:4a:f0:cb:80:97:3d:6f:2f:d3:
f3:50:a9:9d:eb:46:d8:9a:91:19:92:91:fd:2f:8a:
cf:a9:ec:10:9d:39:87:b6:61:4a:3e:e9:fc:dd:94:
0f:06:09:43:19:42:02:d7:38:55:eb:5c:be:1e:7b:
b8:ea:2c:44:be:59:35:26:79:29:82:12:02:5e:0c:
54:1d:ed:3e:17:14:51:6c:da:68:6b:e4:65:be:20:
60:d8:94:ea:e9:5f:53:80:13:74:d9:6a:a9:33:bb:
77:c2:61:ff:42:c6:09:2e:4b:28:dc:73:22:5c:d0:
d4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F0:CD:10:1A:DB:60:7F:D5:70:43:D0:F9:AC:8F:E2:87:19:45:95
X509v3 Authority Key Identifier:
keyid:66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:3f:12:c8:6b:e3:0d:c0:92:25:5a:9b:1d:45:91:54:f9:9a:
2a:d1:ec:79:16:09:c5:e5:3c:4f:99:4a:6b:0d:15:b7:6d:a5:
f3:8c:91:11:5a:a2:cb:67:ca:c1:e8:8d:fb:bd:19:d6:49:b5:
fc:25:96:68:b7:bf:73:19:60:bc:77:1e:07:f3:87:9b:e4:6a:
f0:fa:32:3c:ff:48:30:a1:ca:3f:c9:72:0e:4c:ef:2f:be:76:
dd:80:d0:45:42:29:d3:54:6c:8e:ad:0f:4e:88:39:c2:22:9c:
c6:06:eb:ba:d3:ee:5a:ee:20:99:33:6d:ed:68:cd:58:6f:86:
85:3b:91:7c:79:cc:90:3a:04:d0:f9:0c:43:fa:36:0a:10:a9:
9f:23:f9:cd:f8:00:3d:28:f2:09:1e:07:7e:a1:4d:e4:ff:82:
40:2e:11:e5:7f:f1:3f:0b:c9:80:47:4b:63:05:67:27:c6:37:
78:2a:f5:9a:36:5f:d1:49:3f:bc:93:98:12:11:ca:49:8c:c0:
7c:76:ea:6e:27:c6:3c:aa:ee:01:21:1a:43:a3:bd:e5:2d:2e:
79:3a:b6:8d:44:31:94:34:38:71:c5:6b:d9:75:63:12:7c:5a:
a6:66:e1:67:ef:45:d9:1f:8f:03:19:0d:27:e2:a8:f1:ae:a8:
60:45:3a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:23 2025 by rpki-client