Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
File: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft (raw, json)
Hash identifier: wPeRWkD23pHbkn/chHJ3cVo3Ri9CtlAPURR0aeXeDlY=
Subject key identifier: 82:75:F8:22:84:A5:06:F8:33:41:31:8A:96:3A:EE:E0:89:7D:91:BA
Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
Certificate issuer: /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Certificate serial: 019A4D061FD6DBD203D8C7C22C00592DC699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
Manifest number: 1717
Signing time: Tue 04 Nov 2025 04:00:38 +0000
Manifest this update: Tue 04 Nov 2025 04:00:38 +0000
Manifest next update: Wed 05 Nov 2025 04:00:38 +0000
Files and hashes: 1: 08cbr85HkKL256WKPSBbjEBkUog.roa (hash: 5K7bdmLXsunQxf6ydRqaBdSla8m7yjvCwX6GQr2FyeQ=)
2: 1_VIXcn389cDhH5pQfcOHcgm1SA.roa (hash: DL+3+aiYPEstQJ/sUeRLgWJ6P/7ylF16Rs1Q6RQQLlE=)
3: AyxM3qUSp4vgIaJ1AQtSeDaW3v8.roa (hash: DID4wPyNJmFDb+hLJYcp8aWza0ytEMMJn7voP8pdhw0=)
4: GmoSLMOyGmAE3DVEod4OY1EVNkg.roa (hash: V4/CqFclfl4k9hlXoXkdtyPxDhPK8FCrQ1XJC3/zOcY=)
5: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl (hash: 2yixRamYAnpNaUIIhqKYRiRzRTPd71E100niwWGaMLk=)
6: cs1_hnr2v_RESMbUBcnLEeHdvL0.roa (hash: bQIbEK9aQwzm+EgLeePtROO+uC2BmOE2JtvqLImUO3Y=)
7: jHuaR39fBtfoSm7eKI-uPlXtnO0.roa (hash: tlJbuPplC7TVW63LZE8L9VXaV6yFo7hmKI0nyQHS7tc=)
8: kES3a_NmTCIqnMJDYdktZEAui6g.roa (hash: oWDzOnsZ0P67iTYQElx7vSfgd2r2XhuMUt+O6nZknyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:1f:d6:db:d2:03:d8:c7:c2:2c:00:59:2d:c6:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Validity
Not Before: Nov 4 04:00:38 2025 GMT
Not After : Nov 5 04:00:38 2025 GMT
Subject: CN=8275f82284a506f83341318a963aeee0897d91ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:62:fe:b0:93:1c:79:e5:18:a4:27:0d:a2:87:
e9:8e:b7:36:84:30:00:16:c3:3b:63:9d:e0:5e:16:
e4:40:0f:25:1c:7c:f0:75:cd:2f:57:00:c2:e9:cc:
dd:0d:59:72:02:28:47:7d:6d:3f:9f:d5:a6:c3:04:
69:28:9a:8a:53:71:54:7a:c0:62:91:92:03:27:df:
c2:a5:8c:cf:1e:36:48:6a:64:be:81:1a:86:50:3c:
3f:a2:3b:53:db:13:0c:f1:0a:13:b3:f4:70:8f:7d:
bc:e2:1d:7f:02:37:d4:c9:40:c7:0c:66:f3:4d:1e:
ef:a3:d1:94:e4:99:c8:60:cd:c6:75:2e:be:95:47:
2b:e8:2a:0d:f3:60:3e:ae:4e:5a:26:f9:82:71:07:
98:99:3f:eb:ea:66:33:cf:44:81:eb:59:3b:6d:2c:
20:dc:63:f6:ca:5f:be:cb:f4:2b:69:7a:79:43:e9:
a0:8e:aa:d6:26:2d:96:36:d6:66:93:a2:0e:5b:fc:
3f:d9:db:11:69:f9:65:3e:52:8d:62:1a:76:16:56:
cf:27:9d:9d:0d:34:4c:71:c5:94:8a:71:12:97:ef:
3d:da:55:a1:43:01:c6:f2:d1:68:64:e0:5f:0a:a2:
a1:e0:c2:b7:2b:ce:4d:ea:59:1c:9e:3f:d1:fa:c0:
3f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:75:F8:22:84:A5:06:F8:33:41:31:8A:96:3A:EE:E0:89:7D:91:BA
X509v3 Authority Key Identifier:
keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b4:40:44:93:59:4e:e8:93:d3:54:31:ba:ca:df:e5:ba:2b:
5a:46:21:4e:ef:43:80:75:1d:fe:1b:cd:76:b9:ec:44:79:7c:
f4:cb:a4:30:c1:bf:e2:6b:7f:b9:8e:ec:3b:f3:e2:d1:28:c8:
9f:da:4d:1a:30:12:3b:8f:cc:6b:d2:ed:3c:f4:c2:a4:22:9f:
73:15:28:dd:6c:97:54:82:fd:17:cd:b9:8c:48:7f:e9:6a:49:
b2:0e:b7:5d:18:42:3a:91:55:c3:ec:2e:ff:a5:99:d0:d2:98:
ee:88:01:63:b1:d8:05:3d:a2:2a:9b:e3:2e:48:04:c0:63:22:
31:83:47:63:5d:f7:93:f8:c4:06:7c:ca:33:1c:c2:bf:ef:87:
80:7e:50:77:18:c3:dd:da:66:f3:15:d0:6b:20:64:0f:a9:a7:
e4:ae:5e:63:9c:e8:d2:1f:de:3b:bb:7b:65:cb:6a:95:ad:5b:
20:63:a1:c9:d2:92:a3:5c:ff:ea:a8:1e:6f:96:24:0f:d2:05:
83:9a:80:9d:a4:29:81:d0:2b:e7:18:1a:49:86:9e:aa:ed:b5:
d4:d8:71:3b:14:db:ce:6c:b9:91:ae:bf:d4:84:4c:73:e0:2b:
fb:1d:2b:01:3e:db:10:a7:01:b5:86:f5:13:41:06:8f:64:47:
64:78:3e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:32 2025 by rpki-client