Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft
File: ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft (raw, json)
Hash identifier: uF/bSD64TAQAMCC+E0/ETsmu6jY1zOmEKmHIWhBr1t4=
Subject key identifier: 9B:AD:60:5C:F3:78:C7:A9:6E:0D:08:0C:E9:D3:68:34:1A:6F:58:03
Authority key identifier: CE:D4:10:EA:68:67:EF:63:F9:59:BA:D6:B2:1B:69:1C:AD:FF:87:D4
Certificate issuer: /CN=ced410ea6867ef63f959bad6b21b691cadff87d4
Certificate serial: 019A4DE1553FF9A8027018B7DBBAC04598B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztQQ6mhn72P5WbrWshtpHK3_h9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 08:00:04 +0000
Manifest this update: Tue 04 Nov 2025 08:00:04 +0000
Manifest next update: Wed 05 Nov 2025 08:00:04 +0000
Files and hashes: 1: NJmmW764rdnW_zIUswA3g-8-n2M.roa (hash: uNbv9sZggt1kjUfoR4Ji7KAa4WT9RRySZVjN33ZdWTA=)
2: ztQQ6mhn72P5WbrWshtpHK3_h9Q.crl (hash: RWQzGmiVRufu0JCtuxb75SgX9ay2NG75HLkQQAEdnNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztQQ6mhn72P5WbrWshtpHK3_h9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:55:3f:f9:a8:02:70:18:b7:db:ba:c0:45:98:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced410ea6867ef63f959bad6b21b691cadff87d4
Validity
Not Before: Nov 4 08:00:04 2025 GMT
Not After : Nov 5 08:00:04 2025 GMT
Subject: CN=9bad605cf378c7a96e0d080ce9d368341a6f5803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c7:d8:1d:55:62:f8:66:b9:11:ab:7d:b5:be:
17:b4:a8:5e:dd:b6:1f:7c:1d:5f:09:bd:62:ae:0c:
4e:e9:66:27:c7:aa:56:49:c2:e4:ea:6d:24:75:42:
b2:51:3f:07:b1:ec:7f:c9:17:81:7f:ac:85:28:bc:
78:4f:ba:53:e2:f2:91:31:e9:42:a7:a6:43:b6:78:
ae:28:6d:af:50:2e:7b:c0:28:cd:d5:3a:f8:41:35:
4f:b0:f8:cd:b9:1e:73:bb:ff:3f:c8:63:fb:2f:ea:
7a:ad:8f:0c:21:07:49:02:9b:10:0c:fc:70:75:9d:
6f:9a:56:77:9d:f9:f0:06:e8:3d:d2:a4:42:f6:63:
7f:90:f0:68:9d:76:02:ff:d6:8f:a5:a0:b9:8b:3c:
85:03:67:bb:c4:47:12:c7:f5:a4:1d:49:ba:d8:40:
c1:59:01:4f:44:65:4c:9f:24:1d:df:0c:c9:f5:a5:
17:4e:b5:98:f7:5e:b7:4a:eb:31:90:9e:a2:1f:59:
72:1b:94:6f:e8:fa:3a:79:18:44:07:02:09:44:28:
4e:1d:b2:ad:ea:10:cc:00:cc:fc:4d:98:06:fc:9e:
9a:c1:98:f5:8c:92:3a:76:f5:91:78:6b:67:55:9e:
ec:22:72:3f:4d:95:16:f9:b5:85:71:88:a8:a3:56:
77:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AD:60:5C:F3:78:C7:A9:6E:0D:08:0C:E9:D3:68:34:1A:6F:58:03
X509v3 Authority Key Identifier:
keyid:CE:D4:10:EA:68:67:EF:63:F9:59:BA:D6:B2:1B:69:1C:AD:FF:87:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztQQ6mhn72P5WbrWshtpHK3_h9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:26:79:d5:dd:90:01:e0:e4:d8:7b:50:e1:1d:79:b5:a7:3c:
6a:36:6e:f5:db:b0:65:f9:f6:b4:37:36:ad:be:97:1d:30:a4:
4b:3c:49:4e:e7:52:77:d4:92:6e:7e:18:bd:b3:71:aa:04:e6:
fa:e3:b1:00:2d:14:f0:30:4a:00:3a:5f:37:a8:2a:da:e3:87:
3d:ef:7a:c2:6e:7b:a0:0d:35:9f:ce:7f:7a:91:d8:b7:00:2c:
3e:52:f6:f3:6d:6e:4f:d9:61:91:3d:50:e1:f3:c7:83:f7:28:
6e:24:a5:61:74:d1:fe:ef:73:a9:fd:5c:91:50:10:a4:7f:aa:
32:72:d1:43:92:b3:6d:76:d3:5e:ee:e8:d9:43:b5:5e:9c:95:
43:c3:1d:26:0a:27:39:2b:e1:79:ad:a4:f7:db:50:81:48:77:
69:02:d3:2b:65:5b:32:75:91:1b:82:89:7f:94:8d:fc:16:90:
17:0d:37:f1:6f:3f:54:ad:37:d3:2b:86:e9:67:21:23:a1:38:
f6:c0:6b:d4:85:23:51:28:0f:b3:68:59:79:c5:ef:46:8a:85:
dd:42:f4:91:89:91:a7:d2:2a:16:6f:4e:86:3f:cf:07:6d:6f:
c0:8b:c2:88:86:53:78:ec:e6:5c:cc:aa:af:27:56:14:c0:77:
cf:64:ab:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4VU/+agCcBi327rARZixMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZDQxMGVhNjg2N2VmNjNmOTU5YmFkNmIyMWI2OTFjYWRm
Zjg3ZDQwHhcNMjUxMTA0MDgwMDA0WhcNMjUxMTA1MDgwMDA0WjAzMTEwLwYDVQQD
Eyg5YmFkNjA1Y2YzNzhjN2E5NmUwZDA4MGNlOWQzNjgzNDFhNmY1ODAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMfYHVVi+Ga5Eat9tb4XtKhe3bYf
fB1fCb1irgxO6WYnx6pWScLk6m0kdUKyUT8Hsex/yReBf6yFKLx4T7pT4vKRMelC
p6ZDtniuKG2vUC57wCjN1Tr4QTVPsPjNuR5zu/8/yGP7L+p6rY8MIQdJApsQDPxw
dZ1vmlZ3nfnwBug90qRC9mN/kPBonXYC/9aPpaC5izyFA2e7xEcSx/WkHUm62EDB
WQFPRGVMnyQd3wzJ9aUXTrWY9163SusxkJ6iH1lyG5Rv6Po6eRhEBwIJRChOHbKt
6hDMAMz8TZgG/J6awZj1jJI6dvWReGtnVZ7sInI/TZUW+bWFcYioo1Z31QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJutYFzzeMepbg0IDOnTaDQab1gDMB8GA1UdIwQY
MBaAFM7UEOpoZ+9j+Vm61rIbaRyt/4fUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenRRUTZtaG43MlA1V2JyV3NodHBISzNfaDlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8xMmZjNDEtODlkZC00YTIxLWFhMzQt
NzY1MjU4NDFkYzI4LzEvenRRUTZtaG43MlA1V2JyV3NodHBISzNfaDlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8xMmZjNDEtODlkZC00YTIxLWFhMzQtNzY1MjU4NDFkYzI4
LzEvenRRUTZtaG43MlA1V2JyV3NodHBISzNfaDlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjiZ51d2Q
AeDk2HtQ4R15tac8ajZu9duwZfn2tDc2rb6XHTCkSzxJTudSd9SSbn4YvbNxqgTm
+uOxAC0U8DBKADpfN6gq2uOHPe96wm57oA01n85/epHYtwAsPlL2821uT9lhkT1Q
4fPHg/cobiSlYXTR/u9zqf1ckVAQpH+qMnLRQ5KzbXbTXu7o2UO1XpyVQ8MdJgon
OSvhea2k99tQgUh3aQLTK2VbMnWRG4KJf5SN/BaQFw038W8/VK030yuG6WchI6E4
9sBr1IUjUSgPs2hZecXvRoqF3UL0kYmRp9IqFm9Ohj/PB21vwIvCiIZTeOzmXMyq
rydWFMB3z2SrZw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:47 2025 by rpki-client