Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/8def12-897e-4e22-aa8b-834b9c10bf48/1/ZVFt3HMx4uJp3FfZx2MvJd59DG4.mft
File: ZVFt3HMx4uJp3FfZx2MvJd59DG4.mft (raw, json)
Hash identifier: 984wda3lbRsPQbolrnFdBtb325F4FTWncxbwjmBhgls=
Subject key identifier: 41:B7:92:DD:96:9D:15:3C:B0:44:8C:52:60:0B:57:98:01:05:42:F3
Authority key identifier: 65:51:6D:DC:73:31:E2:E2:69:DC:57:D9:C7:63:2F:25:DE:7D:0C:6E
Certificate issuer: /CN=65516ddc7331e2e269dc57d9c7632f25de7d0c6e
Certificate serial: 019A503E60F9EBD56DE07635857C0790AFB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVFt3HMx4uJp3FfZx2MvJd59DG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/8def12-897e-4e22-aa8b-834b9c10bf48/1/ZVFt3HMx4uJp3FfZx2MvJd59DG4.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 19:00:56 +0000
Manifest this update: Tue 04 Nov 2025 19:00:56 +0000
Manifest next update: Wed 05 Nov 2025 19:00:56 +0000
Files and hashes: 1: 4Ce0RkzJxFf2zmOfoaUJ_gBJn-E.roa (hash: D0dPfxOksgJWe+dXu2u19DHS26MVsqfPtPHxRFo3TcI=)
2: ZVFt3HMx4uJp3FfZx2MvJd59DG4.crl (hash: dqXygmJRkonh+KwEBri+dHJ1yLlhSgfN1LJENJP6dM4=)
3: ky6_9R6eveNvLuCWPAC-r7adSS0.roa (hash: U6nC3qpfku8imjHFuiezWbVoq5/CNzst9vKAejsjQls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/8def12-897e-4e22-aa8b-834b9c10bf48/1/ZVFt3HMx4uJp3FfZx2MvJd59DG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/8def12-897e-4e22-aa8b-834b9c10bf48/1/ZVFt3HMx4uJp3FfZx2MvJd59DG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZVFt3HMx4uJp3FfZx2MvJd59DG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:60:f9:eb:d5:6d:e0:76:35:85:7c:07:90:af:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65516ddc7331e2e269dc57d9c7632f25de7d0c6e
Validity
Not Before: Nov 4 19:00:56 2025 GMT
Not After : Nov 5 19:00:56 2025 GMT
Subject: CN=41b792dd969d153cb0448c52600b5798010542f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d5:09:bf:fe:6f:f4:d1:76:33:aa:73:3f:44:
c9:35:75:f1:9e:84:e6:8e:0c:10:bd:37:7b:ba:8c:
67:18:87:14:33:15:9f:f9:57:60:7a:5c:0d:6e:2a:
0c:0a:6c:23:5d:5f:39:5a:d8:58:3b:bf:99:6c:d7:
86:69:ab:eb:54:54:4e:8c:6b:44:45:f7:6f:ec:41:
c4:07:06:0f:8d:a3:a9:0e:1f:1d:17:d5:09:be:67:
b8:8f:d2:12:65:43:b1:61:87:0c:e7:9b:95:10:48:
87:1c:9e:54:6b:82:98:6a:5f:05:b7:79:44:90:2d:
6f:74:84:cb:8c:ea:af:2a:9b:64:0a:bc:88:39:06:
05:4f:47:05:81:dc:66:2f:24:8e:b1:d8:0b:d5:1d:
3e:cc:d3:60:19:7c:db:c5:cf:4c:85:d6:cb:2d:66:
22:99:32:c2:29:37:41:63:49:f4:26:98:49:bb:1b:
99:68:8c:95:41:5c:e5:e2:f9:7a:c3:90:25:bd:be:
fe:ed:6a:3d:9b:cd:6a:eb:22:9f:e2:bb:47:ec:db:
25:8d:76:8c:39:b5:27:9f:29:6e:0e:07:75:25:33:
e7:2d:38:70:fe:5b:07:03:00:9c:90:65:e5:f1:c8:
24:2e:71:9c:c5:b3:db:7a:85:16:fe:bc:ce:3a:e1:
21:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B7:92:DD:96:9D:15:3C:B0:44:8C:52:60:0B:57:98:01:05:42:F3
X509v3 Authority Key Identifier:
keyid:65:51:6D:DC:73:31:E2:E2:69:DC:57:D9:C7:63:2F:25:DE:7D:0C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVFt3HMx4uJp3FfZx2MvJd59DG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8def12-897e-4e22-aa8b-834b9c10bf48/1/ZVFt3HMx4uJp3FfZx2MvJd59DG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8def12-897e-4e22-aa8b-834b9c10bf48/1/ZVFt3HMx4uJp3FfZx2MvJd59DG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:8c:2c:09:15:08:c8:62:fd:bc:e7:11:c7:ea:17:5b:b2:4e:
3b:62:cb:72:02:b1:95:40:aa:df:85:d4:96:e5:94:76:fb:0b:
fe:50:92:0f:b6:ff:49:87:f6:1c:ca:02:0e:e7:1e:8b:4b:35:
b2:ca:0f:63:45:6c:8c:8e:89:f6:99:32:c5:bc:9a:80:a0:51:
1f:82:f4:96:1b:d4:a8:fb:41:a6:f8:20:1a:0e:9d:30:39:70:
fb:db:f6:0a:13:f5:26:42:26:f9:2c:15:a3:2a:41:5e:9e:2e:
c3:1e:49:e8:4d:3d:0e:c4:09:0b:41:3a:f7:03:0b:3e:5b:81:
ef:a8:4d:ee:35:e7:42:1b:39:9d:3c:77:5b:2a:52:64:25:9e:
25:c4:21:0f:1f:a9:b7:a1:11:06:21:ab:3a:25:5b:bf:fb:e2:
b2:8d:26:b1:06:ce:38:a9:12:25:ef:f1:dc:31:f8:56:de:44:
58:9d:c7:77:fc:af:9f:dd:97:f7:5d:dd:b2:a4:39:f2:93:e5:
82:46:0e:af:f7:fc:1c:1b:39:19:5c:0a:3d:95:1b:93:8b:43:
10:5c:e2:d5:1d:c3:27:ad:f3:69:82:a0:dc:32:0e:ad:1a:40:
3a:e3:25:93:2b:d0:d7:aa:52:2d:66:d7:ce:1b:a4:c7:3f:0c:
e3:7b:5d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:41:50 2025 by rpki-client