Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.mft
File: ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.mft (raw, json)
Hash identifier: pU6iwOOxhIeq/EPSmuRn1a7q76tWGM/b8N00wrdzVB4=
Subject key identifier: B4:6F:8A:99:07:4A:E7:0F:2F:09:9B:55:7B:55:55:16:0D:D6:00:AC
Authority key identifier: 66:D1:23:3F:11:2A:4A:34:35:57:5A:3A:21:9D:CC:C0:21:06:8D:99
Certificate issuer: /CN=66d1233f112a4a3435575a3a219dccc021068d99
Certificate serial: 019A53759A9FC0A3FBC1FB36A22D956011AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.mft
Manifest number: 4A
Signing time: Wed 05 Nov 2025 10:00:07 +0000
Manifest this update: Wed 05 Nov 2025 10:00:07 +0000
Manifest next update: Thu 06 Nov 2025 10:00:07 +0000
Files and hashes: 1: 7BZgrIdyubMi7Kxr3pcbEsxsTVs.roa (hash: 07a2Z1bP4ZM4lvBNnIbYpGRZq/i+QW1+w8DIMuAxBRM=)
2: ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.crl (hash: eT4e/a8AvlUDr0AxBHuBZqMGHq33UAfxAnywg4nkRuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:9a:9f:c0:a3:fb:c1:fb:36:a2:2d:95:60:11:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d1233f112a4a3435575a3a219dccc021068d99
Validity
Not Before: Nov 5 10:00:07 2025 GMT
Not After : Nov 6 10:00:07 2025 GMT
Subject: CN=b46f8a99074ae70f2f099b557b5555160dd600ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fd:f7:d2:2b:12:fa:2e:27:5d:ab:4a:2e:31:
c9:3a:22:18:ad:c0:da:87:fa:2a:b7:49:f5:1b:33:
e3:64:bd:f8:bb:a4:1a:3b:08:a7:da:9f:6c:2a:95:
c6:92:1c:96:7d:69:cf:92:6b:00:06:cc:2b:3e:9a:
e7:03:76:77:d6:ea:0f:f8:02:b0:84:c1:55:6b:a5:
ea:10:7f:ae:97:37:2b:4a:7f:71:40:b5:48:9e:4a:
d7:16:55:03:1d:bf:64:c5:40:ae:9f:7b:e7:a9:74:
d4:ae:5f:ab:8d:e6:04:1d:c2:30:a1:60:b9:79:0e:
f7:6a:a9:87:87:94:f9:8b:e0:b2:81:f2:14:73:e2:
21:b5:f2:02:13:37:e4:62:43:fc:c2:fd:d1:64:2a:
17:4b:84:60:38:24:54:c9:e4:84:fd:d4:39:ff:89:
82:72:55:96:04:0d:94:a1:ef:46:40:00:0e:44:64:
6f:07:bf:dc:20:f5:f1:d8:4f:4b:db:ec:f9:43:46:
11:d1:9c:e2:01:57:09:e7:a0:bf:85:a7:7b:57:21:
05:c0:e4:f8:96:b1:a8:06:5f:bf:dc:8f:e5:e6:1f:
6a:f7:be:9e:68:7e:f2:a2:dd:11:d8:1b:24:8a:6d:
7c:7e:39:c8:b0:e9:d5:2d:af:b6:92:1d:a2:8a:00:
97:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:6F:8A:99:07:4A:E7:0F:2F:09:9B:55:7B:55:55:16:0D:D6:00:AC
X509v3 Authority Key Identifier:
keyid:66:D1:23:3F:11:2A:4A:34:35:57:5A:3A:21:9D:CC:C0:21:06:8D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:42:b1:e6:30:4c:f7:a1:2b:a2:a8:6d:05:85:32:96:07:bc:
79:39:15:ea:22:31:91:ab:90:85:25:c1:3a:d3:81:fb:45:57:
69:9d:d3:26:a3:1b:1c:03:49:d5:25:8c:6c:a2:a7:e6:5b:ea:
fd:38:f6:ac:b1:f8:e6:fb:cd:d8:fe:9a:8d:a2:fe:b6:16:22:
82:78:09:6d:db:cf:18:b3:6c:2c:e4:77:57:4b:6f:cd:cd:d2:
7c:50:09:a0:82:9b:f7:84:4f:4d:c9:37:60:ed:0f:c7:cc:da:
51:bc:b2:79:9b:bd:fa:4d:ee:08:fd:af:ab:43:47:ff:67:18:
47:52:5e:72:1a:83:60:5b:41:8e:3d:78:49:da:7c:08:8f:b0:
45:5f:78:4f:f7:45:a2:db:ce:36:2a:42:70:22:c9:74:44:d6:
5e:dd:89:51:e2:0c:d0:e7:6e:a9:47:81:62:a4:d2:c4:1d:bb:
1e:63:9f:ae:a3:60:bc:2b:04:15:c6:2b:8d:0e:a8:dd:61:33:
2f:05:b7:af:7c:0f:e6:0b:ff:cb:7f:32:46:fe:35:9b:92:69:
b4:32:42:69:c3:ef:b3:61:8b:1e:7c:0c:83:db:cf:58:eb:88:
6a:b7:87:f8:78:3f:e9:28:22:0d:0b:f5:a8:3b:fb:e6:56:fa:
03:d6:c3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:21:33 2025 by rpki-client