Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
File: ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft (raw, json)
Hash identifier: mVzxDJ3xoprRSoR7LR2fDgSXQHT622NkncmL7dKQO5s=
Subject key identifier: A4:BC:C1:26:49:EB:83:D4:19:FD:66:00:F5:85:B2:E8:A9:DD:7B:D5
Authority key identifier: CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61
Certificate issuer: /CN=ced755733e91203a17c3093ca5d9cb0392d94f61
Certificate serial: 019A4C983CB87FE654A7C3645B6DEA37BF8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 02:00:36 +0000
Manifest this update: Tue 04 Nov 2025 02:00:36 +0000
Manifest next update: Wed 05 Nov 2025 02:00:36 +0000
Files and hashes: 1: Ch5O5Blqh1qLTfKnLW_PxeqErmU.roa (hash: MQWABCmJmPzBZuvJm1UdXrqjK/z2moIohkG/Rp3fZtA=)
2: E3ZC-IKUFV8dsLuSPPYjoVWBSBk.roa (hash: /bl5hl4kqSXgSNneJaVMs/G9S7DHiQCDWl5lO8OIAgk=)
3: pwCEwqx7wOXdSyzzlUjrkyZY8go.roa (hash: 6xeXkvyhUMiZNvcsvLCq5I4Gh/+dgUUld1BGQwC1oWA=)
4: ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl (hash: oEB3eylU5TDDDXZ1i9e6ox7lFGWGj2bobl+rmIVc+8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:3c:b8:7f:e6:54:a7:c3:64:5b:6d:ea:37:bf:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced755733e91203a17c3093ca5d9cb0392d94f61
Validity
Not Before: Nov 4 02:00:36 2025 GMT
Not After : Nov 5 02:00:36 2025 GMT
Subject: CN=a4bcc12649eb83d419fd6600f585b2e8a9dd7bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f6:b4:73:a1:8c:08:c8:16:43:0c:66:be:fc:
d5:33:3a:78:f4:87:e1:e0:34:d5:68:9d:ff:f6:1e:
72:9d:75:7d:35:ee:d1:f6:c2:69:89:e7:06:23:88:
ed:9f:13:85:24:06:3c:19:d0:2d:4b:5d:a7:e5:f2:
90:19:b9:d4:af:56:37:38:a8:19:d1:26:e2:4d:de:
db:40:42:53:8a:e6:70:6e:78:2a:63:4d:8d:eb:b7:
46:62:fb:22:67:b7:eb:b9:ed:35:d1:4f:4c:fd:1b:
bb:1d:9e:55:ce:a0:e9:4b:26:4c:40:9c:39:37:fc:
b1:a6:83:81:95:45:b9:21:4f:02:9d:0b:e8:2f:95:
e2:c1:62:44:34:32:2a:a4:02:88:34:0d:9e:f2:20:
41:a6:80:0a:29:3b:40:3c:b6:92:92:7d:d3:12:fe:
cf:d1:28:31:d9:fa:1d:41:8e:4e:cd:d4:ca:a9:43:
e9:73:21:17:78:68:37:ae:79:f5:99:04:6e:5e:65:
9b:f9:37:3d:6f:19:e1:3d:64:89:9e:55:53:9b:d4:
9e:9f:50:65:a8:7f:26:4c:14:38:2b:61:d6:c0:5b:
cc:81:d7:ea:32:4c:d2:9b:12:1f:df:66:ec:70:5e:
d5:61:af:75:68:f2:00:2e:37:89:b2:e5:d1:60:d6:
82:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BC:C1:26:49:EB:83:D4:19:FD:66:00:F5:85:B2:E8:A9:DD:7B:D5
X509v3 Authority Key Identifier:
keyid:CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e7:12:33:1a:0e:9f:9c:59:6d:52:07:cc:00:76:03:29:4c:
00:50:16:44:0b:a9:5e:68:e6:4e:e1:ef:a0:72:67:80:03:6a:
62:0d:1a:9e:77:4b:0b:38:c5:2f:a4:c6:73:82:be:1f:5b:b0:
6f:29:9a:31:8e:c4:8b:75:64:8f:e9:88:2d:fd:5a:cf:9f:c6:
8d:ba:16:0d:87:4d:01:b0:f2:eb:33:b7:8e:2e:dd:19:d3:5b:
5f:d2:17:2a:e3:a4:68:8f:a0:a2:0f:39:e3:08:a7:42:31:9e:
c7:7c:8d:ac:ef:15:e8:23:69:76:db:ae:64:4e:30:0e:87:f9:
68:9e:81:20:2b:fc:df:98:c3:76:b6:88:9a:46:bf:db:40:2f:
b1:20:a5:77:3b:43:c7:b4:e6:4f:ca:ca:dd:88:b0:40:91:70:
92:16:d7:28:30:73:8f:d6:10:1c:89:8c:5a:cc:4d:a9:ff:62:
a5:48:06:db:ed:59:29:fe:89:10:92:3e:48:4e:73:b6:44:60:
5d:f7:88:24:c7:38:85:fd:b3:c4:26:3d:9b:82:ab:92:fe:f5:
a5:d3:a4:6a:5c:36:a5:c5:5c:7b:c6:be:ec:7b:68:4f:ff:c0:
85:de:05:1c:01:19:e4:5b:5c:0b:f8:32:c0:f9:f0:7a:c4:ec:
16:78:c7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:49 2025 by rpki-client