Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
File: ztLYANxsM7afpHKR4vFbM16jYA8.mft (raw, json)
Hash identifier: vDeuF73Ftyalyy03P74RPSzy3yyo7la5V2Mrk/bksxg=
Subject key identifier: 0A:72:2B:F1:74:AB:72:E3:0C:59:D2:36:87:67:61:AE:5E:6E:77:12
Authority key identifier: CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F
Certificate issuer: /CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f
Certificate serial: 019A4DE16D32B0D1E376D2660E2CC2D031C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 08:00:10 +0000
Manifest this update: Tue 04 Nov 2025 08:00:10 +0000
Manifest next update: Wed 05 Nov 2025 08:00:10 +0000
Files and hashes: 1: RhGwqrXWoHdf_u5Xw8TxbPt7XXk.roa (hash: hQavpFz2oCU1+0mLco5J0o7jUBnjsvfgN8INGoEF0q0=)
2: a79ubTTcO-rbEIzEJnpKg6XrOxE.roa (hash: IYsHiJt20/J4LFVzebr5lpEx8b1KgX8azoIHYgZmQIM=)
3: cwftnOMJWL6OI0cFl6W2kZiEivw.roa (hash: tMF0bm//N5hKVf/varVEdqE9/zqDLvcE/naNsmtxwqE=)
4: sa-iiEQk_i_ESYW0XEVLc5fUEDM.roa (hash: tk2qiKz5w3ItJrfdyPO9YfeczBBuvWHAVgHNYJne0ws=)
5: ztLYANxsM7afpHKR4vFbM16jYA8.crl (hash: cprt0Bu7fbvpRfuVZDUDJk0Ibr3I9VRkSXIXET4J9dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:6d:32:b0:d1:e3:76:d2:66:0e:2c:c2:d0:31:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f
Validity
Not Before: Nov 4 08:00:10 2025 GMT
Not After : Nov 5 08:00:10 2025 GMT
Subject: CN=0a722bf174ab72e30c59d236876761ae5e6e7712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:52:8d:d4:05:1e:42:38:97:19:cc:7a:68:ae:
2c:b0:4c:53:64:1d:fb:75:cc:77:25:e3:c7:16:cc:
d2:5b:6b:54:69:9b:55:75:46:5c:9e:98:0d:ee:98:
d9:76:62:1b:3c:1f:3b:00:0c:38:33:b6:bf:45:c3:
69:60:3b:18:c6:6e:3b:94:cc:fc:d6:12:80:98:cf:
28:fb:0d:f6:82:72:60:8c:70:f4:a4:65:43:75:2e:
6f:16:2b:4c:da:7f:47:a4:c3:b3:02:25:a2:ae:de:
ba:11:ec:fc:bf:84:4e:3c:6b:15:a4:90:82:a4:e5:
83:a1:c9:a4:50:26:76:aa:a4:d9:94:a5:d3:36:ce:
74:45:0f:bb:ff:98:cb:ee:32:03:af:39:0c:0a:1d:
49:e8:26:0d:bd:00:43:fa:59:85:7e:b1:6d:b4:f4:
ae:4d:b3:e3:0c:2c:f0:85:57:c8:11:d1:e8:5d:f7:
af:66:37:33:bd:25:6e:14:b3:1d:ac:f7:f0:ac:fb:
05:5f:e1:6e:c2:d3:ba:36:f4:50:25:af:34:ea:8f:
47:8f:ec:e5:ad:d3:22:99:31:34:25:1d:34:06:e1:
51:6e:05:f5:39:7d:92:4f:15:54:99:96:b7:50:24:
d1:0b:da:7f:4a:fa:af:91:ae:5e:53:f5:14:29:10:
2b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:72:2B:F1:74:AB:72:E3:0C:59:D2:36:87:67:61:AE:5E:6E:77:12
X509v3 Authority Key Identifier:
keyid:CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:6d:93:f5:78:ac:b8:1b:54:ee:3f:f6:f9:84:37:4d:a4:be:
2b:d6:3f:bf:76:82:69:f4:f7:71:c5:f3:fb:af:11:a0:53:25:
ba:18:71:5f:62:53:a0:4f:7e:63:d2:64:c3:84:ef:ce:e8:6b:
c6:6e:9b:95:55:b6:62:47:51:a1:b2:26:55:c2:2a:af:a6:39:
5e:af:16:f1:3e:aa:37:aa:be:d8:58:ad:65:36:2b:a8:0c:1f:
c4:f5:11:94:4b:83:b5:b8:76:1f:ce:69:48:2a:c0:a4:74:46:
6e:b4:3f:6b:bf:b6:18:4b:9b:16:8c:a2:e4:70:5d:ba:ad:61:
a5:a4:d2:0d:6f:84:19:6d:82:e0:4c:6b:77:52:d9:ab:f8:c3:
ce:30:d9:0d:e1:a8:67:79:f4:68:a2:dc:44:2e:1d:67:bc:56:
80:82:8c:0f:f4:be:e6:1f:be:37:5b:a2:ff:fa:23:a9:9b:46:
0b:09:1c:bd:4b:d1:56:10:ea:f8:da:13:fb:ea:a1:bd:29:61:
3b:d4:0f:60:b7:66:08:5d:a7:1a:37:e7:55:2e:e5:a3:b9:e5:
a3:e0:5e:af:3f:92:d9:d0:d3:2e:a6:82:8b:b3:5f:6a:88:ab:
79:3e:1a:b8:ea:0e:2d:c8:b4:65:3f:e1:91:1f:01:06:57:11:
98:d2:ed:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4W0ysNHjdtJmDizC0DHHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZDJkODAwZGM2YzMzYjY5ZmE0NzI5MWUyZjE1YjMzNWVh
MzYwMGYwHhcNMjUxMTA0MDgwMDEwWhcNMjUxMTA1MDgwMDEwWjAzMTEwLwYDVQQD
EygwYTcyMmJmMTc0YWI3MmUzMGM1OWQyMzY4NzY3NjFhZTVlNmU3NzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFKN1AUeQjiXGcx6aK4ssExTZB37
dcx3JePHFszSW2tUaZtVdUZcnpgN7pjZdmIbPB87AAw4M7a/RcNpYDsYxm47lMz8
1hKAmM8o+w32gnJgjHD0pGVDdS5vFitM2n9HpMOzAiWirt66Eez8v4ROPGsVpJCC
pOWDocmkUCZ2qqTZlKXTNs50RQ+7/5jL7jIDrzkMCh1J6CYNvQBD+lmFfrFttPSu
TbPjDCzwhVfIEdHoXfevZjczvSVuFLMdrPfwrPsFX+FuwtO6NvRQJa806o9Hj+zl
rdMimTE0JR00BuFRbgX1OX2STxVUmZa3UCTRC9p/Svqvka5eU/UUKRArnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApyK/F0q3LjDFnSNodnYa5ebncSMB8GA1UdIwQY
MBaAFM7S2ADcbDO2n6RykeLxWzNeo2APMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenRMWUFOeHNNN2FmcEhLUjR2RmJNMTZqWUE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mODg4NTctY2MwNS00YmRiLTkxZTYt
ZWQ0ZjA2NDNiZjI1LzEvenRMWUFOeHNNN2FmcEhLUjR2RmJNMTZqWUE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9mODg4NTctY2MwNS00YmRiLTkxZTYtZWQ0ZjA2NDNiZjI1
LzEvenRMWUFOeHNNN2FmcEhLUjR2RmJNMTZqWUE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC22T9Xis
uBtU7j/2+YQ3TaS+K9Y/v3aCafT3ccXz+68RoFMluhhxX2JToE9+Y9Jkw4Tvzuhr
xm6blVW2YkdRobImVcIqr6Y5Xq8W8T6qN6q+2FitZTYrqAwfxPURlEuDtbh2H85p
SCrApHRGbrQ/a7+2GEubFoyi5HBduq1hpaTSDW+EGW2C4Exrd1LZq/jDzjDZDeGo
Z3n0aKLcRC4dZ7xWgIKMD/S+5h++N1ui//ojqZtGCwkcvUvRVhDq+NoT++qhvSlh
O9QPYLdmCF2nGjfnVS7lo7nlo+Berz+S2dDTLqaCi7NfaoireT4auOoOLci0ZT/h
kR8BBlcRmNLt4Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:50 2025 by rpki-client