Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft
File: zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft (raw, json)
Hash identifier: ZnJ222gzhwecWSMID57erDSx3N88TBuJ/xhvV4qWKkw=
Subject key identifier: C9:36:BE:EC:1F:66:83:5C:48:C1:07:D8:79:75:06:3D:D5:D7:5E:10
Authority key identifier: CD:35:F6:FF:56:7B:DE:93:39:4F:FF:28:2F:AD:41:7D:A0:B5:36:14
Certificate issuer: /CN=cd35f6ff567bde93394fff282fad417da0b53614
Certificate serial: 019848C021BBE72231BCF0DC5E231D16A6A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTX2_1Z73pM5T_8oL61BfaC1NhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft
Manifest number: 0CD8
Signing time: Sat 26 Jul 2025 22:00:07 +0000
Manifest this update: Sat 26 Jul 2025 22:00:07 +0000
Manifest next update: Sun 27 Jul 2025 22:00:07 +0000
Files and hashes: 1: zTX2_1Z73pM5T_8oL61BfaC1NhQ.crl (hash: STryWR4Aqd8bSpKGTRIHZnV0/g0egUeEkAWrw/hZVyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTX2_1Z73pM5T_8oL61BfaC1NhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 22:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:21:bb:e7:22:31:bc:f0:dc:5e:23:1d:16:a6:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd35f6ff567bde93394fff282fad417da0b53614
Validity
Not Before: Jul 26 22:00:07 2025 GMT
Not After : Jul 27 22:00:07 2025 GMT
Subject: CN=c936beec1f66835c48c107d87975063dd5d75e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e3:8e:a4:0d:b8:46:ce:47:b5:1e:ae:8b:c8:
28:04:39:2c:0f:ec:7d:59:53:ff:e8:8c:4c:79:d3:
93:81:65:5f:9d:70:ea:bc:8e:0d:ac:ac:76:8d:5c:
05:3a:61:46:84:d3:05:13:50:59:cb:dc:50:a3:46:
9e:2b:6d:19:a0:a1:ee:f7:02:c2:7f:6b:a8:2c:77:
3c:49:89:71:10:53:7c:fb:88:23:1e:ea:4d:f0:c1:
55:17:69:8e:65:a3:95:cf:2b:0e:fa:22:c7:56:52:
d5:be:fd:c0:c7:ca:db:68:f2:b0:b5:0b:db:ca:ff:
c4:d9:59:41:70:a0:ad:68:8f:9f:9a:1b:60:81:d7:
e4:a7:ac:ec:94:4f:86:f9:3c:57:61:9b:10:50:dd:
70:1a:ef:a7:47:63:ae:cd:04:a1:36:b7:a6:08:d2:
eb:ba:38:a5:fe:03:f9:1b:97:23:50:68:8c:2a:a8:
a1:09:1a:6f:11:54:79:47:81:8a:8a:75:fc:f0:31:
5a:69:70:f5:4a:ac:23:b9:53:17:d2:d2:50:29:0a:
0d:a4:c4:9f:d4:5c:5d:b9:dc:56:a5:e6:0f:61:52:
30:f7:de:52:e4:25:36:d7:e2:43:bf:5b:21:b3:76:
4a:47:92:15:cb:c9:82:bd:d1:f4:a7:1e:01:47:f0:
cf:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:36:BE:EC:1F:66:83:5C:48:C1:07:D8:79:75:06:3D:D5:D7:5E:10
X509v3 Authority Key Identifier:
keyid:CD:35:F6:FF:56:7B:DE:93:39:4F:FF:28:2F:AD:41:7D:A0:B5:36:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTX2_1Z73pM5T_8oL61BfaC1NhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:f8:bc:d3:5d:47:b4:21:2f:a7:2a:76:f0:01:78:56:e1:64:
25:1a:76:84:56:ee:ed:1b:41:f4:44:dc:47:46:17:62:5b:d7:
7c:4a:25:ec:0f:2f:29:f3:0a:3c:32:f2:77:8c:28:9a:92:89:
a0:ca:48:b9:6a:9a:b2:00:ed:56:67:e7:c8:92:48:2a:b7:b4:
1e:8e:28:27:a5:62:9f:a9:76:e1:8c:da:f5:c5:ef:2f:7a:60:
81:50:a2:31:0e:c6:b6:38:3b:a1:18:5d:60:01:9c:06:db:85:
75:9e:85:15:c4:d7:84:c0:73:d2:73:e8:6e:b3:0b:18:79:be:
51:81:e1:e0:96:42:86:1f:1d:20:51:c7:2f:c0:09:9b:19:3a:
bc:56:ab:17:d1:60:ba:45:33:29:e4:20:dd:69:2e:62:6e:57:
bd:60:de:63:e9:3d:2e:47:d4:21:73:2e:1b:d4:97:6c:59:a4:
59:ea:c9:91:7c:c7:92:00:98:c5:fb:69:1a:9c:94:54:45:a0:
ff:f2:fd:b1:c9:17:53:bc:3f:71:f0:2e:2f:a4:2f:fb:b7:ed:
2e:1f:a9:77:48:59:78:ff:8d:ab:c2:4e:56:83:48:ec:1b:12:
05:98:e7:c8:1e:fa:3c:ad:80:85:6a:ca:b8:56:f5:68:9c:64:
91:79:49:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:15:27 2025 by rpki-client