Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
File: ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft (raw, json)
Hash identifier: k/QQBni7KC6Dj65HcWs56WzxPKSxvYs79h9IrsYjZ74=
Subject key identifier: 56:F2:D4:CD:FD:6F:FC:E8:1C:7B:E6:E9:C4:7D:9E:66:CF:05:A7:85
Authority key identifier: 65:36:B9:B3:D4:71:F9:3F:8E:A9:FE:D0:C4:51:4C:2C:37:4D:23:F6
Certificate issuer: /CN=6536b9b3d471f93f8ea9fed0c4514c2c374d23f6
Certificate serial: 0199221E77B2703D8115146BEBBB4D412BB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
Manifest number: 064F
Signing time: Sun 07 Sep 2025 03:00:45 +0000
Manifest this update: Sun 07 Sep 2025 03:00:45 +0000
Manifest next update: Mon 08 Sep 2025 03:00:45 +0000
Files and hashes: 1: ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.crl (hash: ifGJiuaq6xfvsqvazZH8x6pz4WeC32+aYw6hN7s8QFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:77:b2:70:3d:81:15:14:6b:eb:bb:4d:41:2b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6536b9b3d471f93f8ea9fed0c4514c2c374d23f6
Validity
Not Before: Sep 7 03:00:45 2025 GMT
Not After : Sep 8 03:00:45 2025 GMT
Subject: CN=56f2d4cdfd6ffce81c7be6e9c47d9e66cf05a785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:53:a7:13:84:d0:31:ce:98:db:62:20:1a:8a:
1f:d4:c9:ce:e5:ba:c7:fe:5f:c3:6a:54:61:de:42:
fc:ad:2e:60:f1:9d:12:9e:fd:17:43:22:c6:59:5e:
aa:33:e5:80:3f:3b:cb:42:d8:19:54:10:b7:69:a8:
5f:3f:3e:43:5e:04:99:23:cd:5a:f6:32:b6:92:c9:
06:22:0e:9f:4e:56:c3:70:99:8d:10:05:df:58:45:
7b:78:48:e3:ae:81:fe:55:bc:1a:05:8a:81:1d:7e:
b2:80:af:70:a5:68:da:8e:36:c7:38:83:fc:a5:5b:
8d:ae:24:bd:5d:02:58:49:dd:0f:24:7a:15:7d:5c:
83:9e:f3:9a:e5:40:d8:e1:6d:af:e0:71:4a:f3:da:
dc:4d:75:1d:1c:d1:c0:92:59:4d:2e:37:8a:df:ca:
4f:e0:d6:0d:8c:8c:6f:61:b5:8c:52:69:44:b6:cf:
cc:32:36:3b:e1:e8:1e:45:a7:96:04:18:2c:d4:ec:
0a:0a:5b:b2:bf:8e:f2:7f:8c:4d:47:4f:66:12:fb:
c4:7f:72:10:9c:37:86:42:b9:48:ff:8e:07:65:01:
56:49:4c:5a:16:f9:d0:6e:3a:80:4d:7c:8d:c4:0e:
8e:1e:96:a4:f6:14:be:4f:70:2b:5c:d4:44:07:27:
5f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F2:D4:CD:FD:6F:FC:E8:1C:7B:E6:E9:C4:7D:9E:66:CF:05:A7:85
X509v3 Authority Key Identifier:
keyid:65:36:B9:B3:D4:71:F9:3F:8E:A9:FE:D0:C4:51:4C:2C:37:4D:23:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c7:41:61:23:f8:d4:3b:83:6f:49:2b:92:b4:d6:95:2d:25:
e0:b0:9a:97:96:93:49:05:be:07:b9:15:c5:63:4c:d6:52:88:
26:ac:d6:10:15:3b:43:df:b2:fd:73:89:3d:aa:85:a7:cc:78:
fa:94:4b:4e:f6:97:c0:f9:d3:9f:b6:0c:fa:a8:05:bb:db:6f:
57:15:6e:61:7c:0f:78:ca:86:55:ce:c5:cb:64:31:1e:d3:9f:
bc:f1:80:67:57:41:ac:43:56:ad:14:97:3f:ca:f5:8d:38:e3:
68:d6:11:a4:19:b6:ee:a3:a5:3f:cf:be:e6:50:77:fb:f2:dc:
d6:71:6f:52:35:ff:78:c8:b1:36:fd:90:36:46:6c:aa:a0:28:
e7:58:15:81:af:7b:60:f8:e8:26:6f:56:be:39:92:75:49:16:
d3:1a:0c:be:cd:a5:70:b3:9d:d1:31:12:e5:cf:64:58:21:64:
0f:e1:e4:29:1d:7f:fc:1c:c8:56:b5:31:53:6f:be:16:26:0e:
69:9a:db:08:b8:c9:c8:22:3d:20:99:c3:ac:2d:82:6b:82:3f:
5f:ee:4b:d7:1d:54:a6:3f:23:23:3c:b5:c1:0d:cc:5e:66:6b:
b5:df:57:b4:22:08:ce:9f:b8:3f:97:60:89:2f:b1:eb:f9:be:
2e:a7:0f:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHneycD2BFRRr67tNQSu5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MzZiOWIzZDQ3MWY5M2Y4ZWE5ZmVkMGM0NTE0YzJjMzc0
ZDIzZjYwHhcNMjUwOTA3MDMwMDQ1WhcNMjUwOTA4MDMwMDQ1WjAzMTEwLwYDVQQD
Eyg1NmYyZDRjZGZkNmZmY2U4MWM3YmU2ZTljNDdkOWU2NmNmMDVhNzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1OnE4TQMc6Y22IgGoof1MnO5brH
/l/DalRh3kL8rS5g8Z0Snv0XQyLGWV6qM+WAPzvLQtgZVBC3aahfPz5DXgSZI81a
9jK2kskGIg6fTlbDcJmNEAXfWEV7eEjjroH+VbwaBYqBHX6ygK9wpWjajjbHOIP8
pVuNriS9XQJYSd0PJHoVfVyDnvOa5UDY4W2v4HFK89rcTXUdHNHAkllNLjeK38pP
4NYNjIxvYbWMUmlEts/MMjY74egeRaeWBBgs1OwKCluyv47yf4xNR09mEvvEf3IQ
nDeGQrlI/44HZQFWSUxaFvnQbjqATXyNxA6OHpak9hS+T3ArXNREBydfywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFby1M39b/zoHHvm6cR9nmbPBaeFMB8GA1UdIwQY
MBaAFGU2ubPUcfk/jqn+0MRRTCw3TSP2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlRhNXM5UngtVC1PcWY3UXhGRk1MRGROSV9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lNzhhNzYtN2M0MC00MDg0LWExM2It
MTU5OTJiMmM1NGNhLzEvWlRhNXM5UngtVC1PcWY3UXhGRk1MRGROSV9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9lNzhhNzYtN2M0MC00MDg0LWExM2ItMTU5OTJiMmM1NGNh
LzEvWlRhNXM5UngtVC1PcWY3UXhGRk1MRGROSV9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYcdBYSP4
1DuDb0krkrTWlS0l4LCal5aTSQW+B7kVxWNM1lKIJqzWEBU7Q9+y/XOJPaqFp8x4
+pRLTvaXwPnTn7YM+qgFu9tvVxVuYXwPeMqGVc7Fy2QxHtOfvPGAZ1dBrENWrRSX
P8r1jTjjaNYRpBm27qOlP8++5lB3+/Lc1nFvUjX/eMixNv2QNkZsqqAo51gVga97
YPjoJm9WvjmSdUkW0xoMvs2lcLOd0TES5c9kWCFkD+HkKR1//BzIVrUxU2++FiYO
aZrbCLjJyCI9IJnDrC2Ca4I/X+5L1x1Upj8jIzy1wQ3MXmZrtd9XtCIIzp+4P5dg
iS+x6/m+LqcPoA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:11 2025 by rpki-client