Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
File: ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft (raw, json)
Hash identifier: a3iSwo2yN59c8XP8+NrOAidxwJWS2iK1K1ePGvh51Vw=
Subject key identifier: D9:D5:1E:97:40:50:B5:CA:41:9B:77:DF:00:5D:D0:26:EF:10:92:06
Authority key identifier: 65:36:B9:B3:D4:71:F9:3F:8E:A9:FE:D0:C4:51:4C:2C:37:4D:23:F6
Certificate issuer: /CN=6536b9b3d471f93f8ea9fed0c4514c2c374d23f6
Certificate serial: 019A7225E2D57FE49529310824725705C76B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
Manifest number: 06FD
Signing time: Tue 11 Nov 2025 09:01:16 +0000
Manifest this update: Tue 11 Nov 2025 09:01:16 +0000
Manifest next update: Wed 12 Nov 2025 09:01:16 +0000
Files and hashes: 1: ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.crl (hash: AyyY/HW5xENxVFOJeaAD3nlbnuv5tOQKfNCfHbgBjm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:e2:d5:7f:e4:95:29:31:08:24:72:57:05:c7:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6536b9b3d471f93f8ea9fed0c4514c2c374d23f6
Validity
Not Before: Nov 11 09:01:16 2025 GMT
Not After : Nov 12 09:01:16 2025 GMT
Subject: CN=d9d51e974050b5ca419b77df005dd026ef109206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:64:4e:35:58:9f:5d:80:c3:27:27:6f:84:29:
05:4a:c5:70:0a:7c:d6:54:02:c8:9a:5d:b1:d3:12:
00:07:a6:19:09:0b:3c:29:ab:14:fc:72:6d:20:ad:
d4:5a:f4:dc:85:12:8d:55:d8:75:de:90:9c:f6:31:
61:69:c7:c4:b9:b8:65:f2:0a:8e:c7:9a:c1:e3:30:
97:86:37:ad:f3:6c:f3:3a:75:6c:21:8c:f1:cb:ea:
78:e5:54:15:90:c6:4a:f1:2f:97:9d:34:ee:95:97:
3f:1c:8b:24:02:ab:71:39:48:d6:ac:b4:f7:f0:47:
c2:42:45:5f:06:b3:92:86:f3:85:92:90:d2:e4:4f:
7c:0b:16:66:06:ea:0f:0a:7a:2e:92:e7:1a:ca:53:
df:1a:e0:fd:d4:62:61:c3:4b:62:65:29:9e:f6:44:
12:e7:c4:80:81:5f:18:df:0f:24:50:23:e2:90:2a:
fa:b9:5a:c1:54:3b:34:e7:0b:8b:4b:ba:89:23:68:
10:2f:13:57:76:8d:db:ba:ce:dc:ef:b0:6a:ed:9e:
70:dd:21:df:b1:3a:57:c1:39:10:be:e3:45:14:d2:
4f:9d:82:df:51:8e:67:5c:22:b0:d9:32:9a:bb:ca:
7b:c8:ac:07:60:44:99:a4:57:4d:72:e4:dc:ee:25:
9a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D5:1E:97:40:50:B5:CA:41:9B:77:DF:00:5D:D0:26:EF:10:92:06
X509v3 Authority Key Identifier:
keyid:65:36:B9:B3:D4:71:F9:3F:8E:A9:FE:D0:C4:51:4C:2C:37:4D:23:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:cb:ae:e6:75:e1:03:8e:3a:c8:75:1e:19:c5:1e:89:26:c7:
d1:68:54:79:e6:79:94:e0:06:b9:05:3e:85:0c:50:c5:f8:5e:
8f:85:07:ef:50:7f:df:ed:c3:4d:9d:80:e7:2f:a4:5b:57:08:
01:6a:1a:ea:8a:12:c7:14:a2:8d:57:e0:d4:e3:d4:31:c9:79:
7e:e8:a3:b9:f7:b2:d5:57:31:bf:81:85:4d:cc:8b:7d:c4:52:
ce:e1:98:b0:7f:68:76:21:04:14:0f:2b:e8:e1:ca:fb:a2:68:
8f:87:19:5c:92:eb:e5:fe:dc:b2:15:37:f6:ff:35:a6:ce:2d:
d2:b1:cc:ab:11:04:b1:13:61:d9:d6:bb:9e:b9:70:a4:27:2c:
53:d9:30:d2:8b:30:6b:1d:45:a2:18:a7:84:6a:79:64:3d:ee:
d4:5f:19:a3:65:43:08:f7:10:ae:6f:ec:00:9d:de:72:28:68:
d5:f1:dd:25:c0:d3:17:4a:bb:bf:e3:f0:5a:d8:2a:27:32:9f:
3d:82:75:8c:7c:3b:44:b5:73:0c:38:75:e4:ae:ca:f8:42:35:
9b:48:4a:7e:6c:86:8d:a2:79:55:6a:3e:88:95:2e:3d:5b:88:
57:21:f5:4f:9e:8d:86:32:5b:54:fb:bc:b7:f3:6c:c0:8b:d8:
a8:99:4a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:18:34 2025 by rpki-client