Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
File: ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft (raw, json)
Hash identifier: 5mIwOAhRAi+vl0DxCwMQJ5TM0H4QzvvNQMGtiF8FdLM=
Subject key identifier: 87:72:09:A5:0B:F4:9C:C5:05:06:97:DB:3C:F3:67:8B:BD:87:D6:FD
Authority key identifier: 65:36:B9:B3:D4:71:F9:3F:8E:A9:FE:D0:C4:51:4C:2C:37:4D:23:F6
Certificate issuer: /CN=6536b9b3d471f93f8ea9fed0c4514c2c374d23f6
Certificate serial: 019752A25942A09DCA5DA9C699918E3B5BA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
Manifest number: 055F
Signing time: Mon 09 Jun 2025 03:01:00 +0000
Manifest this update: Mon 09 Jun 2025 03:01:00 +0000
Manifest next update: Tue 10 Jun 2025 03:01:00 +0000
Files and hashes: 1: ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.crl (hash: LXuUf3VR7GFdGntSL12OUH2WvlfayAedOf9qnfm/e0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a2:59:42:a0:9d:ca:5d:a9:c6:99:91:8e:3b:5b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6536b9b3d471f93f8ea9fed0c4514c2c374d23f6
Validity
Not Before: Jun 9 03:01:00 2025 GMT
Not After : Jun 10 03:01:00 2025 GMT
Subject: CN=877209a50bf49cc5050697db3cf3678bbd87d6fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fd:1c:18:e7:7a:1f:24:67:4d:4e:9d:fd:3a:
78:5e:62:df:7e:c6:ad:0c:23:3b:3c:e6:90:66:9c:
a2:61:26:56:5a:ff:0d:e3:8d:9a:96:8d:f2:e5:bd:
26:c5:8c:11:3a:9b:de:ef:4e:e1:2e:c9:c3:09:ca:
c6:45:49:ac:19:a3:b1:cc:d7:e2:94:60:7b:0d:7f:
c6:37:36:3e:d2:e7:0a:a1:27:a9:85:d1:65:52:c0:
8d:08:b0:98:52:5b:03:bb:62:a5:c9:e7:b3:cf:dc:
08:c4:1e:b0:64:f1:e0:ab:2c:db:d0:f0:61:8f:bc:
c7:da:86:3f:69:c3:38:a9:80:0a:8b:1e:ce:63:00:
eb:2d:25:cb:49:a1:99:ab:12:fc:eb:7d:18:e4:60:
b7:18:77:39:2d:a3:4a:72:31:f8:18:f7:fe:fa:cb:
d5:08:09:e5:a8:3a:4a:3d:50:dd:97:1d:44:3f:67:
ce:b6:7d:95:0d:88:8c:ea:9d:a2:69:39:e6:8e:2e:
e0:b6:63:11:73:52:c7:19:63:8e:46:c5:f5:c6:9d:
c5:c7:b9:86:6f:96:64:25:77:12:5c:b6:e5:f7:0f:
a0:28:6c:8a:8f:06:f8:de:7f:fb:ac:f5:6d:23:da:
28:0d:63:0d:e4:42:d5:f3:ae:60:22:c4:a2:01:64:
21:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:72:09:A5:0B:F4:9C:C5:05:06:97:DB:3C:F3:67:8B:BD:87:D6:FD
X509v3 Authority Key Identifier:
keyid:65:36:B9:B3:D4:71:F9:3F:8E:A9:FE:D0:C4:51:4C:2C:37:4D:23:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ec:e9:7f:95:57:0f:70:2c:cb:98:8a:61:d2:18:40:d1:bc:
4d:b9:02:62:0d:c4:bc:3e:c0:f8:53:2c:40:d6:38:c9:78:f5:
57:09:6c:39:58:14:18:e3:7a:ef:5b:a0:06:72:8c:84:96:c3:
8e:04:f8:8b:68:c8:32:30:72:d6:38:80:36:7a:20:db:e7:55:
ac:66:10:4e:3e:f6:e1:ce:6a:41:22:e2:80:9a:43:de:d9:76:
8c:ca:63:41:45:b4:ef:71:c9:15:42:e1:8e:3a:50:37:78:63:
53:87:ec:8d:20:c0:e8:f8:24:af:2b:99:c9:1d:db:c1:eb:13:
96:6e:1f:ec:8e:83:fa:cd:7b:9e:01:2c:c3:94:fe:20:12:3d:
3f:36:ef:5f:9d:6b:23:3c:a6:2e:6f:c0:45:ec:d7:45:52:d1:
b8:00:b1:17:22:b2:ba:81:9b:2f:bd:e2:ec:95:f0:4c:74:e6:
0a:83:42:57:cc:13:c9:0d:5c:a6:63:4f:0b:07:57:03:51:62:
04:30:40:9d:d5:7f:37:58:28:a1:e9:e3:6c:ee:d1:84:69:fd:
bd:cb:31:41:60:69:ad:b1:c5:da:63:fc:1b:cb:6c:d5:98:e8:
8c:ca:76:f7:f4:f5:f3:14:01:14:a0:8c:08:45:b9:6c:97:d2:
b3:b1:0e:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdSollCoJ3KXanGmZGOO1ukMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MzZiOWIzZDQ3MWY5M2Y4ZWE5ZmVkMGM0NTE0YzJjMzc0
ZDIzZjYwHhcNMjUwNjA5MDMwMTAwWhcNMjUwNjEwMDMwMTAwWjAzMTEwLwYDVQQD
Eyg4NzcyMDlhNTBiZjQ5Y2M1MDUwNjk3ZGIzY2YzNjc4YmJkODdkNmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnv0cGOd6HyRnTU6d/Tp4XmLffsat
DCM7POaQZpyiYSZWWv8N442alo3y5b0mxYwROpve707hLsnDCcrGRUmsGaOxzNfi
lGB7DX/GNzY+0ucKoSephdFlUsCNCLCYUlsDu2Klyeezz9wIxB6wZPHgqyzb0PBh
j7zH2oY/acM4qYAKix7OYwDrLSXLSaGZqxL8630Y5GC3GHc5LaNKcjH4GPf++svV
CAnlqDpKPVDdlx1EP2fOtn2VDYiM6p2iaTnmji7gtmMRc1LHGWOORsX1xp3Fx7mG
b5ZkJXcSXLbl9w+gKGyKjwb43n/7rPVtI9ooDWMN5ELV865gIsSiAWQh5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdyCaUL9JzFBQaX2zzzZ4u9h9b9MB8GA1UdIwQY
MBaAFGU2ubPUcfk/jqn+0MRRTCw3TSP2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlRhNXM5UngtVC1PcWY3UXhGRk1MRGROSV9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lNzhhNzYtN2M0MC00MDg0LWExM2It
MTU5OTJiMmM1NGNhLzEvWlRhNXM5UngtVC1PcWY3UXhGRk1MRGROSV9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9lNzhhNzYtN2M0MC00MDg0LWExM2ItMTU5OTJiMmM1NGNh
LzEvWlRhNXM5UngtVC1PcWY3UXhGRk1MRGROSV9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcOzpf5VX
D3Asy5iKYdIYQNG8TbkCYg3EvD7A+FMsQNY4yXj1VwlsOVgUGON671ugBnKMhJbD
jgT4i2jIMjBy1jiANnog2+dVrGYQTj724c5qQSLigJpD3tl2jMpjQUW073HJFULh
jjpQN3hjU4fsjSDA6PgkryuZyR3bwesTlm4f7I6D+s17ngEsw5T+IBI9PzbvX51r
IzymLm/ARezXRVLRuACxFyKyuoGbL73i7JXwTHTmCoNCV8wTyQ1cpmNPCwdXA1Fi
BDBAndV/N1gooenjbO7RhGn9vcsxQWBprbHF2mP8G8ts1ZjojMp29/T18xQBFKCM
CEW5bJfSs7EOCA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 09:52:40 2025 by rpki-client