Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft
File: zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft (raw, json)
Hash identifier: xwHMXGbFNQnqU3GXwNyp3VSY2iCs3KgEdZCABLg7opk=
Subject key identifier: 41:82:17:96:FE:F0:61:D3:D0:A2:77:2C:15:93:93:68:F9:72:FD:CB
Authority key identifier: CD:35:F6:FF:56:7B:DE:93:39:4F:FF:28:2F:AD:41:7D:A0:B5:36:14
Certificate issuer: /CN=cd35f6ff567bde93394fff282fad417da0b53614
Certificate serial: 0198D5BBD65DD57724B99A9A20F8BCD85150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTX2_1Z73pM5T_8oL61BfaC1NhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft
Manifest number: 0D21
Signing time: Sat 23 Aug 2025 07:01:53 +0000
Manifest this update: Sat 23 Aug 2025 07:01:53 +0000
Manifest next update: Sun 24 Aug 2025 07:01:53 +0000
Files and hashes: 1: zTX2_1Z73pM5T_8oL61BfaC1NhQ.crl (hash: hEO3zVm9l5du+QGR92GYNM2Z+ILCiz+gMb9Z5MZZygE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTX2_1Z73pM5T_8oL61BfaC1NhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:d6:5d:d5:77:24:b9:9a:9a:20:f8:bc:d8:51:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd35f6ff567bde93394fff282fad417da0b53614
Validity
Not Before: Aug 23 07:01:53 2025 GMT
Not After : Aug 24 07:01:53 2025 GMT
Subject: CN=41821796fef061d3d0a2772c15939368f972fdcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:aa:37:20:1c:3f:61:bd:44:eb:03:6c:7f:f1:
b1:ac:37:c4:ec:6d:20:db:ba:c0:83:05:42:c5:25:
b6:51:6b:20:cc:e9:96:63:4e:48:16:9b:f8:e7:2f:
9a:00:a6:9d:68:bb:92:8c:b7:49:a1:0e:77:76:af:
12:b4:e3:fa:f6:96:0d:6c:37:44:b6:7f:5b:fe:5e:
07:3a:5c:25:ba:b2:1f:ef:9a:02:c7:df:09:ea:df:
e4:dc:c7:06:6f:d7:fa:c2:2a:5b:cf:9e:a2:97:31:
df:1d:b6:dc:25:0d:45:2a:3e:bc:6e:e5:50:24:3b:
90:16:41:4e:74:bd:14:5f:b0:a0:a2:d8:83:01:b5:
73:11:8c:11:e7:31:4e:04:0f:ee:e8:81:47:e5:31:
56:cc:61:64:ea:c5:a7:c5:52:d8:e4:67:2e:b5:18:
6f:fc:fa:1a:22:ca:d7:f8:e6:7e:e6:b9:af:07:71:
46:2d:8f:c1:f9:5d:0d:02:e8:13:3a:88:12:fe:51:
e1:a8:a5:fe:48:c6:ee:1c:1e:7a:70:11:ee:88:e8:
d1:3d:ba:4f:f4:89:60:b5:bf:0d:d5:e8:13:c1:74:
3a:e5:d4:bc:ca:03:f4:d4:46:7c:65:e4:49:96:f4:
5c:b7:48:19:91:9a:b4:46:93:58:33:37:14:18:ad:
6e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:82:17:96:FE:F0:61:D3:D0:A2:77:2C:15:93:93:68:F9:72:FD:CB
X509v3 Authority Key Identifier:
keyid:CD:35:F6:FF:56:7B:DE:93:39:4F:FF:28:2F:AD:41:7D:A0:B5:36:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTX2_1Z73pM5T_8oL61BfaC1NhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:39:3f:cb:54:93:6e:27:b6:f0:6e:0c:ef:d0:cb:70:49:6c:
3c:9e:c5:5c:95:fb:18:91:c7:e5:c2:ce:e4:7f:42:2b:7f:00:
e1:88:59:04:f0:73:82:99:92:bc:66:eb:9e:be:7e:a6:58:da:
a2:7b:cb:a6:e6:52:1c:a3:6a:50:58:88:88:50:1c:88:27:52:
9e:58:0c:96:53:94:d8:81:ae:fd:4f:3d:ef:95:81:2b:03:af:
c4:37:af:c7:72:3c:5a:37:66:e6:25:03:13:87:f2:0e:05:8e:
f7:2d:64:3c:d7:83:a0:a3:69:11:8f:2a:96:bc:29:8b:12:b9:
45:88:64:f6:57:98:53:77:d2:d8:43:67:08:d5:59:6a:45:88:
09:af:26:a5:e7:2a:a1:2e:4e:73:26:c2:e8:6b:7f:ec:f0:6b:
53:cd:c3:07:81:d9:98:a0:6b:75:67:1a:9f:20:5c:47:bf:73:
29:df:12:ff:df:3b:a9:60:c4:2c:b5:40:7d:98:0f:7d:b2:b4:
83:89:2b:05:e7:31:bf:eb:85:e2:46:ca:68:5d:c2:6a:78:ac:
ce:97:d2:d4:c8:b8:fb:32:45:d4:ab:9e:83:e2:52:2c:84:55:
7c:f1:75:79:0f:63:f3:e0:1b:d2:f4:48:c4:e9:5f:88:77:33:
74:a8:12:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:42 2025 by rpki-client