Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft
File: zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft (raw, json)
Hash identifier: qJ8V3+Vexrb6dVZj/gun8QjmUMfytaIY6Q/o49fnCek=
Subject key identifier: 79:EA:5B:C5:43:06:19:EC:BD:E7:8E:15:07:34:40:CB:74:3E:B1:2B
Authority key identifier: CD:35:F6:FF:56:7B:DE:93:39:4F:FF:28:2F:AD:41:7D:A0:B5:36:14
Certificate issuer: /CN=cd35f6ff567bde93394fff282fad417da0b53614
Certificate serial: 0197B7EA27098848D9FBDAF364662A3BA78F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTX2_1Z73pM5T_8oL61BfaC1NhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft
Manifest number: 0C8D
Signing time: Sat 28 Jun 2025 19:01:05 +0000
Manifest this update: Sat 28 Jun 2025 19:01:05 +0000
Manifest next update: Sun 29 Jun 2025 19:01:05 +0000
Files and hashes: 1: zTX2_1Z73pM5T_8oL61BfaC1NhQ.crl (hash: Cu1osvUKjcf6DDT1hgB1K8uJwG0qHWtPyC3kOyF9f+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTX2_1Z73pM5T_8oL61BfaC1NhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:27:09:88:48:d9:fb:da:f3:64:66:2a:3b:a7:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd35f6ff567bde93394fff282fad417da0b53614
Validity
Not Before: Jun 28 19:01:05 2025 GMT
Not After : Jun 29 19:01:05 2025 GMT
Subject: CN=79ea5bc5430619ecbde78e15073440cb743eb12b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a3:d2:bf:b3:04:93:ec:e7:94:91:51:44:2d:
74:30:cf:5e:80:bf:c5:b4:82:54:24:b8:61:ad:53:
77:50:e0:3b:b9:92:96:17:96:b0:ab:3b:53:29:4b:
e3:d5:f0:6d:53:43:8a:3b:12:1e:ca:4a:60:f4:c6:
1b:c7:5e:5b:75:44:47:41:fe:a2:52:6b:a1:86:09:
13:12:73:00:02:64:29:2c:8e:1b:65:d0:02:a6:a7:
9c:28:de:2a:7e:01:9e:8d:6b:45:6b:56:64:5b:9a:
75:75:ca:b4:9d:79:6f:b2:9c:6f:82:80:f9:af:22:
eb:d6:b6:5b:6d:b7:ff:59:24:5f:db:92:e4:af:c6:
3a:bc:9b:10:7c:6b:0a:1e:68:15:d5:8d:e4:a9:1c:
34:52:10:01:65:e9:ea:e7:78:84:90:c9:66:48:5e:
b7:13:ea:c4:62:97:04:e8:f8:e6:ca:ce:43:90:fd:
2d:e9:7e:23:3a:1c:1e:0c:93:60:89:79:fd:23:da:
9d:84:ee:c0:6f:a7:b7:d8:00:49:c4:74:27:3a:85:
a7:90:77:d4:42:dd:27:94:62:43:db:d0:7d:92:7b:
87:c5:7a:38:a6:e1:37:92:cc:a2:52:37:80:07:13:
a0:8f:aa:1e:31:61:7f:64:8d:98:e7:5b:cb:aa:73:
6c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:EA:5B:C5:43:06:19:EC:BD:E7:8E:15:07:34:40:CB:74:3E:B1:2B
X509v3 Authority Key Identifier:
keyid:CD:35:F6:FF:56:7B:DE:93:39:4F:FF:28:2F:AD:41:7D:A0:B5:36:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTX2_1Z73pM5T_8oL61BfaC1NhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:be:c0:d3:fd:63:34:ba:cd:f2:37:ce:1a:29:77:db:a0:3e:
93:28:e3:48:da:4b:36:92:e5:05:02:4a:c9:0a:9c:89:d7:a0:
aa:95:a3:7b:57:ff:1f:e3:42:57:e8:a5:29:c9:b0:c0:3b:34:
fa:e6:98:54:30:09:53:c5:ce:6a:55:18:be:f8:7a:ef:1e:32:
56:cb:50:02:0d:5b:26:fb:87:5b:40:bf:56:1e:ef:ac:d7:04:
99:2b:60:ea:b5:98:ec:1d:d2:97:93:ac:30:10:1f:f4:7e:1d:
b9:35:4c:72:c5:fa:73:f0:a5:08:5d:a3:08:79:af:47:69:a0:
3d:ad:0b:61:21:97:35:a3:59:4e:de:85:c5:51:f9:40:25:e3:
f8:05:e1:2a:49:3b:f6:27:95:11:6b:52:20:59:d8:d6:50:69:
2c:94:61:27:62:0a:28:fc:9d:34:b7:e3:de:52:e6:cb:6e:1c:
f1:f6:c2:41:f1:88:ab:12:ce:84:80:58:a0:60:a0:89:e2:a2:
53:8b:f4:da:ca:b3:4e:2d:bc:dc:c2:2e:1d:b3:0d:c8:25:e0:
e1:8b:c0:87:56:6b:6b:1a:9d:3c:79:68:fe:17:5e:d8:e9:e5:
79:00:51:20:bf:15:ba:73:0d:8d:61:8f:07:8d:29:f9:81:6d:
09:8d:3c:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36icJiEjZ+9rzZGYqO6ePMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMzVmNmZmNTY3YmRlOTMzOTRmZmYyODJmYWQ0MTdkYTBi
NTM2MTQwHhcNMjUwNjI4MTkwMTA1WhcNMjUwNjI5MTkwMTA1WjAzMTEwLwYDVQQD
Eyg3OWVhNWJjNTQzMDYxOWVjYmRlNzhlMTUwNzM0NDBjYjc0M2ViMTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaPSv7MEk+znlJFRRC10MM9egL/F
tIJUJLhhrVN3UOA7uZKWF5awqztTKUvj1fBtU0OKOxIeykpg9MYbx15bdURHQf6i
UmuhhgkTEnMAAmQpLI4bZdACpqecKN4qfgGejWtFa1ZkW5p1dcq0nXlvspxvgoD5
ryLr1rZbbbf/WSRf25Lkr8Y6vJsQfGsKHmgV1Y3kqRw0UhABZenq53iEkMlmSF63
E+rEYpcE6Pjmys5DkP0t6X4jOhweDJNgiXn9I9qdhO7Ab6e32ABJxHQnOoWnkHfU
Qt0nlGJD29B9knuHxXo4puE3ksyiUjeABxOgj6oeMWF/ZI2Y51vLqnNs7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnqW8VDBhnsveeOFQc0QMt0PrErMB8GA1UdIwQY
MBaAFM019v9We96TOU//KC+tQX2gtTYUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelRYMl8xWjczcE01VF84b0w2MUJmYUMxTmhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wOWRkZGYtZjgzZi00NjUwLWEzNDct
NDRhMzA3NTQ1ZDc0LzEvelRYMl8xWjczcE01VF84b0w2MUJmYUMxTmhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8wOWRkZGYtZjgzZi00NjUwLWEzNDctNDRhMzA3NTQ1ZDc0
LzEvelRYMl8xWjczcE01VF84b0w2MUJmYUMxTmhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIL7A0/1j
NLrN8jfOGil326A+kyjjSNpLNpLlBQJKyQqcidegqpWje1f/H+NCV+ilKcmwwDs0
+uaYVDAJU8XOalUYvvh67x4yVstQAg1bJvuHW0C/Vh7vrNcEmStg6rWY7B3Sl5Os
MBAf9H4duTVMcsX6c/ClCF2jCHmvR2mgPa0LYSGXNaNZTt6FxVH5QCXj+AXhKkk7
9ieVEWtSIFnY1lBpLJRhJ2IKKPydNLfj3lLmy24c8fbCQfGIqxLOhIBYoGCgieKi
U4v02sqzTi283MIuHbMNyCXg4YvAh1ZraxqdPHlo/hde2OnleQBRIL8VunMNjWGP
B40p+YFtCY08Ug==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:46:06 2025 by rpki-client