Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft
File: zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft (raw, json)
Hash identifier: RhCw5JidEpZz2rk61Nrn0cKyCW4YZGMMjNxRN46Znmk=
Subject key identifier: 3B:D6:0E:86:C4:BC:58:A7:88:BA:50:0F:D9:A3:DA:22:BC:21:55:0D
Authority key identifier: CD:35:F6:FF:56:7B:DE:93:39:4F:FF:28:2F:AD:41:7D:A0:B5:36:14
Certificate issuer: /CN=cd35f6ff567bde93394fff282fad417da0b53614
Certificate serial: 0199FB45FD5F4F5E714DA2B88390AC021AF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTX2_1Z73pM5T_8oL61BfaC1NhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft
Manifest number: 0DB9
Signing time: Sun 19 Oct 2025 07:01:31 +0000
Manifest this update: Sun 19 Oct 2025 07:01:31 +0000
Manifest next update: Mon 20 Oct 2025 07:01:31 +0000
Files and hashes: 1: zTX2_1Z73pM5T_8oL61BfaC1NhQ.crl (hash: tV3p+z5LdHB7vaM71gyEEL7FUG7cWYevAfX3ehu5plE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTX2_1Z73pM5T_8oL61BfaC1NhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:fd:5f:4f:5e:71:4d:a2:b8:83:90:ac:02:1a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd35f6ff567bde93394fff282fad417da0b53614
Validity
Not Before: Oct 19 07:01:31 2025 GMT
Not After : Oct 20 07:01:31 2025 GMT
Subject: CN=3bd60e86c4bc58a788ba500fd9a3da22bc21550d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:39:7b:d8:ee:93:43:34:6e:72:35:06:7a:10:
0d:e6:37:fc:de:e2:c8:63:c1:e6:f9:87:28:8c:19:
4c:1d:c1:d9:80:91:10:74:9c:e1:f8:7f:a5:6c:a8:
29:6e:1d:33:14:cb:8d:b7:a2:70:25:2f:e6:29:f4:
ee:65:6e:c5:f1:75:58:2a:a1:30:c5:1c:80:fb:21:
b9:b1:5e:a1:12:46:26:c1:37:ac:58:cf:b7:3f:78:
89:3c:a7:53:cd:83:b0:09:e5:ef:dd:93:2c:af:fb:
50:f8:62:ae:c6:6c:6e:26:8c:90:f9:47:6c:5f:b0:
23:49:78:84:61:c3:57:02:3e:fc:c9:c2:be:ec:b2:
2b:3f:d4:f7:5c:3c:41:24:a7:82:88:80:bf:af:03:
81:e5:30:52:c0:8d:3a:55:f9:20:6a:21:f9:50:80:
25:bd:3a:5b:d6:0b:66:47:b5:85:68:f4:1c:f6:11:
f9:b7:8a:75:f5:d1:3e:83:3b:be:8a:79:c0:33:30:
a1:e7:91:61:91:e9:f0:30:07:c7:1e:3b:e3:ad:20:
71:6e:79:61:02:d7:29:42:b6:74:45:57:c2:3c:33:
5f:86:fe:74:2e:b1:f5:64:8c:c4:79:ad:1e:af:82:
99:df:09:23:1c:99:ad:b8:22:67:7f:3e:75:6b:fc:
1c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D6:0E:86:C4:BC:58:A7:88:BA:50:0F:D9:A3:DA:22:BC:21:55:0D
X509v3 Authority Key Identifier:
keyid:CD:35:F6:FF:56:7B:DE:93:39:4F:FF:28:2F:AD:41:7D:A0:B5:36:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTX2_1Z73pM5T_8oL61BfaC1NhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:9f:0b:c9:5e:9d:16:3d:7a:90:8b:4f:fe:53:cb:de:e3:2b:
2a:29:fa:70:09:2e:cb:71:f8:fb:9c:9a:f1:bc:d9:86:10:c7:
e1:17:a8:af:06:f2:23:bf:11:f4:17:a3:99:9b:85:63:b3:9f:
2d:c7:06:10:eb:6b:51:25:0e:79:36:0a:db:aa:2a:cd:52:6b:
29:e1:40:80:85:3d:40:69:4b:cd:a1:f1:e2:41:04:77:11:26:
34:8e:d4:ac:09:6c:cb:bc:f1:50:42:d2:79:50:bc:99:2a:81:
c7:ad:47:59:d4:2d:2c:dc:50:70:27:62:9e:25:cb:1c:39:99:
b5:75:90:10:7e:f2:ce:16:01:d3:04:1a:f2:4f:b5:da:e1:b4:
3b:44:f0:b5:ea:b4:90:b2:1f:9f:de:67:fd:ab:09:55:59:e4:
18:f2:e5:70:7e:14:ba:2d:dd:da:f0:7a:6f:b2:bd:f4:6c:68:
11:d4:44:67:6e:b4:7a:cd:af:55:d1:12:c1:01:41:d1:e5:7c:
d8:1b:69:55:55:c7:45:d7:a3:9a:20:6e:62:30:07:05:6d:d0:
0f:7b:08:be:a4:f8:0a:16:df:68:c0:41:01:96:39:77:59:ce:
74:7d:0e:ec:b0:5e:c0:1f:da:56:a6:d9:25:87:36:62:6f:ab:
2e:c3:27:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:13 2025 by rpki-client