Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
File: ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft (raw, json)
Hash identifier: NPTnhNC4VKNdZfkvinV/fN4syZJRli0uUsGHVG9FrjY=
Subject key identifier: 25:CE:ED:55:1C:FA:A9:D0:AF:DA:5E:0E:86:BD:66:B1:75:AA:F2:86
Authority key identifier: 65:36:B9:B3:D4:71:F9:3F:8E:A9:FE:D0:C4:51:4C:2C:37:4D:23:F6
Certificate issuer: /CN=6536b9b3d471f93f8ea9fed0c4514c2c374d23f6
Certificate serial: 0199FC58483790C7A36670804489D828427D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
Manifest number: 06C0
Signing time: Sun 19 Oct 2025 12:01:08 +0000
Manifest this update: Sun 19 Oct 2025 12:01:08 +0000
Manifest next update: Mon 20 Oct 2025 12:01:08 +0000
Files and hashes: 1: ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.crl (hash: ZQh9xKRyT1S8ikVlv/RIvciUxbHLUX4NaP015cGJcJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:48:37:90:c7:a3:66:70:80:44:89:d8:28:42:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6536b9b3d471f93f8ea9fed0c4514c2c374d23f6
Validity
Not Before: Oct 19 12:01:08 2025 GMT
Not After : Oct 20 12:01:08 2025 GMT
Subject: CN=25ceed551cfaa9d0afda5e0e86bd66b175aaf286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8b:c2:49:16:96:a8:54:f2:f5:04:e1:a9:50:
03:1c:9e:71:da:a9:b7:35:cc:6f:f8:b8:d3:34:d2:
a0:ae:2d:2d:d7:43:01:42:68:2d:d3:c5:11:6c:3b:
93:27:e4:ca:b8:13:c6:02:0f:d4:d9:1f:b6:31:3e:
9a:c9:aa:ba:5e:9c:9c:5a:52:e4:91:77:e3:8c:60:
ee:3f:db:3f:0b:b6:6a:2e:7c:3f:7a:ae:98:13:2f:
f6:45:ed:cf:fa:7f:d0:65:14:94:c8:80:e9:bb:79:
12:3a:1b:28:32:1b:12:4e:28:c8:8a:9b:5e:d4:38:
99:3e:ee:6d:7d:f7:1d:95:03:3f:5e:06:f0:94:13:
06:6f:fb:31:1a:26:cc:09:36:8f:90:ae:3a:1c:32:
c8:9f:bc:00:2d:d2:68:f1:7f:83:b0:21:31:36:0f:
64:c3:e9:8f:6c:53:8b:94:56:06:ae:95:f5:07:ed:
30:22:03:9a:ee:98:14:99:1f:a7:2c:f2:49:42:f4:
25:17:ae:93:79:98:43:4c:d4:63:03:d8:ab:c7:04:
25:73:f1:84:7b:cc:a7:e5:89:18:9a:ae:1a:28:66:
17:e4:10:86:5e:f9:53:83:21:9d:65:39:66:ea:13:
2d:9e:54:e1:53:ba:9a:78:02:45:9c:ec:e6:1e:a9:
1e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CE:ED:55:1C:FA:A9:D0:AF:DA:5E:0E:86:BD:66:B1:75:AA:F2:86
X509v3 Authority Key Identifier:
keyid:65:36:B9:B3:D4:71:F9:3F:8E:A9:FE:D0:C4:51:4C:2C:37:4D:23:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:75:d2:60:e9:a6:7c:ab:68:a0:30:a3:82:79:67:bf:b9:2d:
e3:c1:40:36:e4:ba:d1:bd:d4:2d:b7:1b:b7:e3:53:11:43:5e:
c2:e7:af:66:4b:b5:f7:fd:d0:10:64:35:3b:43:5c:0b:05:26:
02:03:f1:89:94:f1:47:d2:b8:24:3b:ba:92:36:46:57:13:b3:
85:32:03:12:d7:e6:45:b5:bf:93:c8:ed:c2:2e:d5:26:dd:3d:
b3:33:34:32:2d:36:e2:c8:5d:09:50:6d:d6:da:d1:e6:f5:a9:
ba:69:5f:68:b6:b1:c1:09:a4:95:0f:9e:4e:1d:b1:61:7e:54:
0e:f8:ce:d5:b1:bc:76:8e:20:1c:82:4e:ab:70:da:a0:d5:16:
3e:61:f9:4c:5e:19:9c:a7:db:16:dd:93:a4:d4:95:56:ad:2f:
bc:1c:dc:3b:20:c0:f5:c5:3f:9d:40:78:42:87:1b:97:c5:a0:
b2:3b:19:b6:29:0a:2c:29:9d:1a:0c:09:ed:0a:a0:86:f9:42:
aa:35:eb:0d:1d:df:8e:6c:58:20:c4:46:e3:2d:d3:10:6d:44:
fa:44:2d:26:0b:50:25:0f:48:73:79:5e:a7:75:26:58:48:0a:
56:af:d0:97:75:95:74:cd:ba:08:02:f3:ca:e6:6f:f4:1d:af:
79:0e:6f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:35 2025 by rpki-client