Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft
File: zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft (raw, json)
Hash identifier: jqtdbGd1f+w4DJYuAYfbxdctEUFWzFUWylk4o6oTZK4=
Subject key identifier: CE:F8:4D:54:80:9E:A4:9B:51:00:51:CE:E2:41:87:EA:D0:BC:DB:3B
Authority key identifier: CD:35:F6:FF:56:7B:DE:93:39:4F:FF:28:2F:AD:41:7D:A0:B5:36:14
Certificate issuer: /CN=cd35f6ff567bde93394fff282fad417da0b53614
Certificate serial: 019A4C615F973433C123AB5DD859D3FFB366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTX2_1Z73pM5T_8oL61BfaC1NhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft
Manifest number: 0DE3
Signing time: Tue 04 Nov 2025 01:00:41 +0000
Manifest this update: Tue 04 Nov 2025 01:00:41 +0000
Manifest next update: Wed 05 Nov 2025 01:00:41 +0000
Files and hashes: 1: zTX2_1Z73pM5T_8oL61BfaC1NhQ.crl (hash: kYPZI2sMZxbhyykNHzgZL4Yl5he9/Y7lOjAbjWs1Vjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTX2_1Z73pM5T_8oL61BfaC1NhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:5f:97:34:33:c1:23:ab:5d:d8:59:d3:ff:b3:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd35f6ff567bde93394fff282fad417da0b53614
Validity
Not Before: Nov 4 01:00:41 2025 GMT
Not After : Nov 5 01:00:41 2025 GMT
Subject: CN=cef84d54809ea49b510051cee24187ead0bcdb3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:40:1d:e9:db:69:20:52:34:80:64:ab:2e:fd:
d8:5b:48:23:b1:e4:39:13:ee:60:ff:0e:b5:32:91:
06:01:01:01:f6:08:68:f8:c7:02:61:bd:5e:6f:65:
ae:a5:1c:c8:fc:b6:ba:09:3b:e3:8f:02:0f:6c:e3:
fc:7f:7d:1a:2b:8e:9f:fd:ed:28:a5:90:37:0f:f2:
56:e8:a2:e5:e0:71:24:49:e4:40:e4:5d:3c:1d:9c:
9d:3d:19:a1:c7:f5:6e:9d:de:fe:6f:2e:a7:63:4b:
b9:ed:5b:03:e7:5d:65:8b:41:cc:f5:17:3d:b0:4d:
ff:3f:2f:5e:3d:5b:03:89:bd:a6:48:da:f4:4e:97:
ff:dc:3b:f2:e5:06:16:ce:a9:4d:c9:77:1d:fa:33:
2e:2f:5f:5f:82:75:82:28:9e:e8:d2:34:86:10:52:
15:29:80:1b:22:86:f4:9a:bb:ad:8f:de:5c:f6:63:
f1:8a:09:53:9e:95:f2:b5:b1:4e:ea:24:9a:86:59:
86:69:03:ec:ef:02:88:95:ed:c6:8f:69:8c:e7:2d:
11:5d:07:37:a1:98:63:3c:2e:1e:54:41:63:df:e6:
bc:84:15:bb:1f:64:65:74:9a:bf:51:65:88:38:1d:
5d:fd:95:b4:41:be:6f:9f:81:f1:cf:5b:2a:9b:fa:
eb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F8:4D:54:80:9E:A4:9B:51:00:51:CE:E2:41:87:EA:D0:BC:DB:3B
X509v3 Authority Key Identifier:
keyid:CD:35:F6:FF:56:7B:DE:93:39:4F:FF:28:2F:AD:41:7D:A0:B5:36:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTX2_1Z73pM5T_8oL61BfaC1NhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:88:6e:7a:54:da:9f:b6:ca:5e:14:5e:38:8a:20:6d:00:c2:
2f:10:47:bf:a0:ff:66:ef:be:9a:b4:3e:9f:fa:ad:7e:1a:79:
d9:de:b7:8f:5b:09:9e:97:a7:f1:cd:05:5e:c2:64:dc:72:9d:
a3:69:57:fc:d9:af:c1:68:6e:d9:ec:bf:d1:88:7a:4d:c4:b9:
55:84:4b:35:5a:ea:bc:21:db:02:f9:1d:d8:17:33:ee:b5:82:
f3:60:11:6c:55:5f:a8:54:0f:17:72:a3:ba:15:d5:88:a6:24:
3d:c5:4a:af:59:75:08:21:07:ea:bf:8f:fc:82:4a:b2:9d:c1:
75:f0:b2:70:35:66:61:17:9e:40:5c:b9:bd:a7:0a:fc:32:20:
96:0a:71:71:3b:32:38:54:e6:87:6d:ec:34:35:4d:36:4b:64:
34:1f:54:d7:5d:77:ed:0b:b6:2f:02:53:ef:bc:01:7c:34:65:
08:0a:ec:0d:97:46:4f:cc:a2:b9:71:66:cd:7d:0a:82:07:63:
06:b6:4c:6c:30:39:ed:d7:f3:cb:a2:10:d6:c7:84:13:6b:1e:
d0:ff:19:ab:f4:dd:dd:dc:8f:54:16:12:cb:b9:8e:83:6a:30:
69:9b:96:ba:85:e0:79:2a:f3:da:3f:93:05:e2:98:84:13:0e:
78:09:d5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:19 2025 by rpki-client