Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
File: ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft (raw, json)
Hash identifier: p+7YuZsJbAfjIAGKG1jU9AessLXh3W37Jlwxxh+Tj8c=
Subject key identifier: 99:34:14:A0:19:58:5D:6F:A4:C5:24:8E:11:33:12:48:AF:29:E6:6B
Authority key identifier: 65:36:B9:B3:D4:71:F9:3F:8E:A9:FE:D0:C4:51:4C:2C:37:4D:23:F6
Certificate issuer: /CN=6536b9b3d471f93f8ea9fed0c4514c2c374d23f6
Certificate serial: 01976BBD53934C300CD09C123445DCDFCD1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
Manifest number: 056C
Signing time: Sat 14 Jun 2025 00:00:59 +0000
Manifest this update: Sat 14 Jun 2025 00:00:59 +0000
Manifest next update: Sun 15 Jun 2025 00:00:59 +0000
Files and hashes: 1: ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.crl (hash: GfEgUzMmNz7pMxqH5voi7eDWCdH++zs4CXrn0FH/SF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:53:93:4c:30:0c:d0:9c:12:34:45:dc:df:cd:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6536b9b3d471f93f8ea9fed0c4514c2c374d23f6
Validity
Not Before: Jun 14 00:00:59 2025 GMT
Not After : Jun 15 00:00:59 2025 GMT
Subject: CN=993414a019585d6fa4c5248e11331248af29e66b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:6f:a0:fe:9c:89:a0:41:8c:78:2d:29:58:d6:
94:55:da:53:26:8c:00:e8:4e:a9:62:54:51:ed:6b:
3b:3e:4a:eb:a2:47:fd:55:f5:7f:d3:f1:44:0b:1c:
f7:f9:b5:26:36:ff:5e:b3:75:0e:d4:a2:6b:f3:53:
1c:20:f6:d6:84:43:20:76:56:03:45:19:e9:39:fc:
f2:48:6c:fb:63:17:6e:5d:a1:bf:c5:3a:da:4e:88:
2a:e9:33:41:66:7d:c4:77:6c:55:bc:76:a2:99:53:
82:da:6d:a8:f2:c9:f0:1d:51:4a:c2:f4:08:6d:f9:
99:14:b9:67:82:07:5c:3b:74:cd:8e:62:71:71:5d:
ed:7e:fe:34:88:ed:fd:ee:87:d4:83:92:cd:ab:f6:
85:ba:81:26:85:67:bb:c1:38:f6:9c:bf:58:48:dc:
4d:f4:d5:ad:db:16:6d:42:ba:71:28:58:68:28:7c:
f2:1d:d8:f3:4f:f9:ed:41:a0:1a:40:0b:67:6e:22:
75:36:80:e4:a1:68:d3:8d:45:bf:44:f9:f9:a6:49:
90:ab:5b:07:b8:91:a9:f0:ae:df:70:81:4b:e0:79:
42:04:e0:f6:5d:ff:97:b2:d9:2b:62:2e:a4:ab:f7:
6b:0e:be:51:3d:e4:58:8d:74:46:22:79:ec:39:dd:
ad:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:34:14:A0:19:58:5D:6F:A4:C5:24:8E:11:33:12:48:AF:29:E6:6B
X509v3 Authority Key Identifier:
keyid:65:36:B9:B3:D4:71:F9:3F:8E:A9:FE:D0:C4:51:4C:2C:37:4D:23:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:dc:62:a9:d8:54:4f:cb:07:9b:87:22:68:e1:81:5e:71:b3:
5b:27:1f:cc:91:10:a3:12:27:cf:2c:19:92:b9:16:6a:f8:73:
1f:7b:c9:95:5a:d7:80:fa:1d:a6:95:37:5f:ee:7e:30:0c:92:
cf:25:fd:2f:66:f2:4c:97:cf:d2:2f:50:a5:d8:74:3e:72:40:
45:dc:99:3e:d9:ce:78:23:c8:c3:9b:b6:2a:85:d5:26:8f:21:
63:c4:2e:60:ed:9d:03:c2:64:ea:ec:13:cf:1a:d9:0a:87:99:
41:12:20:50:ed:3e:97:0a:5f:37:4c:84:c4:99:e8:7f:f0:dd:
30:02:14:ff:08:4f:c7:19:30:39:78:69:8f:a0:e5:09:36:db:
e5:85:91:d7:1b:4c:ff:ed:23:99:21:53:15:dd:3d:f5:27:82:
b7:40:3f:02:bc:99:3e:a0:85:15:cb:e5:6d:69:fa:2c:db:2f:
48:ba:8a:f2:07:db:94:f2:be:18:7e:da:22:02:d9:88:cd:02:
95:2d:b9:19:c2:40:24:04:96:40:30:5f:f0:8f:64:0d:61:12:
c8:0c:5e:3a:9d:02:8c:5b:7a:28:b3:a2:7c:e6:23:a9:ea:00:
e5:f4:17:3e:f0:e2:f1:bc:5e:11:16:a7:76:a4:9e:c1:ef:ea:
85:59:a5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:48:43 2025 by rpki-client