Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
File: ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft (raw, json)
Hash identifier: mdmpVV33l/hBw0Y0NgwmBEqqMc3j3kGB2/ByOsNQctc=
Subject key identifier: BA:FD:5C:1E:68:29:44:AA:9E:12:2F:0D:70:F2:72:0F:68:E0:3D:47
Authority key identifier: 65:36:B9:B3:D4:71:F9:3F:8E:A9:FE:D0:C4:51:4C:2C:37:4D:23:F6
Certificate issuer: /CN=6536b9b3d471f93f8ea9fed0c4514c2c374d23f6
Certificate serial: 0198914777E30D680A7E3527CB0375B0B4E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
Manifest number: 0604
Signing time: Sun 10 Aug 2025 00:00:36 +0000
Manifest this update: Sun 10 Aug 2025 00:00:36 +0000
Manifest next update: Mon 11 Aug 2025 00:00:36 +0000
Files and hashes: 1: ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.crl (hash: pGpOEonoPY4q+L80cH5Lc8a8yPjU8hqAevVszw3qecw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 00:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:47:77:e3:0d:68:0a:7e:35:27:cb:03:75:b0:b4:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6536b9b3d471f93f8ea9fed0c4514c2c374d23f6
Validity
Not Before: Aug 10 00:00:36 2025 GMT
Not After : Aug 11 00:00:36 2025 GMT
Subject: CN=bafd5c1e682944aa9e122f0d70f2720f68e03d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:db:6d:f9:78:47:ee:b7:b0:fe:ed:cb:08:da:
b9:1e:01:61:e8:87:e4:70:26:21:51:30:6b:b8:21:
1b:25:94:4f:d9:fd:3f:34:30:90:b9:fc:24:74:2e:
d7:c4:bc:06:e3:e1:04:38:5a:0b:78:6b:61:f2:77:
06:02:ac:94:4c:c7:fd:02:ec:e3:da:f7:eb:36:9a:
81:a5:f6:ed:ce:e4:72:8d:50:87:42:9c:fd:66:c6:
1d:f7:76:a4:b7:fd:8d:84:7f:29:74:6a:4f:e1:9a:
91:c6:e1:35:63:4c:43:93:e5:ac:8a:17:56:f4:48:
4e:03:17:5f:2f:ab:eb:89:81:c2:e6:d1:96:e2:9f:
b6:6e:8d:6e:ee:c1:33:1c:54:d3:e7:11:7c:5c:81:
d9:57:fe:11:df:05:52:5e:64:ca:44:e7:c7:8a:cb:
1e:93:2e:5f:31:00:f2:0c:c7:59:0f:ec:ec:3f:ae:
53:ac:04:7b:93:38:e0:8f:d0:9a:4c:19:d2:8b:f5:
15:3f:12:31:6d:56:66:d0:57:e9:03:19:da:b7:39:
c6:29:eb:ee:9b:71:49:3e:74:dd:a4:fc:92:34:e8:
a7:a0:25:d7:52:7c:4c:5d:0b:ad:30:52:a1:96:d5:
65:84:e3:ae:59:fc:01:11:61:8f:3f:66:67:24:2f:
78:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FD:5C:1E:68:29:44:AA:9E:12:2F:0D:70:F2:72:0F:68:E0:3D:47
X509v3 Authority Key Identifier:
keyid:65:36:B9:B3:D4:71:F9:3F:8E:A9:FE:D0:C4:51:4C:2C:37:4D:23:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d5:39:cc:d7:6d:26:77:13:63:13:95:c1:7f:6c:7b:30:b2:
94:3f:7e:ef:9b:02:70:bf:ec:63:a9:00:8e:8a:7d:6f:1d:9d:
68:1f:f4:90:fb:c8:33:45:2a:87:e6:40:bc:51:ec:66:1d:45:
4d:4f:85:c0:03:71:c0:c1:e7:10:dd:d2:1c:e6:ec:c0:91:10:
14:47:d4:1c:c2:c0:b7:48:ed:99:2e:25:a6:7e:95:93:6d:73:
32:76:ca:54:9a:56:be:42:58:6a:12:c2:07:c3:80:df:9c:6c:
8a:d1:4f:6e:24:a1:98:58:20:23:f2:65:f5:e4:c4:2a:75:5a:
3a:23:48:6e:ff:ce:cd:4c:ec:68:30:8a:ff:8a:be:94:55:70:
b5:76:c3:13:f0:85:da:0c:c9:25:12:0e:93:94:ad:fa:83:e2:
01:80:7d:a5:5d:93:3c:2a:8e:5f:d2:a1:3b:1d:9d:38:c9:ed:
05:00:2f:f7:94:5f:ea:04:75:b6:30:73:5a:34:f9:d9:e0:ef:
7e:fe:c7:a5:c5:f7:14:4c:e0:88:b9:cf:f0:e2:2f:7b:e8:80:
b6:ad:bd:e4:d3:fb:ff:a7:92:28:77:1d:1a:38:45:d2:16:4b:
c8:65:d6:8a:12:8e:a1:38:38:41:83:04:84:28:3b:0e:46:f4:
e7:58:5d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:39:00 2025 by rpki-client