Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft
File: jzASR05qobNrQgZN0XWzDtgi5zU.mft (raw, json)
Hash identifier: KKe/KEsDNl6Mtp0Jeh2csgmi1nhQ4QE6RUdj7eD88r0=
Subject key identifier: C7:5C:61:D5:21:DA:52:25:4F:69:0A:69:0A:45:54:17:F8:45:4F:8D
Authority key identifier: 8F:30:12:47:4E:6A:A1:B3:6B:42:06:4D:D1:75:B3:0E:D8:22:E7:35
Certificate issuer: /CN=8f3012474e6aa1b36b42064dd175b30ed822e735
Certificate serial: 0197B7B35F7C1A63408CD682C08A311CD5E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzASR05qobNrQgZN0XWzDtgi5zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft
Manifest number: 13C5
Signing time: Sat 28 Jun 2025 18:01:15 +0000
Manifest this update: Sat 28 Jun 2025 18:01:15 +0000
Manifest next update: Sun 29 Jun 2025 18:01:15 +0000
Files and hashes: 1: hSeJLXUeQJLgsdHt2Swy2Krt_5Q.roa (hash: 1r4uFqSNgKddi8IkUrdMVRZBEoRqwJZMemm/bbM90fE=)
2: jzASR05qobNrQgZN0XWzDtgi5zU.crl (hash: 1gJ7LCJZGGflt8fQ6rIRQ7SXLzDHRcxw1hvu1tKeulc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzASR05qobNrQgZN0XWzDtgi5zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:5f:7c:1a:63:40:8c:d6:82:c0:8a:31:1c:d5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3012474e6aa1b36b42064dd175b30ed822e735
Validity
Not Before: Jun 28 18:01:15 2025 GMT
Not After : Jun 29 18:01:15 2025 GMT
Subject: CN=c75c61d521da52254f690a690a455417f8454f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4e:05:04:df:7d:61:a1:ee:f6:cd:e3:02:38:
73:92:93:33:b1:39:9d:db:23:c5:9a:1a:f4:b5:31:
ad:56:55:81:e1:7e:b6:47:ba:fb:ef:66:bd:9a:2a:
21:52:41:63:73:44:e0:de:82:86:65:99:60:28:ab:
74:76:73:ca:cd:50:9f:62:53:7e:c3:7e:ed:9e:9f:
5a:4d:46:33:03:9e:d8:5d:a2:89:06:02:0b:d4:1b:
2e:f8:06:37:b7:4d:2e:ae:49:b8:e3:2c:72:f5:34:
c8:aa:e3:34:fd:61:92:eb:28:36:83:0a:63:d9:8b:
9a:13:db:be:06:79:94:77:27:00:dd:72:bd:6e:e7:
1e:c9:6f:40:1f:73:e9:2a:7c:f7:1a:7b:44:ef:bd:
b9:c8:48:52:ec:bc:60:02:e1:1e:cd:54:f4:f5:f9:
bc:56:b4:3d:66:db:cb:27:77:5a:d9:e2:b1:e7:fe:
e1:d3:25:35:e2:f8:3b:21:18:02:4f:d1:1e:64:fa:
c9:03:1d:b9:90:7a:77:d3:c6:ac:64:b5:1b:38:91:
11:53:b1:03:5b:79:1c:16:6a:e9:e9:10:c3:b7:bf:
6a:f9:0d:a3:1c:63:11:cd:e8:4f:a2:b6:51:ce:63:
3b:57:2c:a7:0f:54:4c:2b:a5:37:d0:91:61:d9:23:
95:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:5C:61:D5:21:DA:52:25:4F:69:0A:69:0A:45:54:17:F8:45:4F:8D
X509v3 Authority Key Identifier:
keyid:8F:30:12:47:4E:6A:A1:B3:6B:42:06:4D:D1:75:B3:0E:D8:22:E7:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzASR05qobNrQgZN0XWzDtgi5zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:68:73:7a:85:1f:d4:67:fe:a4:d1:43:78:49:29:47:84:67:
74:5a:dc:8b:29:4f:7d:7a:67:72:60:19:83:b9:75:45:b6:83:
98:6c:11:2b:e5:56:b4:da:82:b7:8e:ce:3f:85:c7:a7:2c:2b:
eb:67:6c:57:74:97:ac:64:46:22:67:bb:df:8b:0d:9e:f0:99:
c4:4b:ac:cf:24:b1:bc:ed:f7:93:89:73:d1:a0:42:ac:40:62:
6c:63:92:89:ca:76:b0:9e:16:d9:2a:cb:5f:a9:68:07:68:3f:
89:32:dc:a6:9d:d9:e9:20:e9:42:8f:db:2d:9f:1e:24:74:4b:
c4:1d:de:ee:fb:65:7d:b2:17:68:e0:91:1d:22:27:08:ad:60:
6a:d5:c0:b0:58:56:d9:1a:68:8e:7d:ff:12:9f:7a:27:fd:2d:
f5:b4:5e:2d:cd:55:c8:07:81:34:49:e1:3d:19:16:8e:3e:34:
92:8b:72:86:3d:dc:30:34:82:e3:ec:b8:43:69:b4:12:db:90:
a6:c2:31:21:54:3d:ad:29:3a:fb:06:67:17:98:0f:d1:5a:93:
47:d1:1e:39:72:1b:43:c0:39:55:60:a9:c0:76:ad:76:86:53:
ca:8b:47:93:e4:f9:8a:c5:13:9c:c8:83:33:bb:8e:a9:67:80:
a6:d0:c6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:59 2025 by rpki-client