Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
File: jzj4WeXmdmKuCZkPOE-obJMnEKs.mft (raw, json)
Hash identifier: T3Bka7hg64IqkMUhelP4nkLqZbN4IbyQq32eoBSAcLo=
Subject key identifier: 6D:07:EF:73:2B:CF:DF:42:9F:61:BC:23:95:09:1B:5C:CA:6F:EE:3B
Authority key identifier: 8F:38:F8:59:E5:E6:76:62:AE:09:99:0F:38:4F:A8:6C:93:27:10:AB
Certificate issuer: /CN=8f38f859e5e67662ae09990f384fa86c932710ab
Certificate serial: 0197B6A1C3FD8F847AB6E6311D7D0096654F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
Manifest number: 055A
Signing time: Sat 28 Jun 2025 13:02:24 +0000
Manifest this update: Sat 28 Jun 2025 13:02:24 +0000
Manifest next update: Sun 29 Jun 2025 13:02:24 +0000
Files and hashes: 1: 9gswIUnAaS1IBv5fuNBqUKNMfqs.roa (hash: lylk+NlcGPhSxgLHOS7jiDLjzNF20oemeodaYXlxSEQ=)
2: jzj4WeXmdmKuCZkPOE-obJMnEKs.crl (hash: zgts0lOGh9gT60QBF+f/DH0Pl1ltNYkl+jwsDNq4VgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:c3:fd:8f:84:7a:b6:e6:31:1d:7d:00:96:65:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f38f859e5e67662ae09990f384fa86c932710ab
Validity
Not Before: Jun 28 13:02:24 2025 GMT
Not After : Jun 29 13:02:24 2025 GMT
Subject: CN=6d07ef732bcfdf429f61bc2395091b5cca6fee3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:dc:70:e5:13:6f:61:7f:f9:ad:54:94:6c:5e:
3f:da:ba:3e:56:69:77:a1:30:cc:7d:bc:30:00:70:
92:d7:8a:99:e1:97:6d:7d:1d:3e:ae:dc:3a:7e:16:
08:02:93:38:05:62:7b:e5:02:d6:85:87:90:97:78:
e1:f7:17:42:a6:17:3b:50:e5:ef:e1:bb:52:a6:78:
cc:67:2f:88:9b:7c:89:a3:37:13:88:f8:be:a4:9b:
da:38:6d:84:0e:ae:c1:c7:39:08:1e:c9:7d:6f:ac:
43:bf:74:0d:98:5e:22:c3:aa:b4:ac:2d:df:cc:65:
92:c3:7d:a3:52:0e:9c:e0:0f:51:be:19:ce:96:cb:
6b:46:6c:43:92:3a:6c:cf:42:05:88:5c:bf:3a:59:
b9:73:0b:91:55:7e:9b:54:7f:aa:1d:71:01:27:d8:
fb:af:fd:55:9b:e6:9c:30:32:b8:4a:9e:10:ef:e7:
2b:eb:b9:61:10:f8:5b:56:2c:64:1d:73:68:c2:70:
51:85:74:0e:78:aa:d2:0e:20:6d:e4:8c:2e:be:e4:
2d:14:ac:fd:fe:65:ca:bb:83:08:70:b4:fa:12:9c:
68:e3:39:0b:20:34:f6:67:42:17:1a:9d:c8:28:3a:
60:2a:be:c0:96:25:f0:86:58:b8:8e:30:ad:3a:41:
d7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:07:EF:73:2B:CF:DF:42:9F:61:BC:23:95:09:1B:5C:CA:6F:EE:3B
X509v3 Authority Key Identifier:
keyid:8F:38:F8:59:E5:E6:76:62:AE:09:99:0F:38:4F:A8:6C:93:27:10:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a4:f1:13:5f:90:48:c8:e7:de:94:62:7b:ea:7f:4b:0f:40:
57:4a:21:f7:bb:a8:41:5f:a6:97:ac:01:b0:26:1f:e3:9e:d6:
15:9d:dd:a6:f9:62:b2:90:40:63:60:6b:9b:cf:98:e6:8d:15:
ab:ef:c0:e2:47:af:80:28:e5:33:ca:9f:21:ec:df:d4:2f:31:
c2:71:ad:50:07:67:28:cf:a6:b8:9c:d0:3b:69:0f:18:1c:f0:
30:a8:33:57:d2:0a:ff:66:cb:da:fb:c0:0e:34:99:33:39:24:
59:28:7d:2d:1d:68:67:3c:61:2d:6f:65:19:c5:49:16:49:48:
f6:ba:2c:e5:1d:cf:af:73:3b:ff:c9:c7:80:c9:b2:e3:6b:bc:
36:ea:b7:21:df:10:7a:7b:5d:94:e0:c9:15:1c:76:2b:0b:89:
bf:35:7f:ad:49:be:3b:c7:01:7a:81:d2:04:a5:72:64:72:57:
77:bb:5c:8c:b3:3b:78:f2:62:58:10:1c:8f:ad:df:13:9e:48:
c5:d6:64:29:1b:e3:7c:05:85:76:0a:4c:71:ac:c5:98:e9:56:
ee:93:18:61:ff:15:ec:36:46:5b:0c:aa:b7:89:9e:30:59:e1:
d1:ac:f7:0c:51:3c:19:1c:4d:61:8a:4c:b6:53:fd:c5:c7:83:
ce:3d:d7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:22:24 2025 by rpki-client