Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
File: zJxBoSN2TPfcDy25hB9zKjuWE0M.mft (raw, json)
Hash identifier: ZcvFswjc+Mk0uM3Ksha6Ny327TK9piO/aNbuIB/0OsY=
Subject key identifier: AE:CD:24:60:3E:8D:7A:AC:32:66:50:0C:0F:2E:D0:8B:24:7C:16:8E
Authority key identifier: CC:9C:41:A1:23:76:4C:F7:DC:0F:2D:B9:84:1F:73:2A:3B:96:13:43
Certificate issuer: /CN=cc9c41a123764cf7dc0f2db9841f732a3b961343
Certificate serial: 0197C04971CD0E7E358A6CBE09E0392DE092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
Manifest number: 15BB
Signing time: Mon 30 Jun 2025 10:02:08 +0000
Manifest this update: Mon 30 Jun 2025 10:02:08 +0000
Manifest next update: Tue 01 Jul 2025 10:02:08 +0000
Files and hashes: 1: B8c-KiiuWVbKdd6Eyr8wAePUEWY.roa (hash: 8i+mj8IGmve8qUZWFCAwe3JPzP0zTBzNHkZJDJW66Pg=)
2: zJxBoSN2TPfcDy25hB9zKjuWE0M.crl (hash: rl02Qa6l2Stdy7Br2WuffPdAh7QfiNJlsW4U5L4rh1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 10:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:49:71:cd:0e:7e:35:8a:6c:be:09:e0:39:2d:e0:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9c41a123764cf7dc0f2db9841f732a3b961343
Validity
Not Before: Jun 30 10:02:08 2025 GMT
Not After : Jul 1 10:02:08 2025 GMT
Subject: CN=aecd24603e8d7aac3266500c0f2ed08b247c168e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ca:d5:3f:a3:3a:d6:89:95:30:28:fd:3b:22:
81:79:d5:7f:65:76:05:01:6a:e2:df:5a:7c:3f:01:
b2:f1:5d:7a:36:c8:99:d4:2b:fd:5a:08:4e:40:26:
58:71:50:24:e7:df:b2:5a:8d:3f:2f:cd:f4:26:85:
d0:4e:37:4c:d5:bb:db:b5:d7:99:83:25:f6:91:12:
36:a1:68:19:38:2c:15:63:be:8f:a1:c0:23:63:e5:
26:2d:4a:3f:0e:1e:41:2e:91:0a:2c:78:6f:cf:90:
76:f2:2b:a3:4b:87:4c:c0:a6:6e:08:8b:82:93:d2:
e3:56:36:ba:28:b6:b4:0e:86:32:f6:fe:82:f3:93:
b4:f4:ec:bf:d4:7d:78:4b:c7:9a:cb:d4:b6:fd:64:
40:f5:ae:2d:b9:55:bb:1b:1d:0e:3d:7f:b7:93:99:
79:70:f0:d5:1e:aa:c4:b3:1f:c5:5a:9d:0c:da:7b:
c3:e5:aa:38:24:4f:61:24:b4:db:34:bf:39:84:a7:
3e:1e:be:de:22:5d:a8:7f:12:54:61:c0:ba:6b:16:
7b:fd:b3:3b:d1:a8:9f:88:ae:c5:ae:f7:31:5b:9e:
95:09:7f:65:67:f8:33:ad:18:3c:30:73:6d:34:3a:
89:d3:b7:92:b6:a6:1f:c4:1b:fe:e1:8c:08:85:61:
37:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:CD:24:60:3E:8D:7A:AC:32:66:50:0C:0F:2E:D0:8B:24:7C:16:8E
X509v3 Authority Key Identifier:
keyid:CC:9C:41:A1:23:76:4C:F7:DC:0F:2D:B9:84:1F:73:2A:3B:96:13:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:d1:16:78:ba:0a:d1:b1:96:d2:0f:e4:89:03:aa:8e:9c:da:
e3:14:92:67:10:6e:4e:84:bc:ae:d3:14:1e:50:8c:96:a5:4b:
66:2c:0a:50:b7:b0:d5:fd:6c:54:d9:bd:ec:6d:f1:86:3c:34:
a2:28:59:93:1b:c4:73:a0:85:9e:b1:e5:45:c0:b3:88:6c:17:
f1:8c:e4:34:f8:29:09:1c:ea:7d:b2:2f:30:64:05:eb:41:c2:
ef:e1:08:92:5a:64:bc:e8:f8:90:04:89:ff:78:20:8d:88:af:
a6:1f:4c:4e:c6:b3:e7:af:04:09:56:80:91:8b:a4:81:ef:67:
11:42:33:92:62:16:f0:ee:4f:f2:bf:ec:12:60:c9:15:86:46:
9b:1f:b7:2b:64:36:95:3b:86:c8:a5:7a:0f:93:c9:cb:51:bb:
10:27:ac:51:ee:3d:47:f5:a6:05:c4:74:d9:ac:71:5b:84:1e:
80:83:49:cb:43:c2:12:33:ac:aa:8e:98:1a:2a:cd:c6:20:ad:
79:85:3f:89:a8:52:09:c4:dd:79:ca:78:5b:bb:4d:4f:a7:38:
25:7c:12:c0:68:14:fe:c5:1d:44:e1:f3:36:78:61:d8:ee:f3:
52:76:b2:8e:29:8b:59:c7:49:8e:aa:75:a4:be:0e:0d:13:3f:
67:dc:b3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:40:40 2025 by rpki-client