Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
File: jzaP655VO90TFWJYSjNTsddVXFA.mft (raw, json)
Hash identifier: lwLNZ3P88iPQ5VwQR9f5z9DBz3FlXgDSueJHW960Ypg=
Subject key identifier: F8:1A:F9:82:F5:BB:96:28:34:1A:E1:17:19:5B:64:9D:70:77:C7:F8
Authority key identifier: 8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
Certificate issuer: /CN=8f368feb9e553bdd131562584a3353b1d7555c50
Certificate serial: 0197BE5A2EEBE35811FA94D90476D4836AB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
Manifest number: 15CA
Signing time: Mon 30 Jun 2025 01:01:10 +0000
Manifest this update: Mon 30 Jun 2025 01:01:10 +0000
Manifest next update: Tue 01 Jul 2025 01:01:10 +0000
Files and hashes: 1: VgDY9zN_B3grCrz_H8xjNykqXTQ.roa (hash: V5RUWHdPXufxGeDHhevmGSEqGhIbGyboqgCFXxKzrT8=)
2: eWNwoG2gNqVOl4jxtgq3km86-j8.roa (hash: tuYXWwSXyhuCjeV5A6/luy4IrIPezyScgsOJmMQtw38=)
3: jzaP655VO90TFWJYSjNTsddVXFA.crl (hash: 0pznB9XtbeRHnMaaDIytcCmchDynVdG9NcwcRQ+BHmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 01:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:be:5a:2e:eb:e3:58:11:fa:94:d9:04:76:d4:83:6a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f368feb9e553bdd131562584a3353b1d7555c50
Validity
Not Before: Jun 30 01:01:10 2025 GMT
Not After : Jul 1 01:01:10 2025 GMT
Subject: CN=f81af982f5bb9628341ae117195b649d7077c7f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:55:40:94:03:87:51:f3:05:7f:fe:27:d4:3c:
69:2a:14:e0:70:7c:0d:e8:6c:24:82:82:14:e3:2b:
82:60:d8:92:2b:bb:76:53:2e:f8:08:84:29:aa:04:
d7:58:07:88:f1:55:66:5b:0e:af:4f:a8:b0:f8:5f:
66:b8:df:5a:78:48:28:4a:d8:09:4e:eb:87:e5:0d:
ea:e3:a2:92:26:87:ce:d9:54:c0:d1:ab:32:fe:ae:
a1:25:c8:b1:e1:fc:de:03:fc:63:b8:22:e6:b9:bf:
1a:46:fe:26:eb:0c:3e:c7:1e:5f:6c:ba:d7:02:10:
34:db:95:0f:1c:8f:85:0d:3e:61:79:06:11:a5:e6:
8d:ae:39:75:c7:80:85:16:dc:85:2a:7e:df:ea:5b:
97:87:f5:66:a1:c2:9d:50:77:e2:6e:c3:53:3a:d9:
ec:bf:1a:91:a2:78:86:ee:ea:57:fd:b2:07:31:cc:
76:3a:2d:72:54:d8:b9:91:a4:8c:e0:9b:03:53:28:
17:d0:ef:00:c8:56:76:c4:4f:1d:14:7d:68:f4:14:
05:dc:3a:3e:8d:04:94:5e:56:61:dc:7f:34:43:ae:
2f:8d:8b:05:38:42:dd:96:42:3f:0a:f6:53:3f:bd:
6a:39:dd:66:41:2e:db:43:e5:45:26:26:e4:60:fa:
fa:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1A:F9:82:F5:BB:96:28:34:1A:E1:17:19:5B:64:9D:70:77:C7:F8
X509v3 Authority Key Identifier:
keyid:8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:2e:5b:44:79:6e:f0:bb:18:88:3b:21:09:e0:b4:39:e8:6b:
b0:78:03:25:b5:dc:68:54:26:53:e1:80:c8:65:a9:c4:94:ae:
d4:0d:f9:b8:7a:03:43:39:67:e3:7f:61:ae:40:93:f0:79:95:
a6:4b:02:ab:dc:e2:3c:64:fc:bc:17:17:b7:c5:b0:bc:5b:32:
aa:59:75:dc:20:de:0f:5d:19:99:f5:db:ce:3f:8d:40:6e:23:
db:eb:3d:80:66:2e:7c:de:29:ad:26:9a:20:ad:94:d4:a8:d5:
db:18:59:4b:f7:5f:6b:63:ed:a0:03:71:ff:c2:03:e9:9b:3f:
80:c2:6f:f3:36:f3:83:47:72:2c:af:e8:65:00:3f:61:b7:09:
df:8a:52:83:ff:e5:ab:1d:bd:1b:11:c2:59:20:eb:9a:99:8d:
d9:d5:ba:83:34:59:c3:89:ba:33:9f:81:0d:cb:52:c7:7d:ed:
31:65:72:74:7e:24:c5:59:10:9a:25:11:78:90:05:71:2f:51:
e1:6d:64:13:04:01:b3:ec:8e:aa:99:9e:a3:0a:01:97:31:f8:
81:a5:d0:b4:f4:2b:04:7d:88:55:6a:56:cf:fd:ec:5c:af:b1:
9e:a5:ba:48:b7:93:db:4a:33:46:50:a0:94:18:62:63:c5:44:
7c:7a:e5:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe+Wi7r41gR+pTZBHbUg2qxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMzY4ZmViOWU1NTNiZGQxMzE1NjI1ODRhMzM1M2IxZDc1
NTVjNTAwHhcNMjUwNjMwMDEwMTEwWhcNMjUwNzAxMDEwMTEwWjAzMTEwLwYDVQQD
EyhmODFhZjk4MmY1YmI5NjI4MzQxYWUxMTcxOTViNjQ5ZDcwNzdjN2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVVAlAOHUfMFf/4n1DxpKhTgcHwN
6GwkgoIU4yuCYNiSK7t2Uy74CIQpqgTXWAeI8VVmWw6vT6iw+F9muN9aeEgoStgJ
TuuH5Q3q46KSJofO2VTA0asy/q6hJcix4fzeA/xjuCLmub8aRv4m6ww+xx5fbLrX
AhA025UPHI+FDT5heQYRpeaNrjl1x4CFFtyFKn7f6luXh/VmocKdUHfibsNTOtns
vxqRoniG7upX/bIHMcx2Oi1yVNi5kaSM4JsDUygX0O8AyFZ2xE8dFH1o9BQF3Do+
jQSUXlZh3H80Q64vjYsFOELdlkI/CvZTP71qOd1mQS7bQ+VFJibkYPr6ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPga+YL1u5YoNBrhFxlbZJ1wd8f4MB8GA1UdIwQY
MBaAFI82j+ueVTvdExViWEozU7HXVVxQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanphUDY1NVZPOTBURldKWVNqTlRzZGRWWEZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8wNTQ3Y2ItYzVkYy00ZTJmLWFmZjct
M2VjYTdkZjJhZTU3LzEvanphUDY1NVZPOTBURldKWVNqTlRzZGRWWEZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8wNTQ3Y2ItYzVkYy00ZTJmLWFmZjctM2VjYTdkZjJhZTU3
LzEvanphUDY1NVZPOTBURldKWVNqTlRzZGRWWEZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEy5bRHlu
8LsYiDshCeC0OehrsHgDJbXcaFQmU+GAyGWpxJSu1A35uHoDQzln439hrkCT8HmV
pksCq9ziPGT8vBcXt8WwvFsyqll13CDeD10ZmfXbzj+NQG4j2+s9gGYufN4prSaa
IK2U1KjV2xhZS/dfa2PtoANx/8ID6Zs/gMJv8zbzg0dyLK/oZQA/YbcJ34pSg//l
qx29GxHCWSDrmpmN2dW6gzRZw4m6M5+BDctSx33tMWVydH4kxVkQmiUReJAFcS9R
4W1kEwQBs+yOqpmeowoBlzH4gaXQtPQrBH2IVWpWz/3sXK+xnqW6SLeT20ozRlCg
lBhiY8VEfHrlbA==
-----END CERTIFICATE-----
Generated at Mon Jun 30 09:58:10 2025 by rpki-client