Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
File: jZg6B-bbi8SUyI370TF7qBDS0no.mft (raw, json)
Hash identifier: LZTGCaILxP7ytqR0lFiW7IcrCMMI0bU19B/idtXMlN0=
Subject key identifier: 23:BA:85:EC:BD:BB:30:E1:B4:2B:83:52:9A:F8:9D:4E:87:11:63:09
Authority key identifier: 8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A
Certificate issuer: /CN=8d983a07e6db8bc494c88dfbd1317ba810d2d27a
Certificate serial: 0197CB3A6573E75B6048C911CFDD4567253D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
Manifest number: 1204
Signing time: Wed 02 Jul 2025 13:01:31 +0000
Manifest this update: Wed 02 Jul 2025 13:01:31 +0000
Manifest next update: Thu 03 Jul 2025 13:01:31 +0000
Files and hashes: 1: 4-WfO6vi57usPTB05BV5GJ31rGM.roa (hash: VA1gjhdShA/9i1dmr35uQ85UKyhc+8PsGP0Wp/sm8Mw=)
2: jZg6B-bbi8SUyI370TF7qBDS0no.crl (hash: DZYLx5e5Zhbbo51RsumBSgHEgEv77Ewc8V5f6aTceZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:3a:65:73:e7:5b:60:48:c9:11:cf:dd:45:67:25:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d983a07e6db8bc494c88dfbd1317ba810d2d27a
Validity
Not Before: Jul 2 13:01:31 2025 GMT
Not After : Jul 3 13:01:31 2025 GMT
Subject: CN=23ba85ecbdbb30e1b42b83529af89d4e87116309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:76:77:f5:fc:1a:39:6a:8f:b7:19:f3:5c:62:
e2:12:6e:07:34:05:fd:fd:ca:ea:b2:55:47:c5:94:
67:6d:46:ad:3f:c9:77:50:3a:08:1e:a5:eb:db:e0:
b8:8b:32:86:57:75:1d:a8:2d:1d:e8:9f:fb:71:1a:
53:9e:da:0e:ba:ba:e9:e1:43:26:b8:16:55:cd:58:
58:32:f5:e3:7c:15:63:94:7d:bf:1e:df:20:4d:be:
12:e5:68:92:e4:02:80:a4:e3:e0:42:d9:c6:58:34:
8e:47:f4:7c:7f:6a:2f:e2:df:c4:e8:f8:b9:86:5a:
7d:a6:7a:39:fc:cc:58:6c:51:d0:f8:db:4c:9f:21:
19:15:08:90:9d:18:e5:5e:90:17:36:eb:e3:19:93:
9b:6e:83:17:8a:60:e2:80:7f:33:33:4b:9f:c5:ff:
b7:ba:da:23:fc:50:30:ab:9d:2e:eb:c4:26:eb:e7:
c8:88:73:17:51:78:8f:5c:ca:d0:f0:70:26:fe:fc:
2b:b7:ad:4d:5e:63:3d:9a:55:59:f4:7c:61:e9:88:
9a:4a:e2:3e:bf:e5:60:12:28:b0:9d:9e:2d:f2:d9:
81:4a:97:11:9d:51:26:88:fe:d8:74:79:51:9a:5d:
c8:8c:52:13:f8:fb:4a:7f:53:fe:54:96:cf:d5:de:
af:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BA:85:EC:BD:BB:30:E1:B4:2B:83:52:9A:F8:9D:4E:87:11:63:09
X509v3 Authority Key Identifier:
keyid:8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:9b:c0:e6:51:6e:21:6c:57:e0:15:df:d2:03:f0:1e:f3:19:
db:13:0a:8a:81:c2:e5:c6:40:8e:bb:1e:d3:0f:07:d8:a7:db:
1a:ad:ec:c0:ba:7a:ae:9d:af:f0:ee:cf:b5:f7:dc:bc:1b:58:
9e:a9:bc:c0:be:68:b2:a2:dc:f8:2d:33:3d:6f:c3:01:70:1a:
eb:05:74:c7:8e:23:c3:5a:ec:9a:9e:47:e7:31:d2:ad:56:4e:
17:75:7d:3a:ed:f4:d0:e8:0b:e4:d5:9b:e6:f0:e1:91:b7:fb:
b0:c6:c3:54:0a:e9:f2:bc:62:b3:42:de:2d:7f:15:f7:da:12:
0a:23:12:ca:5b:1a:5b:50:5a:46:ff:4e:7b:b0:99:2f:97:3c:
b9:58:c2:a4:af:de:71:6b:7a:28:e5:a3:a7:6c:2e:98:9f:2d:
8f:d2:58:69:aa:fa:1e:88:1b:a5:d1:f7:2b:aa:52:b1:13:1b:
22:64:44:34:d9:60:55:17:6a:f9:b8:67:88:48:f3:5c:6f:94:
d5:5f:ef:50:1f:73:c5:13:36:6c:a8:0b:6e:66:3c:a8:c0:e4:
e3:30:ab:41:83:db:a8:b1:15:17:37:9a:b6:f1:2a:d1:d5:c8:
0c:c2:90:61:1b:6a:74:01:98:7e:f8:35:a4:80:54:87:cc:06:
3f:33:6d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:18:06 2025 by rpki-client