Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
File: zjfKOryl4UrBG8fzwVYqZNY5HSI.mft (raw, json)
Hash identifier: XD+H6RRZsAc2sVHSOWXyQvLQBdrMca+FTbocCEkdi58=
Subject key identifier: 5A:15:DB:C3:5B:BA:94:7C:83:F9:7D:DC:5E:10:45:11:9B:EE:D9:49
Authority key identifier: CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22
Certificate issuer: /CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
Certificate serial: 0197CA5E1C37D5EED0A1B3AF9D2636BF8CFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
Manifest number: 14FF
Signing time: Wed 02 Jul 2025 09:00:54 +0000
Manifest this update: Wed 02 Jul 2025 09:00:54 +0000
Manifest next update: Thu 03 Jul 2025 09:00:54 +0000
Files and hashes: 1: 8kC1dXQut3Q7aEZLq-H6wHv58Nk.roa (hash: wdoh4a7LDX/nFwYQadnYTEwY/jj86xKk/h3rcKaZa3Q=)
2: T24HRLbgJbROlTALREch3AOYbaE.roa (hash: Wevs9VKSENwQtnqRkxhumLN/kRDIgG1A0UE3XstajKA=)
3: zjfKOryl4UrBG8fzwVYqZNY5HSI.crl (hash: Bm939NDzGCtD3aeBT0yZrYoeadV6AkTnHsBICNHv54k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:5e:1c:37:d5:ee:d0:a1:b3:af:9d:26:36:bf:8c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
Validity
Not Before: Jul 2 09:00:54 2025 GMT
Not After : Jul 3 09:00:54 2025 GMT
Subject: CN=5a15dbc35bba947c83f97ddc5e1045119beed949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4a:1c:3b:ab:ea:6d:4e:0b:e8:9c:49:2e:a8:
4d:11:b1:2b:8d:c9:e6:81:f9:1c:a1:4c:20:ca:8a:
e3:30:b9:f7:aa:92:28:de:4d:42:0c:2f:8a:3c:33:
9c:91:07:ff:02:94:32:a6:86:72:6c:fb:af:03:12:
3f:30:e0:8c:ad:f4:c6:cc:b3:66:f3:dc:dc:74:9d:
bf:95:22:99:62:f8:e0:87:d4:47:e0:40:82:ea:f9:
d0:e7:96:92:c8:6b:42:b2:ec:1d:9f:67:5c:72:b7:
68:e4:bf:30:a6:72:6f:c4:0b:ae:66:85:cc:b2:7f:
7e:9c:c3:9f:c2:5f:9f:a9:ce:f5:5e:f5:70:bb:91:
81:1e:01:49:bd:8a:19:98:21:31:d3:b1:c0:53:5c:
2d:03:3e:a8:57:3d:79:94:bd:39:f3:ab:42:6c:5a:
a3:a7:5f:4b:01:99:84:3e:23:f3:5c:51:2b:4a:fb:
59:1e:f8:1c:10:ca:3e:72:8d:05:b1:bb:4d:7e:21:
40:c6:a3:cc:44:25:c2:2a:29:99:38:a7:82:44:f8:
ee:1c:c3:d7:72:09:97:45:7c:22:3a:d8:73:68:18:
15:2a:db:b4:64:fb:ab:5d:c0:16:3d:df:0e:19:2b:
a8:75:6f:55:e6:73:ea:ac:ec:dc:c3:ae:6c:f6:aa:
8f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:15:DB:C3:5B:BA:94:7C:83:F9:7D:DC:5E:10:45:11:9B:EE:D9:49
X509v3 Authority Key Identifier:
keyid:CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:38:ab:5f:ef:b5:e7:a8:88:6d:72:65:b6:c8:f9:f2:b6:2a:
bc:da:69:8a:6b:d0:46:d8:24:be:a0:2b:1f:5d:8f:f5:fb:b4:
77:e5:12:6e:94:ad:8a:a8:1e:b9:35:fe:4e:83:a8:0c:22:ac:
bd:4d:81:85:66:e8:a4:6e:fd:12:b4:76:5b:9c:7e:81:7c:d2:
75:64:6b:59:e0:4d:e7:da:5f:b4:56:05:eb:ab:57:13:e3:b6:
7a:1c:57:8c:2a:41:f8:2e:72:6e:59:b7:90:39:d8:68:0f:0a:
10:4b:13:6b:df:ce:a6:6c:3e:69:0f:ee:d1:3c:b3:e3:4c:b7:
3d:b7:1d:30:89:24:99:e4:a1:0d:3e:22:ee:ee:59:01:82:ca:
4c:91:99:9f:db:03:5a:5b:50:1a:85:59:54:27:8b:bc:d2:94:
46:e6:df:05:f5:fc:47:e4:7e:19:25:eb:9c:8f:df:d9:57:2e:
82:a0:16:3f:b3:8c:7d:b7:ec:3f:8d:79:8c:01:bc:15:d2:13:
93:4e:f1:f0:c9:5b:8b:1d:64:9f:25:06:d7:88:08:59:c1:00:
45:39:ae:0c:c5:19:d3:e1:20:5d:e7:42:60:a2:de:f3:1f:b8:
e5:ed:b2:5e:4f:e3:85:c6:9c:be:b6:cd:74:62:23:df:cf:f5:
74:ae:b3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:35:48 2025 by rpki-client