Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
File: jzZAFzNC-uiz0sjMH5td3RSUiT8.mft (raw, json)
Hash identifier: WXYzzkcHV95+a68yfcIkyKtqT+AVyX8UbW8dcPF7WHM=
Subject key identifier: E9:92:94:81:54:28:6B:44:BC:A2:11:6D:72:32:15:A7:48:F5:97:9C
Authority key identifier: 8F:36:40:17:33:42:FA:E8:B3:D2:C8:CC:1F:9B:5D:DD:14:94:89:3F
Certificate issuer: /CN=8f3640173342fae8b3d2c8cc1f9b5ddd1494893f
Certificate serial: 0197B8210203FD8D2FCCEA5B81BE9D8637B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
Manifest number: 137E
Signing time: Sat 28 Jun 2025 20:01:00 +0000
Manifest this update: Sat 28 Jun 2025 20:01:00 +0000
Manifest next update: Sun 29 Jun 2025 20:01:00 +0000
Files and hashes: 1: NS4aUYlRSBiLTkLyyg7u-X42X1Q.roa (hash: r06qcWYpFC8YgZh35Sp5HzeJjcmGRBfHKZK7KBnJFGA=)
2: jzZAFzNC-uiz0sjMH5td3RSUiT8.crl (hash: olp+12Qgkw1f6W/NVM1vEZpagfJh5CEeYaXcQ+454AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:02:03:fd:8d:2f:cc:ea:5b:81:be:9d:86:37:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3640173342fae8b3d2c8cc1f9b5ddd1494893f
Validity
Not Before: Jun 28 20:01:00 2025 GMT
Not After : Jun 29 20:01:00 2025 GMT
Subject: CN=e992948154286b44bca2116d723215a748f5979c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:95:b1:86:cb:d4:65:eb:74:74:fb:97:c6:f7:
28:67:53:d3:49:ad:51:97:a6:d6:a8:23:5f:57:15:
dd:6b:0a:86:4a:b4:bf:6e:59:ee:eb:05:75:35:77:
0a:68:9e:cc:e7:83:91:62:5a:e7:a9:59:17:a4:2a:
2b:3c:5e:38:ea:cc:db:7e:2f:b1:3d:8d:85:08:67:
4c:d1:41:ef:e6:04:76:77:81:f9:5f:bc:2f:9f:ba:
74:70:05:25:d7:6e:f0:bd:13:47:d4:de:df:dc:cb:
51:2d:fe:bc:ec:c9:0f:68:c3:7f:61:c2:3b:b1:88:
5f:03:f7:a9:de:84:01:4d:71:b1:ca:13:76:6c:0f:
a8:a5:62:16:b5:7d:82:ea:38:04:4c:5c:3b:d2:51:
13:b4:92:56:b0:f5:ee:2d:ad:33:cb:2d:1f:98:6e:
14:ff:55:98:51:66:aa:69:04:a5:32:03:4b:d0:35:
76:fb:be:6c:3c:54:55:dd:de:ab:68:5b:3d:a6:01:
c4:ee:5b:71:d9:96:1d:1d:51:94:f6:c5:a9:10:f4:
8e:08:10:7f:33:83:d8:0e:23:46:3c:58:19:c3:ba:
a7:47:c4:67:0f:fb:f6:94:5c:0d:06:d6:f8:9a:95:
f4:04:4a:a3:4a:99:b9:42:0b:0c:cb:ea:29:b6:cd:
41:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:92:94:81:54:28:6B:44:BC:A2:11:6D:72:32:15:A7:48:F5:97:9C
X509v3 Authority Key Identifier:
keyid:8F:36:40:17:33:42:FA:E8:B3:D2:C8:CC:1F:9B:5D:DD:14:94:89:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:52:b6:87:c1:a3:92:f3:e6:15:1f:39:44:db:9b:0e:70:c3:
94:8a:8e:3e:c3:50:80:c7:27:2d:c6:28:dc:82:f0:51:bc:f7:
b1:aa:f2:c5:db:e7:f4:45:63:9d:b9:1c:8b:95:49:5b:61:93:
60:a2:5f:d4:d3:d6:9f:b1:51:31:24:b1:cb:9e:88:c3:d9:75:
fc:10:fb:d1:58:20:e9:61:2e:41:de:10:22:0d:a2:b3:cb:de:
0f:71:10:3e:be:27:80:48:4f:e6:62:aa:0d:a4:39:c2:04:6f:
8f:d6:9c:90:c8:0e:34:92:f3:51:26:b9:fc:dd:3b:45:f3:fc:
54:34:5e:e9:4b:02:38:d9:10:c2:21:e7:fb:a1:a8:d8:d5:0b:
b5:b3:ed:38:7b:a6:a2:29:b2:17:dd:7d:e9:87:79:41:9c:22:
8a:b8:51:cc:5c:25:d2:be:13:47:f6:25:4a:30:21:93:52:98:
87:e9:e5:5e:a9:00:b9:0f:25:54:54:59:6f:97:38:d2:01:10:
2e:04:51:f8:ae:ce:a3:58:f5:59:db:2b:a4:00:cd:96:af:43:
22:cf:8c:5c:67:41:5b:ff:ce:3f:55:69:0e:0f:4e:41:8b:4d:
5a:5e:2b:e2:65:93:e1:d6:2d:29:fc:4e:dd:73:80:ce:1b:4b:
91:3a:8d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:53:31 2025 by rpki-client