Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft
File: ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft (raw, json)
Hash identifier: 8tgp2Z9nPEXXPSdPj9yIyCfOJDQxKNe4r68N8/2L/Kc=
Subject key identifier: 73:70:8F:B0:89:9B:2F:0E:A2:C8:D3:69:23:36:2E:5F:F2:E7:63:04
Authority key identifier: 64:95:0E:4E:58:D6:AC:27:F8:0F:09:A5:ED:2F:30:28:B8:1A:E8:CA
Certificate issuer: /CN=64950e4e58d6ac27f80f09a5ed2f3028b81ae8ca
Certificate serial: 0197B632BAC5E2DEC04F5635603A9B92FC65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJUOTljWrCf4Dwml7S8wKLga6Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 11:01:07 +0000
Manifest this update: Sat 28 Jun 2025 11:01:07 +0000
Manifest next update: Sun 29 Jun 2025 11:01:07 +0000
Files and hashes: 1: WuLl5WEm72PKP2EjN4PzkOllUEM.roa (hash: l/LlCxiGWXMwDilSjuK8TtyovKGo3UjHdGI+bjDVpFw=)
2: ZJUOTljWrCf4Dwml7S8wKLga6Mo.crl (hash: +R3pNJjN/rhoVcrdkvwb3U350VrZpk6NumJaZQ+eXac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJUOTljWrCf4Dwml7S8wKLga6Mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:ba:c5:e2:de:c0:4f:56:35:60:3a:9b:92:fc:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64950e4e58d6ac27f80f09a5ed2f3028b81ae8ca
Validity
Not Before: Jun 28 11:01:07 2025 GMT
Not After : Jun 29 11:01:07 2025 GMT
Subject: CN=73708fb0899b2f0ea2c8d36923362e5ff2e76304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:47:0d:82:29:7b:c3:23:a8:d6:56:45:4b:fe:
2f:41:bb:64:b7:3e:99:1b:97:27:5e:26:c9:89:59:
8a:91:8f:15:7d:6d:38:c0:98:b2:27:1d:81:a2:35:
61:a4:c7:f4:a9:63:b4:b8:04:51:7e:f5:cd:6b:60:
0f:b6:05:b3:4b:60:bb:18:bd:85:e6:bc:aa:98:bb:
24:60:dd:36:4b:b8:49:c2:74:82:47:c5:96:57:4e:
52:de:50:72:d9:d5:d6:b5:52:73:73:46:aa:01:bc:
c8:24:60:c5:06:6f:82:f0:31:49:53:a6:c3:c5:f7:
73:65:21:2a:af:8a:f8:94:76:1a:0f:bc:73:8b:2a:
5f:90:7e:ad:e6:d7:67:c3:70:83:2e:0d:8a:4c:bf:
d2:6a:89:a1:eb:46:ff:69:ed:bb:9e:6f:b7:fb:7a:
a5:87:18:55:23:e5:f3:b7:d9:7a:e4:0f:e3:42:73:
14:44:13:08:3d:76:aa:8c:02:1f:61:f9:50:f7:2f:
e9:f2:ff:56:9f:df:59:1e:7f:65:83:64:9a:94:ef:
50:e2:84:0e:69:5b:77:82:f9:24:d0:c8:53:89:85:
b2:c6:c2:0f:1d:94:b0:17:2b:66:3d:a0:cf:14:bc:
a6:8d:13:87:2a:65:b9:cf:12:30:08:ef:8b:24:0a:
c2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:70:8F:B0:89:9B:2F:0E:A2:C8:D3:69:23:36:2E:5F:F2:E7:63:04
X509v3 Authority Key Identifier:
keyid:64:95:0E:4E:58:D6:AC:27:F8:0F:09:A5:ED:2F:30:28:B8:1A:E8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJUOTljWrCf4Dwml7S8wKLga6Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:d5:31:ed:64:96:17:63:3c:4b:7a:74:ef:65:fa:a3:b5:5e:
f9:a3:11:b3:bf:3d:74:6b:03:3b:a1:c7:0f:62:0e:97:d7:e2:
05:e8:6c:12:2c:e3:46:25:a5:12:1f:cd:9c:45:2e:34:12:b8:
62:97:b4:44:97:27:af:40:bd:e5:ac:d7:63:f4:f9:52:d8:54:
ac:10:f8:e0:0a:d0:4d:26:eb:9f:3d:32:34:9f:88:fe:7f:5c:
bd:17:14:30:87:d4:0e:81:0e:65:5f:2c:41:41:5b:c0:5c:5b:
2f:11:a8:15:ea:08:5a:c2:07:75:a6:d1:24:b7:58:a4:c1:16:
92:45:25:70:0e:6e:56:21:c1:e5:53:28:b1:4e:35:19:bb:95:
c2:37:81:61:ef:de:d6:03:16:a7:d2:41:cc:51:16:6a:a6:8f:
2b:46:13:64:af:60:0e:f3:a4:e6:d8:c1:25:d1:a0:eb:95:11:
2b:f3:18:08:00:a5:1a:e3:92:43:4f:dd:89:8d:20:66:4e:ab:
fb:15:b5:1b:18:26:f0:57:52:2c:79:9d:7a:51:c3:bb:ce:f6:
6f:1a:88:2d:32:43:cb:3e:37:d0:24:36:f2:86:c8:4f:f7:0a:
26:6b:c0:f8:61:3e:30:e4:72:14:fc:4f:e2:2e:6a:e6:79:e0:
35:e7:a8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:42 2025 by rpki-client