Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
File: caJzmyDCWcXRs4jRRT9vF5nyj2w.mft (raw, json)
Hash identifier: 7gU8ncJQxe0/RakY6dXpX8s+zU4cJhzO3/FOsoTDskQ=
Subject key identifier: 4B:36:43:69:9B:E3:0E:B9:E9:02:6C:55:E8:B6:16:AA:3E:88:0D:8A
Authority key identifier: 71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
Certificate issuer: /CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Certificate serial: 0198D4E04B8940EB3CD880AB0BF03F87B921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
Manifest number: 03A1
Signing time: Sat 23 Aug 2025 03:02:05 +0000
Manifest this update: Sat 23 Aug 2025 03:02:05 +0000
Manifest next update: Sun 24 Aug 2025 03:02:05 +0000
Files and hashes: 1: 5TxBRMul-Sk6vrxAy-O3Gig1UHg.roa (hash: eQW3KPMxFJcTn3nfO5KDUYdR77aYysAZcOPu9j2QK1w=)
2: NnS9tE0Wd3GJX8d4rDN6hefth0k.roa (hash: iMULd1rU9nLxXdG6/iod6VTsBhibbUWJ3DwkFA8v85s=)
3: R5EoUABcKiwLg06w_OxlkJfMqUk.roa (hash: irt2J6S0P6bVoeLD1I6fHpK1oay2SiSe0bMOlV1dUxk=)
4: caJzmyDCWcXRs4jRRT9vF5nyj2w.crl (hash: xoj2jcox2zWi5lfIhX3WB+Ak5rav/mztlVNI9pYfDGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:4b:89:40:eb:3c:d8:80:ab:0b:f0:3f:87:b9:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Validity
Not Before: Aug 23 03:02:05 2025 GMT
Not After : Aug 24 03:02:05 2025 GMT
Subject: CN=4b3643699be30eb9e9026c55e8b616aa3e880d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1a:4d:41:40:e8:5b:8d:a8:cc:92:14:f2:66:
37:23:3d:59:48:ed:9a:ce:20:0d:bd:b7:d0:8f:39:
2f:5f:34:ae:62:05:a4:bb:f6:c9:8c:30:b3:46:73:
18:55:62:f5:cb:8b:ec:db:4f:07:5f:2d:89:b9:73:
7f:e9:79:c7:f7:5c:8d:1f:df:cb:d2:ee:bb:77:67:
cf:74:c7:cb:00:58:00:da:4e:ae:a0:db:f4:d2:7f:
92:98:43:02:15:c0:08:46:5e:be:4b:31:b1:e6:cb:
79:13:93:b0:75:d4:e1:43:a7:3b:5e:3a:b9:dd:e3:
39:9f:32:b0:00:f8:33:0c:20:58:49:00:78:34:bc:
a6:a5:72:e3:07:e6:10:12:c3:ea:2d:e4:77:7d:cf:
5f:83:af:99:75:d6:22:9c:38:9e:58:6c:77:e0:fd:
87:34:82:65:02:2d:1f:dc:03:f8:dd:8a:2c:6e:a4:
d2:82:71:82:e5:2a:b0:5e:bb:c5:6f:ec:f4:b9:c5:
45:9d:68:1a:a8:15:80:d4:3e:18:7b:a3:3b:cf:87:
c8:a2:98:29:4a:12:5b:77:b5:83:4e:ee:30:fc:c9:
58:4f:79:d5:c3:86:10:bc:26:c3:61:fc:e5:6e:22:
be:68:a5:2c:97:9e:99:d9:87:2d:37:d1:d8:f9:69:
7e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:36:43:69:9B:E3:0E:B9:E9:02:6C:55:E8:B6:16:AA:3E:88:0D:8A
X509v3 Authority Key Identifier:
keyid:71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:13:87:9b:c0:dc:19:6c:04:1d:09:3b:17:43:5f:ad:b1:48:
45:c9:92:f0:c0:06:9e:fd:4a:fe:f5:1c:16:8c:2d:71:28:cd:
7a:82:4d:27:3b:49:db:f2:4f:42:87:b7:80:f1:f7:58:97:5d:
e4:e7:6a:9b:5e:7a:05:86:19:09:a1:29:22:8f:54:41:ae:e2:
ec:c8:f3:81:28:c7:58:68:2e:07:d2:80:c6:4f:d8:b6:d2:06:
d1:66:d4:9f:6e:4b:be:3d:f4:73:5f:8c:ee:a7:35:0e:d0:30:
5c:32:b5:2b:f6:f9:69:46:bd:c8:67:b4:f5:58:7b:a1:24:4c:
85:8e:d5:c3:88:68:8e:eb:a9:83:b5:45:04:e7:8f:2b:4e:c2:
27:d7:c4:e6:80:07:69:d0:76:9d:ec:bb:1e:07:2a:e7:76:df:
27:25:86:ec:0d:b1:8e:43:33:5c:2f:ef:c0:d9:86:04:29:14:
c8:6f:ad:7e:bf:75:50:aa:b3:74:c8:83:bd:3f:cf:5a:03:dd:
42:1b:4e:da:c7:5c:6c:73:19:e7:6a:27:1b:bf:38:09:57:ee:
0b:a0:f2:31:72:6a:d4:4b:f6:de:97:9b:9d:a5:27:ea:ba:47:
0c:ac:24:6a:0d:50:39:b9:1d:b4:c2:0b:92:38:f4:c6:32:cb:
99:d4:f3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:58:46 2025 by rpki-client