Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
File: caJzmyDCWcXRs4jRRT9vF5nyj2w.mft (raw, json)
Hash identifier: ObceV+tK5reuAiO4mjOhupg9fj0HxT4VMFkJUcGoCn4=
Subject key identifier: F7:A3:E7:05:EC:05:E3:E3:3B:78:19:F2:9E:C6:FC:6F:56:00:5D:5B
Authority key identifier: 71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
Certificate issuer: /CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Certificate serial: 0197B8FD07FAD56991DD7441AAFB5A93BD90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
Manifest number: 030E
Signing time: Sun 29 Jun 2025 00:01:19 +0000
Manifest this update: Sun 29 Jun 2025 00:01:19 +0000
Manifest next update: Mon 30 Jun 2025 00:01:19 +0000
Files and hashes: 1: 5TxBRMul-Sk6vrxAy-O3Gig1UHg.roa (hash: eQW3KPMxFJcTn3nfO5KDUYdR77aYysAZcOPu9j2QK1w=)
2: NnS9tE0Wd3GJX8d4rDN6hefth0k.roa (hash: iMULd1rU9nLxXdG6/iod6VTsBhibbUWJ3DwkFA8v85s=)
3: R5EoUABcKiwLg06w_OxlkJfMqUk.roa (hash: irt2J6S0P6bVoeLD1I6fHpK1oay2SiSe0bMOlV1dUxk=)
4: caJzmyDCWcXRs4jRRT9vF5nyj2w.crl (hash: cjySh65KKhEFx/B7jN2VZBVyzfuKZxPeMVsYZMo/i8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:07:fa:d5:69:91:dd:74:41:aa:fb:5a:93:bd:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Validity
Not Before: Jun 29 00:01:19 2025 GMT
Not After : Jun 30 00:01:19 2025 GMT
Subject: CN=f7a3e705ec05e3e33b7819f29ec6fc6f56005d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ab:4a:69:3b:6a:d2:08:78:5c:13:45:99:39:
6a:2f:bc:4d:15:99:87:95:5b:c1:c1:84:4e:8a:f4:
2e:00:48:ac:c7:f7:25:31:44:a4:f8:03:75:96:22:
22:0a:44:bb:8a:63:71:f7:91:98:67:c4:52:f4:f2:
3e:09:48:f4:c4:95:93:20:31:c3:aa:fa:2c:bd:6e:
36:11:fe:da:94:99:85:34:64:d4:11:6f:7e:04:0a:
86:71:53:00:a3:e4:85:a5:66:98:5a:a3:47:09:9e:
0d:60:3e:c4:26:52:39:7f:14:d5:dc:70:c2:7d:53:
6d:20:c5:c3:f0:87:55:64:8e:fd:b8:2c:42:6e:17:
1c:33:95:0e:ab:26:44:54:ec:b1:2d:5f:22:e9:9e:
55:40:a1:0e:1a:65:c8:e5:0f:de:f1:79:48:cf:d5:
f9:22:26:d8:7c:cb:bb:c0:94:b9:4e:88:2f:65:6c:
c6:5e:c2:4c:7e:7c:80:e2:eb:a6:80:51:58:d8:f2:
1d:13:3f:8b:7a:5b:3b:62:46:98:a0:73:d8:20:a9:
26:6a:f3:ac:11:09:09:f4:45:cf:9b:3a:63:df:05:
82:43:9c:34:96:8e:08:de:2c:5b:10:c0:8f:91:8e:
d0:05:36:f5:f9:a7:9b:0a:a8:8e:b0:7a:ac:ad:0a:
77:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A3:E7:05:EC:05:E3:E3:3B:78:19:F2:9E:C6:FC:6F:56:00:5D:5B
X509v3 Authority Key Identifier:
keyid:71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:18:77:7e:de:2a:d2:59:0a:76:04:4e:65:7a:8a:28:ca:2c:
83:4b:c1:60:44:a9:00:78:b4:78:96:1d:d8:06:17:7b:55:a0:
96:01:76:eb:b1:9f:9c:33:81:53:24:15:ec:03:e0:0a:b0:87:
b5:27:3b:a0:71:04:b8:d7:c0:19:65:73:85:23:c6:88:e7:a1:
ad:a6:76:5a:c6:b8:28:d3:7b:4f:8c:da:1c:f5:2f:b6:b4:54:
18:e0:e1:b8:c3:60:08:86:1a:3a:3b:7e:c9:6b:10:13:2f:90:
4c:3a:ae:52:58:c2:af:04:39:56:ea:0d:bd:01:2b:47:f4:47:
e0:79:4a:e0:0b:6c:5e:30:42:63:11:23:59:16:a6:4d:0b:95:
3d:91:a1:d0:f1:ce:f9:67:95:b7:0a:43:34:3a:ba:3a:00:8d:
2e:66:79:ba:ab:59:ae:cf:a7:94:08:d8:d6:4e:a8:15:7f:36:
68:84:eb:99:c6:16:02:3f:d2:8f:2d:50:ee:ad:8b:b3:69:e0:
2d:5f:31:70:a5:23:cb:25:1c:33:03:f8:d2:d7:c6:48:82:55:
72:a9:34:b7:b7:56:fb:37:43:ba:18:bc:2d:98:ee:86:59:3f:
3b:4d:b0:bf:3f:be:80:c4:6d:fb:cc:d7:22:cc:be:9f:c2:d1:
fa:c3:d3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:07:13 2025 by rpki-client