Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
File: jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft (raw, json)
Hash identifier: SboruiBA6BUzDqSPt0pK9iK5k6e4545zpV0XH/KzHic=
Subject key identifier: 2A:35:AB:9F:A6:7F:BF:79:4D:47:3F:C0:5D:88:42:E9:92:1C:9E:9E
Authority key identifier: 8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6
Certificate issuer: /CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
Certificate serial: 0197C72618A93A47D643FF94A3C7E83EED2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
Manifest number: 1550
Signing time: Tue 01 Jul 2025 18:00:51 +0000
Manifest this update: Tue 01 Jul 2025 18:00:51 +0000
Manifest next update: Wed 02 Jul 2025 18:00:51 +0000
Files and hashes: 1: 77z8QXKc8ERahKIbASlcnYfSpXA.roa (hash: 4+qUdKw0CqogSD0bEzw5oz5fN5HdO2eQJ/PSKGd57hQ=)
2: Vp9dMAyfVmCM5zZQhLE8hK5dRc0.roa (hash: 5cnih+GaWo66TQ4L2W2BbOxLKl4dL4P027VTj45pMMU=)
3: jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl (hash: D24sQ42pZKQUSInzblKGPOnTcP7i1RN9Quh1+Wp7YnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:26:18:a9:3a:47:d6:43:ff:94:a3:c7:e8:3e:ed:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
Validity
Not Before: Jul 1 18:00:51 2025 GMT
Not After : Jul 2 18:00:51 2025 GMT
Subject: CN=2a35ab9fa67fbf794d473fc05d8842e9921c9e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:01:f9:c5:d3:f5:1a:6f:2c:1c:48:ee:9b:d9:
83:73:95:ee:0c:b4:58:b9:4f:b2:c3:20:52:a6:b9:
26:be:d2:3c:7b:0a:92:a4:37:3f:2d:cb:aa:b5:3e:
98:df:92:f4:a2:e3:fc:d5:fc:66:03:76:9f:97:3f:
75:f7:c6:39:75:57:b3:39:e7:0a:49:01:f4:db:ae:
3e:9a:6b:da:eb:23:eb:6c:ca:8b:77:fb:4d:e5:ed:
3b:27:f9:af:d6:65:f0:ae:47:b8:1f:37:bd:a8:10:
be:46:1e:7c:71:6f:84:8f:e2:3d:39:61:26:d2:e4:
f6:54:58:7e:92:09:f0:0c:eb:a1:de:7f:d4:f5:59:
15:cd:fc:5c:a3:ac:50:20:18:82:88:a5:ac:ba:ed:
5f:18:48:31:62:96:40:54:92:9a:92:ff:91:dd:27:
db:f4:6b:39:d1:76:a4:72:0b:f9:b7:e6:2a:e3:97:
45:8c:3c:f3:f4:55:21:2b:3d:7e:08:db:84:ce:5e:
de:d1:b1:9d:6a:56:f1:12:5d:cb:96:e8:ef:01:fb:
fd:ea:b8:7a:62:f7:b1:6f:57:a6:fd:55:27:2b:37:
22:71:54:79:a7:75:77:3c:14:7e:a7:09:06:e3:f2:
34:2f:87:e4:08:95:10:63:ad:ad:62:e9:10:e4:78:
8f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:35:AB:9F:A6:7F:BF:79:4D:47:3F:C0:5D:88:42:E9:92:1C:9E:9E
X509v3 Authority Key Identifier:
keyid:8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c1:96:71:8b:a3:dc:b8:44:69:4d:a1:a3:40:b6:ed:fd:05:
e6:5e:42:5c:ce:06:b9:fe:11:3e:76:be:92:7f:f2:41:86:7d:
c4:fc:ed:7f:7e:de:18:f4:bd:1f:97:0d:2e:91:75:20:10:b7:
95:cb:e6:99:49:ba:4d:7c:86:da:96:34:94:65:12:16:ec:b2:
d7:ef:6c:ce:d3:4b:52:c4:bb:46:82:fe:6c:7a:8a:95:8d:fb:
e8:99:ff:0b:2e:a2:45:84:c3:11:de:9c:f9:19:a1:b3:f4:5f:
33:65:dc:ba:72:a7:11:c4:1a:c0:36:88:1f:c4:51:a1:6e:e8:
76:6a:c4:22:67:c7:03:a2:91:5d:f7:34:40:a3:3c:fa:b6:2e:
d1:da:4b:d0:fc:ec:d2:4d:27:d0:df:7d:67:5f:d3:fa:5e:ab:
81:84:50:86:e8:22:26:6a:fe:2e:c4:4b:0c:bc:1f:58:77:9f:
2a:92:67:c4:21:fb:47:1c:06:d7:96:f0:66:8f:b6:cc:37:f3:
ee:1a:ea:c5:5f:2c:c8:af:af:0a:41:84:6e:c9:46:40:93:e4:
91:13:70:0c:96:44:e6:b6:b2:f7:04:cd:dc:24:18:ad:98:1a:
53:21:31:29:a3:a2:8c:b3:5f:c2:01:b0:d8:27:26:6c:99:2f:
26:f4:53:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:39:05 2025 by rpki-client