Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
File: jzHMNgWz78CbJohQgGO2_UhVYd0.mft (raw, json)
Hash identifier: wkKKYpqHAa3/d7kntJJ9Bksdm3dK/K0fA0tBRPKpsak=
Subject key identifier: C1:BC:45:74:DC:18:8D:69:F2:A5:97:F7:70:0C:28:69:22:2D:93:A6
Authority key identifier: 8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD
Certificate issuer: /CN=8f31cc3605b3efc09b2688508063b6fd485561dd
Certificate serial: 0197B7B33FF7D6C93D4933C4044E3D4E3F4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
Manifest number: 0A9A
Signing time: Sat 28 Jun 2025 18:01:07 +0000
Manifest this update: Sat 28 Jun 2025 18:01:07 +0000
Manifest next update: Sun 29 Jun 2025 18:01:07 +0000
Files and hashes: 1: KGShywXbD4wB1PLsBTNT01VDQKY.roa (hash: hBh9EiIl2TqddpHizY/LGkFYV3Ncy9Yws3g05SvVJTg=)
2: jzHMNgWz78CbJohQgGO2_UhVYd0.crl (hash: TyPkRh9kI5m6EGtY0NkxfPOrFYXmv2QZAKeanmAe+dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:3f:f7:d6:c9:3d:49:33:c4:04:4e:3d:4e:3f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f31cc3605b3efc09b2688508063b6fd485561dd
Validity
Not Before: Jun 28 18:01:07 2025 GMT
Not After : Jun 29 18:01:07 2025 GMT
Subject: CN=c1bc4574dc188d69f2a597f7700c2869222d93a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c4:e0:71:ad:36:52:1a:6d:ef:fc:d0:20:c0:
d3:85:07:c4:0c:01:50:83:31:fe:ad:e9:0b:46:81:
f2:83:4b:78:4f:2b:b1:0b:db:70:06:a7:c3:62:6f:
ff:66:ae:36:98:02:c7:b7:1c:5e:1b:1f:99:34:d7:
bc:85:0d:f8:5b:1f:72:63:d8:a1:63:0e:3c:fd:2d:
52:7c:00:83:56:5e:46:4b:0f:d4:6e:10:b1:b6:df:
76:b2:e8:b7:8d:a6:f9:82:54:c8:0e:60:34:88:38:
dc:a4:da:17:5b:61:0f:d2:0c:ad:0c:11:92:fc:39:
a7:90:06:41:e3:92:f5:1d:f1:7b:27:6a:d0:01:32:
61:cd:98:ed:4e:5e:8e:14:cc:b4:64:6f:df:85:74:
84:1d:19:7c:66:c2:67:06:50:36:9e:97:09:6f:22:
ed:36:83:12:d1:e3:5d:ca:0b:68:58:c7:54:84:1d:
2a:f7:b2:14:dc:92:77:a8:09:8a:48:92:58:a2:1b:
15:ab:dc:50:d0:11:d7:28:23:b2:0c:4c:d4:8f:35:
b2:2a:07:63:fd:0c:37:07:ba:bf:23:95:93:b5:e5:
d8:69:e9:5a:2e:fe:90:d7:9d:a1:eb:e5:d8:34:b7:
0e:52:fe:37:0c:8a:69:f6:14:0f:40:86:fe:8e:75:
fc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BC:45:74:DC:18:8D:69:F2:A5:97:F7:70:0C:28:69:22:2D:93:A6
X509v3 Authority Key Identifier:
keyid:8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:0b:92:b0:6f:4f:6c:86:2b:ef:e5:16:71:7c:44:d2:da:b0:
4f:51:f8:e3:75:3b:6d:e6:23:f9:91:18:95:5e:d2:9a:3b:f7:
2a:b9:9e:75:3a:75:31:67:a5:b7:e5:bf:75:ec:b9:9a:f2:08:
50:19:e4:a0:c2:93:ef:ae:ed:e0:ba:d5:68:e9:ab:0f:0e:33:
0b:68:fd:96:fa:a1:6e:91:b0:4e:d6:aa:1f:e3:8f:8f:ab:75:
6c:8b:19:fb:33:d4:8b:8b:0b:92:46:f4:8a:05:d9:66:e0:cd:
3d:7c:01:11:a0:43:4e:cb:0b:e0:0c:fc:58:e5:2d:63:fa:2e:
35:76:2d:fa:e4:84:a3:19:5f:8a:4b:8d:93:c6:f8:04:bc:98:
f3:f2:a5:57:ca:2e:f6:0e:15:83:b8:16:ec:f7:82:bf:f9:ee:
e9:6b:89:f8:8b:1f:2d:54:70:03:4d:58:d4:b2:79:79:67:12:
9a:93:25:34:f2:66:f5:76:1d:0e:a2:cb:6d:2b:bc:8c:74:66:
ce:0d:13:af:d5:4d:eb:6b:13:8e:df:0f:e7:9d:83:22:32:36:
34:59:2d:78:2e:88:33:76:bf:c9:a6:49:1d:15:b6:d3:8a:49:
57:59:90:02:dd:f4:a9:bd:0c:fd:f2:04:46:72:f6:70:c7:bc:
3e:08:7f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:06:01 2025 by rpki-client