Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
File: ZJn3HhXA84zrolfTAwTtRL6ofFA.mft (raw, json)
Hash identifier: PR8GAFeb7XKBVLeZDhpCerPsiZ9tzvC6W3Q8/EWCMCg=
Subject key identifier: 12:97:74:4A:C3:F0:74:BB:60:8E:4B:F8:78:9F:F9:EF:52:2D:F5:C9
Authority key identifier: 64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
Certificate issuer: /CN=6499f71e15c0f38ceba257d30304ed44bea87c50
Certificate serial: 019768BC3ED10E45F6D95E59336F4A9D7213
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
Manifest number: 158B
Signing time: Fri 13 Jun 2025 10:00:56 +0000
Manifest this update: Fri 13 Jun 2025 10:00:56 +0000
Manifest next update: Sat 14 Jun 2025 10:00:56 +0000
Files and hashes: 1: EGFdZlaTjbOVYClf_Y2avAhZpcQ.roa (hash: x3O5tXnddOP1tRMR1naKV9GJx9HqGBOVan7EV3M3azI=)
2: ZJn3HhXA84zrolfTAwTtRL6ofFA.crl (hash: e9eZ0YcPM3iSoqfGRAt+N144ls+BZhaEV7wabbvgtKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:3e:d1:0e:45:f6:d9:5e:59:33:6f:4a:9d:72:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6499f71e15c0f38ceba257d30304ed44bea87c50
Validity
Not Before: Jun 13 10:00:56 2025 GMT
Not After : Jun 14 10:00:56 2025 GMT
Subject: CN=1297744ac3f074bb608e4bf8789ff9ef522df5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c2:cf:6e:d0:47:00:b8:33:d8:00:98:80:cf:
51:29:8f:59:f1:38:16:8d:b7:c1:84:ef:59:c1:42:
f4:ec:d3:c0:70:3e:20:e4:b3:f9:12:82:83:da:08:
43:31:81:bc:a8:60:49:98:4a:3f:4b:bc:cc:34:f5:
29:17:42:f4:49:66:11:49:f9:66:89:7d:db:13:34:
82:8d:06:e7:73:83:6a:21:29:e4:d1:49:dd:53:7b:
d7:72:89:62:b1:8e:48:b6:61:70:66:3d:1f:9d:bc:
fd:58:b9:6a:03:7e:cd:95:55:4e:20:bf:2b:4a:10:
da:46:31:2c:9f:cd:4f:00:68:4c:35:05:5e:2c:84:
97:d1:4b:6b:1b:52:c6:4b:6d:fc:a8:1b:d4:8f:22:
c1:7c:c7:86:05:cd:a3:bc:9c:8f:2d:e2:6d:21:94:
83:cd:83:c0:22:95:b7:2c:e0:d7:e5:b2:b2:ad:4b:
c4:81:29:0d:de:98:08:8b:9d:18:bf:7a:3d:aa:e9:
11:80:41:9d:f6:f5:b4:1f:e5:1a:79:6a:6b:e5:bc:
ae:bb:28:f4:42:98:aa:93:ae:87:02:44:43:8b:4a:
d2:fb:9e:7b:ae:35:9d:3d:1a:a6:6c:95:82:75:d9:
76:05:06:ee:e1:bd:81:98:3e:b7:80:dc:4f:99:90:
1a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:97:74:4A:C3:F0:74:BB:60:8E:4B:F8:78:9F:F9:EF:52:2D:F5:C9
X509v3 Authority Key Identifier:
keyid:64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:31:3c:f7:5c:a2:63:68:dd:12:03:08:1a:f3:e0:01:11:ba:
86:c8:49:b5:08:3b:45:5f:70:ee:50:0f:90:8f:31:ce:76:a6:
94:70:11:2c:aa:38:86:14:b7:85:f3:e7:15:28:49:14:ad:71:
b8:f6:8e:97:96:7d:cd:6c:e9:a8:e6:2f:83:f4:18:fd:07:14:
d0:1b:0d:cf:3d:4c:39:b9:de:1a:c5:1e:cd:f3:3c:1e:36:b0:
f1:90:b0:f2:80:ce:b4:47:92:42:dd:c2:ea:07:86:c7:4d:11:
8c:43:4f:ba:02:0a:67:38:1e:24:55:29:d0:85:75:04:ac:1e:
7d:fc:74:dd:a6:d1:26:ff:d0:01:e0:2d:27:b2:b8:8d:be:27:
7c:6d:f9:e3:8b:11:4a:24:18:28:1d:b2:8c:9d:9a:d9:f6:98:
8f:01:cb:24:1b:3b:fa:e1:44:7e:25:db:93:62:9e:c0:e3:4b:
c3:f6:d4:e3:be:eb:77:e7:3e:05:e8:f4:54:1f:27:f7:7f:3b:
d4:f0:a9:df:93:f4:ef:f1:a9:ed:9f:fc:3d:f9:17:ee:53:ce:
f2:34:72:3e:0a:b1:ea:2a:3a:65:58:66:92:d9:e7:f4:69:02:
24:75:09:41:03:44:5c:59:69:db:0c:c8:17:cb:88:97:02:bb:
de:f6:e8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:00:20 2025 by rpki-client