Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
File: jzj4WeXmdmKuCZkPOE-obJMnEKs.mft (raw, json)
Hash identifier: PW4y3pontTaRD6FiTmJIwqE18IqEGCOV5xbx4P7UXwU=
Subject key identifier: DB:6C:BD:F4:39:37:8F:C3:1F:FB:A3:B3:17:4F:DE:28:C9:64:A6:A9
Authority key identifier: 8F:38:F8:59:E5:E6:76:62:AE:09:99:0F:38:4F:A8:6C:93:27:10:AB
Certificate issuer: /CN=8f38f859e5e67662ae09990f384fa86c932710ab
Certificate serial: 01976EF4B629ECE34C0ED33A883F2EE48EB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
Manifest number: 0535
Signing time: Sat 14 Jun 2025 15:00:20 +0000
Manifest this update: Sat 14 Jun 2025 15:00:20 +0000
Manifest next update: Sun 15 Jun 2025 15:00:20 +0000
Files and hashes: 1: 9gswIUnAaS1IBv5fuNBqUKNMfqs.roa (hash: lylk+NlcGPhSxgLHOS7jiDLjzNF20oemeodaYXlxSEQ=)
2: jzj4WeXmdmKuCZkPOE-obJMnEKs.crl (hash: 0z2ElDijmu0L0KuhEBQEQDJ6lst711p6q8R5OyJGyqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f4:b6:29:ec:e3:4c:0e:d3:3a:88:3f:2e:e4:8e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f38f859e5e67662ae09990f384fa86c932710ab
Validity
Not Before: Jun 14 15:00:20 2025 GMT
Not After : Jun 15 15:00:20 2025 GMT
Subject: CN=db6cbdf439378fc31ffba3b3174fde28c964a6a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:36:09:7d:f5:53:f3:6c:1b:75:f6:92:9b:c3:
b7:13:b2:61:dc:74:15:6a:5c:da:65:e9:35:39:b4:
32:e3:6a:34:98:fc:af:78:25:fe:22:09:82:5d:a7:
98:9c:61:87:1b:59:98:48:d6:44:92:53:8c:10:a7:
7f:ee:ab:f3:b5:c6:cb:ea:3d:39:93:0a:98:15:ff:
41:ee:be:78:12:27:7a:02:d4:21:27:4b:15:67:fd:
b7:6d:a6:60:ae:63:f7:0c:56:60:f4:0f:81:b3:90:
cc:67:62:a6:d0:be:69:a0:55:36:03:1d:90:83:df:
ad:2c:e7:38:07:23:7c:d8:52:ce:1e:e3:10:bc:54:
6c:14:6d:09:ae:84:55:21:84:97:6f:62:43:3a:46:
b2:dd:f3:f9:3d:0f:7c:ed:c1:85:cc:7b:f8:97:00:
40:1a:f0:d0:79:1d:63:36:6d:55:33:c8:d2:e1:3e:
56:f1:fd:4a:e3:3d:8b:60:43:9e:00:06:c5:c9:32:
0c:7e:a3:b5:1c:51:07:73:73:cc:70:5c:29:55:04:
1a:13:09:d8:24:3b:16:9c:2d:16:b1:49:a6:62:93:
bc:1f:51:47:50:61:7f:4a:14:da:ad:9d:f9:fb:07:
3d:08:d6:38:a1:f8:84:4f:92:8e:1e:9d:37:e6:ea:
da:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6C:BD:F4:39:37:8F:C3:1F:FB:A3:B3:17:4F:DE:28:C9:64:A6:A9
X509v3 Authority Key Identifier:
keyid:8F:38:F8:59:E5:E6:76:62:AE:09:99:0F:38:4F:A8:6C:93:27:10:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:89:0b:d0:9b:77:0b:9e:43:59:2e:26:18:03:2d:36:d7:b8:
4b:19:f9:67:e6:76:f6:26:02:28:04:a8:71:47:43:df:32:1c:
3a:f9:18:06:32:f5:89:c0:54:26:cc:95:ed:49:2a:b9:f1:63:
24:6a:7d:ac:af:8e:dd:3d:32:56:63:52:5d:15:d2:19:b3:61:
33:7a:ec:e4:42:cb:f3:4d:fa:cd:9e:64:15:a1:35:11:1a:97:
93:4f:83:9c:40:64:81:4c:9a:e7:04:b1:9c:62:83:6f:f4:df:
0d:3c:66:27:20:3d:c0:b5:9c:1f:24:c1:bc:4a:37:41:4b:b7:
a1:4f:77:08:60:bc:50:ee:13:89:68:4a:30:24:a4:75:e0:3d:
04:11:eb:93:c7:7f:1b:13:97:1a:4a:47:f1:88:1f:69:d5:19:
b3:e6:cf:6a:c9:6b:b9:ac:e5:c0:5c:84:c4:82:dc:9b:d6:df:
2b:c7:d4:22:f9:1e:eb:95:22:01:33:83:a0:3c:7c:59:c8:76:
0f:fe:2e:6d:28:72:24:1b:92:e0:b0:02:6c:ed:7b:a4:7e:b1:
fa:5d:14:aa:a1:72:1f:0b:7a:6e:a9:11:b9:52:de:5c:57:46:
8c:d7:15:64:22:e0:58:4f:2a:f0:00:88:8d:ce:4b:f8:f9:50:
17:38:c3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:27:19 2025 by rpki-client