Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
File: zJxBoSN2TPfcDy25hB9zKjuWE0M.mft (raw, json)
Hash identifier: RsObUG5Zpy405DwYQd2uCNfEgpfibPARAEfmNYQ96uo=
Subject key identifier: 47:C6:D5:23:39:EE:16:C2:3A:75:50:00:C9:98:E5:2A:26:8B:9D:15
Authority key identifier: CC:9C:41:A1:23:76:4C:F7:DC:0F:2D:B9:84:1F:73:2A:3B:96:13:43
Certificate issuer: /CN=cc9c41a123764cf7dc0f2db9841f732a3b961343
Certificate serial: 019774F8105627A31957673C4B66A648C55A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
Manifest number: 1594
Signing time: Sun 15 Jun 2025 19:01:43 +0000
Manifest this update: Sun 15 Jun 2025 19:01:43 +0000
Manifest next update: Mon 16 Jun 2025 19:01:43 +0000
Files and hashes: 1: B8c-KiiuWVbKdd6Eyr8wAePUEWY.roa (hash: 8i+mj8IGmve8qUZWFCAwe3JPzP0zTBzNHkZJDJW66Pg=)
2: zJxBoSN2TPfcDy25hB9zKjuWE0M.crl (hash: yQBBLTUGM/tRw9ToqJSdtc+RoAvibwqUai/1fv/dzpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:f8:10:56:27:a3:19:57:67:3c:4b:66:a6:48:c5:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9c41a123764cf7dc0f2db9841f732a3b961343
Validity
Not Before: Jun 15 19:01:43 2025 GMT
Not After : Jun 16 19:01:43 2025 GMT
Subject: CN=47c6d52339ee16c23a755000c998e52a268b9d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:45:08:6f:ae:85:40:79:20:e2:76:2e:e1:6a:
cb:e0:39:5a:80:ce:b2:75:ce:13:5d:87:4b:99:a1:
7e:23:a1:f4:67:21:33:c2:a5:d6:03:92:bf:18:c0:
f5:78:ef:69:ed:c6:2e:81:1c:fb:a0:b5:cd:8f:f5:
ca:0c:44:9e:10:78:25:b7:77:ff:75:bc:8b:da:a8:
60:17:1a:c5:e0:f0:e7:e0:f4:32:80:78:6b:a4:69:
01:9a:8c:ba:dc:52:fc:69:9b:3f:bd:35:02:cc:08:
c4:fa:54:07:41:ba:72:f6:90:c2:19:49:89:96:8b:
c8:a8:0a:c9:be:17:d4:fd:48:2b:f0:ab:db:e8:5b:
8e:8b:c1:8a:ef:05:10:6a:93:d1:cc:51:61:e7:b0:
39:96:33:87:e0:56:b7:d0:3c:86:3b:8e:05:17:76:
87:b1:30:a5:e7:58:91:33:19:7a:34:ce:99:89:e7:
9e:38:8c:c8:b8:8e:ec:4e:eb:9f:a6:99:07:bb:32:
d6:96:e5:af:a7:1c:40:7d:e6:c0:92:ed:14:c1:47:
9a:12:1b:41:d0:03:e9:db:c7:46:f3:6e:1d:95:09:
c8:98:13:65:e9:30:78:16:4b:30:2e:f4:b3:af:2e:
0c:ef:f4:8e:c1:81:c4:c9:1b:6a:ba:d3:fd:a7:80:
da:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C6:D5:23:39:EE:16:C2:3A:75:50:00:C9:98:E5:2A:26:8B:9D:15
X509v3 Authority Key Identifier:
keyid:CC:9C:41:A1:23:76:4C:F7:DC:0F:2D:B9:84:1F:73:2A:3B:96:13:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:3b:14:36:9a:5e:e0:c8:a7:ce:fb:90:96:7f:fc:d5:26:3d:
e8:16:ce:67:17:c1:6b:be:97:41:e6:78:df:12:94:0d:60:f6:
2d:73:98:6c:43:95:4f:72:d3:7f:a8:39:d9:82:e3:72:32:ba:
91:f9:2f:db:88:92:20:b8:60:d3:59:1c:7d:43:77:74:81:da:
d5:3a:05:7c:0c:66:f1:ad:63:93:17:46:b6:b3:27:51:4c:f7:
38:60:77:9b:93:95:52:62:22:0d:8f:5f:27:93:44:57:40:7d:
2c:4e:4c:f4:c3:b7:33:9f:e2:93:2d:2d:84:5e:3e:c7:b2:ca:
eb:0e:9d:a9:78:44:c4:1e:24:ca:7c:f0:d1:22:a7:de:ca:81:
bb:91:2e:1d:5e:ef:e5:a6:1a:8f:d5:99:2a:1a:01:30:dc:02:
64:c8:90:96:68:13:a4:b4:66:2f:8f:dc:57:92:13:51:4a:aa:
df:b3:03:8a:4d:65:db:a2:55:1c:07:12:d8:53:c6:73:f7:b7:
3d:ac:cc:87:55:80:bf:4f:61:b0:96:6e:fc:75:6a:cb:23:d3:
4f:5d:6d:66:2b:d6:41:e0:9f:74:e7:23:80:e7:f4:72:28:07:
c4:e9:a2:2b:13:de:f7:9e:78:86:e6:ac:92:f7:f5:da:6e:5f:
02:d5:3b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:10:48 2025 by rpki-client