Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft
File: jzdbxsgRDxrXM993rPux1uxGXLg.mft (raw, json)
Hash identifier: DL4/GBFBQE453Lpz1NZzXTQQnKTnmSJUPzxsLO2+G/Y=
Subject key identifier: EE:BD:42:C6:EA:3F:E0:35:C2:AE:9C:36:60:32:AD:8C:77:AA:B1:5F
Authority key identifier: 8F:37:5B:C6:C8:11:0F:1A:D7:33:DF:77:AC:FB:B1:D6:EC:46:5C:B8
Certificate issuer: /CN=8f375bc6c8110f1ad733df77acfbb1d6ec465cb8
Certificate serial: 01976BF421571AE6C4172C554B75EEF00BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzdbxsgRDxrXM993rPux1uxGXLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 01:00:50 +0000
Manifest this update: Sat 14 Jun 2025 01:00:50 +0000
Manifest next update: Sun 15 Jun 2025 01:00:50 +0000
Files and hashes: 1: WZtsrjQ6_4AAza3W0_Zf2Kriboc.roa (hash: IEF1jYRY7l8CDobzZH1+RG1BE/hQtGdqASizDfn8LB8=)
2: jzdbxsgRDxrXM993rPux1uxGXLg.crl (hash: MhEm0kw8e/VbCacl5VHSeOJCPujkW3osKjBKHsdZ0Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzdbxsgRDxrXM993rPux1uxGXLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:21:57:1a:e6:c4:17:2c:55:4b:75:ee:f0:0b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f375bc6c8110f1ad733df77acfbb1d6ec465cb8
Validity
Not Before: Jun 14 01:00:50 2025 GMT
Not After : Jun 15 01:00:50 2025 GMT
Subject: CN=eebd42c6ea3fe035c2ae9c366032ad8c77aab15f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:00:6e:3b:b4:1f:4e:26:e3:1f:49:1e:dd:d2:
d2:30:a7:b5:26:7a:1c:be:6d:73:67:ae:55:a7:93:
bf:1e:24:31:2f:e4:10:cc:02:d5:7c:87:39:fe:50:
7a:ba:2a:9a:4b:a3:b4:32:a3:62:93:ab:cd:05:93:
72:fb:b8:5e:10:8d:b1:d1:48:ea:dd:75:61:9d:47:
fd:9e:bb:c7:76:06:43:d3:a6:41:09:12:5c:36:3b:
22:80:10:09:31:5d:67:db:79:3c:85:5d:53:8d:25:
a3:26:16:c6:b9:32:ac:3d:e1:fe:e7:af:d9:71:5a:
11:3a:38:9c:a7:a4:c0:62:5b:3e:14:42:32:d6:50:
ab:44:c2:28:73:e0:c6:a7:7d:a5:4e:7c:9f:e5:0a:
4d:f6:13:5f:12:49:ef:74:2b:ab:97:34:57:52:3a:
a8:18:6e:d5:44:de:c3:ba:91:92:77:0a:f4:ec:30:
30:17:66:09:ee:61:bd:ae:ef:fe:35:b7:03:57:3f:
5f:f2:50:97:e3:0c:47:8f:a9:85:a6:d8:fd:80:e6:
7b:3b:f6:95:0d:0a:e5:d9:95:90:28:39:dc:73:ee:
0c:f0:7a:61:87:0a:4d:5e:f1:e4:7d:ba:6b:0a:cb:
76:60:5e:09:e9:ab:2f:46:89:73:17:91:4f:0c:7b:
84:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BD:42:C6:EA:3F:E0:35:C2:AE:9C:36:60:32:AD:8C:77:AA:B1:5F
X509v3 Authority Key Identifier:
keyid:8F:37:5B:C6:C8:11:0F:1A:D7:33:DF:77:AC:FB:B1:D6:EC:46:5C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzdbxsgRDxrXM993rPux1uxGXLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e8:fa:77:54:83:7b:78:fb:f8:c7:f7:cb:9f:4c:06:6d:25:
2b:6b:02:98:b6:ba:37:7c:a3:4c:93:98:b5:ec:ce:76:c2:f2:
a7:b0:ee:a4:a0:78:c6:82:93:16:ca:70:ec:cf:1f:84:01:fa:
5a:3e:75:48:34:ec:ef:23:94:72:5a:9f:fd:7f:83:cc:64:60:
2c:db:9e:ab:8a:c2:f2:c6:f7:77:ec:d4:39:e9:28:e2:a6:c4:
9c:14:40:1c:97:77:d7:f0:1f:7c:d9:5e:8b:be:3f:c7:7c:ac:
73:06:84:1f:9d:a9:26:b4:5a:46:e1:2c:3f:e5:a8:10:8d:54:
56:59:94:3a:f7:2b:f5:a1:25:e5:02:89:e8:97:b4:47:99:13:
d6:bd:7e:fd:76:33:d3:da:74:c4:71:f3:64:12:dc:a3:8a:df:
9f:74:f4:6a:28:e8:e7:7d:fd:8a:04:16:79:01:1d:79:a5:89:
41:2c:d3:bf:2c:e2:72:1d:60:c9:a6:11:7c:e2:92:aa:6a:d2:
5a:98:70:55:b6:f5:56:8f:de:d3:4a:46:dd:f2:97:d2:7e:78:
a4:a1:37:9c:77:49:b3:95:8a:a6:d6:f5:62:40:b2:08:d0:96:
ca:ea:23:5a:9a:1a:e5:f3:67:a7:b2:3b:9a:12:81:69:ae:40:
5f:2b:ce:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:11:41 2025 by rpki-client