Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
File: jzaP655VO90TFWJYSjNTsddVXFA.mft (raw, json)
Hash identifier: u1lSgNjvZ51P7nNKcPM7oX4233kTvUY+W56zu6pNPZk=
Subject key identifier: CF:D4:15:30:A2:29:CF:F0:3F:5B:53:4D:F3:6F:CE:EA:42:F0:58:71
Authority key identifier: 8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
Certificate issuer: /CN=8f368feb9e553bdd131562584a3353b1d7555c50
Certificate serial: 01977309A239ABE86B34B00B88FC334EE268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
Manifest number: 15A3
Signing time: Sun 15 Jun 2025 10:01:40 +0000
Manifest this update: Sun 15 Jun 2025 10:01:40 +0000
Manifest next update: Mon 16 Jun 2025 10:01:40 +0000
Files and hashes: 1: VgDY9zN_B3grCrz_H8xjNykqXTQ.roa (hash: V5RUWHdPXufxGeDHhevmGSEqGhIbGyboqgCFXxKzrT8=)
2: eWNwoG2gNqVOl4jxtgq3km86-j8.roa (hash: tuYXWwSXyhuCjeV5A6/luy4IrIPezyScgsOJmMQtw38=)
3: jzaP655VO90TFWJYSjNTsddVXFA.crl (hash: oEplb4oWeT3lwEoeQGeSNBqtjoK1JmcCcF9Tx47mG4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 10:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:09:a2:39:ab:e8:6b:34:b0:0b:88:fc:33:4e:e2:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f368feb9e553bdd131562584a3353b1d7555c50
Validity
Not Before: Jun 15 10:01:40 2025 GMT
Not After : Jun 16 10:01:40 2025 GMT
Subject: CN=cfd41530a229cff03f5b534df36fceea42f05871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:60:a3:1c:e8:10:dd:a8:e2:05:11:02:f4:35:
9d:2a:e4:82:b8:31:bf:e6:3f:a0:a0:63:65:a4:c9:
e8:cb:c1:75:66:ed:09:fb:21:d0:8f:01:46:23:bc:
81:b8:9b:af:c5:4c:08:de:69:47:4d:31:7f:5d:cd:
0b:a0:95:a8:21:16:50:01:a6:2b:34:d2:21:cf:4e:
03:88:64:93:9f:97:78:03:cd:28:b1:3c:21:ee:8c:
db:a5:5d:55:31:28:01:27:39:97:e0:ce:fa:97:86:
df:cd:1f:9d:69:c3:95:21:bd:e7:f7:5d:e9:a5:06:
88:01:1c:9a:a1:e6:17:5e:32:56:29:cf:fb:3f:26:
33:e5:fe:b3:04:57:70:87:c0:99:9e:03:50:c1:0d:
8a:72:32:4a:70:8b:42:70:e6:13:93:e2:3c:2b:aa:
4d:12:16:35:f4:9b:d5:7d:c9:e5:cb:6c:1a:11:63:
92:1d:d7:2b:b9:6c:3e:65:88:50:a9:f8:27:0a:e4:
56:6b:19:e5:38:d5:08:f5:a2:90:05:fb:e5:10:fa:
b7:bd:cc:02:6d:e8:37:1f:18:d9:78:37:42:59:f3:
ca:33:30:9a:2a:ef:ec:41:1b:cb:db:7a:2d:27:75:
0c:be:48:5f:8e:e7:de:e5:43:94:d1:92:6e:6f:36:
d3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D4:15:30:A2:29:CF:F0:3F:5B:53:4D:F3:6F:CE:EA:42:F0:58:71
X509v3 Authority Key Identifier:
keyid:8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:01:e8:41:a8:92:38:b3:02:fa:85:d5:ee:7e:07:30:78:e6:
b2:67:1c:3a:66:d1:7b:0f:bc:a3:5c:4f:21:31:9b:89:df:01:
3c:8e:e9:fe:a1:40:a4:52:be:cf:93:19:79:7e:c9:a3:f6:d0:
63:aa:2e:60:cd:09:de:c8:de:95:a0:47:1d:c2:94:8d:21:88:
68:81:ee:08:6d:69:32:ff:01:18:15:2c:d2:59:8d:e3:2b:0f:
99:3a:ee:a9:60:23:e2:e0:b2:a8:ff:f7:d1:5f:ed:26:8d:ae:
6f:9c:75:04:10:1e:dc:e8:ea:1f:51:fc:27:74:01:bb:5d:93:
16:7c:db:16:b2:a0:a2:b7:7a:4f:ac:39:3d:d3:98:93:81:3d:
7b:95:83:39:81:4b:02:ba:ce:7a:fa:a0:9e:d9:f7:b4:72:f3:
8a:41:9c:e5:3e:2e:01:d9:9f:4e:b1:de:6e:17:87:91:ab:47:
5a:87:87:44:dc:3a:6e:b9:08:b9:24:1c:df:3f:77:73:c3:fd:
e1:f2:69:9d:a4:f9:64:47:4c:18:61:80:4a:30:22:0c:1a:e9:
46:f2:47:9d:59:e4:58:ce:40:d4:b0:b6:8e:12:f1:39:99:f6:
90:ed:ba:2a:3c:5d:d4:d8:aa:38:f9:3a:81:b7:26:86:fd:4e:
45:6c:b6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:43:49 2025 by rpki-client