Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft
File: jzztMLKFLlUseDdGcAPxdepZ3nM.mft (raw, json)
Hash identifier: TVG1pWNt797O9/YvU+ycUaVR6WdTahTgClnPS0lAfDs=
Subject key identifier: FF:93:6B:50:F7:CC:63:6A:4A:24:0C:9B:E1:47:04:72:2C:84:8F:E3
Authority key identifier: 8F:3C:ED:30:B2:85:2E:55:2C:78:37:46:70:03:F1:75:EA:59:DE:73
Certificate issuer: /CN=8f3ced30b2852e552c7837467003f175ea59de73
Certificate serial: 01976BBDBF2090ED7DA0D4E6181051A27AF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzztMLKFLlUseDdGcAPxdepZ3nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft
Manifest number: 0A96
Signing time: Sat 14 Jun 2025 00:01:26 +0000
Manifest this update: Sat 14 Jun 2025 00:01:26 +0000
Manifest next update: Sun 15 Jun 2025 00:01:26 +0000
Files and hashes: 1: jzztMLKFLlUseDdGcAPxdepZ3nM.crl (hash: zGZOZWa0kmxjMbRs9EinS7zDfCBKlBPHCuMSOvKURfg=)
2: zFUJjDGEsZJOucFbVCUxDXzsMU8.roa (hash: 2ZiCqHTVImshB2FLBBPRqOl/4XNJLXBYYXR20S0fJAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzztMLKFLlUseDdGcAPxdepZ3nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:bf:20:90:ed:7d:a0:d4:e6:18:10:51:a2:7a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3ced30b2852e552c7837467003f175ea59de73
Validity
Not Before: Jun 14 00:01:26 2025 GMT
Not After : Jun 15 00:01:26 2025 GMT
Subject: CN=ff936b50f7cc636a4a240c9be14704722c848fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8f:ad:aa:ef:30:96:46:eb:8f:a2:e9:17:42:
b1:06:f3:22:6d:30:92:d5:1e:9f:c7:5a:bb:d1:c5:
dd:b7:2c:a7:dc:25:31:9a:6f:0e:61:8e:42:45:55:
51:b9:a3:5d:8c:c1:22:07:ee:81:a0:b0:20:84:1c:
e7:0a:07:02:0d:ad:72:24:cf:89:bf:90:cd:1c:52:
3c:b0:bc:46:c9:72:88:3a:2f:2b:f2:a7:82:88:df:
ef:86:44:76:cc:68:9c:8e:ce:90:12:99:ba:10:09:
f9:d7:ce:50:4a:cc:6d:6f:9d:8f:5b:3e:ed:a5:f8:
36:ed:33:e6:7c:f2:da:9a:f1:43:aa:a0:7d:2c:d2:
a9:c9:12:f3:26:5e:83:64:3a:13:f7:53:57:2f:e0:
1d:49:5e:0d:47:3e:5a:84:b4:b9:a9:6a:2e:94:d0:
b3:53:f3:5e:50:28:cb:57:89:8e:13:48:8c:bc:83:
ca:46:15:7d:9d:d0:7d:46:10:e7:49:43:5a:d6:6d:
bd:6d:78:df:dc:cc:e6:14:e4:50:4e:e2:71:81:28:
cd:44:f3:e9:ec:6c:37:da:49:8a:54:cd:b6:31:e6:
73:3c:0a:86:74:ce:a6:fc:d4:48:7e:0d:cc:cf:a2:
d2:79:d6:ed:78:89:7e:5a:2e:9e:c9:52:75:da:79:
46:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:93:6B:50:F7:CC:63:6A:4A:24:0C:9B:E1:47:04:72:2C:84:8F:E3
X509v3 Authority Key Identifier:
keyid:8F:3C:ED:30:B2:85:2E:55:2C:78:37:46:70:03:F1:75:EA:59:DE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzztMLKFLlUseDdGcAPxdepZ3nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ed:58:12:a1:24:27:15:81:0c:4d:cf:1a:c5:47:d1:9a:b3:
99:1d:af:dd:99:0d:a6:45:fe:df:da:63:39:a6:4b:aa:66:a9:
f6:9b:d8:11:26:78:47:79:22:89:34:8c:ca:cc:cd:bd:52:0f:
cb:83:04:d9:46:fb:89:77:f0:bf:7f:55:25:ff:f3:d8:67:0e:
90:a5:2c:a9:9e:13:e2:a2:d6:79:5f:fd:04:cb:7b:60:8b:10:
a3:1c:a2:7d:0e:aa:ff:9d:3b:5e:d4:3c:a2:0b:15:96:a6:aa:
1a:13:34:e8:67:c0:f5:2a:77:3e:3c:0d:0f:34:43:14:8c:be:
fa:40:7c:36:6f:4b:a0:84:b7:d0:85:5d:51:79:c5:6c:45:52:
4c:f3:d3:2c:73:f1:3c:6f:78:39:7b:32:e3:e6:a6:4f:e1:52:
87:35:e5:8c:54:e3:2d:c9:75:fb:a0:00:ec:e7:9c:51:35:ae:
44:97:5b:fb:fe:17:2a:83:03:fb:97:b8:1b:25:4a:bd:c7:4c:
2c:72:b6:5a:f0:82:f5:4b:85:66:5d:a1:f7:ac:cb:43:34:ae:
7f:0a:d4:4a:17:db:7d:42:c7:fa:b5:ab:a1:77:98:d1:d3:c5:
70:62:33:ce:e3:9b:f0:50:ca:ef:b5:32:25:ca:c4:7b:ad:23:
e9:51:25:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:06:43 2025 by rpki-client