Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
File: zjfKOryl4UrBG8fzwVYqZNY5HSI.mft (raw, json)
Hash identifier: fsVacy5E92UjtZl0k+Cffo2okA9mk2hADDuvzZkbggQ=
Subject key identifier: 78:59:14:4B:AD:7A:02:FA:42:11:44:47:C7:96:FF:1D:6E:73:73:02
Authority key identifier: CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22
Certificate issuer: /CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
Certificate serial: 01988B7D57110FEDBE330E8E7B460CB7695B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
Manifest number: 1563
Signing time: Fri 08 Aug 2025 21:01:43 +0000
Manifest this update: Fri 08 Aug 2025 21:01:43 +0000
Manifest next update: Sat 09 Aug 2025 21:01:43 +0000
Files and hashes: 1: 8kC1dXQut3Q7aEZLq-H6wHv58Nk.roa (hash: wdoh4a7LDX/nFwYQadnYTEwY/jj86xKk/h3rcKaZa3Q=)
2: T24HRLbgJbROlTALREch3AOYbaE.roa (hash: Wevs9VKSENwQtnqRkxhumLN/kRDIgG1A0UE3XstajKA=)
3: zjfKOryl4UrBG8fzwVYqZNY5HSI.crl (hash: +0t85px5HLw0HxIcpOd80h341CT/KW+TGEEFYSlJZho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7d:57:11:0f:ed:be:33:0e:8e:7b:46:0c:b7:69:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
Validity
Not Before: Aug 8 21:01:43 2025 GMT
Not After : Aug 9 21:01:43 2025 GMT
Subject: CN=7859144bad7a02fa42114447c796ff1d6e737302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:65:1d:a4:a4:24:3a:ae:2f:31:d0:fb:92:99:
87:91:1e:8e:0b:34:ca:8d:bf:df:74:82:9d:02:90:
c0:1a:a4:fd:bd:43:dd:48:38:82:27:f5:ae:22:38:
ba:8f:1c:2c:bb:db:cf:f7:84:8e:b8:7f:25:af:1b:
d2:21:d2:bd:1d:71:a6:0b:c3:fe:ea:54:f4:ac:ef:
4d:76:49:91:c6:3a:0b:30:cd:a5:83:ba:80:df:0b:
ec:4f:7a:be:9e:d5:30:53:4a:0d:8a:a3:9b:c9:9e:
f7:e4:63:60:dd:e8:0a:47:30:b2:03:d1:68:6d:3c:
50:06:76:a1:6a:96:f8:e4:1b:ef:a6:17:0f:02:c7:
5c:e4:0f:f5:39:a8:4d:2f:6e:c1:7e:03:21:09:d4:
ce:8f:1d:b1:7f:b5:2b:04:c3:b0:b4:ca:55:07:0e:
ef:4d:86:ca:b1:e3:40:4c:ef:64:59:03:d9:72:e8:
e0:84:e8:e4:33:d8:27:57:ba:3d:3e:19:27:84:e5:
4d:b2:73:c6:36:20:b2:1c:05:b9:53:5c:b4:ff:e6:
01:7a:b4:31:e5:e5:fe:b1:79:3c:10:88:3c:dd:9c:
73:c4:3f:a4:dc:9c:71:45:5d:e7:70:52:e5:c3:1d:
1f:5b:eb:62:81:c8:cb:83:b5:04:85:a4:75:d5:7d:
3b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:59:14:4B:AD:7A:02:FA:42:11:44:47:C7:96:FF:1D:6E:73:73:02
X509v3 Authority Key Identifier:
keyid:CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:1a:cd:98:16:74:5e:bd:3c:03:a4:fe:49:cb:a7:b2:7d:1f:
b6:0a:3b:be:06:8a:c3:bf:27:05:40:97:ee:cb:43:42:59:c8:
52:b0:6b:47:63:23:1d:63:20:69:84:66:75:3e:57:a1:bf:53:
10:3b:b1:5b:c9:e2:04:19:48:da:b0:e3:63:03:04:22:f4:91:
8a:ac:ca:d3:94:d4:e8:2a:17:f6:2e:b5:68:dc:c4:be:7a:3c:
c7:a4:7f:0c:91:83:e0:25:9e:91:60:5c:c3:37:88:73:c9:ed:
6d:83:6b:76:b1:f0:3c:2a:fc:9d:e8:64:16:23:01:98:d9:72:
80:a7:9d:0c:97:9b:e8:5b:e7:cf:74:a2:c7:d0:53:0b:84:e9:
42:af:05:25:73:75:1b:e4:34:80:38:4b:f8:bf:33:50:ef:0c:
f4:89:99:ca:a0:b6:df:88:cd:85:03:96:60:0a:89:72:5e:23:
89:9e:62:85:ab:5e:80:12:6e:c2:8a:aa:48:3f:9e:3d:a9:68:
f7:7e:d0:07:94:73:4d:1a:c4:22:8d:dd:62:94:e3:14:5d:13:
b4:30:17:d7:40:5d:2f:c9:54:69:6a:ba:86:b1:03:03:5b:e1:
58:79:c9:2b:25:83:0a:6e:1b:46:f3:bc:e2:66:79:f2:fc:15:
00:73:60:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:43:56 2025 by rpki-client