Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
File: jzZAFzNC-uiz0sjMH5td3RSUiT8.mft (raw, json)
Hash identifier: /VoDWfc553AFUDJBUquJty+v7riruYfmqr1L1RIdcCQ=
Subject key identifier: B1:68:DA:12:52:AE:5F:F1:E9:A1:46:25:17:91:C4:92:0F:4F:3F:B7
Authority key identifier: 8F:36:40:17:33:42:FA:E8:B3:D2:C8:CC:1F:9B:5D:DD:14:94:89:3F
Certificate issuer: /CN=8f3640173342fae8b3d2c8cc1f9b5ddd1494893f
Certificate serial: 019770ACB82DE03E6D8FA89D6D11F079796A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
Manifest number: 1359
Signing time: Sat 14 Jun 2025 23:00:56 +0000
Manifest this update: Sat 14 Jun 2025 23:00:56 +0000
Manifest next update: Sun 15 Jun 2025 23:00:56 +0000
Files and hashes: 1: NS4aUYlRSBiLTkLyyg7u-X42X1Q.roa (hash: r06qcWYpFC8YgZh35Sp5HzeJjcmGRBfHKZK7KBnJFGA=)
2: jzZAFzNC-uiz0sjMH5td3RSUiT8.crl (hash: JyROyh5cdTmY2Cofq0t6kFLvyKYIhx9D4FezYS6pF6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:b8:2d:e0:3e:6d:8f:a8:9d:6d:11:f0:79:79:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3640173342fae8b3d2c8cc1f9b5ddd1494893f
Validity
Not Before: Jun 14 23:00:56 2025 GMT
Not After : Jun 15 23:00:56 2025 GMT
Subject: CN=b168da1252ae5ff1e9a146251791c4920f4f3fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:28:c7:9d:fb:6a:47:04:0d:ef:80:f9:2a:38:
98:a0:ce:a5:a7:30:e6:13:68:b4:1e:a6:04:8f:4d:
31:93:50:23:23:b1:94:0d:45:cf:c1:5f:7c:6b:82:
1d:09:c5:a5:1f:5a:ed:17:fe:e6:44:99:27:3f:c0:
e9:65:4d:c8:8f:6f:2b:93:ad:9c:5c:48:0c:8a:5d:
7d:58:b4:08:a1:54:8f:54:88:f8:23:35:98:a3:fc:
ee:24:e2:52:e1:21:4b:79:c2:d2:03:ef:de:24:e1:
15:bd:15:f6:f9:d2:e4:bc:f0:ea:81:a8:ad:87:e5:
dd:5e:36:4e:77:21:0e:e4:db:20:09:ca:21:22:74:
15:25:1e:6a:72:6c:a5:a8:c4:6c:1e:21:85:b8:6f:
bd:66:f6:aa:f0:36:d4:cf:5e:dc:ea:b6:6a:5d:51:
1a:79:51:1e:bd:e5:7c:2a:04:da:77:a7:6f:b5:b5:
79:74:47:b1:35:e0:23:d6:6d:e5:35:40:f8:4a:c6:
38:b0:70:01:fd:38:97:1c:9e:a2:b0:e8:17:b2:37:
64:33:03:09:46:61:fb:82:eb:78:3d:44:69:6d:27:
65:20:a7:15:ba:72:02:9b:1a:aa:9a:09:30:28:45:
40:26:73:c4:8b:6b:6d:f3:9d:f7:1c:9b:13:0a:7c:
1d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:68:DA:12:52:AE:5F:F1:E9:A1:46:25:17:91:C4:92:0F:4F:3F:B7
X509v3 Authority Key Identifier:
keyid:8F:36:40:17:33:42:FA:E8:B3:D2:C8:CC:1F:9B:5D:DD:14:94:89:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a1:0a:e4:19:02:ed:b7:ab:5a:4c:ae:ad:e4:9a:c6:c3:eb:
fa:46:2e:7f:d0:d4:7c:b5:db:61:3b:39:87:e3:7a:89:56:3e:
44:1b:f1:0f:ae:a0:10:0c:78:08:ca:c0:0c:d0:54:f3:f2:a8:
5f:ed:76:a1:b7:56:6e:5d:e8:62:a5:94:c3:98:a0:7c:05:37:
5f:6e:ad:9c:dc:99:24:24:3f:32:84:4c:aa:f4:2d:d7:a4:fe:
37:0f:c6:dd:87:50:58:8d:e2:d7:bf:30:7b:1c:36:f3:48:68:
29:b7:16:50:72:fe:11:22:04:02:89:84:a8:d4:b2:1f:dd:9d:
62:11:0f:f6:c7:c3:61:a5:d2:1f:3b:08:20:8c:45:6a:c0:87:
b6:18:8c:9b:44:86:20:b0:22:56:1b:10:30:a1:ea:88:59:5f:
3a:f6:1c:85:e5:d6:bc:62:21:35:11:22:c7:c5:ad:43:d7:0d:
91:9e:e0:13:b0:7f:4f:db:af:5a:32:dc:05:76:c8:75:16:25:
54:c8:16:23:9c:e2:a7:77:74:58:3e:9f:7b:a1:e8:5a:f1:00:
b2:9c:0e:bc:f1:a5:9c:d6:80:88:10:7c:86:fd:8d:6b:2b:38:
45:c0:8e:8e:b6:7c:54:a8:79:e6:66:c0:a3:0d:34:fa:0d:dd:
7f:7b:ff:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:34:04 2025 by rpki-client