Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft
File: ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft (raw, json)
Hash identifier: T3lFJ6K/zGr1jUzbBIB4l33oFYqf/sp+YDCxloL3ZR4=
Subject key identifier: B4:23:04:EC:15:24:C4:6B:2C:43:28:5D:1D:C6:CE:EA:C2:FF:66:9C
Authority key identifier: 64:95:0E:4E:58:D6:AC:27:F8:0F:09:A5:ED:2F:30:28:B8:1A:E8:CA
Certificate issuer: /CN=64950e4e58d6ac27f80f09a5ed2f3028b81ae8ca
Certificate serial: 019768F2FF03EB982485C67298094214A593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJUOTljWrCf4Dwml7S8wKLga6Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 11:00:44 +0000
Manifest this update: Fri 13 Jun 2025 11:00:44 +0000
Manifest next update: Sat 14 Jun 2025 11:00:44 +0000
Files and hashes: 1: WuLl5WEm72PKP2EjN4PzkOllUEM.roa (hash: l/LlCxiGWXMwDilSjuK8TtyovKGo3UjHdGI+bjDVpFw=)
2: ZJUOTljWrCf4Dwml7S8wKLga6Mo.crl (hash: YD2SV+flwXhdEK3ZbfdBQh6kBwBSliFZ9JVB3ByyO9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJUOTljWrCf4Dwml7S8wKLga6Mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:ff:03:eb:98:24:85:c6:72:98:09:42:14:a5:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64950e4e58d6ac27f80f09a5ed2f3028b81ae8ca
Validity
Not Before: Jun 13 11:00:44 2025 GMT
Not After : Jun 14 11:00:44 2025 GMT
Subject: CN=b42304ec1524c46b2c43285d1dc6ceeac2ff669c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:eb:8f:5b:ae:98:68:dd:e0:b7:46:87:a8:33:
9a:a8:6b:05:88:c9:ce:ac:ab:0c:c4:74:e2:d8:51:
4f:f5:68:07:21:86:40:86:3a:5e:a9:76:a0:82:bf:
9e:f8:4c:be:ca:70:2a:78:7d:e8:c7:48:c9:25:35:
74:d1:84:d9:a0:6b:14:7f:cf:72:2a:67:de:e4:a2:
ad:4b:18:e5:16:85:cb:6b:9e:9b:c1:64:30:4d:3e:
ff:73:a6:13:2b:5b:cf:a8:67:e2:26:60:93:40:06:
16:9e:92:28:78:71:fd:b4:0a:8e:5b:c3:a8:76:5c:
b0:e2:ad:c5:cb:e2:ef:9b:76:0b:d5:2e:7d:21:f1:
e9:a9:fd:c9:78:67:4f:9d:9a:59:cd:1f:16:c8:0f:
0a:65:7d:56:53:bb:18:8c:71:d2:d3:84:d9:23:03:
2f:57:15:37:5e:b8:63:50:bb:c1:59:9d:52:c6:b9:
34:88:3a:39:dd:2a:9f:6a:14:04:ac:3b:22:03:86:
2f:74:ab:f5:69:e5:c4:65:0a:7f:4c:a2:3a:31:64:
12:0d:2b:bd:1e:4e:05:5b:f4:9f:e8:2e:ac:c0:5a:
88:a3:7f:aa:74:74:72:c6:27:3c:98:18:68:22:c4:
4c:ca:27:08:74:fd:43:5a:26:ec:85:f4:50:2a:f9:
51:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:23:04:EC:15:24:C4:6B:2C:43:28:5D:1D:C6:CE:EA:C2:FF:66:9C
X509v3 Authority Key Identifier:
keyid:64:95:0E:4E:58:D6:AC:27:F8:0F:09:A5:ED:2F:30:28:B8:1A:E8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJUOTljWrCf4Dwml7S8wKLga6Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:f7:99:5b:40:04:52:54:e0:d1:20:65:83:23:82:e3:54:9c:
d4:1f:4c:7f:aa:fe:35:a8:a0:df:68:71:0c:0a:6b:05:66:6d:
d4:69:a8:65:42:71:0f:f9:47:d0:4a:b6:ba:e0:95:29:91:12:
53:cc:46:a5:d9:c8:7f:87:a0:5b:38:8a:e1:35:48:13:06:7f:
1a:d8:07:0a:a3:97:e9:88:5a:74:8a:57:c9:ed:36:b5:3c:58:
b5:cc:a4:d8:75:65:2f:5a:1b:f4:42:ad:e5:84:c4:24:dc:16:
f2:50:1b:86:4b:50:f0:7a:a9:15:d3:0d:36:2e:56:a1:4b:81:
de:bb:be:ac:84:cb:74:eb:25:ad:b7:af:56:21:1f:94:5a:7a:
2c:90:8e:02:00:4c:16:e2:7a:bd:a5:ee:45:cc:0a:05:00:3b:
53:ae:63:e1:c1:b7:a9:bc:8f:cc:2a:65:fb:35:3c:04:f5:62:
70:56:db:4a:77:71:9b:8f:d9:f8:60:d4:f8:56:49:43:d5:a1:
c4:14:cc:33:7d:af:88:11:47:28:30:d5:43:70:4a:a4:81:f0:
27:96:f1:e8:4d:03:8a:9d:23:8c:84:92:66:d5:22:f7:fa:20:
94:e5:07:21:26:40:42:00:7e:68:8a:1b:f9:80:a4:de:6f:5e:
9b:a6:1e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:13:55 2025 by rpki-client