Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
File: rjzFZ_6_40h4rrkThhzwYAooOQM.mft (raw, json)
Hash identifier: Ooiaw2l/MbAethe+3pZlqM9Ch/iCYzyn2JEBDi8fBws=
Subject key identifier: 6E:EF:8F:D8:6B:EA:2F:91:0E:A5:34:99:98:30:28:5D:6B:70:A0:CE
Authority key identifier: AE:3C:C5:67:FE:BF:E3:48:78:AE:B9:13:86:1C:F0:60:0A:28:39:03
Certificate issuer: /CN=ae3cc567febfe34878aeb913861cf0600a283903
Certificate serial: 0197782F2226A4417507939862769C3E3731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
Manifest number: 1597
Signing time: Mon 16 Jun 2025 10:00:44 +0000
Manifest this update: Mon 16 Jun 2025 10:00:44 +0000
Manifest next update: Tue 17 Jun 2025 10:00:44 +0000
Files and hashes: 1: cO5HXhdkW-9sTYlyxMUlTq4VrHM.roa (hash: 2vNmvGiB6oqNqpjdkXzwA+2UM7st3DevXSjO7XrFVio=)
2: rjzFZ_6_40h4rrkThhzwYAooOQM.crl (hash: H2AyO84pOk/mcGqenjB3D9Lu+xk6iyRXZHHRU3HfH6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 10:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:2f:22:26:a4:41:75:07:93:98:62:76:9c:3e:37:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae3cc567febfe34878aeb913861cf0600a283903
Validity
Not Before: Jun 16 10:00:44 2025 GMT
Not After : Jun 17 10:00:44 2025 GMT
Subject: CN=6eef8fd86bea2f910ea534999830285d6b70a0ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f8:2c:fe:7d:4d:00:67:90:38:7c:b2:c7:87:
d1:ba:64:79:fe:81:95:ec:7d:6e:6d:b4:cf:c9:58:
c2:bf:68:d7:47:86:d6:8f:8e:4b:45:02:fb:99:89:
c6:c1:f2:48:0d:b3:67:c7:59:b9:d2:b5:0f:a8:c1:
0f:ca:5b:e6:9c:52:73:12:1d:eb:1c:a1:17:5a:fa:
e2:57:38:99:18:23:61:bd:d9:65:b6:d1:cb:66:f4:
da:83:14:a9:fd:d6:8d:e9:dc:ef:11:3d:f8:af:85:
d9:bb:12:94:23:cc:a0:81:8f:ae:41:5a:0e:74:50:
fe:cd:34:e6:7b:67:ee:44:8b:44:3f:66:44:aa:5a:
f0:62:54:41:19:6e:11:33:d0:9e:6b:e2:55:2e:c0:
c4:d4:80:c6:cb:ac:45:cc:8b:e7:dd:3b:bc:f2:35:
11:05:f7:e8:ed:6e:5e:b2:2d:b8:c2:7b:6c:89:cb:
e9:1a:8b:a5:77:b9:6f:93:dc:f4:0f:78:07:2d:03:
ac:9e:7b:dd:9c:86:38:81:14:a7:df:ff:b9:21:a3:
f3:b9:04:47:4d:b9:08:77:33:a9:4d:3d:ce:bb:5d:
3a:76:03:08:e7:82:70:e0:2e:80:d6:38:89:9e:5e:
40:6b:76:3a:09:d0:fa:f0:f5:71:af:7c:68:3c:b1:
b3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:EF:8F:D8:6B:EA:2F:91:0E:A5:34:99:98:30:28:5D:6B:70:A0:CE
X509v3 Authority Key Identifier:
keyid:AE:3C:C5:67:FE:BF:E3:48:78:AE:B9:13:86:1C:F0:60:0A:28:39:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:64:cc:30:09:24:aa:9f:9b:63:de:c9:d4:9a:8f:23:e5:9c:
7b:b5:52:9c:b6:a2:6d:54:5e:6c:63:29:98:62:3c:09:52:a4:
c8:e3:6e:eb:3b:e0:a3:51:69:42:5d:f3:57:cb:c6:f9:3d:2e:
83:8c:45:7f:9f:15:a0:b1:4f:81:c7:d2:9b:b9:24:ae:61:ac:
5b:d7:cd:04:ea:77:ab:79:90:b0:63:2d:b7:01:93:e7:fc:8a:
33:02:8e:0d:82:9d:20:5a:0b:cf:f1:cb:11:2c:61:a2:8c:44:
2f:87:88:96:7c:d2:f3:28:ce:72:0e:85:ba:f8:0e:51:47:b3:
6b:fa:12:b0:40:6a:86:99:52:af:ba:2b:87:0a:dd:be:64:55:
06:43:63:ee:a2:a8:dd:ce:89:dd:ee:e3:48:23:1b:f4:cf:9d:
3f:02:c2:0f:aa:52:fe:93:ff:bc:e7:61:c2:29:d6:ab:ac:64:
9d:1c:e0:a4:62:df:db:61:ea:f9:98:17:ed:7d:29:0d:81:80:
88:21:aa:a8:49:62:e3:27:a3:59:86:aa:f4:70:ee:d7:6f:2a:
f6:7b:81:97:97:b4:fd:89:0c:ec:1d:29:fc:15:3b:10:5a:f4:
0b:91:e4:d6:5e:ba:4d:e9:ed:50:a0:a1:3e:a2:72:bd:32:8c:
04:b3:dc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:03:59 2025 by rpki-client