Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
File: rjzFZ_6_40h4rrkThhzwYAooOQM.mft (raw, json)
Hash identifier: kcGSouFFRYNRwC38BY9dlklOGPogjnRJ5kPeV/2nhf0=
Subject key identifier: 46:B9:95:19:EB:1B:FD:5D:FC:66:D2:0B:0C:00:88:F5:79:31:8C:99
Authority key identifier: AE:3C:C5:67:FE:BF:E3:48:78:AE:B9:13:86:1C:F0:60:0A:28:39:03
Certificate issuer: /CN=ae3cc567febfe34878aeb913861cf0600a283903
Certificate serial: 01989FA88E741B0FC7FE7293B639B5E570D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
Manifest number: 1630
Signing time: Tue 12 Aug 2025 19:01:20 +0000
Manifest this update: Tue 12 Aug 2025 19:01:20 +0000
Manifest next update: Wed 13 Aug 2025 19:01:20 +0000
Files and hashes: 1: cO5HXhdkW-9sTYlyxMUlTq4VrHM.roa (hash: 2vNmvGiB6oqNqpjdkXzwA+2UM7st3DevXSjO7XrFVio=)
2: rjzFZ_6_40h4rrkThhzwYAooOQM.crl (hash: 64CFRxdN6UaXtM3CJlgSfPwHHjRa5HMFMulw0Oqt990=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 19:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:a8:8e:74:1b:0f:c7:fe:72:93:b6:39:b5:e5:70:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae3cc567febfe34878aeb913861cf0600a283903
Validity
Not Before: Aug 12 19:01:20 2025 GMT
Not After : Aug 13 19:01:20 2025 GMT
Subject: CN=46b99519eb1bfd5dfc66d20b0c0088f579318c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:32:d6:ae:fe:46:75:d0:c3:17:17:e1:7e:82:
1c:12:0d:d9:6b:73:b9:27:fe:00:ec:02:49:80:d9:
23:ef:e7:88:67:12:b5:eb:d4:90:8f:de:0d:6d:29:
4f:9d:ac:a0:03:c8:1d:8b:d7:db:5f:3e:d6:51:1d:
ad:fd:c1:af:21:95:94:8b:9c:42:fa:22:de:76:6c:
aa:03:44:20:83:e0:df:3b:10:03:43:6e:73:0e:23:
4e:33:74:96:21:82:fd:7c:8a:3a:2f:da:36:db:d7:
a0:03:28:8f:a6:90:b9:8f:77:ba:36:5c:45:b7:b9:
31:0a:85:55:a1:37:03:48:88:55:3e:e1:0d:3a:bc:
7c:7f:b5:4a:64:76:13:5d:fe:55:44:60:d4:06:46:
b2:12:ef:28:1d:c7:48:3c:7b:14:d6:3d:a4:aa:d2:
99:a2:89:05:0b:54:07:fe:12:f2:6e:af:ae:a5:af:
5d:bc:ff:b8:32:76:09:7b:ce:44:7b:c5:e2:3c:48:
d8:10:d8:91:1e:0d:be:81:c1:e8:cd:be:e2:d6:44:
80:aa:6c:e7:9c:58:62:be:08:95:f8:31:d0:4f:7b:
81:89:72:1b:3c:1b:d3:72:99:0a:14:f9:7f:17:b9:
34:b3:f8:51:06:32:4e:f3:b3:d3:27:2f:32:cc:30:
eb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B9:95:19:EB:1B:FD:5D:FC:66:D2:0B:0C:00:88:F5:79:31:8C:99
X509v3 Authority Key Identifier:
keyid:AE:3C:C5:67:FE:BF:E3:48:78:AE:B9:13:86:1C:F0:60:0A:28:39:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:cb:ee:e5:fe:a8:35:88:bd:98:a4:6a:b0:bb:05:39:8d:e1:
4c:62:e2:32:f9:d7:bf:63:02:8a:3a:46:a7:56:a4:82:3e:6d:
34:9e:9d:34:24:20:01:12:eb:6c:14:d8:ca:e5:71:4e:09:2a:
b8:1f:cc:54:b1:01:29:e8:3c:e9:1b:bb:23:05:91:43:be:7a:
cc:52:ac:84:1d:74:58:fe:84:a3:7a:5b:18:d8:a7:ae:e7:55:
55:f7:94:2b:7b:b0:e9:e5:ec:e4:55:99:f1:e6:77:de:66:4e:
dd:a8:d5:e2:70:78:9e:8e:a3:68:28:35:ab:9b:42:fc:d3:63:
f4:57:ea:64:0c:c7:9b:59:f6:8d:b0:f3:7b:b1:1e:07:80:b6:
33:8a:db:47:c1:3a:10:75:59:d7:a7:50:41:13:73:c7:c0:01:
ee:bf:51:72:ec:84:ec:0d:83:c5:36:0a:1d:cb:2e:32:6f:38:
aa:e8:36:1b:b2:03:3a:31:64:02:1d:3b:00:2a:8c:7d:40:50:
2c:bb:4b:47:4c:43:26:3a:d3:33:d3:25:10:28:fb:05:96:b3:
db:c1:6c:50:9a:53:96:2f:d9:61:6f:3f:22:82:c8:36:5f:15:
14:11:84:3f:82:76:a1:2c:72:06:49:56:33:48:ca:93:4c:1e:
29:65:ee:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:38:09 2025 by rpki-client