Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
File: ZJauOK7ay77u4eCTlW2zKHrntT0.mft (raw, json)
Hash identifier: v2SNqg+nbvJ2DyYOtXUI3nmxDuqmpiFOVCnhx710/eM=
Subject key identifier: A1:27:FE:09:D8:3E:0D:36:B0:6A:BC:EB:9D:D0:39:1C:AE:FE:5A:4B
Authority key identifier: 64:96:AE:38:AE:DA:CB:BE:EE:E1:E0:93:95:6D:B3:28:7A:E7:B5:3D
Certificate issuer: /CN=6496ae38aedacbbeeee1e093956db3287ae7b53d
Certificate serial: 01976DAB21EAFAEF543A92C3B580A42CB71A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
Manifest number: 13D1
Signing time: Sat 14 Jun 2025 09:00:21 +0000
Manifest this update: Sat 14 Jun 2025 09:00:21 +0000
Manifest next update: Sun 15 Jun 2025 09:00:21 +0000
Files and hashes: 1: OsY0TtzQwg_k6WVAlCJ4j1X5_HQ.roa (hash: xdb+Fodrj/gwgOeHGwol/lGn/WJOAqWqApZA+WvwzsI=)
2: ZJauOK7ay77u4eCTlW2zKHrntT0.crl (hash: HkeRCYJZLptQB5fiA0M3Cdo8mAcXwHSrC4p4szrZabg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:21:ea:fa:ef:54:3a:92:c3:b5:80:a4:2c:b7:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6496ae38aedacbbeeee1e093956db3287ae7b53d
Validity
Not Before: Jun 14 09:00:21 2025 GMT
Not After : Jun 15 09:00:21 2025 GMT
Subject: CN=a127fe09d83e0d36b06abceb9dd0391caefe5a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1c:3e:69:56:8c:60:fc:ac:b0:e5:b1:f0:ac:
57:4a:4e:ea:4d:c6:53:c0:43:c4:80:29:c9:13:2d:
f1:13:6d:57:a5:a3:d6:69:9a:08:44:d2:30:5e:6d:
11:d1:d2:ca:23:ce:7b:11:d3:cd:59:a0:fd:4f:72:
d5:a8:47:d0:3a:2a:a6:f2:d4:3b:ae:ba:16:19:01:
90:c7:c4:c0:77:dc:b9:6b:34:5d:77:75:72:25:42:
11:5d:ea:4a:ca:7a:e4:53:ea:32:34:2e:59:15:16:
e0:fb:76:6c:34:06:d7:3a:9f:73:da:3f:98:e9:07:
8a:0e:3d:dd:82:3c:e6:ee:b7:52:38:5f:41:7d:6b:
a6:94:4e:e7:b8:ae:c9:04:a6:03:d6:b6:8f:28:dc:
ad:fe:c2:70:74:86:db:5d:d4:87:47:3d:7b:d0:12:
9f:96:6a:a2:17:0a:b5:b5:e2:d5:c9:a9:25:fc:86:
17:d9:8b:17:bf:46:6c:95:1f:4f:a4:7c:19:db:9d:
3a:0c:5b:cf:fe:84:ea:33:fb:3b:53:8d:92:42:2e:
96:fd:08:56:5d:5b:3a:09:73:7b:50:b4:ee:01:86:
a4:d0:ab:77:20:66:fe:55:1d:d3:5a:c9:fb:6f:ad:
ed:2c:5e:b7:c3:d0:e1:aa:13:4d:06:d2:33:ed:34:
58:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:27:FE:09:D8:3E:0D:36:B0:6A:BC:EB:9D:D0:39:1C:AE:FE:5A:4B
X509v3 Authority Key Identifier:
keyid:64:96:AE:38:AE:DA:CB:BE:EE:E1:E0:93:95:6D:B3:28:7A:E7:B5:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:1a:9d:0c:3a:ca:d7:55:43:60:88:24:90:a1:2c:ac:6e:54:
1f:61:aa:41:2b:77:f4:2f:de:6f:7b:c5:fe:0f:8b:e6:c2:ac:
86:90:90:e0:e2:f4:e7:d2:24:69:7b:56:ad:5f:24:97:52:92:
63:7e:67:6a:b6:e4:25:8e:f1:56:86:5a:13:99:5a:d0:62:44:
61:b1:00:86:c3:af:6e:d7:17:01:06:14:3a:e7:ea:97:d3:c0:
0f:70:9e:01:55:bd:d8:66:2d:18:37:75:ff:b0:71:1d:ad:fc:
99:4c:f1:5b:e8:76:11:d0:86:e6:11:98:ea:6d:77:f9:53:1c:
05:55:09:7d:0f:f9:6d:a5:93:6e:91:2e:e8:d4:e4:0f:6f:d5:
37:76:0a:12:d4:4a:a9:b6:f1:53:67:65:92:f0:30:62:cf:23:
02:ad:ad:20:bb:13:82:c3:a1:45:fd:af:eb:3a:7f:ed:75:79:
61:68:85:97:44:fe:65:38:6a:6b:69:6a:37:9b:6a:27:f6:d4:
f7:b7:24:11:8c:75:7d:60:98:34:2c:38:87:a7:5f:c5:5f:12:
09:37:50:60:b0:ac:9a:00:bc:d3:22:66:2b:18:ab:18:a4:f8:
05:2a:06:87:50:cd:18:46:b6:13:4a:2f:8c:0b:1a:76:48:a0:
af:5a:81:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:06:21 2025 by rpki-client