Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
File: jzHMNgWz78CbJohQgGO2_UhVYd0.mft (raw, json)
Hash identifier: hrWIGvfN2jTGd66W2qBXHAloi0ebzDh/6lo2MfoKHJE=
Subject key identifier: B0:9E:F8:56:CE:1B:8F:0A:9E:E5:A4:B9:9F:03:27:6B:36:3F:F0:CA
Authority key identifier: 8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD
Certificate issuer: /CN=8f31cc3605b3efc09b2688508063b6fd485561dd
Certificate serial: 01976E509149142B222C9B6FC5CABA4B68F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
Manifest number: 0A74
Signing time: Sat 14 Jun 2025 12:01:03 +0000
Manifest this update: Sat 14 Jun 2025 12:01:03 +0000
Manifest next update: Sun 15 Jun 2025 12:01:03 +0000
Files and hashes: 1: KGShywXbD4wB1PLsBTNT01VDQKY.roa (hash: hBh9EiIl2TqddpHizY/LGkFYV3Ncy9Yws3g05SvVJTg=)
2: jzHMNgWz78CbJohQgGO2_UhVYd0.crl (hash: kPraV4pMH88rIgPPUAziXIZLZ9GYEbt3uH8ycZO1QF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:91:49:14:2b:22:2c:9b:6f:c5:ca:ba:4b:68:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f31cc3605b3efc09b2688508063b6fd485561dd
Validity
Not Before: Jun 14 12:01:03 2025 GMT
Not After : Jun 15 12:01:03 2025 GMT
Subject: CN=b09ef856ce1b8f0a9ee5a4b99f03276b363ff0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ed:aa:6d:67:3e:a1:66:c3:74:53:b5:f2:39:
f7:59:55:ac:fb:39:c1:bf:a8:1e:96:c7:02:05:9d:
b7:c8:21:ba:44:82:ae:5a:5e:1a:1c:be:49:f9:ba:
cf:e3:47:c8:54:7d:86:fc:d7:2e:aa:2b:04:42:01:
e3:d3:6d:0c:61:98:73:51:f2:75:56:65:ce:b4:3b:
8b:e5:4e:27:2d:ad:f0:42:7d:b5:b7:9d:09:80:55:
a8:ce:d0:7c:1e:2b:3a:c7:fe:22:95:0b:c0:5c:d9:
b0:9a:68:03:1c:2c:0c:61:d2:7a:4f:03:13:4c:8c:
d1:9f:dd:d6:89:00:4d:70:4c:bc:78:8c:cd:53:58:
05:93:ec:1f:50:46:64:38:6a:db:bd:1c:79:ae:bd:
de:27:b6:db:83:1e:23:f2:eb:31:c9:4c:78:5d:76:
92:6d:3d:cd:7e:aa:62:5a:15:46:19:0d:cc:41:c4:
1e:e2:0c:20:3b:f4:0d:d2:5d:dc:e4:e8:7a:07:01:
89:2e:da:d2:2d:1a:ff:e5:ba:a7:f2:67:b2:c8:16:
b8:79:a5:b8:e3:3c:3a:15:d6:56:87:72:a4:7f:1e:
30:f5:da:23:6f:c7:a3:8b:37:23:4f:5c:1e:15:6b:
8b:9d:7b:98:8f:06:70:c8:f1:5e:f4:79:8e:fa:79:
51:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9E:F8:56:CE:1B:8F:0A:9E:E5:A4:B9:9F:03:27:6B:36:3F:F0:CA
X509v3 Authority Key Identifier:
keyid:8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:91:f2:bb:d1:4c:6d:7e:be:0c:30:ae:7d:95:10:36:d5:37:
80:a8:25:99:e9:7a:ea:e6:e1:02:52:f5:7f:1e:2a:38:1a:c7:
94:13:ab:86:6e:46:34:c9:f5:e1:e2:e8:bd:c9:36:54:a0:4b:
14:f0:d4:5c:75:41:e8:13:51:6c:bf:a6:d6:7e:b7:4d:f2:40:
85:ae:33:c4:28:54:f9:38:c7:1e:b2:d3:12:15:5c:77:17:fe:
73:f4:fa:48:6d:09:fa:fb:31:45:71:de:c5:d9:63:58:34:27:
3e:a4:c4:25:18:f7:a7:d7:1b:57:1d:bd:87:f4:4f:2e:21:70:
8e:1a:a6:fc:46:23:9d:5a:27:83:6e:4d:54:e3:71:bd:c2:73:
21:68:63:f3:55:8b:ae:ed:27:d6:18:b5:a1:85:55:0e:61:fc:
36:5d:4b:6e:17:f9:2b:c3:e4:e6:07:0d:7b:36:fa:a1:0a:36:
ab:02:43:44:c1:ab:bd:02:09:03:e5:1e:f2:e8:63:fa:ae:3b:
75:a2:09:b5:7e:78:26:7f:17:a3:3f:58:fc:32:d9:95:a9:b0:
e5:f7:67:10:5a:db:06:a8:59:63:b5:65:c3:6c:17:9d:de:f5:
92:ab:a0:d2:81:99:66:23:b8:c1:e6:d5:52:03:f9:58:86:68:
94:ef:ff:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:13:59 2025 by rpki-client