Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft
File: jzASR05qobNrQgZN0XWzDtgi5zU.mft (raw, json)
Hash identifier: UwtFWrQp0EkQJAj32Qp31YFeoawO2C5G9vIHTC6VhOo=
Subject key identifier: 60:A4:D9:E7:B9:A4:EB:42:34:E2:C0:FF:5F:F9:13:70:F4:11:D1:CF
Authority key identifier: 8F:30:12:47:4E:6A:A1:B3:6B:42:06:4D:D1:75:B3:0E:D8:22:E7:35
Certificate issuer: /CN=8f3012474e6aa1b36b42064dd175b30ed822e735
Certificate serial: 01984A77B2665F519D9FBE5567AD3F363BCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzASR05qobNrQgZN0XWzDtgi5zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft
Manifest number: 1411
Signing time: Sun 27 Jul 2025 06:00:15 +0000
Manifest this update: Sun 27 Jul 2025 06:00:15 +0000
Manifest next update: Mon 28 Jul 2025 06:00:15 +0000
Files and hashes: 1: hSeJLXUeQJLgsdHt2Swy2Krt_5Q.roa (hash: 1r4uFqSNgKddi8IkUrdMVRZBEoRqwJZMemm/bbM90fE=)
2: jzASR05qobNrQgZN0XWzDtgi5zU.crl (hash: x/5dOLlKKY0/DuXcx5Tve2wIh7QttQQyECbxCM+Q2bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzASR05qobNrQgZN0XWzDtgi5zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:b2:66:5f:51:9d:9f:be:55:67:ad:3f:36:3b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3012474e6aa1b36b42064dd175b30ed822e735
Validity
Not Before: Jul 27 06:00:15 2025 GMT
Not After : Jul 28 06:00:15 2025 GMT
Subject: CN=60a4d9e7b9a4eb4234e2c0ff5ff91370f411d1cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9a:5c:f4:2f:d9:52:0a:9f:37:5e:a4:d8:db:
44:fe:1a:77:07:34:85:c9:7d:65:1d:91:20:a4:70:
3c:5e:20:a7:39:e5:67:85:bb:0b:ec:99:8c:7b:c8:
37:22:65:2e:a7:02:b9:99:21:6f:e2:57:39:f5:70:
a9:db:98:e8:07:5c:a2:55:4b:60:31:84:28:70:19:
47:ed:ee:a8:c8:80:98:2d:7a:a4:2d:ae:a9:87:bb:
d5:8a:a1:ae:62:1b:e9:9a:d6:86:06:a0:db:54:b9:
c5:87:8e:62:75:77:88:ee:35:17:9d:31:80:90:3f:
f6:9d:b7:51:e0:59:34:68:37:a9:f1:00:53:09:7b:
7f:31:2b:57:ee:1d:09:e0:4b:94:00:b9:bf:c1:d7:
47:35:b7:2b:96:29:cd:75:cc:37:df:6e:b9:f2:cf:
2f:8e:7c:18:f3:88:a8:a7:73:3d:85:85:c6:44:96:
dc:03:1c:64:b4:6e:28:03:a2:6d:28:86:1f:31:60:
82:b1:9e:1d:51:22:8d:60:48:99:28:f3:73:f0:07:
0d:cb:b0:a6:45:63:ae:0c:7e:17:f5:9f:2a:48:66:
de:fa:56:7f:54:5e:c1:7e:0a:3a:b8:a7:b0:a7:ce:
8d:c4:fe:a5:c7:4a:19:8c:d1:f1:59:52:bc:27:85:
f6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A4:D9:E7:B9:A4:EB:42:34:E2:C0:FF:5F:F9:13:70:F4:11:D1:CF
X509v3 Authority Key Identifier:
keyid:8F:30:12:47:4E:6A:A1:B3:6B:42:06:4D:D1:75:B3:0E:D8:22:E7:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzASR05qobNrQgZN0XWzDtgi5zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:22:fb:88:36:2b:1f:e6:e6:36:14:3b:b6:50:3a:15:74:55:
fe:54:67:ec:b5:ed:af:80:24:3c:57:04:3c:d5:09:32:41:57:
68:1c:55:bd:8b:6b:cf:01:35:c7:68:79:07:06:c2:28:a0:fd:
c8:9b:f0:bc:81:3f:52:4f:c5:2e:1f:a0:80:97:8b:a3:2e:05:
fb:bf:09:f5:bf:41:ff:b1:e6:6f:00:5d:da:0a:61:2f:39:1d:
17:79:32:b9:1d:c8:70:59:b0:ef:4d:56:bd:c1:26:de:38:2a:
b0:d8:cb:78:e9:15:4e:fc:aa:89:73:ef:40:01:80:00:5a:49:
7f:80:e6:b7:84:66:bf:c3:e3:36:fe:cc:69:75:96:cb:cc:5a:
a1:26:d0:c0:7a:a9:26:32:61:a6:e5:65:1c:ac:fe:15:c4:f9:
f3:85:0f:9d:69:aa:df:af:43:75:0c:fe:fd:34:d7:29:30:92:
86:19:87:32:2e:04:37:4b:d2:1b:5d:3e:44:23:45:35:c6:0c:
b0:95:c9:99:25:b1:22:40:6a:d9:aa:f1:d7:e1:46:23:04:57:
24:86:80:54:db:aa:40:40:36:72:db:fb:5b:fc:b0:18:33:36:
b8:1f:07:c8:e1:3a:c1:8e:ab:f9:21:c4:24:0c:b2:9c:dc:60:
bd:ac:93:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:42:12 2025 by rpki-client