Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft
File: ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft (raw, json)
Hash identifier: Iz8o2pRnQcdiY3fMugjIvx8WHHeEVBW1Lb/4FP9nG3o=
Subject key identifier: 14:6D:CA:52:31:3C:FC:D9:28:BD:0F:1D:EA:5B:29:B6:F1:FE:B6:9B
Authority key identifier: 64:95:0E:4E:58:D6:AC:27:F8:0F:09:A5:ED:2F:30:28:B8:1A:E8:CA
Certificate issuer: /CN=64950e4e58d6ac27f80f09a5ed2f3028b81ae8ca
Certificate serial: 019848F76A5C9BD444B1548D498D71961F23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJUOTljWrCf4Dwml7S8wKLga6Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 23:00:30 +0000
Manifest this update: Sat 26 Jul 2025 23:00:30 +0000
Manifest next update: Sun 27 Jul 2025 23:00:30 +0000
Files and hashes: 1: WuLl5WEm72PKP2EjN4PzkOllUEM.roa (hash: l/LlCxiGWXMwDilSjuK8TtyovKGo3UjHdGI+bjDVpFw=)
2: ZJUOTljWrCf4Dwml7S8wKLga6Mo.crl (hash: wbNjYFbSh74gW7XipPwNUf1IU2s+dj1QGgxSCBpsED0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJUOTljWrCf4Dwml7S8wKLga6Mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:6a:5c:9b:d4:44:b1:54:8d:49:8d:71:96:1f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64950e4e58d6ac27f80f09a5ed2f3028b81ae8ca
Validity
Not Before: Jul 26 23:00:30 2025 GMT
Not After : Jul 27 23:00:30 2025 GMT
Subject: CN=146dca52313cfcd928bd0f1dea5b29b6f1feb69b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9d:1a:79:a4:a1:61:6b:36:1a:2e:1c:1d:43:
07:7a:57:4c:c0:4c:b9:41:e8:6c:05:4d:87:8a:dc:
0d:2e:c6:d5:dd:ea:6e:8b:75:07:de:34:8f:12:5c:
0e:72:ff:43:e0:62:78:b5:dc:da:fe:d1:27:88:3e:
0f:f2:7f:8f:fe:7f:42:76:b4:2c:ae:da:5d:52:9e:
af:72:cb:24:98:d6:e8:c1:63:e6:cb:fe:35:aa:27:
e5:e5:b7:bf:0e:e4:4f:7e:ac:f3:f9:50:11:7b:c4:
c4:07:bb:63:20:c9:27:67:c0:90:ed:2e:ce:1c:55:
4a:16:ff:f9:bf:c5:57:b3:60:83:08:fd:08:d2:7b:
ec:d4:08:f7:db:5f:6e:99:e5:2c:dd:9d:d8:9a:17:
df:02:4d:40:cd:02:3f:46:8e:e2:21:ae:3b:01:1e:
f1:e0:0b:bb:71:5e:e6:86:c3:e6:ba:21:07:b3:fc:
9c:4b:9f:e3:f3:a4:f8:c6:b4:e9:8f:b8:9c:87:84:
f9:63:e7:b6:40:d7:f3:4e:d4:7f:f2:9e:46:74:78:
27:a3:23:11:32:e9:5a:76:b4:ac:4b:ff:01:e8:48:
83:5c:c5:57:9b:d5:62:db:ac:f3:03:d3:bf:fb:26:
53:3d:0f:51:08:db:2d:bb:a1:e8:69:86:c8:06:e0:
c9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6D:CA:52:31:3C:FC:D9:28:BD:0F:1D:EA:5B:29:B6:F1:FE:B6:9B
X509v3 Authority Key Identifier:
keyid:64:95:0E:4E:58:D6:AC:27:F8:0F:09:A5:ED:2F:30:28:B8:1A:E8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJUOTljWrCf4Dwml7S8wKLga6Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f1:f1:1a:4d:4d:b9:d4:2e:23:08:a7:e0:cd:46:8c:cb:7d:
ec:85:ed:bd:d3:8a:79:a2:ec:c3:55:48:44:ac:24:09:22:a7:
3e:ee:cf:9f:d3:5b:db:8d:f0:96:a6:ff:58:ec:72:a1:b4:4d:
6c:c5:3d:24:cf:db:e9:67:9b:fb:15:d3:92:eb:60:c3:68:24:
f3:98:c6:b9:88:e6:4d:dd:9c:e2:14:28:a4:59:4f:c7:e4:7c:
ac:ff:00:50:f4:4e:35:03:e4:25:61:9b:5d:0e:82:d9:33:8e:
ce:d3:64:23:a6:3b:d6:da:01:54:13:f5:ab:99:cd:a9:58:8f:
61:a6:c4:8a:80:67:1d:26:b4:69:c8:e3:45:7b:e3:75:06:68:
90:e2:9b:1d:c4:78:fd:6f:f7:37:1e:f4:86:38:27:10:ff:04:
f2:9d:04:16:e4:47:24:bf:bd:82:29:6a:9d:c1:d4:dd:38:63:
33:1e:d5:03:9d:57:67:c0:4a:50:cf:55:2b:5a:de:96:d5:30:
a3:35:3a:3a:ca:be:a2:1f:22:c1:a7:0b:3b:5b:66:df:c1:07:
d2:bc:bf:42:4a:38:cd:bc:b4:8f:fb:09:a9:9c:a2:27:ae:88:
ee:21:d9:10:08:55:7f:a0:9e:9e:dd:b8:6f:37:46:32:1c:89:
f0:52:2d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:18:03 2025 by rpki-client