Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
File: rjzFZ_6_40h4rrkThhzwYAooOQM.mft (raw, json)
Hash identifier: GKyP13oGJwg4n/BDXudiGcd3x+l6YK6srLNL4i0Vjnw=
Subject key identifier: 57:4E:04:26:B0:7D:D2:12:67:55:88:CE:65:23:9D:3C:D1:51:5D:26
Authority key identifier: AE:3C:C5:67:FE:BF:E3:48:78:AE:B9:13:86:1C:F0:60:0A:28:39:03
Certificate issuer: /CN=ae3cc567febfe34878aeb913861cf0600a283903
Certificate serial: 01984AAF0C64F0589F563AD37FCF01324E61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 07:00:42 +0000
Manifest this update: Sun 27 Jul 2025 07:00:42 +0000
Manifest next update: Mon 28 Jul 2025 07:00:42 +0000
Files and hashes: 1: cO5HXhdkW-9sTYlyxMUlTq4VrHM.roa (hash: 2vNmvGiB6oqNqpjdkXzwA+2UM7st3DevXSjO7XrFVio=)
2: rjzFZ_6_40h4rrkThhzwYAooOQM.crl (hash: fiNH3zbSSWsihoKiuGI7WuoYR0m9P35idp+cE5FS1FQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:0c:64:f0:58:9f:56:3a:d3:7f:cf:01:32:4e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae3cc567febfe34878aeb913861cf0600a283903
Validity
Not Before: Jul 27 07:00:42 2025 GMT
Not After : Jul 28 07:00:42 2025 GMT
Subject: CN=574e0426b07dd212675588ce65239d3cd1515d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b4:91:a0:2f:52:33:20:50:40:db:ca:c8:40:
1a:68:9b:07:0e:7b:d0:21:60:de:41:d0:be:d3:5d:
73:ac:8f:9d:ee:02:5a:8f:ac:71:c0:4d:a5:ab:87:
c8:3f:14:42:cb:78:7e:a9:5b:6b:5c:75:48:23:94:
81:d7:8b:f1:8d:4e:8e:fa:31:8e:5f:ec:3e:4e:ba:
50:1d:e9:f5:76:ab:1f:d9:72:8e:e4:c9:7c:9f:40:
65:e1:02:f7:03:66:55:6c:8a:b5:cd:74:6a:43:db:
0b:26:c3:08:54:ed:a2:d2:89:f6:ce:cc:3b:ad:2e:
b7:54:8b:29:fc:8a:14:8b:5c:24:38:b7:63:1f:8c:
4f:cb:8a:fe:e5:12:35:c2:07:73:77:18:92:9d:d6:
8b:ca:86:27:35:83:3a:d1:9c:98:2a:f3:de:15:ce:
8d:fb:85:f7:ab:b1:fc:90:dd:80:5c:6b:d0:6f:61:
71:e7:8a:be:7d:66:7e:b9:53:af:3b:f3:51:cb:28:
54:0b:50:f5:51:d7:c9:fa:f4:2f:bc:10:43:fa:3d:
4d:6e:00:c8:b4:a7:70:b3:97:ef:b7:0f:aa:1e:20:
a0:01:4b:b7:69:d2:6b:3c:46:8d:69:c4:46:93:9c:
a9:ac:70:40:bc:e4:a2:ab:c5:60:63:32:d5:84:20:
a0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4E:04:26:B0:7D:D2:12:67:55:88:CE:65:23:9D:3C:D1:51:5D:26
X509v3 Authority Key Identifier:
keyid:AE:3C:C5:67:FE:BF:E3:48:78:AE:B9:13:86:1C:F0:60:0A:28:39:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:78:e6:39:7f:15:cd:19:6c:1d:b6:b1:e5:23:1b:ce:ae:74:
0a:fb:4b:a9:1e:da:40:f9:48:47:0b:79:8e:38:b1:a8:f3:51:
e7:9b:6a:51:79:1f:f7:bc:a9:ba:5c:85:2b:bd:97:55:a0:0c:
81:2d:28:a0:da:c9:2a:c5:41:64:51:b6:35:b7:f3:10:f0:1a:
3d:89:4e:cf:9d:c3:d0:64:51:f9:66:a0:02:8c:56:3c:60:1c:
2f:80:6a:e6:a3:91:4c:e4:4d:e0:39:c7:90:92:de:06:86:5d:
cc:ac:07:19:12:f6:4f:09:b7:40:ee:cb:b7:52:dc:75:a5:a7:
74:85:3b:f1:52:25:e6:81:9e:10:27:61:1e:a8:82:21:15:f1:
e9:27:3f:04:6b:77:b1:10:1d:fa:20:10:3a:af:d2:13:e7:3e:
0a:74:fc:db:50:75:3b:26:6c:f6:3a:88:55:ce:c2:91:cb:28:
f0:ba:5a:15:a2:fd:cd:89:97:d4:66:21:42:58:cd:1a:d8:2a:
8c:57:5f:4b:ba:bd:9c:f7:c2:b2:36:08:a8:a0:9a:25:4d:41:
bf:7e:d7:e3:a0:2e:f7:21:39:dc:eb:4e:91:36:17:13:60:ec:
b5:71:8e:01:59:82:03:8a:a8:17:1d:3d:f1:38:09:e0:9f:e6:
b9:e3:00:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:14:10 2025 by rpki-client