Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
File: caJzmyDCWcXRs4jRRT9vF5nyj2w.mft (raw, json)
Hash identifier: H0jwTXKHd1wNYdUHybjDNkw2zl2TK8xjRkWVEs6q6Zw=
Subject key identifier: 96:7A:82:80:1C:FF:0B:B0:53:44:45:3A:24:95:3E:26:9B:74:F5:5E
Authority key identifier: 71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
Certificate issuer: /CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Certificate serial: 019849D33530653A00E988F8A0D5E54402F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
Manifest number: 0359
Signing time: Sun 27 Jul 2025 03:00:35 +0000
Manifest this update: Sun 27 Jul 2025 03:00:35 +0000
Manifest next update: Mon 28 Jul 2025 03:00:35 +0000
Files and hashes: 1: 5TxBRMul-Sk6vrxAy-O3Gig1UHg.roa (hash: eQW3KPMxFJcTn3nfO5KDUYdR77aYysAZcOPu9j2QK1w=)
2: NnS9tE0Wd3GJX8d4rDN6hefth0k.roa (hash: iMULd1rU9nLxXdG6/iod6VTsBhibbUWJ3DwkFA8v85s=)
3: R5EoUABcKiwLg06w_OxlkJfMqUk.roa (hash: irt2J6S0P6bVoeLD1I6fHpK1oay2SiSe0bMOlV1dUxk=)
4: caJzmyDCWcXRs4jRRT9vF5nyj2w.crl (hash: z8lGbXEW5VnOpA49WzpiBAexZ3ePpHFLmBvURJ8pFbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:35:30:65:3a:00:e9:88:f8:a0:d5:e5:44:02:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Validity
Not Before: Jul 27 03:00:35 2025 GMT
Not After : Jul 28 03:00:35 2025 GMT
Subject: CN=967a82801cff0bb05344453a24953e269b74f55e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f2:ad:30:2c:56:b0:32:4e:4b:28:7b:b8:b2:
77:d9:db:82:13:7f:b6:bc:dd:67:b1:11:2b:f8:85:
4c:aa:9c:19:c2:37:22:f7:ac:bf:78:1f:bd:31:f1:
03:1b:32:fe:24:da:f7:5c:1c:73:63:db:1a:e9:d7:
b2:32:ab:1f:da:83:6e:b9:b2:e5:05:72:37:18:16:
45:1e:73:f9:4d:31:88:e8:2d:c9:eb:de:d2:c5:e5:
bb:e8:22:41:01:45:2c:20:a4:64:42:2b:f0:10:ff:
f7:36:1a:1d:43:50:a6:f4:55:d0:7d:17:f2:b6:4e:
96:87:32:5f:5d:89:ed:cc:b2:e1:af:cc:78:9f:15:
85:f7:9e:65:fe:6b:ca:ce:1c:d3:e3:1a:26:b6:db:
61:f1:82:e1:94:63:2c:07:dd:53:2c:6f:a5:d7:78:
82:25:2b:60:f9:35:4f:31:44:cb:f3:6f:a1:b3:c7:
f9:ce:d9:a1:a9:98:a3:37:72:9b:cf:e3:f1:35:de:
ea:e7:d8:70:5e:65:8d:08:50:ee:50:6c:55:a5:f0:
ed:86:16:35:93:84:e3:3f:52:95:19:78:46:c6:69:
b2:15:bf:44:54:6d:05:aa:cd:35:86:af:fa:10:e5:
80:95:42:b5:0e:cf:65:2b:25:e9:65:9d:84:10:d7:
9a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7A:82:80:1C:FF:0B:B0:53:44:45:3A:24:95:3E:26:9B:74:F5:5E
X509v3 Authority Key Identifier:
keyid:71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:17:c4:54:1d:ce:3a:8c:2b:ee:28:b4:eb:95:bd:f7:8b:5d:
41:a5:d8:7f:21:52:d6:60:b8:e7:01:e6:55:fb:52:00:5a:03:
29:7f:6d:9a:34:49:29:9e:98:80:f9:64:11:08:9b:3c:d3:8b:
4e:e5:09:b2:ff:07:68:c6:af:f8:5c:cf:0c:d9:a6:73:62:27:
b3:2d:f8:34:d2:20:30:85:09:37:46:00:12:a0:86:e7:45:d9:
e4:15:35:19:ae:ea:65:c6:12:f3:4d:e2:dc:5b:f1:16:c1:26:
e3:50:2a:6a:84:cf:dd:16:eb:82:76:5c:f0:6a:61:75:f1:aa:
9e:3c:88:79:19:cc:64:0c:d6:07:b4:ce:4c:20:18:f5:14:9a:
b6:12:5a:f5:bb:09:2b:f4:c7:e9:6e:f3:e3:d1:21:89:f0:e6:
43:6e:56:cb:7a:a7:f8:cc:92:f5:30:2c:a4:78:ea:7c:bc:c7:
e6:f8:7e:7e:e8:1b:da:8e:4d:b7:2a:36:ac:93:2b:17:32:f1:
05:22:46:50:4c:ed:d9:d9:81:80:63:4a:f5:73:a4:6c:3a:61:
40:b9:04:16:6e:0f:dc:f1:31:f7:02:bd:9e:8b:6a:d2:53:ec:
c6:77:41:f3:6f:8b:35:fc:84:f7:ad:7b:2d:c5:c1:08:bb:e4:
17:0e:b5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:48:06 2025 by rpki-client