Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
File: ZJauOK7ay77u4eCTlW2zKHrntT0.mft (raw, json)
Hash identifier: LvPajBTSK5RBTJyMFETXBmIqyzpeoQnzVt8bBD1T6N4=
Subject key identifier: 35:95:EB:CE:30:2B:24:EB:29:39:D8:D6:FC:B7:C0:AA:71:97:DE:F1
Authority key identifier: 64:96:AE:38:AE:DA:CB:BE:EE:E1:E0:93:95:6D:B3:28:7A:E7:B5:3D
Certificate issuer: /CN=6496ae38aedacbbeeee1e093956db3287ae7b53d
Certificate serial: 01985B354222FA51BEF6C16225596D227DD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
Manifest number: 144C
Signing time: Wed 30 Jul 2025 12:01:13 +0000
Manifest this update: Wed 30 Jul 2025 12:01:13 +0000
Manifest next update: Thu 31 Jul 2025 12:01:13 +0000
Files and hashes: 1: OsY0TtzQwg_k6WVAlCJ4j1X5_HQ.roa (hash: xdb+Fodrj/gwgOeHGwol/lGn/WJOAqWqApZA+WvwzsI=)
2: ZJauOK7ay77u4eCTlW2zKHrntT0.crl (hash: 2yrUAcamWZcu7NekT+aHhP5zdQaJQ+3LfGCGDvbOu60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5b:35:42:22:fa:51:be:f6:c1:62:25:59:6d:22:7d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6496ae38aedacbbeeee1e093956db3287ae7b53d
Validity
Not Before: Jul 30 12:01:13 2025 GMT
Not After : Jul 31 12:01:13 2025 GMT
Subject: CN=3595ebce302b24eb2939d8d6fcb7c0aa7197def1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:43:be:8a:43:bc:6a:dd:cc:4a:51:2f:7f:07:
b3:5b:d5:d8:14:5a:82:88:82:70:cc:1d:86:b4:f4:
d9:9e:50:39:9e:ae:e3:d7:0e:c1:d2:55:00:d4:a1:
03:12:6a:ca:da:6a:88:9e:80:cf:ac:94:6a:5a:b0:
3e:71:80:eb:53:13:f2:a4:d1:d7:14:9d:ee:3a:85:
74:24:11:72:08:27:5b:cc:82:f0:e5:80:e5:bf:b9:
08:ce:bb:94:c9:1c:53:9b:b8:d7:b2:90:4d:3b:2f:
38:54:a3:43:a2:4a:9d:56:38:b3:5e:9f:bc:17:d9:
9d:6e:8f:c4:9e:ca:97:9c:23:be:fa:6f:4a:59:0f:
fe:b8:b5:bd:53:82:33:fc:ae:98:b6:c6:c6:9f:cf:
60:09:76:3b:62:09:8b:8c:2f:e3:ea:3c:13:84:af:
f8:bc:dc:a1:ad:31:ae:a6:25:58:ab:b3:de:61:16:
5c:08:8a:8c:96:39:b5:42:17:b1:43:33:82:1e:8f:
d5:fe:22:2b:2a:28:0f:2a:ab:6e:d6:42:8c:ee:be:
cd:88:6e:5c:03:52:61:94:71:92:24:8a:3c:af:7e:
c5:40:18:12:e8:82:19:63:99:91:33:d4:8f:bd:e4:
c0:33:d9:b8:13:e6:6d:55:3d:2f:f7:97:d8:8a:66:
18:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:95:EB:CE:30:2B:24:EB:29:39:D8:D6:FC:B7:C0:AA:71:97:DE:F1
X509v3 Authority Key Identifier:
keyid:64:96:AE:38:AE:DA:CB:BE:EE:E1:E0:93:95:6D:B3:28:7A:E7:B5:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:83:15:bd:3c:de:14:b9:5a:a1:74:b5:3d:2b:e3:e3:9d:93:
74:7b:3e:80:8e:57:d3:fa:ee:25:d9:69:60:38:ce:3d:e4:80:
fa:e6:ea:4b:5e:b6:9a:8e:3c:09:1d:f2:8c:fe:5a:81:8d:a7:
3e:c4:d0:91:a4:fe:72:72:c1:7c:7f:97:45:b8:d6:3d:ef:7c:
07:5d:88:f0:3d:50:a6:65:d1:ab:47:71:ed:be:f4:b7:6a:eb:
9d:3c:44:3b:84:48:df:72:fa:19:01:7a:54:f0:2c:d4:bd:38:
63:af:11:e3:83:01:87:25:00:63:c8:54:de:7c:d5:6f:83:8b:
f9:bb:38:7a:be:59:33:61:9c:cd:73:70:e7:0c:f1:a7:33:56:
7d:79:95:fe:73:44:3f:65:39:c5:27:85:db:70:39:c6:4f:32:
19:36:97:aa:33:19:e7:ab:a5:e4:c8:05:5e:3e:4b:f4:b3:b9:
c1:47:c3:19:67:6e:22:e7:c4:d8:a5:c5:00:8d:93:e1:7d:27:
3d:8d:ba:83:47:4f:d7:b2:c4:5d:91:c7:52:07:33:9a:eb:d2:
01:0d:b2:77:b9:7c:b8:49:da:af:d3:be:d5:bd:c8:d0:7a:fb:
c4:0e:c0:84:87:85:df:44:c6:6c:82:ff:bc:59:08:42:0d:ea:
90:4f:80:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 20:08:02 2025 by rpki-client