Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
File: ZJn3HhXA84zrolfTAwTtRL6ofFA.mft (raw, json)
Hash identifier: kfe1DfWMzUAuJDSkeiegDB2km5r7vRgtG7X1DEHKTNo=
Subject key identifier: 7C:84:26:35:D4:88:24:1D:99:52:21:CD:04:3F:F3:3C:CB:DC:BE:60
Authority key identifier: 64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
Certificate issuer: /CN=6499f71e15c0f38ceba257d30304ed44bea87c50
Certificate serial: 019749D5B05583F9DFE776EEC3929F0E83BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 10:00:30 +0000
Manifest this update: Sat 07 Jun 2025 10:00:30 +0000
Manifest next update: Sun 08 Jun 2025 10:00:30 +0000
Files and hashes: 1: EGFdZlaTjbOVYClf_Y2avAhZpcQ.roa (hash: x3O5tXnddOP1tRMR1naKV9GJx9HqGBOVan7EV3M3azI=)
2: ZJn3HhXA84zrolfTAwTtRL6ofFA.crl (hash: x6tVNMvmHpCbf7BwwrVWmlZ9gAW2Z5bFOKbooU/gxxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:b0:55:83:f9:df:e7:76:ee:c3:92:9f:0e:83:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6499f71e15c0f38ceba257d30304ed44bea87c50
Validity
Not Before: Jun 7 10:00:30 2025 GMT
Not After : Jun 8 10:00:30 2025 GMT
Subject: CN=7c842635d488241d995221cd043ff33ccbdcbe60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:11:79:9b:7b:02:1c:a6:f5:f9:ee:64:8a:bb:
f8:7b:aa:a6:fe:14:e9:42:b6:67:15:1b:9c:97:87:
94:7d:0c:dc:d7:eb:55:52:c7:5b:e5:fb:de:5e:60:
5e:1c:9f:c9:08:02:43:35:7a:d0:f5:f5:23:3d:8d:
66:bb:ec:f6:6a:e3:b2:ab:5b:5e:77:98:4e:b6:49:
93:d1:ee:d3:c8:b0:0d:7f:c4:3f:d9:0e:06:87:94:
f0:64:da:ef:8e:92:32:c8:5e:6f:de:b1:30:19:be:
81:1a:b0:5d:98:3f:80:a8:0e:7e:b3:1c:80:a9:ec:
89:fb:46:04:5b:a1:85:c0:f8:73:0c:d2:b5:42:f5:
30:f2:d2:40:cd:32:f8:b5:0e:ac:5b:fa:b4:67:b5:
c8:ea:6c:ef:f9:9e:2c:33:28:e5:b6:a3:59:6b:7d:
fc:37:f0:cc:40:5c:ec:f3:c9:e5:94:f8:a9:60:01:
59:df:53:7b:c3:e7:d1:30:2a:5d:d4:79:71:e4:41:
b8:10:ed:50:d5:44:c3:bd:52:3a:1b:c5:20:41:94:
4d:49:d3:ac:a3:71:2a:8a:66:10:47:f5:6c:54:a9:
4f:d4:05:7f:be:92:95:5e:0b:cc:2b:e3:fc:86:cb:
e3:08:ba:82:40:09:15:ae:6d:54:2c:ae:7d:77:90:
cd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:84:26:35:D4:88:24:1D:99:52:21:CD:04:3F:F3:3C:CB:DC:BE:60
X509v3 Authority Key Identifier:
keyid:64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:56:c3:dd:59:96:3f:1d:d1:72:9f:34:9a:b5:17:f7:b1:9c:
1e:82:ac:f5:b9:48:ac:dd:5f:fd:7d:0a:5b:0e:c3:09:1e:21:
b6:f2:fb:05:cf:40:6e:4f:ac:6a:eb:01:b4:e5:12:7b:48:cc:
72:6e:3a:43:98:1d:e7:d3:e2:26:54:57:42:c5:e1:dc:5d:25:
c3:61:de:c2:36:0e:39:d6:e1:86:87:a8:29:43:88:b9:4e:05:
ae:e3:37:27:6a:8c:32:b3:79:e9:a9:1f:5a:04:6d:18:93:63:
4f:cb:3c:6a:62:f7:60:96:b4:8f:da:87:f6:f2:cb:79:74:ff:
4e:c3:86:26:5f:f5:cb:f9:aa:05:b2:81:6d:f5:80:0f:95:a7:
17:c4:8c:c8:10:c9:b8:b3:9b:bc:3f:28:9d:1a:1c:e6:0f:ce:
3e:a9:a6:82:c9:c6:7d:54:cb:88:4b:08:0a:7e:d5:54:46:60:
37:ec:2d:04:a6:4b:9a:16:aa:98:cb:e8:2a:dc:92:5a:1c:51:
ec:95:2a:f1:40:42:93:8a:3c:12:19:6d:ab:52:85:4e:e2:2c:
8d:05:8f:0f:f6:ac:c3:3c:f0:d3:dc:50:4f:31:fe:38:91:5f:
fd:58:96:ba:fe:5b:46:b5:9f:26:30:3b:46:88:5a:67:93:25:
03:19:e4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:35:42 2025 by rpki-client