Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft
File: ZjokSA8E0TGL8acNq_-ksn7zLaI.mft (raw, json)
Hash identifier: 9Cmn32bPS4rx6aMSFtjSOZcfiZO4xjX1hSvrHfo8E8o=
Subject key identifier: BA:FD:CE:2D:DE:49:06:1E:EB:A7:5D:95:A4:29:EA:58:15:5C:68:6E
Authority key identifier: 66:3A:24:48:0F:04:D1:31:8B:F1:A7:0D:AB:FF:A4:B2:7E:F3:2D:A2
Certificate issuer: /CN=663a24480f04d1318bf1a70dabffa4b27ef32da2
Certificate serial: 01975FF0035E9A82A8E83CF695ADFE1BD209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft
Manifest number: 019E
Signing time: Wed 11 Jun 2025 17:00:54 +0000
Manifest this update: Wed 11 Jun 2025 17:00:54 +0000
Manifest next update: Thu 12 Jun 2025 17:00:54 +0000
Files and hashes: 1: G8N3qTa4VczFzinJ5WzomATxm3g.roa (hash: 9nI91Hj8CyleS8L7CFcjCsRKa59524cSRX5eWMKZBYE=)
2: ZjokSA8E0TGL8acNq_-ksn7zLaI.crl (hash: qYar91RfuQs3FaaFnt6QIUA9GYmtO9UOFDPSgCDKBsc=)
3: lh0Ymr_ga0779X3_Cx26imTai5c.roa (hash: KAwIiW82rtUV/DIsKOEYKgQfn7noiC8wAVVTIRXrLCk=)
4: sQVxZ_lbDcaGAO6GQ4Uax3TrnbA.roa (hash: NBxjFtKEwZR8bN/MCO3rMHIc0Pkb+5FRotafl/NdAVw=)
5: ySpicQatPy5iHCLP1veD0rDhvRU.roa (hash: y3lstPEKv9L5HhDFlk02HVUCo0C3eJ06Z+uYgaJZhhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:f0:03:5e:9a:82:a8:e8:3c:f6:95:ad:fe:1b:d2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=663a24480f04d1318bf1a70dabffa4b27ef32da2
Validity
Not Before: Jun 11 17:00:54 2025 GMT
Not After : Jun 12 17:00:54 2025 GMT
Subject: CN=bafdce2dde49061eeba75d95a429ea58155c686e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:92:12:6b:0a:d2:93:56:1b:9b:ed:92:06:6d:
71:74:0f:15:6c:52:df:f1:c7:8b:65:94:ed:73:24:
7b:87:40:24:55:22:dd:de:b7:b1:f4:7d:4d:3f:c4:
76:0c:04:41:31:cc:75:8e:ff:a1:5e:79:06:7f:5a:
e3:37:53:e4:ab:60:97:35:1c:fe:cb:29:fb:e9:ef:
b8:cb:f8:c9:68:fc:f5:8c:ef:fa:cf:6c:0d:35:33:
8e:e3:63:02:62:b8:e3:4e:9f:d6:17:ee:83:9a:a8:
27:b2:16:b7:49:5a:a3:c5:e3:0b:93:28:4a:3e:ea:
d4:bf:de:9e:aa:48:a4:20:3a:55:bf:fe:51:82:67:
40:6f:58:21:56:e5:1e:94:e1:07:f9:c5:8d:38:1b:
ac:e9:15:55:dd:2d:b3:ce:5a:55:5f:9d:14:45:0f:
f8:68:3a:b4:73:11:5d:c6:3e:d1:d4:b1:f8:cd:f9:
95:d9:16:53:1d:99:34:9b:77:e1:5f:77:ae:b2:d8:
57:e2:d0:b9:ef:04:73:8f:5e:7b:e1:e0:9f:38:f1:
8c:60:10:55:ad:3b:ab:32:b0:f1:b4:0d:ad:6a:36:
94:59:bd:01:f3:46:f1:4d:02:8a:51:e6:1a:e7:26:
e0:ad:78:8f:08:de:41:4b:6f:50:7d:87:8f:9b:3e:
a7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FD:CE:2D:DE:49:06:1E:EB:A7:5D:95:A4:29:EA:58:15:5C:68:6E
X509v3 Authority Key Identifier:
keyid:66:3A:24:48:0F:04:D1:31:8B:F1:A7:0D:AB:FF:A4:B2:7E:F3:2D:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:68:73:bf:8c:85:9b:b9:60:3c:0a:c6:77:48:bf:e0:d2:66:
26:8e:0c:f0:9a:79:ae:a4:d2:50:3f:f6:63:06:e5:6d:8e:16:
d5:2d:41:5a:64:b7:ad:74:f7:15:e6:ee:40:ed:dd:1b:b3:2e:
ff:0e:c8:15:23:bf:ed:df:2c:97:fc:eb:8d:f7:6b:17:bf:77:
19:1f:35:a3:b4:76:ad:b1:ee:ef:4f:e1:d5:62:16:6f:bd:b0:
77:07:c3:fb:0b:99:62:cc:42:62:aa:83:b4:81:b7:d3:ce:e9:
17:bf:9e:35:5d:3d:1a:f2:7e:f8:06:c9:09:93:b0:7c:07:86:
8c:56:1b:c3:4c:44:25:f3:e7:e1:6d:22:49:ec:17:ee:40:d5:
fa:eb:c7:cb:5e:a9:6d:dc:9c:9c:33:c0:9e:db:f9:17:76:79:
35:ac:31:66:56:71:ad:d0:80:8d:dd:4c:01:8d:94:71:d7:24:
63:7b:c1:d0:79:b1:7c:92:5b:b2:b1:19:a7:d3:eb:78:07:c0:
a8:d0:fb:c2:3b:95:b8:62:cf:2b:35:c6:b6:ae:0c:84:f0:6e:
88:41:bb:c5:42:fa:a3:11:9e:02:bb:3e:0c:bb:66:11:24:dd:
d6:da:e5:60:6d:be:7e:7f:03:c5:03:63:9d:3e:4b:b4:df:0f:
68:06:43:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 04:11:19 2025 by rpki-client