Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
File: zJxBoSN2TPfcDy25hB9zKjuWE0M.mft (raw, json)
Hash identifier: CiKHMs/MsnAKnwyF3JHLXDEaklosiR1yF1UCynoT8sA=
Subject key identifier: D6:58:90:A6:3B:CD:22:4F:54:C1:B3:48:15:63:07:DF:AA:1C:BF:01
Authority key identifier: CC:9C:41:A1:23:76:4C:F7:DC:0F:2D:B9:84:1F:73:2A:3B:96:13:43
Certificate issuer: /CN=cc9c41a123764cf7dc0f2db9841f732a3b961343
Certificate serial: 0197469E5E015C420FB27574FDC056DDBF43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
Manifest number: 157C
Signing time: Fri 06 Jun 2025 19:01:13 +0000
Manifest this update: Fri 06 Jun 2025 19:01:13 +0000
Manifest next update: Sat 07 Jun 2025 19:01:13 +0000
Files and hashes: 1: B8c-KiiuWVbKdd6Eyr8wAePUEWY.roa (hash: 8i+mj8IGmve8qUZWFCAwe3JPzP0zTBzNHkZJDJW66Pg=)
2: zJxBoSN2TPfcDy25hB9zKjuWE0M.crl (hash: D2R7zDmOK8CdwAmw+QJyjQwCj7P38qT4kNNxHpYbk5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:5e:01:5c:42:0f:b2:75:74:fd:c0:56:dd:bf:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9c41a123764cf7dc0f2db9841f732a3b961343
Validity
Not Before: Jun 6 19:01:13 2025 GMT
Not After : Jun 7 19:01:13 2025 GMT
Subject: CN=d65890a63bcd224f54c1b348156307dfaa1cbf01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d1:24:09:dd:04:6a:24:c1:ad:ff:35:e3:b8:
86:ff:39:be:e5:26:c0:c5:02:2b:79:20:30:8f:d2:
58:f7:a0:75:a4:cb:c0:b6:3b:48:84:3e:d5:1b:64:
eb:cf:d6:8c:21:04:af:7e:81:c1:52:00:f0:7a:a2:
db:05:54:bf:ff:0a:46:cc:c4:a5:c9:22:bf:b5:08:
33:21:0e:76:0a:cf:a5:0d:6e:06:02:ec:5c:89:43:
d6:c3:da:26:f6:3c:13:2a:3e:9e:35:54:d2:95:fb:
74:6a:f7:cf:45:c7:98:2a:77:09:0d:db:89:d5:47:
aa:75:29:1e:bf:cc:d2:e5:f6:15:9d:f8:09:b0:03:
fd:ca:81:1f:fc:16:8e:66:87:02:a1:ed:52:15:f0:
9f:b0:16:da:a6:8a:0e:c4:64:09:b3:26:2b:04:0d:
83:19:c2:45:53:97:1c:5f:99:56:53:9b:79:43:38:
af:bb:a5:ec:e1:81:d8:12:ab:ea:9c:21:be:1f:b2:
ef:23:f7:e0:8d:19:99:f2:67:82:b0:46:75:d4:49:
56:56:c2:37:bc:3b:45:e2:27:ca:6e:15:bb:53:6c:
d6:63:60:0a:90:93:e8:40:33:ab:d8:7d:9e:be:c9:
e6:16:ec:50:6c:dc:d2:b3:6f:5a:27:08:92:3e:cf:
41:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:58:90:A6:3B:CD:22:4F:54:C1:B3:48:15:63:07:DF:AA:1C:BF:01
X509v3 Authority Key Identifier:
keyid:CC:9C:41:A1:23:76:4C:F7:DC:0F:2D:B9:84:1F:73:2A:3B:96:13:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:1c:fa:1d:6c:45:2e:69:4b:21:d9:fc:fa:9b:a4:e6:5c:65:
57:12:aa:74:2e:d5:ff:63:48:2f:80:b4:d5:10:b6:a4:55:a2:
b3:cd:86:13:10:b9:ea:24:fa:66:b2:31:06:06:97:aa:88:19:
49:e6:5e:ad:74:a3:e3:4b:0f:f7:56:82:f3:14:7d:1f:e7:a2:
68:40:62:bc:af:34:24:ba:39:d2:53:4f:7c:00:08:f1:1f:78:
b1:03:7a:86:92:43:65:33:89:49:98:26:82:d5:0e:4e:c7:cd:
b6:e5:83:d4:5a:3e:24:e4:b7:d2:c3:d6:47:a2:49:8e:06:b1:
18:fa:d7:59:9c:46:45:a8:2e:75:df:6d:37:25:e4:b3:55:37:
97:74:9c:2b:b6:50:12:b9:00:c0:2a:78:0d:ce:74:18:dc:a8:
7b:7b:06:b3:4f:86:67:ab:85:b3:16:24:ea:7a:c1:29:4c:ba:
b5:5f:6d:64:09:dd:f9:c7:05:97:40:91:3a:19:05:b1:3f:27:
e1:9a:85:80:90:fc:65:78:23:54:7f:27:ae:be:28:26:ed:27:
08:49:0d:f7:0c:6a:1c:a0:cf:1b:b6:9a:4f:91:ab:5b:46:8d:
da:c4:bc:de:c8:d1:17:b9:ba:17:85:ef:b2:49:16:2a:3a:0d:
ac:3f:73:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:23:46 2025 by rpki-client