Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
File: jZg6B-bbi8SUyI370TF7qBDS0no.mft (raw, json)
Hash identifier: dAxBkC2GF9q9p6h6VPqiJeNl4efjl26WdGy8lHyaDVE=
Subject key identifier: BA:EF:46:18:02:B9:80:DD:C5:4A:BF:FA:57:34:9B:44:28:D7:E9:40
Authority key identifier: 8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A
Certificate issuer: /CN=8d983a07e6db8bc494c88dfbd1317ba810d2d27a
Certificate serial: 0197518F3766B337D3DDE4FE33377D13ECF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
Manifest number: 11C5
Signing time: Sun 08 Jun 2025 22:00:29 +0000
Manifest this update: Sun 08 Jun 2025 22:00:29 +0000
Manifest next update: Mon 09 Jun 2025 22:00:29 +0000
Files and hashes: 1: 4-WfO6vi57usPTB05BV5GJ31rGM.roa (hash: VA1gjhdShA/9i1dmr35uQ85UKyhc+8PsGP0Wp/sm8Mw=)
2: jZg6B-bbi8SUyI370TF7qBDS0no.crl (hash: UEO9VkfR0+nTie76Lk2yAaR/3zawQiQX5XcZu9phpRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:8f:37:66:b3:37:d3:dd:e4:fe:33:37:7d:13:ec:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d983a07e6db8bc494c88dfbd1317ba810d2d27a
Validity
Not Before: Jun 8 22:00:29 2025 GMT
Not After : Jun 9 22:00:29 2025 GMT
Subject: CN=baef461802b980ddc54abffa57349b4428d7e940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:41:09:79:4f:8d:9e:d2:de:08:5a:75:4a:5b:
be:9a:93:e2:64:95:88:f3:7b:57:ff:0a:2b:47:f5:
6e:da:b8:d3:f5:e7:8f:db:eb:73:19:b2:ec:37:23:
c4:ee:81:e3:b8:10:58:21:b4:0e:0e:20:e7:f5:0e:
44:ea:ab:9e:43:c6:17:77:d5:fa:08:6f:74:f8:f1:
4c:97:35:f2:d8:3e:3b:54:ec:74:47:6e:d3:18:d9:
9c:3e:e5:40:0a:33:2e:98:35:88:18:6c:4c:e6:6f:
db:ae:2d:6a:05:94:bb:9c:19:00:9c:96:e9:ca:ae:
0f:05:eb:a5:06:34:34:69:96:d3:1a:31:0a:28:68:
39:77:fa:8a:9d:01:6f:40:8f:bf:c2:5d:9e:2a:dc:
25:8b:96:0a:22:49:f1:64:40:9d:85:c9:ce:b5:59:
44:d0:05:83:e2:38:e4:de:d5:ae:9e:11:51:b7:3f:
c2:81:1b:8c:3f:25:28:52:36:1c:49:16:2d:c7:42:
97:11:ca:eb:ee:05:34:76:85:84:b5:c0:40:41:33:
76:70:e7:13:d6:26:81:06:be:8f:85:a2:90:a8:b3:
cb:7a:7f:7d:59:11:a8:33:7b:3c:79:ba:1b:f0:a3:
9b:ba:15:f5:fd:3e:d4:9c:d8:74:20:05:f1:2a:cd:
b3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EF:46:18:02:B9:80:DD:C5:4A:BF:FA:57:34:9B:44:28:D7:E9:40
X509v3 Authority Key Identifier:
keyid:8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:b0:94:98:fa:19:2a:45:e1:c5:0f:37:25:f6:cd:c6:60:8c:
19:b1:34:38:c9:0d:3f:9e:41:a0:f1:b3:7a:4e:da:a9:6b:2e:
a6:58:c0:4b:cd:aa:48:e3:ef:bd:46:86:09:d5:c6:79:5a:71:
33:f4:10:29:04:bc:40:d4:f2:10:f2:64:75:96:0e:33:b9:df:
21:62:f9:fe:d2:9d:cb:15:a3:20:7a:9d:9a:56:e0:0d:47:e1:
a8:4e:19:a3:cd:79:7e:00:b9:0e:e2:44:70:2b:5f:e2:ef:c1:
6b:98:99:74:2c:91:66:2d:b9:66:13:c8:c9:e2:62:a2:da:65:
81:60:d5:52:b6:52:d2:ca:10:df:3e:9f:af:07:0b:c3:56:05:
db:7e:8a:72:1b:ec:96:41:9b:1a:85:24:47:bf:0a:1b:af:6c:
e6:cc:4d:93:75:22:c9:f0:c7:cb:5d:14:5e:ef:74:64:b0:0e:
b0:fe:50:7b:9d:dc:1a:7e:7e:12:13:41:1d:93:9a:33:c8:e9:
11:37:96:04:4f:92:db:ab:c0:69:55:c9:39:d2:0a:19:6b:67:
0e:a5:8b:2c:a9:f3:7a:d2:ae:8c:8c:f9:b5:16:7d:72:41:37:
fc:1c:35:0b:78:6c:01:7a:af:0c:dc:d1:f1:92:de:64:e4:14:
dc:fa:cc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 05:02:00 2025 by rpki-client