Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
File: zjfKOryl4UrBG8fzwVYqZNY5HSI.mft (raw, json)
Hash identifier: 9bCBPHAX1XFD8fTGTFlIjTjd14ys7K1epz8FV6iodjQ=
Subject key identifier: BC:75:14:83:8D:B1:6B:2D:7B:8B:53:B7:85:1B:34:3F:95:06:E7:5C
Authority key identifier: CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22
Certificate issuer: /CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
Certificate serial: 01976403548B0B75DD24AA70408DD66C1AE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
Manifest number: 14CA
Signing time: Thu 12 Jun 2025 12:00:29 +0000
Manifest this update: Thu 12 Jun 2025 12:00:29 +0000
Manifest next update: Fri 13 Jun 2025 12:00:29 +0000
Files and hashes: 1: 8kC1dXQut3Q7aEZLq-H6wHv58Nk.roa (hash: wdoh4a7LDX/nFwYQadnYTEwY/jj86xKk/h3rcKaZa3Q=)
2: T24HRLbgJbROlTALREch3AOYbaE.roa (hash: Wevs9VKSENwQtnqRkxhumLN/kRDIgG1A0UE3XstajKA=)
3: zjfKOryl4UrBG8fzwVYqZNY5HSI.crl (hash: 8/fay3SaKMeq9GAj8mGWe9cq39xPgP1oOUqTic73anE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:03:54:8b:0b:75:dd:24:aa:70:40:8d:d6:6c:1a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
Validity
Not Before: Jun 12 12:00:29 2025 GMT
Not After : Jun 13 12:00:29 2025 GMT
Subject: CN=bc7514838db16b2d7b8b53b7851b343f9506e75c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7d:49:c7:77:1e:ea:b3:2b:b6:01:d2:db:e5:
a4:b9:c2:d0:b7:7a:6b:38:50:57:12:c4:fd:8a:8f:
bd:ea:5e:45:2d:c5:6b:d9:6e:de:5d:20:c5:4e:4b:
7e:81:ae:c2:8c:c6:69:20:9c:72:4b:e1:04:5b:42:
64:3f:90:ae:1e:a2:47:a2:33:36:13:3b:aa:5c:5a:
7f:f9:d6:ce:fb:f9:f8:b6:39:c9:56:cd:18:d6:47:
1a:ef:14:a3:e5:bf:ef:de:67:1c:74:c6:29:1a:f6:
10:3f:64:07:7e:51:23:0f:8a:f6:d1:a9:d7:f3:8f:
9f:5e:31:99:9c:44:c5:68:6c:b5:5f:ec:88:fe:83:
c2:00:6a:34:72:69:14:ae:83:63:e3:72:77:c5:af:
3d:88:8d:10:c3:50:f3:22:19:ed:ad:28:70:fc:ee:
09:59:de:e9:b4:07:61:64:69:49:92:44:fa:dc:79:
86:c6:03:08:42:2e:01:70:15:dc:1d:68:32:d2:78:
e7:d7:13:c8:79:85:2e:35:3f:da:d0:f8:e7:46:af:
84:6c:5c:aa:ea:0a:e7:b0:84:6f:7d:11:aa:7f:8a:
bb:c2:9e:cd:ee:87:e9:65:de:b7:2e:43:97:b9:3d:
22:16:df:20:ca:5a:76:7b:5b:bb:ab:c7:2b:07:6f:
5a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:75:14:83:8D:B1:6B:2D:7B:8B:53:B7:85:1B:34:3F:95:06:E7:5C
X509v3 Authority Key Identifier:
keyid:CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:dd:fc:e3:17:8e:27:37:50:38:91:2c:d1:26:06:9f:f2:cc:
b9:4b:11:6f:1f:53:e2:94:f8:ab:eb:8c:0e:7d:77:de:ad:ee:
bd:98:e1:f3:9a:a0:02:06:b5:05:e0:a2:19:54:d1:06:45:2c:
d6:65:aa:26:62:30:5b:5a:47:03:ad:e0:b7:83:53:30:e0:40:
66:69:d9:e0:f9:83:fb:8a:6f:62:44:43:39:0b:35:44:22:ef:
47:94:4f:71:f9:d6:c7:38:4e:7e:da:e2:c9:92:13:f8:7f:ee:
87:4a:d9:10:9d:b4:db:24:5c:58:c4:62:fd:4a:45:a9:85:9a:
eb:9a:07:3b:0c:a0:b9:4f:8b:65:f7:e1:73:8b:c6:4b:c9:c2:
f8:34:26:f2:c5:32:2c:12:cc:e0:26:b2:5e:43:a2:ec:0b:00:
67:dd:20:e8:0e:5d:51:3d:8e:2e:ef:c8:ea:bf:58:de:a5:8e:
54:23:18:e8:43:a2:ab:04:94:0c:4a:fc:15:ed:0d:8d:af:50:
d7:f8:a0:02:f8:3f:41:df:16:3a:26:1f:d8:aa:2f:5f:a5:14:
93:01:70:43:5c:85:c1:08:75:ef:fa:9b:df:f1:71:07:3f:f4:
5a:4a:95:6b:01:98:ab:f4:59:90:5b:cb:af:67:0e:63:6f:54:
40:aa:c8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 18:03:12 2025 by rpki-client