Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
File: zjfKOryl4UrBG8fzwVYqZNY5HSI.mft (raw, json)
Hash identifier: 1F32UPtyh3N0UL4mee3zD7MDxS3P35UsF9eRA10EVyk=
Subject key identifier: 35:C7:C4:42:E9:28:B4:04:7E:21:82:98:05:E5:64:AC:64:3B:2E:05
Authority key identifier: CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22
Certificate issuer: /CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
Certificate serial: 01976026C6A35D71F17DBC4F4FAD35E7BEE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
Manifest number: 14C8
Signing time: Wed 11 Jun 2025 18:00:43 +0000
Manifest this update: Wed 11 Jun 2025 18:00:43 +0000
Manifest next update: Thu 12 Jun 2025 18:00:43 +0000
Files and hashes: 1: 8kC1dXQut3Q7aEZLq-H6wHv58Nk.roa (hash: wdoh4a7LDX/nFwYQadnYTEwY/jj86xKk/h3rcKaZa3Q=)
2: T24HRLbgJbROlTALREch3AOYbaE.roa (hash: Wevs9VKSENwQtnqRkxhumLN/kRDIgG1A0UE3XstajKA=)
3: zjfKOryl4UrBG8fzwVYqZNY5HSI.crl (hash: gZKePpcQY0xvMoZ/GHMwEzRrR0h/crWJRSOJpIKqfIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:26:c6:a3:5d:71:f1:7d:bc:4f:4f:ad:35:e7:be:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
Validity
Not Before: Jun 11 18:00:43 2025 GMT
Not After : Jun 12 18:00:43 2025 GMT
Subject: CN=35c7c442e928b4047e21829805e564ac643b2e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8f:b9:8d:98:04:1e:d7:e0:74:ea:29:37:4d:
c7:87:19:29:24:28:f0:37:e6:aa:45:a4:9a:a7:ad:
d6:e1:8a:23:d6:8f:3b:17:d8:52:b2:59:79:dd:c4:
bb:c5:ff:b8:a9:37:c5:e0:b3:79:dd:ae:c5:c3:88:
0a:88:2f:39:95:29:ea:79:f2:53:93:6a:07:ff:9e:
c5:df:75:cd:a4:44:8a:cf:bd:f0:46:e3:97:e9:96:
e6:59:cc:fa:89:d8:7f:74:ca:68:c5:fd:b3:bb:2d:
20:06:13:ca:7d:a4:17:e0:88:11:a6:20:f5:4a:cb:
88:99:4b:44:6f:e0:63:93:11:bd:12:8d:ed:e5:9d:
56:5d:05:88:9a:9c:24:08:26:a7:6d:b7:07:2f:91:
b5:d2:10:ad:95:ec:6e:1d:94:25:d1:24:21:ab:67:
2f:e2:b1:00:22:2c:a8:98:92:df:b4:97:ea:58:0a:
59:20:df:d4:eb:9d:43:f6:66:84:54:bc:34:0d:2d:
94:5a:e3:4b:7c:fc:81:ba:6b:6a:8f:39:bc:89:3f:
2b:d3:6b:f6:ad:38:46:5c:a6:7e:c3:12:9d:c3:86:
4c:95:c8:05:7d:73:ab:6f:fa:1f:51:61:05:a5:63:
13:9f:84:6e:b7:83:b7:bb:35:92:4f:93:df:2d:f4:
d1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C7:C4:42:E9:28:B4:04:7E:21:82:98:05:E5:64:AC:64:3B:2E:05
X509v3 Authority Key Identifier:
keyid:CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:fb:38:50:d1:97:71:71:6d:ee:d7:bb:30:05:bc:e2:90:93:
30:f6:6f:f8:a8:75:78:88:50:c4:df:11:e6:3a:4d:dc:11:d7:
34:a9:12:1a:27:5a:fc:7a:ae:1e:34:fa:09:a3:77:bc:89:b2:
bb:7d:1f:bd:56:07:4b:ed:47:7a:e6:9a:7e:9e:09:d1:10:69:
bb:e6:aa:1d:73:4c:20:8c:44:e4:76:1e:0c:30:c3:07:69:ab:
25:b1:13:1b:b1:e1:56:e0:5a:15:9f:e8:db:e0:00:bd:23:18:
15:d2:9b:a7:3c:ca:bb:22:88:65:c1:35:f5:5d:73:6c:30:29:
aa:8e:24:65:95:7f:ca:e1:be:31:92:0a:43:c6:eb:25:4c:e8:
4f:7c:13:0e:a3:3d:bb:0d:83:af:bf:79:4e:f8:f7:d7:e8:80:
5a:4b:1a:67:1c:8a:15:e3:67:ee:5c:71:85:ac:d6:2b:46:48:
c8:28:6a:ee:ef:68:62:9c:c7:71:08:6c:d1:ed:0f:20:55:5b:
60:87:57:c2:a2:56:ef:13:03:42:20:0b:e7:05:6e:f6:2a:d3:
7a:2b:14:9e:67:83:4c:e3:0b:30:52:d0:96:4c:8f:2c:ef:3f:
f1:55:ac:60:d2:ea:0a:3a:58:25:e7:61:d9:9d:f6:f7:09:15:
29:b2:6e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:36:06 2025 by rpki-client