Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
File: zjfKOryl4UrBG8fzwVYqZNY5HSI.mft (raw, json)
Hash identifier: hDWfeXw+tBalBptFGK9bglVCOBsp8RFBPg2f0JdjnCU=
Subject key identifier: 01:B0:AE:81:46:4C:69:8B:9F:9A:C0:49:6F:E0:17:5C:C0:67:AA:DE
Authority key identifier: CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22
Certificate issuer: /CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
Certificate serial: 01975490322C501346F3B6A8913F35ABA390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
Manifest number: 14C2
Signing time: Mon 09 Jun 2025 12:00:25 +0000
Manifest this update: Mon 09 Jun 2025 12:00:25 +0000
Manifest next update: Tue 10 Jun 2025 12:00:25 +0000
Files and hashes: 1: 8kC1dXQut3Q7aEZLq-H6wHv58Nk.roa (hash: wdoh4a7LDX/nFwYQadnYTEwY/jj86xKk/h3rcKaZa3Q=)
2: T24HRLbgJbROlTALREch3AOYbaE.roa (hash: Wevs9VKSENwQtnqRkxhumLN/kRDIgG1A0UE3XstajKA=)
3: zjfKOryl4UrBG8fzwVYqZNY5HSI.crl (hash: Gds91DRWBy4FeUBg2NmGbiI79uozB3S35pkD2qToE+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:90:32:2c:50:13:46:f3:b6:a8:91:3f:35:ab:a3:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
Validity
Not Before: Jun 9 12:00:25 2025 GMT
Not After : Jun 10 12:00:25 2025 GMT
Subject: CN=01b0ae81464c698b9f9ac0496fe0175cc067aade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d6:c8:1b:5a:05:f2:e2:74:d7:23:72:3e:2a:
aa:30:3d:b7:49:4b:44:53:0b:e8:40:9a:aa:f6:68:
9f:7b:ce:bb:14:e1:61:04:30:df:d6:f6:0c:45:5b:
6b:45:96:1b:e8:ab:d2:22:08:3c:c1:5e:97:b7:1c:
f6:c6:ba:87:d2:b2:83:d1:9c:13:4e:28:82:2e:97:
c8:73:f2:71:63:81:09:3b:a8:7b:6f:c6:f9:28:33:
8e:93:45:cf:f9:42:7d:80:74:76:0f:01:5c:aa:35:
a2:36:f8:69:75:74:16:b8:87:6f:18:55:18:c4:6a:
5e:bb:ed:df:47:6b:37:a3:f8:6a:a5:5a:06:9d:e5:
5a:65:42:16:43:88:62:b4:fe:bd:8e:2a:32:7c:4b:
42:b9:47:2f:02:ba:b3:22:db:67:17:58:c5:d9:61:
ab:cf:0c:33:13:e6:c7:56:33:1b:5c:31:c0:6d:cd:
36:28:64:17:3d:8f:f9:3a:4e:aa:6f:74:b0:de:a0:
c3:fc:91:45:2a:ae:fe:79:53:be:c9:a5:72:99:e7:
80:38:ef:fa:89:99:4a:25:9b:41:57:0b:6f:46:89:
df:cc:81:bc:fa:58:4c:9b:eb:d6:98:0e:15:be:d2:
77:14:b1:90:8d:92:cd:04:ba:05:55:53:57:4d:2c:
bc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B0:AE:81:46:4C:69:8B:9F:9A:C0:49:6F:E0:17:5C:C0:67:AA:DE
X509v3 Authority Key Identifier:
keyid:CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ca:2e:70:98:1f:a6:c7:08:f9:0d:ea:74:83:7b:1c:6f:7c:
ee:21:4d:33:cc:35:74:ae:a8:82:58:fc:55:38:6c:a6:f0:e1:
f0:22:c4:1c:d3:46:58:1f:c6:28:12:d1:1a:c3:4b:08:5a:83:
88:3e:22:bb:f5:f1:e8:f1:ff:51:a4:30:15:7f:7a:cb:29:fe:
b4:d8:a6:be:88:ff:e5:ae:b0:c6:fa:5a:37:c4:8a:0f:18:d4:
48:a4:8e:d9:25:66:70:26:a7:de:6e:49:16:7d:e1:cb:92:a3:
be:e2:cf:17:ae:b4:c6:7e:4c:29:7e:d3:f6:f4:43:19:a1:2a:
e5:c1:b5:4b:4c:2a:33:4c:96:2b:30:18:a2:f5:92:26:63:e7:
d1:38:48:b4:b6:4e:15:1f:22:87:c8:47:0d:93:5b:02:6b:b5:
86:35:21:7d:88:db:c3:f3:19:fe:8a:a2:2f:c4:dc:f0:b1:e7:
8d:bb:a6:10:df:4e:73:01:34:94:93:3c:7b:94:d6:a6:3b:85:
c1:9e:ae:9c:e0:ce:3c:15:45:75:2d:29:b3:99:ec:f3:a0:c5:
c2:97:e1:62:01:b5:5f:00:fc:74:30:1d:8a:76:22:d5:e6:22:
dd:b6:76:df:89:aa:84:bd:23:1a:39:4f:7a:86:61:5d:b0:ab:
db:61:b1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 23:07:36 2025 by rpki-client