Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
File: zjfKOryl4UrBG8fzwVYqZNY5HSI.mft (raw, json)
Hash identifier: AFt6FTJ6BMyoykppijjpq9JvT5pZA7W7s1fvcFkv9V4=
Subject key identifier: 2E:38:48:6B:77:D2:29:B0:0B:0B:A4:C5:68:83:12:A8:70:37:75:FA
Authority key identifier: CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22
Certificate issuer: /CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
Certificate serial: 01975A5B494C7EA11D1E9629CCE17E004B8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
Manifest number: 14C5
Signing time: Tue 10 Jun 2025 15:00:21 +0000
Manifest this update: Tue 10 Jun 2025 15:00:21 +0000
Manifest next update: Wed 11 Jun 2025 15:00:21 +0000
Files and hashes: 1: 8kC1dXQut3Q7aEZLq-H6wHv58Nk.roa (hash: wdoh4a7LDX/nFwYQadnYTEwY/jj86xKk/h3rcKaZa3Q=)
2: T24HRLbgJbROlTALREch3AOYbaE.roa (hash: Wevs9VKSENwQtnqRkxhumLN/kRDIgG1A0UE3XstajKA=)
3: zjfKOryl4UrBG8fzwVYqZNY5HSI.crl (hash: 3MM3IWI6YlmuH+pf2lDvNjxbhcS9FW4OvoAQLJBcxmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:5b:49:4c:7e:a1:1d:1e:96:29:cc:e1:7e:00:4b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
Validity
Not Before: Jun 10 15:00:21 2025 GMT
Not After : Jun 11 15:00:21 2025 GMT
Subject: CN=2e38486b77d229b00b0ba4c5688312a8703775fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fa:95:d6:f3:1c:bf:68:00:1f:b1:a6:38:88:
a6:38:c8:6c:17:01:74:4f:3a:a6:d9:44:05:7b:7c:
5e:4b:77:da:a7:e4:87:07:87:69:81:a2:11:5f:b2:
6d:93:5a:0c:96:91:7b:11:9a:f0:76:0a:ab:e1:76:
2f:a1:b6:b5:9d:f9:24:d6:1f:fa:5b:47:fc:98:7a:
cd:de:9e:8b:0b:41:36:ff:a2:b0:34:ca:8a:b0:cf:
0d:69:4a:26:66:77:f0:aa:c2:b4:cc:87:9a:32:ff:
ed:ce:1a:5b:95:74:f7:c9:71:7d:bd:95:cf:12:84:
c4:14:c1:07:19:bc:b3:04:f8:e7:8b:e8:ae:cb:2d:
b8:a5:60:e1:78:5b:f9:1c:de:6c:43:58:d9:50:6a:
bb:d6:05:b9:db:60:62:47:2a:d3:9f:21:1e:96:62:
68:f0:6d:9e:97:64:33:70:90:90:48:e3:2d:38:17:
a7:5f:17:e4:15:da:c6:0c:35:54:3c:07:3d:ac:4d:
cc:3f:22:17:52:5e:54:db:3d:b1:f9:3d:1b:66:3d:
1e:6c:bb:73:c9:80:d6:92:7f:50:76:b3:25:a6:a5:
e3:bf:f9:f3:65:bf:6c:6a:fd:a8:0f:b4:22:1e:9e:
1b:f6:27:61:b7:74:6e:f0:d9:f6:ef:cc:7a:ab:8b:
18:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:38:48:6B:77:D2:29:B0:0B:0B:A4:C5:68:83:12:A8:70:37:75:FA
X509v3 Authority Key Identifier:
keyid:CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:db:ce:16:57:6b:f1:a9:64:3f:01:e5:f3:a9:9e:3f:f0:3e:
6b:04:aa:d6:c4:36:0f:64:7e:78:12:3e:ed:68:65:2f:a7:ec:
e0:b1:1d:66:5f:72:8d:a2:e6:59:7b:4d:ec:0a:3f:eb:cc:4d:
e4:83:1b:2a:94:64:30:70:b5:bb:41:52:8a:28:ee:b1:8e:23:
04:99:55:01:1e:42:f4:cf:bb:11:71:1a:0e:98:38:f3:5e:f9:
c8:51:fa:09:cc:86:b7:ce:51:25:11:14:29:1a:55:54:4f:0c:
08:5d:7d:f8:b6:29:da:0f:3b:95:57:99:43:92:ed:d0:ae:d8:
5e:c9:23:92:66:72:af:e2:73:3e:66:c9:3b:a5:c4:32:f1:ee:
bd:3f:58:17:2b:08:fa:66:79:f7:76:f6:93:73:fe:1c:44:ac:
17:68:15:10:ee:15:4d:09:e1:d7:70:e4:05:ec:8b:fb:3e:3b:
8d:b4:4c:28:7e:66:da:80:f1:4c:d9:1c:de:6a:e0:ee:ad:4a:
1c:32:c0:c2:fb:9b:ec:0f:b2:ff:dc:46:a2:5c:4c:8e:f2:ee:
89:c2:42:cc:5f:29:1d:1e:cd:58:78:38:5e:87:d9:63:f1:3a:
cc:5f:bc:74:21:14:78:4f:d6:c2:3e:07:5e:b0:a6:c2:b8:4e:
1b:5a:43:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:55:35 2025 by rpki-client