Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
File: zjfKOryl4UrBG8fzwVYqZNY5HSI.mft (raw, json)
Hash identifier: T4MGHeXjQTSPvnI1MHDkstuQQq1QlHn7sZMdvgrZLM4=
Subject key identifier: C8:23:7D:C4:9B:22:08:6F:87:24:F4:FD:57:48:B4:08:7B:EC:41:93
Authority key identifier: CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22
Certificate issuer: /CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
Certificate serial: 0197586D95D3761A525331F7793CB636BC43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
Manifest number: 14C4
Signing time: Tue 10 Jun 2025 06:01:06 +0000
Manifest this update: Tue 10 Jun 2025 06:01:06 +0000
Manifest next update: Wed 11 Jun 2025 06:01:06 +0000
Files and hashes: 1: 8kC1dXQut3Q7aEZLq-H6wHv58Nk.roa (hash: wdoh4a7LDX/nFwYQadnYTEwY/jj86xKk/h3rcKaZa3Q=)
2: T24HRLbgJbROlTALREch3AOYbaE.roa (hash: Wevs9VKSENwQtnqRkxhumLN/kRDIgG1A0UE3XstajKA=)
3: zjfKOryl4UrBG8fzwVYqZNY5HSI.crl (hash: aI8/mlY0JGs2D+cdRbxuJ6+OExP1OitoieUI3+i/w4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:6d:95:d3:76:1a:52:53:31:f7:79:3c:b6:36:bc:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
Validity
Not Before: Jun 10 06:01:06 2025 GMT
Not After : Jun 11 06:01:06 2025 GMT
Subject: CN=c8237dc49b22086f8724f4fd5748b4087bec4193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2e:ff:0b:20:2b:67:d5:09:6b:5c:8d:2a:de:
53:61:06:5a:ba:17:40:4f:e8:ed:4e:51:67:3a:dd:
ef:f0:40:5c:c8:94:e3:e2:2e:04:ab:44:e5:7e:df:
2d:08:fb:4e:65:67:c0:7c:64:3b:dd:8e:21:8f:c8:
b6:56:6f:65:a9:d2:69:d7:0c:cd:66:d9:46:21:65:
c6:46:f9:c3:94:9f:2f:00:3b:a5:05:04:31:c0:06:
6f:1a:62:7a:6f:c1:96:9d:72:dd:c5:3e:b0:3f:84:
ae:d6:5a:6e:ee:c6:d0:78:b7:3c:11:20:ad:1a:bf:
bf:f0:0e:84:10:d5:05:92:4d:27:c0:65:98:37:1d:
16:25:28:db:e9:4d:26:6b:4f:17:49:06:7e:54:d6:
3f:bc:bf:45:0e:c2:69:22:3d:9d:a9:4e:21:a9:25:
64:fa:85:5b:99:7d:2b:df:95:f0:8f:46:86:2c:58:
53:9b:cb:91:db:be:11:42:9c:ed:0e:07:04:48:e6:
71:78:d1:6d:5d:35:c2:8f:b6:d6:90:fb:0f:72:b2:
c8:e0:42:3c:cb:9b:01:c3:67:52:a5:31:7c:a2:4e:
3a:84:21:58:6b:e4:6a:84:09:57:87:50:ea:10:63:
02:3d:ba:67:3e:7a:62:03:4b:cf:0c:c0:26:01:1a:
0d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:23:7D:C4:9B:22:08:6F:87:24:F4:FD:57:48:B4:08:7B:EC:41:93
X509v3 Authority Key Identifier:
keyid:CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:0a:0c:27:59:57:a7:75:d6:01:9e:54:26:b4:5a:c7:a3:87:
c9:bb:d5:f6:5c:34:4d:33:11:54:e6:46:da:a1:0e:f0:10:24:
90:7d:ec:56:08:9c:98:b9:7b:72:71:5b:25:db:80:67:51:32:
15:d7:97:87:db:69:dc:56:3f:1f:c2:2a:1b:8e:5e:15:d9:3b:
49:32:01:28:d9:f8:97:89:91:83:07:ef:97:4a:9b:77:50:1f:
a7:44:2b:c8:a1:15:f6:86:a2:e5:a6:ee:36:a7:04:b5:aa:89:
3e:a1:44:31:bf:c2:43:f1:c0:c8:51:5a:3e:dc:4b:05:fb:fb:
35:6d:78:6e:ac:3b:51:a0:69:1f:66:05:f7:fd:e2:7e:41:bf:
3b:fe:f1:63:04:d9:40:cb:0e:50:44:e0:52:2b:51:43:80:c5:
ba:8a:b5:c4:fa:9e:7a:c1:f9:1c:25:6d:8f:f7:26:b2:6c:c1:
ed:87:27:9d:db:ce:83:ef:10:6d:d6:4a:ec:f6:96:6e:03:ee:
07:33:b3:22:65:1d:66:14:4f:97:9e:94:03:58:c6:22:98:fc:
46:83:f2:10:e2:e0:4a:9a:5a:13:8b:2d:57:83:7a:35:ef:6d:
de:3b:03:d4:a8:4d:9a:53:56:86:b0:ad:ea:c4:39:df:90:90:
eb:b6:e8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:23:24 2025 by rpki-client