Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
File: rjzFZ_6_40h4rrkThhzwYAooOQM.mft (raw, json)
Hash identifier: QokwZEVrLveLySdEfkhmxoyohBma4AJWhUajv+4Nmv0=
Subject key identifier: CF:8A:AB:47:A3:D3:E5:46:4E:81:6F:90:F9:78:A4:DA:86:EE:76:34
Authority key identifier: AE:3C:C5:67:FE:BF:E3:48:78:AE:B9:13:86:1C:F0:60:0A:28:39:03
Certificate issuer: /CN=ae3cc567febfe34878aeb913861cf0600a283903
Certificate serial: 01974DB2DC4440252B89BE9FE20828E0E667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 04:00:56 +0000
Manifest this update: Sun 08 Jun 2025 04:00:56 +0000
Manifest next update: Mon 09 Jun 2025 04:00:56 +0000
Files and hashes: 1: cO5HXhdkW-9sTYlyxMUlTq4VrHM.roa (hash: 2vNmvGiB6oqNqpjdkXzwA+2UM7st3DevXSjO7XrFVio=)
2: rjzFZ_6_40h4rrkThhzwYAooOQM.crl (hash: ewwha7EIGGQX0T8ikJr8CGwdKCJHeco3QHRdhyGLj6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:dc:44:40:25:2b:89:be:9f:e2:08:28:e0:e6:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae3cc567febfe34878aeb913861cf0600a283903
Validity
Not Before: Jun 8 04:00:56 2025 GMT
Not After : Jun 9 04:00:56 2025 GMT
Subject: CN=cf8aab47a3d3e5464e816f90f978a4da86ee7634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:55:ed:f4:64:d4:cc:74:3e:91:2f:28:ad:76:
33:74:82:2b:d7:bc:41:d9:ee:14:bf:58:65:d8:e9:
5a:5e:bc:01:7f:d3:3b:07:9c:d3:ab:21:cf:93:33:
f0:37:1a:9d:4e:22:58:40:de:db:6f:80:b7:0e:5b:
f2:5c:84:88:c1:48:94:9a:40:74:19:f5:c4:db:9e:
30:67:ec:70:a7:64:99:e4:e2:2a:ef:3b:f5:15:8f:
21:f5:ea:db:79:ce:23:1a:a8:6e:c2:19:c3:e7:f8:
54:a2:fe:20:3b:bb:01:09:fa:38:54:50:27:04:55:
91:9a:38:18:a6:24:f1:e3:0c:a5:2b:66:ef:0a:59:
cd:49:9a:6b:dd:43:b0:93:8e:2d:58:45:c5:89:27:
10:52:88:49:7c:07:e2:46:61:aa:9b:4d:9f:ca:cd:
9a:45:f3:64:08:bc:d2:71:9b:a3:90:c9:bb:af:a8:
90:d9:b5:03:b8:3a:ff:0b:81:fb:5d:09:89:df:34:
9f:8b:19:b1:58:6c:74:30:2f:d2:bf:ad:3a:e9:6e:
27:50:ae:ca:21:5b:76:da:e5:b7:6b:d4:ae:86:e6:
46:29:63:59:2d:ce:ec:da:81:3e:79:ef:3d:9a:ae:
14:61:c0:b7:ed:30:e4:95:f8:10:4e:5e:4e:ef:4c:
f9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8A:AB:47:A3:D3:E5:46:4E:81:6F:90:F9:78:A4:DA:86:EE:76:34
X509v3 Authority Key Identifier:
keyid:AE:3C:C5:67:FE:BF:E3:48:78:AE:B9:13:86:1C:F0:60:0A:28:39:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:7b:ff:5f:a4:47:47:1b:c3:71:13:f8:eb:9f:77:84:3b:8a:
44:f2:60:0d:c5:1b:fa:73:63:db:52:96:26:58:47:f0:f0:d4:
94:34:15:1d:48:bb:62:9e:a9:32:f9:0a:5c:e7:fe:25:23:1e:
fc:5c:3f:43:f4:36:32:1c:26:dd:ab:52:4c:13:89:7b:25:d2:
69:6d:51:7c:63:34:ee:ae:15:59:b6:b2:87:59:a3:61:a7:a4:
e9:b5:9b:4c:b6:e6:2e:78:e2:88:b9:0a:34:18:1c:ae:d6:e3:
7b:cf:a6:0c:11:c1:32:1b:0a:de:77:57:bf:a1:b8:45:69:13:
8e:eb:90:a8:ac:6e:57:a1:d6:86:f6:51:ce:6b:f1:92:ec:e6:
f4:3d:d6:b4:ce:cd:ca:d1:d3:0c:0a:7f:fc:34:e8:fd:64:d4:
1d:13:49:94:9e:7e:52:e8:dd:12:89:3e:96:f7:5a:60:26:48:
99:25:35:54:7d:11:f0:41:ae:0f:2f:ea:38:4f:62:fb:83:d7:
ba:0e:05:ad:d8:31:cc:69:7d:43:24:79:c3:24:3b:f6:fb:d5:
f3:02:dc:81:a7:3f:1f:b7:fd:4d:44:3b:a6:c8:c9:dc:73:68:
53:92:46:fa:d6:ac:38:f8:1b:ca:1e:d1:77:b9:69:35:58:c4:
0e:01:e9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:31:51 2025 by rpki-client