Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
File: Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft (raw, json)
Hash identifier: TKrxu/gjYxXo3Av03D18op+YM28zxmvwcsxeaRG3Z6M=
Subject key identifier: B3:5B:FD:4E:46:52:D7:FC:C3:0F:97:34:E6:5E:75:A9:76:C5:37:59
Authority key identifier: 27:39:1A:E2:8A:91:D5:99:13:46:AE:DA:F1:7B:F8:60:5C:8C:F2:2E
Certificate issuer: /CN=27391ae28a91d5991346aedaf17bf8605c8cf22e
Certificate serial: 0197485509B9947FA2C86E938FFA75AAB3FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
Manifest number: 110E
Signing time: Sat 07 Jun 2025 03:00:22 +0000
Manifest this update: Sat 07 Jun 2025 03:00:22 +0000
Manifest next update: Sun 08 Jun 2025 03:00:22 +0000
Files and hashes: 1: Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl (hash: zWhAsvdFbqdkYc4zAxMQrYUeeZw0cRBYjx2ziNvz2mA=)
2: Y2PRIXlvoLUvaJRI_Do9j4XcqPk.roa (hash: 5PYmU1FMb9SDbJhCU1KiV8VGC7stgGinp2hnu0BY1I0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:09:b9:94:7f:a2:c8:6e:93:8f:fa:75:aa:b3:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27391ae28a91d5991346aedaf17bf8605c8cf22e
Validity
Not Before: Jun 7 03:00:22 2025 GMT
Not After : Jun 8 03:00:22 2025 GMT
Subject: CN=b35bfd4e4652d7fcc30f9734e65e75a976c53759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3b:6c:56:1c:4f:5f:db:e3:7c:3b:af:61:36:
42:d6:70:41:a2:26:14:87:55:c9:12:19:8a:59:ac:
0e:e1:41:bd:b8:96:4a:a1:45:6f:20:5c:fe:81:3f:
27:4f:b7:cd:60:b9:b4:84:3c:a5:e3:90:46:e0:5c:
70:ea:18:66:aa:76:e6:3d:18:0a:d4:4d:da:d5:b6:
77:b1:d4:87:e5:6a:77:a1:0a:b2:ef:40:34:37:fb:
92:ee:09:fe:93:7d:05:c7:9a:e4:68:a2:57:7b:b3:
dd:9c:48:b6:21:12:db:ee:54:68:ed:b2:54:e5:41:
15:b4:74:51:23:fd:8c:73:e8:e4:f3:ab:68:0b:70:
af:74:a6:e1:31:48:ea:1c:ef:af:ee:61:b4:6c:9c:
ff:12:f2:96:18:39:9c:a5:20:33:a3:c1:d4:69:c9:
1e:33:45:89:4a:15:54:6b:e6:a3:12:5a:45:1b:d7:
47:49:6b:33:a6:7e:33:98:aa:30:b7:4c:2a:76:e5:
cf:3b:c4:3c:c9:97:af:bc:40:2d:16:54:2e:81:4f:
28:2a:4e:11:15:5c:06:ba:95:8c:84:52:fc:69:db:
28:4a:94:fb:c2:e8:e3:c4:d2:40:41:fb:4f:9b:d0:
c6:03:82:ec:4e:55:23:16:48:e2:a9:30:23:12:cd:
e9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:5B:FD:4E:46:52:D7:FC:C3:0F:97:34:E6:5E:75:A9:76:C5:37:59
X509v3 Authority Key Identifier:
keyid:27:39:1A:E2:8A:91:D5:99:13:46:AE:DA:F1:7B:F8:60:5C:8C:F2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:fb:34:b6:ee:0e:62:70:11:35:09:61:21:8c:90:41:e3:45:
32:34:5b:96:a6:78:20:06:36:29:b2:29:05:23:1d:d1:03:20:
5d:f0:f5:0a:80:48:04:62:13:18:e3:c5:71:b4:79:d2:34:01:
91:27:f5:91:72:d4:12:87:82:8c:60:90:c2:da:13:9d:c6:b5:
bf:4d:bd:26:ed:87:3a:46:f2:86:8e:9c:a2:c7:eb:60:5c:e8:
19:a5:9b:54:14:0e:aa:34:3a:85:5d:35:c8:5e:3d:63:4f:ba:
9e:05:e4:08:09:3c:ab:66:82:5d:25:03:2a:a7:bb:aa:f6:46:
8b:23:dc:ae:eb:2e:56:5c:ff:ae:ff:04:85:e8:4d:df:bb:5a:
54:04:da:be:22:f8:8a:de:63:28:c8:9c:f9:76:be:53:2b:15:
56:ab:c0:3e:67:f9:30:ff:42:11:50:d5:a2:13:4c:ca:37:39:
11:4e:7c:25:07:68:c5:b6:83:24:b7:9d:64:73:da:cb:71:00:
76:14:41:77:49:20:c0:51:64:50:d8:92:97:85:e8:d4:3a:82:
b0:03:98:aa:06:bc:c7:d2:58:b6:23:7f:df:65:e4:ac:93:84:
7d:c1:9b:b7:65:a5:2e:2a:09:e3:13:f7:98:90:1c:fe:f5:13:
71:ba:75:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:32:52 2025 by rpki-client