Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
File: ZJauOK7ay77u4eCTlW2zKHrntT0.mft (raw, json)
Hash identifier: uT3tusX+Pxr9cdBjILeuK8w9d5TrcVu/fgKYhGU3t0w=
Subject key identifier: A4:A3:14:53:E5:72:ED:85:99:4F:A1:8C:9B:A7:65:FB:77:9F:25:D9
Authority key identifier: 64:96:AE:38:AE:DA:CB:BE:EE:E1:E0:93:95:6D:B3:28:7A:E7:B5:3D
Certificate issuer: /CN=6496ae38aedacbbeeee1e093956db3287ae7b53d
Certificate serial: 01975C4A1941983CE70529A1652007A0E2DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
Manifest number: 13C8
Signing time: Wed 11 Jun 2025 00:00:49 +0000
Manifest this update: Wed 11 Jun 2025 00:00:49 +0000
Manifest next update: Thu 12 Jun 2025 00:00:49 +0000
Files and hashes: 1: OsY0TtzQwg_k6WVAlCJ4j1X5_HQ.roa (hash: xdb+Fodrj/gwgOeHGwol/lGn/WJOAqWqApZA+WvwzsI=)
2: ZJauOK7ay77u4eCTlW2zKHrntT0.crl (hash: h+7yBqH7AdXcphLBM8efooVAweS6OB+C+jZFnZsz8LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:4a:19:41:98:3c:e7:05:29:a1:65:20:07:a0:e2:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6496ae38aedacbbeeee1e093956db3287ae7b53d
Validity
Not Before: Jun 11 00:00:49 2025 GMT
Not After : Jun 12 00:00:49 2025 GMT
Subject: CN=a4a31453e572ed85994fa18c9ba765fb779f25d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3f:50:d3:2c:75:e2:c9:94:7e:50:23:82:12:
0e:28:9c:e6:30:ec:d1:fd:d5:0f:bf:a2:60:4c:29:
cc:68:7e:4a:c3:08:45:27:81:7e:3f:a1:f5:de:8c:
32:e5:ab:01:54:df:34:7e:a8:5d:83:40:2f:8b:8c:
2f:b8:89:1c:6a:ea:57:6a:27:39:fe:2c:e3:be:a9:
bf:09:43:ff:18:53:a8:bf:c0:89:4b:b4:21:73:a1:
c3:df:17:5b:f6:67:22:22:cf:09:6c:80:21:b1:1e:
81:ca:73:98:a4:62:89:f3:0f:69:4a:84:49:6c:68:
c2:a3:fb:78:65:b0:ef:02:4b:30:4c:82:ea:f2:bf:
fb:1b:5a:dc:d0:91:ea:62:73:09:48:c9:6a:54:c0:
e8:0f:c1:53:3c:c9:63:6f:fb:91:61:24:a3:80:df:
22:14:33:dd:6e:82:7a:4a:71:6e:e2:75:1b:64:20:
13:4a:fc:bd:61:6b:c2:84:6b:d5:21:f5:d0:d7:95:
04:93:65:21:b2:89:a2:5e:5f:f2:a6:11:ab:07:1f:
1e:65:51:d5:98:db:4d:0d:83:6d:90:e8:3b:0d:70:
ab:c8:5e:b2:f5:de:2a:72:6c:6b:86:be:0f:47:ef:
85:0f:5e:11:19:ad:ea:0e:1c:4f:fa:66:b1:98:34:
7c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A3:14:53:E5:72:ED:85:99:4F:A1:8C:9B:A7:65:FB:77:9F:25:D9
X509v3 Authority Key Identifier:
keyid:64:96:AE:38:AE:DA:CB:BE:EE:E1:E0:93:95:6D:B3:28:7A:E7:B5:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:26:bb:88:41:cd:ff:ca:74:ee:87:42:0a:bb:9d:4f:92:f5:
03:0c:3f:89:22:d4:d5:e0:28:5a:3e:79:00:9b:80:d5:88:47:
be:9b:05:7e:5c:ad:75:a4:28:55:ef:63:28:a2:92:84:a4:76:
f3:a0:52:2e:7a:6f:20:0b:10:bb:3a:fc:e1:3f:a3:9e:f2:46:
93:2c:d7:17:46:56:a4:53:10:9e:ba:90:f3:99:31:ea:43:e4:
78:73:08:29:23:c5:5f:a1:6f:5c:68:79:e1:7f:e0:cb:e8:45:
fb:d1:85:83:9a:c5:5b:57:23:dc:c3:7f:45:0f:6f:f9:11:22:
7d:1b:f9:0d:78:b7:dd:2b:a8:7e:ae:e2:aa:41:63:d6:21:20:
9e:17:5a:d6:bf:21:be:e6:88:9b:01:e1:f4:e4:c8:d0:aa:c7:
2c:b4:48:0b:f8:77:3f:7f:21:a9:88:c9:da:8b:ec:67:7f:1d:
a7:a8:88:f9:72:47:8b:be:dd:53:2b:e0:8f:a3:df:47:26:5f:
51:0d:c0:f5:22:11:08:56:43:cc:18:4a:f3:83:5c:2d:e4:ff:
40:59:07:50:53:42:8f:a2:b9:9d:ba:df:42:28:c6:35:06:23:
a1:34:e5:4e:0d:92:d5:58:05:cd:10:cc:2f:57:8b:bf:e7:d6:
30:69:e3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 08:51:07 2025 by rpki-client