Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
File: ZJauOK7ay77u4eCTlW2zKHrntT0.mft (raw, json)
Hash identifier: aRJSErAsIx3+E1L4RDhjmNan8THNwgzqPXYVV/LUFWI=
Subject key identifier: 5B:20:1B:65:A9:FE:F5:66:9E:9D:44:F0:87:09:46:47:90:97:BE:93
Authority key identifier: 64:96:AE:38:AE:DA:CB:BE:EE:E1:E0:93:95:6D:B3:28:7A:E7:B5:3D
Certificate issuer: /CN=6496ae38aedacbbeeee1e093956db3287ae7b53d
Certificate serial: 01975E387ED46AF1737EFF369360DF61D3C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
Manifest number: 13C9
Signing time: Wed 11 Jun 2025 09:00:50 +0000
Manifest this update: Wed 11 Jun 2025 09:00:50 +0000
Manifest next update: Thu 12 Jun 2025 09:00:50 +0000
Files and hashes: 1: OsY0TtzQwg_k6WVAlCJ4j1X5_HQ.roa (hash: xdb+Fodrj/gwgOeHGwol/lGn/WJOAqWqApZA+WvwzsI=)
2: ZJauOK7ay77u4eCTlW2zKHrntT0.crl (hash: tT7E8iyLexxo6Q+2Rbl34b04MCP0MyeElG3NAockMmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:38:7e:d4:6a:f1:73:7e:ff:36:93:60:df:61:d3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6496ae38aedacbbeeee1e093956db3287ae7b53d
Validity
Not Before: Jun 11 09:00:50 2025 GMT
Not After : Jun 12 09:00:50 2025 GMT
Subject: CN=5b201b65a9fef5669e9d44f0870946479097be93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9a:37:79:63:a5:f2:ec:cf:cc:c7:a2:6e:23:
df:e3:80:6f:f0:90:91:7c:8e:fa:f8:86:64:1a:d2:
8d:0f:d7:3c:50:52:e3:0b:79:51:e7:bf:d7:e3:72:
d1:5d:99:e5:d2:61:10:78:81:8f:52:5f:c9:d7:6a:
ba:9e:c8:22:87:38:f0:df:e7:c0:6f:56:29:e0:08:
44:94:a5:88:4c:6f:e9:45:e0:1e:33:9b:f0:61:10:
d6:b4:16:fe:87:f8:4e:c2:12:01:5b:22:b7:a0:a2:
f8:5c:23:ae:32:19:d8:b5:fd:75:20:84:af:fb:e9:
27:74:d2:d1:85:e7:d5:68:8c:9a:b5:9f:96:51:02:
ec:61:80:b0:f9:a2:02:d9:ff:2b:d9:c9:49:58:f1:
d3:ae:a5:ea:e0:75:7e:f6:b7:ef:bf:81:da:c5:25:
4f:10:54:b1:f7:2e:b7:a0:b8:68:ef:e4:dd:79:fa:
f5:4d:60:4f:93:8f:6b:f7:c5:de:f0:cb:23:d9:14:
71:c7:36:f5:89:42:75:a4:15:9b:f2:19:c9:a3:36:
db:df:21:24:f8:e4:e2:2d:ab:15:3a:76:9f:09:6b:
95:9d:fc:67:ba:2d:6d:93:d7:2c:4e:1d:ea:e3:48:
9e:27:82:76:09:f9:df:af:23:c9:15:1b:7b:2e:d0:
e8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:20:1B:65:A9:FE:F5:66:9E:9D:44:F0:87:09:46:47:90:97:BE:93
X509v3 Authority Key Identifier:
keyid:64:96:AE:38:AE:DA:CB:BE:EE:E1:E0:93:95:6D:B3:28:7A:E7:B5:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:36:43:b1:24:f7:94:12:17:8b:42:db:92:48:f0:08:0d:4a:
39:e4:2b:95:3f:9f:c5:31:ea:58:8d:a6:7d:b8:6a:9b:b4:7a:
b0:cc:b7:97:21:0b:6a:ef:97:df:d0:b1:fd:1d:c9:b6:a2:6b:
8c:df:3e:c5:24:47:aa:01:48:56:74:91:8b:26:80:59:ed:34:
00:8e:de:70:08:42:83:2c:ad:f6:2f:8e:3a:6e:58:3f:31:49:
c9:ec:de:c3:64:5a:48:5e:05:16:16:9b:31:2f:07:4f:85:aa:
d9:b3:43:b7:98:e7:77:b7:c6:3f:f4:a7:39:05:32:52:18:dd:
5f:cb:2e:9f:48:6d:80:48:32:5c:4c:95:97:6e:28:82:f7:8e:
83:74:bc:3c:99:a2:b7:49:99:9f:ff:e9:4f:5e:27:13:0e:28:
b8:75:c0:47:72:17:7d:88:e9:04:ca:56:08:c6:a1:b4:2a:95:
69:19:1f:75:21:1a:37:00:34:39:b1:da:16:a6:44:1e:51:ff:
33:4c:01:b8:f3:dd:11:b6:45:97:8e:5b:e4:c1:0a:59:bf:e4:
87:7e:a6:ba:8c:65:71:ef:49:53:14:fb:08:4b:fb:7e:6c:ee:
be:e4:63:9d:12:85:3a:7a:d2:7c:da:7a:82:c3:4e:2a:22:4c:
41:4a:da:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:00:23 2025 by rpki-client