Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
File: jz-dhbyzpBNjYsV3Pp0U455SlFM.mft (raw, json)
Hash identifier: ub1iY6j+o2nhRKzJ9gviORozXQTMcQo70NSSu7TDAYI=
Subject key identifier: C1:E1:1D:8A:AE:A3:C9:D8:DE:02:B1:97:FD:D5:2D:AF:D2:28:AD:79
Authority key identifier: 8F:3F:9D:85:BC:B3:A4:13:63:62:C5:77:3E:9D:14:E3:9E:52:94:53
Certificate issuer: /CN=8f3f9d85bcb3a4136362c5773e9d14e39e529453
Certificate serial: 01984664CE72192832B5B678C151CF63419E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
Manifest number: 0662
Signing time: Sat 26 Jul 2025 11:01:08 +0000
Manifest this update: Sat 26 Jul 2025 11:01:08 +0000
Manifest next update: Sun 27 Jul 2025 11:01:08 +0000
Files and hashes: 1: D6_4qEi07gtXF5ITukzXeqcyPaY.roa (hash: BB8G1BDTfHCkkOszf3uysnvPnN4MWEDmW1B2B7aR3bY=)
2: jz-dhbyzpBNjYsV3Pp0U455SlFM.crl (hash: QHEAMNtcwD9rcCYGWmrYnEbTPKRlW/5Ysx6C6g/Tl2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:ce:72:19:28:32:b5:b6:78:c1:51:cf:63:41:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3f9d85bcb3a4136362c5773e9d14e39e529453
Validity
Not Before: Jul 26 11:01:08 2025 GMT
Not After : Jul 27 11:01:08 2025 GMT
Subject: CN=c1e11d8aaea3c9d8de02b197fdd52dafd228ad79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:90:74:4b:04:e7:4b:a7:15:e2:f9:6c:f1:2d:
e9:d9:1f:ca:c9:07:b7:d9:9b:f2:ad:b4:21:a9:7a:
b4:2d:3f:5c:e9:0f:e4:cb:5a:85:ca:58:cd:45:a6:
95:b0:76:52:95:c0:73:7e:0a:6b:1c:54:a0:dc:e0:
83:ac:f8:59:19:38:c1:6f:21:83:e1:69:5a:27:ce:
cb:61:94:6d:14:99:eb:ea:d8:e7:ba:19:0c:ee:0f:
dd:04:61:54:99:1f:ef:f8:11:1b:ff:49:2a:bb:83:
d7:3d:76:99:87:cc:f9:63:f4:54:6a:c3:6c:aa:94:
9e:45:66:e0:4d:f2:5a:86:f9:21:c2:24:bf:a5:db:
0d:d6:7d:46:81:d0:e7:49:2c:ec:7e:7d:4c:0d:cf:
90:18:91:94:af:02:f6:4c:20:7f:4b:a5:e8:a5:60:
4f:2e:c2:02:58:fd:60:23:6b:76:92:30:17:4c:5a:
6b:51:6a:e8:1d:1b:c7:f9:c9:ff:a0:d5:34:ce:73:
fd:0f:30:1a:ca:7a:8f:d1:28:d5:b7:e9:28:18:a7:
11:22:55:6c:1b:34:d2:f5:e8:79:d2:81:2b:73:bd:
b5:8b:b2:de:0f:e2:7e:87:ff:24:07:1b:47:0e:7f:
63:37:95:8e:b8:e0:72:ff:99:ab:07:f4:3e:68:da:
6c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E1:1D:8A:AE:A3:C9:D8:DE:02:B1:97:FD:D5:2D:AF:D2:28:AD:79
X509v3 Authority Key Identifier:
keyid:8F:3F:9D:85:BC:B3:A4:13:63:62:C5:77:3E:9D:14:E3:9E:52:94:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:3e:fb:9e:03:78:e4:f6:9c:a0:03:c6:9c:fd:23:be:3c:83:
2d:e0:00:f5:f9:6e:fc:3c:f6:02:1a:ea:ff:75:c8:fc:3b:9f:
a1:e4:f0:70:bb:fb:9d:d6:78:75:d5:60:fd:cc:8e:6b:fc:d2:
a1:ad:6e:3c:79:90:7a:f5:23:e7:00:ac:64:d1:23:25:e8:4a:
16:38:47:98:09:7b:68:73:45:e2:ff:9d:7d:e0:b7:02:6f:3e:
05:c2:fe:10:64:cb:50:f0:7b:63:c6:99:6b:df:e9:32:35:75:
8a:6c:9f:7d:78:58:29:12:a6:dd:fd:fb:c2:2e:36:f1:3c:94:
1c:0c:e9:7f:b0:cb:6c:89:1b:fd:f2:6d:19:a1:f4:20:d1:a5:
68:b1:8f:b9:5b:47:0f:c4:31:53:e5:18:e4:2f:fb:17:44:14:
e6:46:c4:87:ed:2b:cd:c7:94:a0:68:a1:6a:cf:4e:08:9f:72:
f6:57:3e:2a:9b:b4:bd:ff:bb:1a:8d:f4:6e:1b:26:2f:72:f0:
42:3d:d5:40:c0:fa:02:a1:5c:b4:a4:57:69:fc:cb:35:19:9e:
73:e4:f3:72:5f:e9:4a:de:28:c3:ef:1a:e8:7f:85:ed:36:ac:
18:a3:15:dd:8a:0d:28:16:6c:af:99:fa:16:94:1f:27:88:84:
57:ff:45:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:52:11 2025 by rpki-client