Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft
File: jzdbxsgRDxrXM993rPux1uxGXLg.mft (raw, json)
Hash identifier: LL3EGRdA1ZHUroanuXI8u50JgS/d55eR+IxG5Jcktk4=
Subject key identifier: 73:F8:78:75:93:30:5A:4B:ED:F1:3D:3B:7D:6D:8B:20:BF:F8:22:B9
Authority key identifier: 8F:37:5B:C6:C8:11:0F:1A:D7:33:DF:77:AC:FB:B1:D6:EC:46:5C:B8
Certificate issuer: /CN=8f375bc6c8110f1ad733df77acfbb1d6ec465cb8
Certificate serial: 01984A0A097D73906978444F9983B5B36882
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzdbxsgRDxrXM993rPux1uxGXLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 04:00:28 +0000
Manifest this update: Sun 27 Jul 2025 04:00:28 +0000
Manifest next update: Mon 28 Jul 2025 04:00:28 +0000
Files and hashes: 1: WZtsrjQ6_4AAza3W0_Zf2Kriboc.roa (hash: IEF1jYRY7l8CDobzZH1+RG1BE/hQtGdqASizDfn8LB8=)
2: jzdbxsgRDxrXM993rPux1uxGXLg.crl (hash: NfrslzBloTtOlPCgsCxx0Hit19/33NuA2pdsOCrKWq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzdbxsgRDxrXM993rPux1uxGXLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:09:7d:73:90:69:78:44:4f:99:83:b5:b3:68:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f375bc6c8110f1ad733df77acfbb1d6ec465cb8
Validity
Not Before: Jul 27 04:00:28 2025 GMT
Not After : Jul 28 04:00:28 2025 GMT
Subject: CN=73f8787593305a4bedf13d3b7d6d8b20bff822b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b2:be:c2:c4:9d:6c:c5:ea:1a:79:60:57:4c:
5a:cf:89:78:08:c5:8c:07:c1:ab:7a:e4:62:3f:10:
f8:37:80:a7:60:17:24:eb:6c:5a:8e:ae:a6:e2:fe:
b9:35:82:40:4d:0f:f2:82:37:62:f6:fe:52:60:8b:
85:c1:0d:93:11:31:d6:6b:1e:3c:63:76:43:ac:7c:
0c:4b:8f:2c:07:b6:6d:30:aa:e6:69:fd:99:73:e2:
b1:8e:1e:d7:c4:bc:16:d9:d4:4f:4e:36:88:b5:73:
b5:dc:50:fc:ea:6e:c2:4f:a0:ab:e0:53:70:2f:b1:
cd:f4:25:db:09:4f:9e:45:7c:ac:b0:85:f7:c8:c3:
68:fb:bf:32:74:95:b5:3e:08:8e:78:07:d6:ad:69:
68:b9:d6:e1:10:cf:b4:0b:b5:25:39:99:91:f7:47:
27:59:5d:aa:96:08:bf:8a:8a:41:9e:02:f8:51:b2:
6d:f5:e8:9f:e9:7b:d4:e8:be:16:35:bc:44:01:bd:
34:44:8d:2c:33:bf:78:d5:44:62:4a:a0:20:50:83:
34:d0:de:32:03:fe:d2:e3:b1:95:11:75:a7:c3:e9:
11:d0:e4:4c:ac:59:47:d6:02:eb:5f:07:71:e5:57:
05:3f:58:98:b3:13:56:2c:31:7e:bf:d4:48:19:0d:
19:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F8:78:75:93:30:5A:4B:ED:F1:3D:3B:7D:6D:8B:20:BF:F8:22:B9
X509v3 Authority Key Identifier:
keyid:8F:37:5B:C6:C8:11:0F:1A:D7:33:DF:77:AC:FB:B1:D6:EC:46:5C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzdbxsgRDxrXM993rPux1uxGXLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:09:44:f2:10:64:ba:d0:17:4a:a1:e2:f7:a7:91:6c:37:0c:
6c:53:72:af:ef:d9:fd:b3:2d:a1:fd:95:5c:13:89:20:48:6d:
33:6d:a6:f7:f5:7f:76:8f:70:3d:37:e3:db:f2:a6:ec:38:8c:
26:32:fd:43:c9:be:12:9d:f6:15:82:57:59:d0:96:05:8b:d0:
52:67:a9:c6:cf:06:73:43:2e:9b:95:75:b5:63:fb:7d:ea:8f:
dc:34:31:10:2e:a0:2d:e3:35:c3:ad:5e:a1:a1:d3:44:70:4f:
f1:6b:fa:4f:08:2c:e3:89:6c:7d:ba:a9:3d:8a:fd:19:95:cb:
b0:ad:63:2b:a0:62:ad:fe:d1:f0:77:9b:4a:a1:50:56:7e:36:
84:be:af:75:d5:0f:3b:45:da:f3:2d:08:dc:a5:28:34:b8:27:
4e:a3:1e:5b:61:35:43:c8:27:2c:3d:48:56:0a:6b:21:32:6a:
3e:06:4b:e9:b2:91:93:8d:96:60:1c:ad:6d:a6:c0:ac:c1:9b:
c0:ee:76:4b:42:b4:9d:f8:32:6a:af:e6:99:88:2c:92:86:19:
46:a0:42:d7:e3:ce:96:70:27:4a:ca:e7:d0:66:16:fa:aa:81:
14:dc:3f:0e:a2:4c:20:95:bb:17:af:64:4b:ec:51:7b:ff:c4:
2e:b7:e6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:31:24 2025 by rpki-client