Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
File: jzaP655VO90TFWJYSjNTsddVXFA.mft (raw, json)
Hash identifier: lI9FQYge40o7JRNrSHJwqD9oVWVHAa2xDXFsweVTk0Y=
Subject key identifier: 5B:09:85:66:B8:6E:93:E3:DC:D8:1D:F4:25:2D:80:DA:42:60:64:8D
Authority key identifier: 8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
Certificate issuer: /CN=8f368feb9e553bdd131562584a3353b1d7555c50
Certificate serial: 01984966754579E1CF3F4B22B4A6145205F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
Manifest number: 1612
Signing time: Sun 27 Jul 2025 01:01:47 +0000
Manifest this update: Sun 27 Jul 2025 01:01:47 +0000
Manifest next update: Mon 28 Jul 2025 01:01:47 +0000
Files and hashes: 1: VgDY9zN_B3grCrz_H8xjNykqXTQ.roa (hash: V5RUWHdPXufxGeDHhevmGSEqGhIbGyboqgCFXxKzrT8=)
2: eWNwoG2gNqVOl4jxtgq3km86-j8.roa (hash: tuYXWwSXyhuCjeV5A6/luy4IrIPezyScgsOJmMQtw38=)
3: jzaP655VO90TFWJYSjNTsddVXFA.crl (hash: G1wkwJ+d0+g5Hvat6OFYtQcNa1YINPQXd96Od/yE0C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:75:45:79:e1:cf:3f:4b:22:b4:a6:14:52:05:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f368feb9e553bdd131562584a3353b1d7555c50
Validity
Not Before: Jul 27 01:01:47 2025 GMT
Not After : Jul 28 01:01:47 2025 GMT
Subject: CN=5b098566b86e93e3dcd81df4252d80da4260648d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ba:66:0b:90:d6:ed:98:43:f4:6b:0b:27:6a:
13:e9:36:88:25:6e:93:82:ff:df:d3:bc:9f:7a:45:
e4:26:63:10:5a:e0:e1:90:55:da:aa:c7:b3:e3:94:
96:cd:59:36:a5:ef:28:e7:b5:05:a7:ba:83:06:16:
07:a7:5a:9a:57:4c:71:9f:52:34:35:52:45:be:b6:
f5:4b:d5:ab:02:e0:8a:22:7f:7e:b4:ef:31:5e:36:
ae:fc:ac:16:c8:eb:58:95:60:6a:eb:f7:0d:f5:61:
db:2d:28:05:af:74:03:b8:95:31:0d:36:57:d1:f1:
f6:b4:10:2b:4d:31:2f:3f:96:7c:20:82:4d:39:bf:
c1:d9:6e:d9:99:6f:7e:62:c7:f7:23:17:cd:ce:47:
7a:bf:e0:a0:39:f0:a1:6c:70:63:74:96:e2:66:5b:
2e:35:1e:4d:8a:02:32:94:98:04:a8:16:70:b7:7d:
c6:e7:46:28:0c:be:5a:7d:9c:0d:e0:07:54:c5:a6:
d1:48:30:71:b3:29:17:8b:b1:3c:f6:d8:f7:4e:6a:
a3:73:6c:33:6a:21:b7:ab:6f:8f:33:0f:77:69:cc:
40:92:0f:92:13:87:d3:9e:49:1f:ee:00:a6:75:41:
0b:12:c3:93:c0:31:1b:bd:4f:71:ad:2d:8b:35:17:
70:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:09:85:66:B8:6E:93:E3:DC:D8:1D:F4:25:2D:80:DA:42:60:64:8D
X509v3 Authority Key Identifier:
keyid:8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:fd:1d:c8:8e:ba:42:e9:cc:4a:b0:78:d4:b3:3d:27:fd:17:
ac:55:de:fd:3e:9d:70:4d:7f:71:10:a3:04:c9:08:db:f6:99:
77:94:8b:b3:94:b6:55:bd:a4:62:1b:19:0a:ee:f0:0a:61:53:
36:ab:13:5c:de:6e:23:84:1c:5e:f7:57:77:41:18:5f:18:bc:
83:91:2a:30:d0:4a:6e:72:64:8b:28:51:50:87:40:d9:c1:38:
4d:00:50:de:d3:ee:b3:90:fe:65:51:73:92:d8:0b:05:b3:25:
48:1e:94:81:e0:b5:3b:04:7e:5e:14:5a:7e:cf:77:f5:ed:1d:
33:5f:17:cd:10:4c:eb:fc:6d:95:b3:c2:dc:c5:8b:88:87:24:
98:06:1d:ae:8a:05:f2:62:5b:90:af:f6:8b:ca:66:02:30:df:
41:7b:cc:18:46:7e:9f:e8:0b:b6:79:c1:31:55:88:75:34:91:
a7:02:1c:a7:37:e0:c7:15:51:57:cf:62:e1:0d:2f:54:ba:86:
00:2d:49:c7:9a:6e:3e:b5:92:74:4d:9a:fa:26:b2:8b:ce:9d:
12:6d:1c:d8:62:29:12:89:bb:cb:48:4b:25:f9:4f:a8:90:67:
e7:d0:db:6f:a1:05:aa:d0:5c:40:0c:5c:27:e8:fd:70:2a:94:
61:2f:45:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:41:02 2025 by rpki-client