Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft
File: jzztMLKFLlUseDdGcAPxdepZ3nM.mft (raw, json)
Hash identifier: dKd2q2rf0h+CkWGbWg6eVYyj8wdbRyx3VpFKRWRI554=
Subject key identifier: 8F:F0:CC:7E:38:96:B5:E2:F1:46:04:46:1C:E8:4B:1B:15:5C:40:50
Authority key identifier: 8F:3C:ED:30:B2:85:2E:55:2C:78:37:46:70:03:F1:75:EA:59:DE:73
Certificate issuer: /CN=8f3ced30b2852e552c7837467003f175ea59de73
Certificate serial: 0198556A4018FCA24CB109DC311C578D194F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzztMLKFLlUseDdGcAPxdepZ3nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft
Manifest number: 0B0F
Signing time: Tue 29 Jul 2025 09:01:23 +0000
Manifest this update: Tue 29 Jul 2025 09:01:23 +0000
Manifest next update: Wed 30 Jul 2025 09:01:23 +0000
Files and hashes: 1: jzztMLKFLlUseDdGcAPxdepZ3nM.crl (hash: 3wh7k/9W9yVsWfNRK02vByOXLQOzPe8J0OV7rgvV9DQ=)
2: zFUJjDGEsZJOucFbVCUxDXzsMU8.roa (hash: 2ZiCqHTVImshB2FLBBPRqOl/4XNJLXBYYXR20S0fJAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzztMLKFLlUseDdGcAPxdepZ3nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 09:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:6a:40:18:fc:a2:4c:b1:09:dc:31:1c:57:8d:19:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3ced30b2852e552c7837467003f175ea59de73
Validity
Not Before: Jul 29 09:01:23 2025 GMT
Not After : Jul 30 09:01:23 2025 GMT
Subject: CN=8ff0cc7e3896b5e2f14604461ce84b1b155c4050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:50:ca:ca:bd:78:a1:22:b2:96:7d:1e:ae:f4:
cc:5e:f5:4d:1d:13:09:ba:1e:53:f2:dd:ad:df:81:
2e:7a:a2:9d:a2:6c:b9:e8:b8:f8:26:55:8b:79:71:
c1:43:bd:b7:c9:c0:a1:49:a0:7a:5f:7b:ff:cf:a2:
b7:42:6a:ae:b5:e8:1e:8a:f7:b7:97:f4:14:70:25:
0c:17:eb:13:6a:49:e5:f2:c7:fe:b9:4c:18:55:28:
91:51:54:7c:1f:ed:81:95:0c:b9:8c:5d:5a:e1:1e:
42:a2:58:df:c5:5d:16:97:a0:10:9b:bc:c6:6a:47:
a0:e1:f4:e4:01:36:a5:cb:db:da:af:59:ab:91:2b:
61:67:15:ba:11:eb:43:b9:07:b2:c9:d4:f1:2e:89:
3e:29:c3:52:6a:e9:4e:c8:8e:d5:ab:a8:1d:c6:04:
7c:c3:bc:e4:dc:19:b8:a2:ef:a7:19:9a:99:dc:33:
78:e8:21:3d:b8:cd:8d:51:a4:a9:5c:ff:4f:ef:34:
9c:11:32:1b:70:4f:9e:10:44:0d:65:72:76:72:03:
bc:27:67:6b:de:7c:a5:a8:54:e6:f0:20:d4:f7:f3:
84:37:d6:1b:80:5d:8f:70:ab:30:64:bf:4e:4c:37:
16:27:7e:3c:66:0e:a5:d8:ef:1a:c1:35:e0:a9:72:
cf:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F0:CC:7E:38:96:B5:E2:F1:46:04:46:1C:E8:4B:1B:15:5C:40:50
X509v3 Authority Key Identifier:
keyid:8F:3C:ED:30:B2:85:2E:55:2C:78:37:46:70:03:F1:75:EA:59:DE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzztMLKFLlUseDdGcAPxdepZ3nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:29:b2:8c:f8:e0:5c:4b:66:63:54:34:ca:42:d1:62:40:1c:
b3:fd:cf:c1:94:3b:b2:e9:0b:99:c3:42:30:96:48:58:f1:5a:
07:60:4f:92:b6:e2:63:5e:11:96:fb:e5:28:09:04:b6:22:d4:
86:6b:a4:19:9e:72:54:fe:63:ee:0f:47:97:de:e5:6b:8e:55:
88:74:e1:22:ea:97:0e:85:34:1f:43:2c:f5:2a:4e:9f:15:7a:
09:c5:b9:61:98:19:b9:a6:76:2b:cf:45:30:7e:8b:5e:79:2e:
6e:24:ad:31:f7:73:c0:f3:64:27:50:86:c5:92:bb:de:44:25:
95:3d:c7:f1:5a:ca:ec:a1:d1:88:f2:8c:dd:11:e7:9d:97:1e:
f5:94:4b:b9:7d:ee:ae:80:b8:89:e4:63:8f:15:0e:ee:42:22:
f5:72:09:83:65:c3:29:8e:ff:5b:29:fa:3d:2e:15:eb:10:eb:
01:96:62:be:6f:9e:4f:2d:4b:98:7a:e9:2b:09:12:9e:84:56:
f8:ae:ff:e5:e2:d3:f1:33:c7:9d:f4:3b:e4:e9:37:2d:d3:32:
2c:b7:64:ae:89:77:5d:27:5e:67:60:1d:57:d8:04:ff:8b:e2:
49:e9:8b:db:71:4a:b1:e0:96:63:27:9c:d9:b9:39:a7:bd:0a:
49:bd:fa:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 16:16:44 2025 by rpki-client