Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft
File: jzASR05qobNrQgZN0XWzDtgi5zU.mft (raw, json)
Hash identifier: z6kkGwopp5HpAAEbUOUiYvNvkDgpF7PznSWo0Ee3KsE=
Subject key identifier: 80:BA:14:DB:7B:16:86:D9:68:BC:AC:D8:04:3D:A1:06:A4:90:11:0F
Authority key identifier: 8F:30:12:47:4E:6A:A1:B3:6B:42:06:4D:D1:75:B3:0E:D8:22:E7:35
Certificate issuer: /CN=8f3012474e6aa1b36b42064dd175b30ed822e735
Certificate serial: 019A72CAA4F7248D6BE383A0DA40C4056D34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzASR05qobNrQgZN0XWzDtgi5zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft
Manifest number: 152F
Signing time: Tue 11 Nov 2025 12:01:14 +0000
Manifest this update: Tue 11 Nov 2025 12:01:14 +0000
Manifest next update: Wed 12 Nov 2025 12:01:14 +0000
Files and hashes: 1: hSeJLXUeQJLgsdHt2Swy2Krt_5Q.roa (hash: 1r4uFqSNgKddi8IkUrdMVRZBEoRqwJZMemm/bbM90fE=)
2: jzASR05qobNrQgZN0XWzDtgi5zU.crl (hash: k/UAPdjSHa1Hgnb+dp2xzAfsFkMWxFYnfCzpCXPvShM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzASR05qobNrQgZN0XWzDtgi5zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:a4:f7:24:8d:6b:e3:83:a0:da:40:c4:05:6d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3012474e6aa1b36b42064dd175b30ed822e735
Validity
Not Before: Nov 11 12:01:14 2025 GMT
Not After : Nov 12 12:01:14 2025 GMT
Subject: CN=80ba14db7b1686d968bcacd8043da106a490110f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f8:2f:62:de:96:91:51:ca:73:89:a2:68:f2:
8c:35:37:cc:69:38:d0:e9:ad:54:8e:21:3a:2a:6c:
ea:3b:6c:24:22:12:1f:4e:20:56:07:53:53:73:65:
45:5a:50:57:49:ca:48:ce:11:7c:69:70:97:4b:c2:
20:d6:f2:44:a7:f6:d6:ba:90:4c:64:cb:71:a5:13:
ea:bc:72:15:ad:bd:ef:a7:9c:29:b4:db:5f:b8:9d:
6e:e1:f1:00:ad:ba:bc:2a:63:71:aa:76:b8:ac:82:
26:ce:c5:12:b4:ba:77:75:3f:68:a2:1c:45:7c:2c:
04:6a:63:46:4f:a4:b8:9d:f7:36:3c:b1:05:8d:e4:
9a:a2:e3:5a:3f:84:42:c3:af:b1:f9:e8:85:ee:25:
d0:26:17:04:49:53:c7:d9:a2:3f:de:74:8c:1a:52:
ed:ad:0a:15:d4:4b:56:48:7d:8b:c5:7a:a2:57:a5:
6d:ef:2c:19:7d:53:32:83:da:dd:4a:f9:bd:03:87:
6f:86:25:47:00:bb:d3:4d:44:b1:15:c7:b4:4d:04:
6a:4c:3f:80:2b:0e:28:29:cc:90:3b:be:5f:5a:7c:
eb:f3:f6:7e:e1:c1:e0:ed:87:57:62:96:61:ab:b0:
73:5b:fc:b8:c8:64:5f:dd:1d:53:d5:ac:1e:ea:ad:
0c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BA:14:DB:7B:16:86:D9:68:BC:AC:D8:04:3D:A1:06:A4:90:11:0F
X509v3 Authority Key Identifier:
keyid:8F:30:12:47:4E:6A:A1:B3:6B:42:06:4D:D1:75:B3:0E:D8:22:E7:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzASR05qobNrQgZN0XWzDtgi5zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:d8:59:90:af:4c:22:cd:93:5b:0f:49:39:a5:19:6f:fc:9f:
0a:5e:a5:b5:dc:a7:cd:c1:34:85:34:5e:b9:ea:bc:02:26:45:
c6:99:27:82:56:1c:5b:2f:5e:8b:b3:5b:0e:60:37:ac:93:22:
6e:20:ad:29:5c:aa:91:1e:14:ec:45:77:04:48:9a:4d:4a:3d:
45:da:c1:c8:22:2f:67:20:a6:ec:40:c0:00:7c:9e:2b:81:f4:
c8:a6:4a:50:7d:15:ef:50:25:23:8b:77:dc:b0:63:d3:15:9f:
76:07:b4:d1:ed:e1:b7:d3:29:8f:eb:fe:50:72:1d:bd:d0:2e:
09:c0:3b:79:b1:b6:3c:3c:06:10:fa:b1:09:2a:bc:65:62:2a:
4d:c5:00:34:c9:64:2d:a4:27:c1:d1:2b:4c:4a:6d:d7:3e:5b:
d5:3f:24:69:d6:26:e4:6a:c1:df:77:17:1d:f0:4a:1e:9e:25:
a2:17:ba:ad:3d:97:5a:44:6b:6c:37:0b:01:70:e9:b2:42:70:
62:4d:4e:18:e2:19:ba:5f:3a:a8:c0:bf:42:5f:0c:6c:84:73:
d3:c5:4e:e6:78:42:1d:b7:d8:f4:0f:d9:6e:76:31:6c:7f:b2:
28:82:c5:ad:98:0e:28:a4:ad:aa:7c:ee:2f:d3:73:53:79:bb:
2a:d3:3c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:35 2025 by rpki-client