Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
File: jz-dhbyzpBNjYsV3Pp0U455SlFM.mft (raw, json)
Hash identifier: NvIVhp0lacx1C4VffzBCg8VaRV+JOrtn4HT4FuEsjKI=
Subject key identifier: B1:25:9B:64:E6:F6:13:87:06:20:48:CF:E0:E9:48:B2:9B:07:B3:16
Authority key identifier: 8F:3F:9D:85:BC:B3:A4:13:63:62:C5:77:3E:9D:14:E3:9E:52:94:53
Certificate issuer: /CN=8f3f9d85bcb3a4136362c5773e9d14e39e529453
Certificate serial: 019A17CF5DA217F46D905CF8B55CCE920827
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
Manifest number: 0753
Signing time: Fri 24 Oct 2025 20:00:56 +0000
Manifest this update: Fri 24 Oct 2025 20:00:56 +0000
Manifest next update: Sat 25 Oct 2025 20:00:56 +0000
Files and hashes: 1: D6_4qEi07gtXF5ITukzXeqcyPaY.roa (hash: BB8G1BDTfHCkkOszf3uysnvPnN4MWEDmW1B2B7aR3bY=)
2: jz-dhbyzpBNjYsV3Pp0U455SlFM.crl (hash: 1mUt7UAK6Luys6wERr0Bt1oLKzJzjsto2wZ4/FH03Lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:17:cf:5d:a2:17:f4:6d:90:5c:f8:b5:5c:ce:92:08:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3f9d85bcb3a4136362c5773e9d14e39e529453
Validity
Not Before: Oct 24 20:00:56 2025 GMT
Not After : Oct 25 20:00:56 2025 GMT
Subject: CN=b1259b64e6f61387062048cfe0e948b29b07b316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5b:40:20:19:5d:c5:55:03:03:12:9b:7e:e1:
10:90:49:31:bf:84:88:cf:5f:88:6c:23:a4:63:27:
d3:b0:34:bc:05:9b:a1:6a:ba:1f:95:f8:78:42:2d:
43:45:30:cf:22:80:07:e0:74:92:55:61:7c:1c:13:
89:ca:7c:f4:5a:a8:ab:93:0b:e4:18:e5:4e:b7:55:
ac:93:cc:12:b2:5b:77:bd:89:16:d1:8b:79:b3:fd:
8c:6c:09:6f:71:df:17:46:eb:28:14:12:41:e1:da:
af:d4:ae:11:1e:c4:0f:d9:4e:86:b5:26:d4:24:69:
da:ff:71:f8:e0:d2:89:10:41:5e:97:cf:1f:44:99:
9c:61:87:62:db:7e:cc:15:b0:65:68:ad:a8:04:b0:
ee:ae:6e:e2:8f:93:0a:29:30:36:eb:9e:9b:53:ce:
be:66:f0:db:0d:55:65:51:a4:e1:f4:4c:6e:b1:e2:
12:44:73:d1:1b:13:49:a8:6b:0e:50:6a:8d:a4:42:
80:b1:bf:3e:87:54:0a:73:e9:0c:9e:8d:01:a9:37:
52:a2:d1:90:61:e4:a9:f5:00:2a:8d:4a:1e:32:3c:
2d:73:52:0f:35:7e:2b:c5:45:ad:4c:54:f4:e2:ca:
6d:f5:48:e1:f1:6a:79:24:ab:c0:cd:d3:03:68:4d:
1a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:25:9B:64:E6:F6:13:87:06:20:48:CF:E0:E9:48:B2:9B:07:B3:16
X509v3 Authority Key Identifier:
keyid:8F:3F:9D:85:BC:B3:A4:13:63:62:C5:77:3E:9D:14:E3:9E:52:94:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:69:07:04:1f:8a:85:df:c5:5d:2e:de:ba:c3:32:ca:99:b4:
cc:ab:8a:df:ca:69:05:3b:ac:df:31:25:9f:f1:14:10:c9:45:
12:0b:93:01:3b:73:c2:93:fb:45:ba:32:82:09:ba:76:84:81:
f1:e2:53:dd:1d:be:1f:fc:1a:08:83:22:76:cc:19:3c:4d:1c:
e8:42:18:ba:28:7f:a7:6a:ad:92:80:f1:c2:02:c7:3e:71:77:
1b:2d:49:c1:bc:7c:0b:86:62:cf:a7:99:08:b6:cb:97:e7:5b:
1e:76:a4:fc:f8:96:f6:7b:d4:04:5e:17:14:15:18:6d:72:db:
bf:a6:65:12:d9:17:d0:03:66:02:48:ef:09:f2:2a:91:0b:ac:
bf:01:e8:ef:c1:e1:e8:3d:95:fb:66:84:06:b1:0a:97:a3:42:
1b:9d:c5:58:e6:87:af:6c:9f:d8:92:f9:06:a4:39:c8:07:4a:
d4:a4:c1:3e:94:6a:38:47:c5:1f:5a:5e:a9:d7:0f:2d:53:e7:
dc:f0:93:99:5b:4b:3d:0d:ef:34:0e:cc:8c:68:27:28:9f:a8:
08:9b:c3:3b:26:c3:59:8c:9c:a4:48:b0:d9:49:ce:12:dc:5e:
16:59:bc:9e:d2:9d:70:22:5e:d1:20:3c:c1:cd:e6:96:e9:0b:
99:34:08:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 04:18:38 2025 by rpki-client