Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft
File: jzztMLKFLlUseDdGcAPxdepZ3nM.mft (raw, json)
Hash identifier: m0pFYlMvqBdtNPmRrKycnuodtfIhXtccUu3YdiIUHRA=
Subject key identifier: C9:BB:75:73:BE:EE:32:67:FE:D4:BE:58:EA:AE:C5:3B:79:8C:C9:4C
Authority key identifier: 8F:3C:ED:30:B2:85:2E:55:2C:78:37:46:70:03:F1:75:EA:59:DE:73
Certificate issuer: /CN=8f3ced30b2852e552c7837467003f175ea59de73
Certificate serial: 019A72260BB30C151D132ECFD649A531F8F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzztMLKFLlUseDdGcAPxdepZ3nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft
Manifest number: 0C27
Signing time: Tue 11 Nov 2025 09:01:27 +0000
Manifest this update: Tue 11 Nov 2025 09:01:27 +0000
Manifest next update: Wed 12 Nov 2025 09:01:27 +0000
Files and hashes: 1: jzztMLKFLlUseDdGcAPxdepZ3nM.crl (hash: ZtvxYxALuBdKl5mz0tBEiW2YEmjxgtUkRnLGKYwNM8Q=)
2: zFUJjDGEsZJOucFbVCUxDXzsMU8.roa (hash: 2ZiCqHTVImshB2FLBBPRqOl/4XNJLXBYYXR20S0fJAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzztMLKFLlUseDdGcAPxdepZ3nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:0b:b3:0c:15:1d:13:2e:cf:d6:49:a5:31:f8:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3ced30b2852e552c7837467003f175ea59de73
Validity
Not Before: Nov 11 09:01:27 2025 GMT
Not After : Nov 12 09:01:27 2025 GMT
Subject: CN=c9bb7573beee3267fed4be58eaaec53b798cc94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0a:b4:be:fa:7e:64:09:50:55:a7:67:b5:af:
ae:c7:13:cc:2b:a5:b4:39:a1:a9:3a:fa:a9:84:6b:
5a:0b:f5:29:a1:cf:c3:c1:0b:b9:6d:11:eb:60:30:
64:db:af:ee:5d:89:69:5a:65:9e:ce:15:bc:c1:9e:
3c:41:8c:41:ec:60:e4:ab:d8:44:a1:9c:3b:3d:ba:
46:23:00:4a:1e:b8:90:7e:06:ac:6b:eb:37:58:1f:
3a:13:80:63:ef:d4:fb:20:f0:5f:7f:8e:63:2f:0b:
be:47:83:9a:f7:e3:aa:2d:80:b1:ac:63:42:c7:e3:
1d:ad:37:45:78:d9:f3:c7:35:a6:88:20:8f:d2:60:
4c:5e:d3:24:cd:25:51:08:3c:b8:41:18:a3:fe:70:
13:6e:1c:21:6e:52:1a:86:63:5b:ad:66:46:ef:6f:
20:cc:42:b2:3b:46:35:2d:61:8b:e0:45:3a:36:62:
7c:9d:9b:66:3e:7d:e5:fa:fd:8b:ea:44:9c:db:08:
44:89:6b:11:20:12:ca:b3:0b:a7:61:41:5e:41:c2:
49:4e:be:3d:df:8e:ad:64:9b:2d:dc:43:fa:09:91:
34:ef:96:64:be:6c:8d:7c:10:f0:2f:1c:b2:2e:4b:
be:c0:18:ab:3e:cb:0a:d1:5a:5d:f9:5a:78:6c:b1:
85:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BB:75:73:BE:EE:32:67:FE:D4:BE:58:EA:AE:C5:3B:79:8C:C9:4C
X509v3 Authority Key Identifier:
keyid:8F:3C:ED:30:B2:85:2E:55:2C:78:37:46:70:03:F1:75:EA:59:DE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzztMLKFLlUseDdGcAPxdepZ3nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:63:b0:5c:7c:51:6b:46:fd:e5:42:5d:bf:95:86:2e:d0:aa:
59:df:5e:14:27:6a:7a:2c:ed:3a:fd:fc:84:53:4c:cf:b7:82:
d0:94:75:32:91:0a:1b:fa:cd:d2:97:ca:dc:1c:5d:1f:81:b7:
bc:08:1a:ef:f8:3f:4c:1d:21:3f:5c:0b:db:4f:73:55:db:34:
09:28:45:9c:6b:64:bb:ce:c9:ab:67:8a:5e:0f:17:80:ae:63:
a0:f6:d7:25:4b:a8:fd:49:6d:e3:61:9d:22:04:6c:09:ec:91:
bb:b7:bb:88:9c:eb:a9:0d:f4:97:98:2b:82:b7:60:ea:18:40:
78:a1:ba:1c:67:b3:f8:76:c1:89:48:88:84:01:50:67:10:e4:
77:c2:01:2d:0e:40:7f:26:c0:db:c1:17:6e:9d:ad:d4:a0:42:
fb:3a:34:c9:14:27:a8:6c:53:12:06:b5:0a:7b:00:ec:28:77:
e3:71:18:6d:21:d0:5d:fe:21:20:0d:bd:62:55:5b:21:34:3e:
b2:95:b3:0e:ab:3a:16:d4:7e:0a:2e:8a:90:6f:70:21:80:21:
47:25:4b:6c:a2:3c:d0:00:3e:db:ab:f8:a2:97:62:a1:52:74:
fe:28:e3:fb:89:33:19:fa:63:ff:17:d9:a1:a0:c0:58:75:0b:
fb:57:2d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:01 2025 by rpki-client