Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft
File: JzWxnbJ9Py131AgYhFO-JrNFUK0.mft (raw, json)
Hash identifier: pHPWKjUyHa13zPb3MIL4I89BcdoM+F/CEvl3r85oDfU=
Subject key identifier: 2A:DC:5A:9B:4E:BB:F7:EB:44:AC:9B:62:2D:76:E3:14:C9:A2:EF:B5
Authority key identifier: 27:35:B1:9D:B2:7D:3F:2D:77:D4:08:18:84:53:BE:26:B3:45:50:AD
Certificate issuer: /CN=2735b19db27d3f2d77d408188453be26b34550ad
Certificate serial: 01992EC715BBC515D46787928080833E4A03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft
Manifest number: 03DB
Signing time: Tue 09 Sep 2025 14:00:22 +0000
Manifest this update: Tue 09 Sep 2025 14:00:22 +0000
Manifest next update: Wed 10 Sep 2025 14:00:22 +0000
Files and hashes: 1: 8Xi47DC6XLMifd_h4diEuTQqT_o.roa (hash: CN0wU8kNDOjW0/AZxclgk/MCq6Ngl7PcvBwvgiUpVIs=)
2: JzWxnbJ9Py131AgYhFO-JrNFUK0.crl (hash: 0utFgx4G7aTN53aT+Crmatd6mypbTMYMMIqOCTTWlbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:c7:15:bb:c5:15:d4:67:87:92:80:80:83:3e:4a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2735b19db27d3f2d77d408188453be26b34550ad
Validity
Not Before: Sep 9 14:00:22 2025 GMT
Not After : Sep 10 14:00:22 2025 GMT
Subject: CN=2adc5a9b4ebbf7eb44ac9b622d76e314c9a2efb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:99:92:af:7b:6b:de:29:6f:4e:db:45:01:c1:
ce:d0:e4:ea:c4:a5:7f:08:fd:8f:2a:82:03:ce:e0:
5e:22:85:df:a1:01:c9:54:d7:25:b2:7f:c8:9e:6b:
67:3a:17:c5:bc:43:c0:be:dd:bd:a8:eb:d4:9b:70:
a3:d3:df:c4:38:81:fa:bf:98:9c:c9:72:f4:63:86:
bf:12:61:92:69:ac:24:b1:2f:35:ed:30:57:f7:ec:
07:86:6f:58:3d:dc:4a:7c:94:a8:03:d5:98:76:ad:
1f:60:d8:59:4b:c7:7d:16:50:06:a4:c4:26:e3:3d:
b7:65:c8:5f:60:7a:01:35:27:5b:8b:3f:6a:01:1e:
27:5c:00:4f:4d:3b:90:1e:c5:6f:5e:71:e5:0e:38:
af:4a:9a:10:59:63:fc:13:89:3f:99:d9:d3:c3:e1:
55:42:0b:81:0e:7c:61:94:95:73:8f:79:22:c0:24:
6d:9b:fd:18:25:66:60:64:bc:02:b9:eb:a9:8f:32:
b7:66:57:8d:83:a2:5e:3e:78:da:fc:bb:8c:66:94:
24:86:7a:1c:2d:cd:ef:45:79:ee:a9:89:34:af:f0:
68:05:cb:7c:1e:23:0f:2e:76:e7:ed:53:d6:27:cd:
5e:c4:17:d4:2e:b9:fb:7d:60:9a:93:b1:91:7b:0c:
53:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DC:5A:9B:4E:BB:F7:EB:44:AC:9B:62:2D:76:E3:14:C9:A2:EF:B5
X509v3 Authority Key Identifier:
keyid:27:35:B1:9D:B2:7D:3F:2D:77:D4:08:18:84:53:BE:26:B3:45:50:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:39:03:89:7e:32:07:98:41:71:93:38:60:23:cc:27:78:b6:
19:7c:9a:a4:fe:77:db:1e:aa:d8:d9:72:e3:21:09:46:da:7f:
bc:79:21:c7:06:e0:76:e3:4f:68:59:92:f8:a3:4d:b9:76:80:
d6:c0:d6:b0:9a:dd:11:ad:1a:21:44:5e:be:db:dd:10:46:c1:
7d:f5:d0:65:d0:eb:73:3d:ec:1b:4c:30:8d:99:04:85:02:8f:
94:d0:e4:c8:00:6d:11:a8:7b:e5:c3:a2:bc:da:d5:39:df:38:
55:fa:3c:43:b6:35:31:83:be:83:68:8f:de:e8:83:d9:dd:1e:
67:a5:37:6b:89:7c:72:49:4c:f9:4c:1c:5f:5a:ea:4f:7c:ae:
5d:f2:08:80:2b:08:45:e4:b6:64:3e:db:e8:88:ed:51:e1:6d:
74:8b:f9:b3:cd:a9:c4:a1:e2:32:84:01:3e:2d:fc:7e:d1:ea:
4d:10:37:f7:31:42:e4:b7:47:64:5c:a9:c4:9a:2b:b2:b8:71:
42:cc:e6:b9:97:7d:65:64:55:4e:be:5f:54:b1:ea:18:4d:50:
e6:f6:e0:ba:9a:ee:b4:5c:93:b5:be:33:1a:17:0e:25:54:e7:
a9:43:9c:af:dc:a7:99:cb:d5:2a:28:bb:a7:d4:3c:a5:29:31:
4d:f0:ab:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:08:17 2025 by rpki-client