Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft
File: JzWxnbJ9Py131AgYhFO-JrNFUK0.mft (raw, json)
Hash identifier: QBqGnMUky47QFTy2tZgHmG+3jQlKmLsgb04BHNGX3J4=
Subject key identifier: CA:8E:C7:AA:7A:EA:0E:30:00:98:FD:55:F2:FD:3B:F7:F4:D9:97:BA
Authority key identifier: 27:35:B1:9D:B2:7D:3F:2D:77:D4:08:18:84:53:BE:26:B3:45:50:AD
Certificate issuer: /CN=2735b19db27d3f2d77d408188453be26b34550ad
Certificate serial: 019A221B5AEBB4A5907B88008EBA43F4ED93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft
Manifest number: 0459
Signing time: Sun 26 Oct 2025 20:00:09 +0000
Manifest this update: Sun 26 Oct 2025 20:00:09 +0000
Manifest next update: Mon 27 Oct 2025 20:00:09 +0000
Files and hashes: 1: 8Xi47DC6XLMifd_h4diEuTQqT_o.roa (hash: CN0wU8kNDOjW0/AZxclgk/MCq6Ngl7PcvBwvgiUpVIs=)
2: JzWxnbJ9Py131AgYhFO-JrNFUK0.crl (hash: y+xHXgvBhiQaJ4hiVOVMMJqytUjImclmY3dV0D/lN3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:1b:5a:eb:b4:a5:90:7b:88:00:8e:ba:43:f4:ed:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2735b19db27d3f2d77d408188453be26b34550ad
Validity
Not Before: Oct 26 20:00:09 2025 GMT
Not After : Oct 27 20:00:09 2025 GMT
Subject: CN=ca8ec7aa7aea0e300098fd55f2fd3bf7f4d997ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:05:55:1f:9e:40:b7:d1:13:72:88:ee:9c:f6:
57:05:50:f7:cf:5c:2f:34:fa:77:63:f9:ac:14:fd:
54:3c:fa:67:ac:c0:e9:33:4a:6d:2b:94:4c:ae:90:
77:3a:56:86:a9:9a:cb:d4:5c:db:c4:a9:d1:3d:b5:
e8:8c:f0:6b:f0:b9:35:7d:ce:64:64:de:61:4b:7c:
d1:3a:30:d0:02:4d:aa:06:1e:e5:9f:4f:c5:92:19:
5c:5c:a8:e8:bb:64:6f:d3:b3:b5:db:84:4c:07:70:
30:d4:52:86:a6:2c:22:d7:e0:23:e7:cd:49:2b:64:
44:a7:4f:b5:54:60:cf:35:47:e8:1d:af:dc:0e:db:
5e:e8:14:36:3b:b2:a1:7f:b0:f0:dd:ad:9d:12:4a:
05:d0:14:96:b7:20:38:99:9f:6a:02:bd:c8:ec:a5:
92:74:d8:39:ef:73:9b:95:9a:96:96:d4:a9:9f:dc:
3e:1c:3a:b3:8b:96:0d:a3:3b:62:c9:b2:f7:23:a9:
0f:f5:f7:11:c8:f8:2e:38:3a:bb:fb:c2:6c:e6:1b:
ac:49:a6:7c:da:2e:7d:d9:1f:cb:ea:f2:3e:c6:b5:
a3:9d:fd:06:2f:60:d5:e1:8f:97:a2:42:24:2c:0e:
c3:0d:ac:73:74:6c:2b:6c:35:6e:77:ef:8f:83:64:
c1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:8E:C7:AA:7A:EA:0E:30:00:98:FD:55:F2:FD:3B:F7:F4:D9:97:BA
X509v3 Authority Key Identifier:
keyid:27:35:B1:9D:B2:7D:3F:2D:77:D4:08:18:84:53:BE:26:B3:45:50:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:15:d8:40:79:9e:ae:b0:cb:1d:a7:11:29:1f:c7:41:08:51:
4b:84:09:23:67:be:cc:7b:5f:b1:69:5f:51:3c:a9:d1:14:ff:
04:6a:5f:5a:58:2b:36:84:53:65:7c:92:59:d1:1d:31:47:87:
ea:3a:b3:d2:89:8d:a7:72:9f:42:c2:57:e5:ce:85:d9:44:51:
57:51:d5:49:d9:a1:81:d6:3a:74:8b:0d:da:4b:5e:62:ca:61:
22:37:0b:b5:34:57:71:fe:14:86:b2:06:9d:3b:fa:b9:4b:c7:
7d:18:28:41:e7:10:08:3d:33:00:21:a3:ad:a6:d8:06:15:53:
9d:19:51:b1:c0:00:53:a1:9d:43:8d:bf:ee:38:90:83:72:3b:
62:49:28:9a:9e:17:da:c0:c9:f5:8a:75:fe:d5:f2:c2:fa:94:
b4:81:8f:7f:ac:6f:ec:78:ed:68:a7:f4:23:af:41:28:e1:3d:
c3:5b:46:6e:ae:fd:d1:89:f4:6a:6a:32:95:20:02:71:a6:65:
95:33:8b:ff:36:9a:24:c4:e3:c6:59:84:c7:ec:03:fe:69:b1:
d1:6e:86:4f:7b:6b:99:a6:82:91:66:c0:a6:6e:63:1e:a0:c5:
9c:64:6a:c2:b0:c7:d7:16:1c:60:31:06:33:84:24:da:d2:c2:
73:75:c0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:50:18 2025 by rpki-client