Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
File: jZg6B-bbi8SUyI370TF7qBDS0no.mft (raw, json)
Hash identifier: dZGwlL0jTzlVgGX8qPhj0RLAWNo9w24J3UBd5qIK3kc=
Subject key identifier: C7:81:CF:F1:54:A4:B6:A1:34:F5:37:CA:CD:25:D5:8B:19:74:64:20
Authority key identifier: 8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A
Certificate issuer: /CN=8d983a07e6db8bc494c88dfbd1317ba810d2d27a
Certificate serial: 019A7301CBC728638315B1D7F96ECE11F4FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
Manifest number: 1364
Signing time: Tue 11 Nov 2025 13:01:28 +0000
Manifest this update: Tue 11 Nov 2025 13:01:28 +0000
Manifest next update: Wed 12 Nov 2025 13:01:28 +0000
Files and hashes: 1: 4-WfO6vi57usPTB05BV5GJ31rGM.roa (hash: VA1gjhdShA/9i1dmr35uQ85UKyhc+8PsGP0Wp/sm8Mw=)
2: jZg6B-bbi8SUyI370TF7qBDS0no.crl (hash: B+uTtZfb+fptAtH0TU1LMDgFvSy9YJr/J9TzFRymYe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:cb:c7:28:63:83:15:b1:d7:f9:6e:ce:11:f4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d983a07e6db8bc494c88dfbd1317ba810d2d27a
Validity
Not Before: Nov 11 13:01:28 2025 GMT
Not After : Nov 12 13:01:28 2025 GMT
Subject: CN=c781cff154a4b6a134f537cacd25d58b19746420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bf:31:23:40:d5:38:19:e8:f8:a9:b2:4e:cb:
31:6c:9d:27:99:6b:e1:8b:c1:3c:c2:40:fd:41:c2:
9b:62:da:c2:c2:c9:6a:2b:f8:8e:8e:fb:80:8e:10:
ac:9e:be:7c:51:a6:86:39:a3:74:6c:ec:eb:2f:6f:
75:51:31:a8:85:03:67:1d:ef:a9:9e:95:44:65:65:
1a:67:39:7e:cb:60:72:e2:80:a1:2e:12:9f:10:a8:
98:62:56:2d:b3:1b:fd:82:9f:0c:84:28:f5:9b:e6:
80:75:a6:53:e0:62:1f:ee:0d:ec:4c:e5:43:b5:a8:
14:70:e2:71:86:35:17:b6:32:ec:7a:1a:d5:b1:e9:
ae:71:f2:88:fd:f5:ef:1f:98:a2:40:39:b2:48:da:
b7:3f:8c:74:c3:2b:ac:32:bf:8e:98:2b:f5:27:f9:
c1:d4:27:74:51:b2:fe:89:9c:73:f8:88:9c:cc:fc:
c9:08:cd:f7:d0:ee:80:5e:e2:53:99:4a:d7:7a:ad:
71:9a:9d:af:fe:83:07:73:50:55:e2:47:7b:e2:5d:
bc:1b:54:5b:79:ae:eb:b5:73:be:44:05:ee:0a:c5:
bf:56:c9:e1:e7:39:f5:4d:5c:c7:c9:a4:8a:f9:9e:
ca:8c:22:96:d9:d5:9b:6f:cb:54:62:0c:5e:07:38:
c5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:81:CF:F1:54:A4:B6:A1:34:F5:37:CA:CD:25:D5:8B:19:74:64:20
X509v3 Authority Key Identifier:
keyid:8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:9f:77:a5:88:c9:1f:cd:fb:b4:b0:97:c1:ef:87:68:34:88:
47:08:0d:2c:f4:0f:fe:42:5f:f5:c3:aa:43:ca:f0:e6:e9:61:
74:44:e4:4f:c6:71:4d:c9:d5:3f:9e:70:c5:a3:c5:52:0f:bd:
24:e0:a1:6f:de:4d:00:d6:5c:99:83:03:87:99:61:a8:7d:92:
00:bb:76:01:d4:d6:b0:7c:02:8a:5e:26:85:c3:94:d8:cd:af:
ac:3e:d9:ea:31:6d:30:4c:c1:99:0a:5f:c8:3f:11:35:d5:77:
16:7b:bb:5a:b4:bd:64:6d:47:ed:0e:b6:db:20:ed:95:db:c0:
f7:a9:c0:cc:02:a3:3d:19:4c:c8:cd:bb:5b:7f:5c:43:a9:a1:
4b:f1:b4:42:c5:c1:28:fe:bf:63:9d:3d:ae:be:c7:a7:00:d6:
e8:7a:68:fd:74:c9:3d:11:0b:7c:ad:c8:39:d9:01:0d:00:08:
18:30:d2:c3:73:bc:16:69:f2:d0:ea:95:04:88:0a:09:19:7d:
30:d4:f2:18:8f:f2:2f:b0:90:1d:78:f0:0e:f4:ee:2e:43:b7:
10:d3:b9:f8:8c:a4:bb:0d:a4:d5:3f:0f:5c:da:bd:31:61:be:
b6:a2:da:ea:e8:ca:1a:e3:b6:43:02:84:a1:87:28:c5:80:76:
4b:a7:88:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:44:18 2025 by rpki-client