Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
File: JZSQxdvPv1kNozv703lwoHY0ack.mft (raw, json)
Hash identifier: Sh0ECbFiPTEzhQwSiI7ZJqfZrYdtdq96drNwLJjVPQc=
Subject key identifier: E9:8E:A9:38:05:F1:7E:38:30:6D:D9:6C:92:67:F2:3A:4C:77:3B:97
Authority key identifier: 25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
Certificate issuer: /CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Certificate serial: 0199221F57DCD67F561E86949F4FFE0E7EF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
Manifest number: 0EA2
Signing time: Sun 07 Sep 2025 03:01:43 +0000
Manifest this update: Sun 07 Sep 2025 03:01:43 +0000
Manifest next update: Mon 08 Sep 2025 03:01:43 +0000
Files and hashes: 1: CicZBBxXimIHZjGjJxw0-P_TKwA.roa (hash: WCF5D0GYPfyQKw7aRx70x9QWu1BJyay4IJiNMiHqns8=)
2: H9YBLTYVXKAT5WhHfkCcfarIS3Y.roa (hash: VX1SELBTMMOXweJZC3AHO0K6SmWP/UMVdMCZso8oNU4=)
3: JZSQxdvPv1kNozv703lwoHY0ack.crl (hash: SJB1grtWEsSdfuM/lQDPCLFMSStlok2WD4JMPyvVJCY=)
4: KBHAEuTQwMUyiCX_3RfZwtGUVwk.roa (hash: MrQgPzvtmJ1OylGpfrcHItYSdYG/3jwcYZSpyY/5nO0=)
5: Xud5emWKez2CWje3_uKElUeeYZM.roa (hash: JEEaFQSLgyko90PuBT5aCnY8R+bLlVoo/ly+wTonPTM=)
6: aLqHk2UMrsAFp8O_WkYeTwl3zWg.roa (hash: KSJSQQgNlVfvoPK0hF2rIvdyy8wj5LGpw3RQ1LyRxBU=)
7: gQWFEkun2ccvVh53BL0LLh5mo3I.roa (hash: Tz3OrEHIL28w3om3xiZeD8yyhg/V93Fe5zZKo9SAMIg=)
8: lyRiID6blcYjTxuro8RbRo8yBq8.roa (hash: URzaCIkjGunchT54U9dPfC35zUMjoPWxJXeabV1SOog=)
9: yfa_WQD3YpUEPvOqlipnQtZKTbU.roa (hash: aUGBtF0Q+ZPDnjAMxIqBivvu5PiTIPwqlssloFoWyho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:57:dc:d6:7f:56:1e:86:94:9f:4f:fe:0e:7e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Validity
Not Before: Sep 7 03:01:43 2025 GMT
Not After : Sep 8 03:01:43 2025 GMT
Subject: CN=e98ea93805f17e38306dd96c9267f23a4c773b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:43:e6:c8:10:0a:3f:69:52:01:3f:6f:37:3c:
fc:f1:3a:7a:ab:e1:2c:0a:09:a7:38:aa:86:a9:4b:
8e:2f:d5:d6:c6:b0:f6:7f:7b:49:68:e3:54:b9:32:
c1:72:bf:88:34:6e:aa:67:7b:30:6b:f4:12:4a:bc:
63:77:bd:12:2d:51:13:18:a7:1c:b2:bd:a1:1f:87:
08:fa:02:5b:42:c8:94:d9:12:12:20:d9:d6:35:61:
fb:44:76:d1:66:1d:29:16:fd:56:e4:ca:4a:cc:b3:
27:b3:6b:aa:ca:5f:18:ce:cf:2e:f4:4b:57:c0:cc:
f8:16:20:0e:18:29:92:be:80:14:47:cf:ad:67:2e:
d3:ce:ac:e6:9f:06:3f:68:4b:02:59:b4:9f:f2:48:
15:03:e2:d2:ae:8d:a9:7f:89:f6:05:dc:43:13:39:
38:32:bf:e0:33:83:32:dd:e1:90:bd:e9:ef:4b:53:
79:98:1c:63:5c:89:e2:20:b1:96:97:98:e6:c9:3a:
3d:6b:8f:11:da:a6:c5:87:b9:01:3d:ba:b4:78:47:
17:7b:6d:d6:3a:06:82:b1:6c:64:ef:87:24:d3:b2:
ac:09:34:ea:b5:7c:4a:9f:b6:29:4b:67:1e:68:b1:
4c:98:fb:20:bd:21:fe:f5:60:53:aa:20:76:f6:ae:
4b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8E:A9:38:05:F1:7E:38:30:6D:D9:6C:92:67:F2:3A:4C:77:3B:97
X509v3 Authority Key Identifier:
keyid:25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:3a:4d:83:89:12:cf:a4:f1:b2:f3:f8:fb:af:e4:8a:0e:a9:
5f:30:ae:b5:20:59:ee:26:f7:21:53:61:00:c8:8e:72:5c:ef:
72:bb:59:52:c5:3b:e2:12:31:f2:84:d3:0a:c7:8e:6b:0b:0d:
0a:5b:5f:12:2e:b4:c4:b6:72:4e:2a:1a:b8:7b:7f:a5:58:88:
d9:e4:31:7b:cf:7d:51:2a:c4:9d:80:96:7e:00:43:f7:bb:7f:
c7:c4:e4:5f:88:be:d5:fb:5d:96:36:77:04:38:50:da:ef:29:
94:c7:69:dd:9b:ac:16:5a:e2:c7:79:e0:b5:33:c6:7f:9c:bc:
ad:80:7e:ed:b4:6d:59:bb:4c:c7:db:e9:67:1f:29:8e:30:e0:
5d:ba:6e:37:72:6d:45:7b:a6:ee:f4:e7:21:70:8c:4d:98:3b:
c0:af:fc:fa:05:7b:9e:14:47:27:d1:e9:0a:f2:d1:da:09:97:
28:c8:ea:03:e1:65:f8:0d:85:88:e3:22:c0:4e:80:3e:82:27:
0e:6c:54:ae:be:4b:02:31:79:45:13:76:d7:a6:bb:af:53:92:
42:f0:58:70:99:02:91:1c:ee:7d:e5:ef:99:64:08:d3:94:18:
5e:f9:7d:cb:f8:24:d6:1f:28:ae:d2:7f:f3:23:ee:8e:6d:fb:
59:bf:32:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:35 2025 by rpki-client