Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
File: jzZAFzNC-uiz0sjMH5td3RSUiT8.mft (raw, json)
Hash identifier: RxkZkP7ZvzMlEFUSqTtEmNuxyF7P3tsaBvN83iC52U4=
Subject key identifier: CB:43:97:70:91:CE:D0:C5:B9:B5:E6:9E:F6:6B:25:AF:6E:B8:82:64
Authority key identifier: 8F:36:40:17:33:42:FA:E8:B3:D2:C8:CC:1F:9B:5D:DD:14:94:89:3F
Certificate issuer: /CN=8f3640173342fae8b3d2c8cc1f9b5ddd1494893f
Certificate serial: 019923310C51127C2FC0A1AB842B82B6C470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
Manifest number: 143A
Signing time: Sun 07 Sep 2025 08:00:40 +0000
Manifest this update: Sun 07 Sep 2025 08:00:40 +0000
Manifest next update: Mon 08 Sep 2025 08:00:40 +0000
Files and hashes: 1: NS4aUYlRSBiLTkLyyg7u-X42X1Q.roa (hash: r06qcWYpFC8YgZh35Sp5HzeJjcmGRBfHKZK7KBnJFGA=)
2: jzZAFzNC-uiz0sjMH5td3RSUiT8.crl (hash: +7C8b0DTag6YK/q/2TAafxxZDYHa5f+LOPE1Dk4mW8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:0c:51:12:7c:2f:c0:a1:ab:84:2b:82:b6:c4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3640173342fae8b3d2c8cc1f9b5ddd1494893f
Validity
Not Before: Sep 7 08:00:40 2025 GMT
Not After : Sep 8 08:00:40 2025 GMT
Subject: CN=cb43977091ced0c5b9b5e69ef66b25af6eb88264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5e:81:59:ec:da:84:de:c4:78:b5:c9:1a:4e:
d3:94:3b:04:4a:e2:11:12:75:29:5a:ef:92:c1:f1:
95:32:a6:98:b7:ab:a9:bd:48:7d:cf:83:d7:11:19:
b7:33:a6:74:de:e5:19:0e:92:e9:8b:0a:b3:25:fe:
e3:6e:4a:bc:3f:6a:2c:31:b5:a5:ab:5d:da:f0:7b:
45:35:c0:c1:f2:15:58:cd:c5:92:c1:1b:ea:c3:c5:
07:ff:18:7b:31:ef:55:2b:1b:30:51:d2:0e:d3:09:
ce:12:e7:14:e0:87:3d:03:54:e7:67:83:2e:c5:82:
6e:92:a1:46:4d:62:b1:b8:8d:cd:72:b2:08:99:6e:
5e:c7:84:44:26:72:05:e2:75:46:f2:f0:93:19:df:
a5:d5:d1:bb:d4:97:89:85:9b:50:cd:aa:b3:42:86:
c3:ce:d4:52:8b:a6:5a:a3:bf:35:9e:16:8f:96:10:
01:e4:ab:09:e9:61:b5:67:45:66:e9:ae:0a:30:78:
a5:8f:ad:90:b4:4d:94:a8:f2:d2:cc:6c:15:aa:93:
56:65:1b:6b:10:e8:f9:fb:a4:39:ce:bc:91:60:58:
c8:3a:23:fe:fb:e3:30:7f:d3:2a:c6:19:56:95:3f:
bd:66:23:7d:80:c5:f1:3b:59:bb:68:e8:5b:0e:4c:
37:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:43:97:70:91:CE:D0:C5:B9:B5:E6:9E:F6:6B:25:AF:6E:B8:82:64
X509v3 Authority Key Identifier:
keyid:8F:36:40:17:33:42:FA:E8:B3:D2:C8:CC:1F:9B:5D:DD:14:94:89:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d6:6d:4e:40:80:81:4a:02:dc:c4:3a:df:ac:00:2c:67:96:
73:69:59:ba:a9:81:e2:65:41:75:0c:52:33:9a:f8:59:f7:09:
00:2b:41:d8:63:f3:20:b0:4f:95:f3:d8:90:45:58:f7:d3:0c:
71:53:e0:e8:fa:1d:4e:14:df:00:fe:15:17:a9:a6:8b:18:c6:
fd:96:3b:bf:b5:ff:fc:92:8c:6c:bb:c3:a3:33:8d:41:36:51:
86:42:df:3c:0d:96:02:df:fb:f0:15:f7:a3:3b:4f:12:8f:25:
14:64:be:b7:9d:a9:b6:bc:cc:2e:b4:8b:8a:73:bc:66:07:20:
3d:21:d4:07:8d:2f:06:f7:51:d9:55:ef:b2:bb:2f:f3:2e:2b:
81:27:fa:4b:95:02:51:ee:1c:e2:e4:b5:f8:40:a5:80:9a:6b:
85:78:26:72:bd:30:18:47:81:75:b5:b5:b5:8a:13:51:d2:86:
ac:cd:cf:c0:b4:67:c5:c7:c1:61:0f:d2:77:de:c2:f3:09:ff:
60:40:f5:f9:7e:c2:9b:88:8b:b3:18:6e:0a:5b:08:71:a0:e2:
04:27:44:e5:37:d9:da:c0:ba:a9:58:ff:71:88:0f:9f:6b:02:
d6:61:61:7e:18:1c:6f:31:02:15:b3:45:71:68:17:86:2b:ff:
21:73:05:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:52 2025 by rpki-client