Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
File: rjzFZ_6_40h4rrkThhzwYAooOQM.mft (raw, json)
Hash identifier: Uumq19DI7IXE+Nvd16FPD/pbp+AOyUbHCCNwVCjtazc=
Subject key identifier: 04:3D:EC:24:10:9F:7F:7A:5B:3F:5B:A4:8F:F2:FC:E0:4E:BE:77:6D
Authority key identifier: AE:3C:C5:67:FE:BF:E3:48:78:AE:B9:13:86:1C:F0:60:0A:28:39:03
Certificate issuer: /CN=ae3cc567febfe34878aeb913861cf0600a283903
Certificate serial: 019A7112CF6B96BAB7CE4B8AF97A439842CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 04:00:49 +0000
Manifest this update: Tue 11 Nov 2025 04:00:49 +0000
Manifest next update: Wed 12 Nov 2025 04:00:49 +0000
Files and hashes: 1: cO5HXhdkW-9sTYlyxMUlTq4VrHM.roa (hash: 2vNmvGiB6oqNqpjdkXzwA+2UM7st3DevXSjO7XrFVio=)
2: rjzFZ_6_40h4rrkThhzwYAooOQM.crl (hash: DrmZppmiJkjpld57Ekr46YuE+YpVetojzbXWXgl9Fk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:cf:6b:96:ba:b7:ce:4b:8a:f9:7a:43:98:42:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae3cc567febfe34878aeb913861cf0600a283903
Validity
Not Before: Nov 11 04:00:49 2025 GMT
Not After : Nov 12 04:00:49 2025 GMT
Subject: CN=043dec24109f7f7a5b3f5ba48ff2fce04ebe776d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3e:93:ff:ff:8d:18:2c:7e:26:fa:e6:bd:48:
c5:eb:b2:43:6f:b9:3e:5d:56:e3:9c:c5:6c:65:d9:
75:fe:5c:50:97:9a:f8:ef:bb:08:e8:ff:0d:52:0f:
b8:68:95:ad:dd:6d:57:f3:bd:fc:76:c8:26:e9:7a:
94:aa:6c:82:f1:4f:54:d2:a3:a9:3f:66:b5:1c:bc:
24:f2:5b:40:07:42:63:99:11:14:a0:0d:9c:c1:13:
08:b0:b0:6e:ae:cd:67:d6:d6:d4:80:b0:c6:0f:03:
fa:43:0a:64:e4:6c:39:2d:9e:c6:4e:f4:bf:76:d0:
b6:c4:69:62:1c:01:11:dc:da:46:9e:fc:15:50:e0:
05:c7:3f:de:6c:ce:fb:b1:db:97:89:6c:36:7a:04:
b5:fa:a9:97:d8:47:78:27:42:8b:ce:05:e9:12:4d:
39:38:71:e2:36:55:d1:b2:78:45:2e:21:aa:1d:84:
fc:85:c3:77:5d:63:d1:14:ac:ae:6d:30:d5:e2:02:
ee:93:57:2c:ce:ca:dc:0c:2f:ef:d8:3d:b0:0c:b5:
a1:a5:b2:ec:98:e9:1f:b7:95:c3:21:be:08:8f:49:
98:a9:53:74:d1:77:59:6b:58:0f:99:a6:3d:35:ab:
84:90:e3:b0:45:7a:7a:b3:e9:05:3e:db:6c:b1:ea:
23:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3D:EC:24:10:9F:7F:7A:5B:3F:5B:A4:8F:F2:FC:E0:4E:BE:77:6D
X509v3 Authority Key Identifier:
keyid:AE:3C:C5:67:FE:BF:E3:48:78:AE:B9:13:86:1C:F0:60:0A:28:39:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:96:d8:61:d5:8f:65:8d:2d:05:cf:cc:f2:74:c3:0e:82:c9:
87:d1:7b:45:f9:44:3f:08:34:f1:72:b8:d6:d6:10:1e:d1:94:
8b:ef:7a:e7:2c:54:86:89:d9:9c:76:01:6c:a7:0b:5c:83:27:
3c:2e:bc:76:b4:35:7e:99:b2:15:41:ca:e1:15:8c:bb:7f:14:
a4:2a:13:7f:df:29:fa:02:6c:b7:05:b5:21:ae:e0:1a:0e:93:
e3:77:4a:fa:18:a9:11:cb:3a:da:b1:8d:d2:ba:12:42:b0:1f:
b2:b2:2f:89:6f:a2:6a:23:5a:c7:35:af:7c:d5:2d:93:80:53:
bf:d7:e1:b2:e6:92:4b:37:24:b6:56:3e:8a:43:a5:d7:8f:f2:
14:a2:23:38:78:43:96:e5:05:f9:0d:bb:86:01:f5:47:b1:c2:
d1:6d:6e:44:bf:14:b3:bb:fb:6f:31:f6:3b:f0:e6:ba:4c:fb:
b5:4b:81:d5:d7:eb:4a:ae:85:c0:fb:0a:af:ad:86:64:2c:6c:
b3:95:79:3e:bb:8d:05:a6:c9:4a:26:c4:67:da:90:60:3f:46:
c1:12:19:8a:16:9a:ef:e8:b9:4a:25:b2:b5:84:00:b1:85:df:
14:31:15:76:e7:d0:39:f1:5a:35:b7:b1:89:be:56:01:61:50:
82:66:f2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:10 2025 by rpki-client