Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
File: Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft (raw, json)
Hash identifier: gDiBeJwONeZ4EuoFPwcMXpacyniZc9I4Ocjup+h4xlI=
Subject key identifier: 52:13:B3:FB:69:18:E7:F8:3D:72:3A:FE:8F:B5:E0:3A:42:0F:D8:29
Authority key identifier: 27:39:1A:E2:8A:91:D5:99:13:46:AE:DA:F1:7B:F8:60:5C:8C:F2:2E
Certificate issuer: /CN=27391ae28a91d5991346aedaf17bf8605c8cf22e
Certificate serial: 019A150565FE9FD584CE528E9786BCE5D47C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
Manifest number: 1281
Signing time: Fri 24 Oct 2025 07:01:06 +0000
Manifest this update: Fri 24 Oct 2025 07:01:06 +0000
Manifest next update: Sat 25 Oct 2025 07:01:06 +0000
Files and hashes: 1: Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl (hash: Cwu4h6KYQ2EK+IIUm5MmH/iozTSaM8NT5MQ/N+LpcdA=)
2: Y2PRIXlvoLUvaJRI_Do9j4XcqPk.roa (hash: 5PYmU1FMb9SDbJhCU1KiV8VGC7stgGinp2hnu0BY1I0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:05:65:fe:9f:d5:84:ce:52:8e:97:86:bc:e5:d4:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27391ae28a91d5991346aedaf17bf8605c8cf22e
Validity
Not Before: Oct 24 07:01:06 2025 GMT
Not After : Oct 25 07:01:06 2025 GMT
Subject: CN=5213b3fb6918e7f83d723afe8fb5e03a420fd829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f2:e9:3f:3a:be:c5:ba:0e:de:fa:9e:a6:29:
c8:a0:fe:f2:73:1e:59:e9:1b:40:3d:e1:93:d9:20:
cb:1e:21:20:6b:3a:ad:ff:d3:52:15:1d:f1:88:fc:
66:81:79:44:a5:5d:02:33:bd:57:3c:e0:e3:f5:0f:
ef:77:0c:4c:af:45:98:a5:a1:4c:bc:e5:b2:de:9a:
1e:4b:77:cc:59:24:cf:09:87:da:b6:9d:36:bc:c7:
ea:00:6c:9f:ae:59:a6:ef:d0:96:f4:4e:17:0a:18:
b5:55:42:9b:f6:97:fa:98:8f:db:d2:31:5d:4f:6f:
42:8a:41:05:1b:db:f1:b7:25:3f:bd:80:0a:1a:db:
f7:f5:71:d5:34:28:e2:cd:17:05:a0:ef:e9:9e:dd:
74:8e:9c:a7:bb:ef:1b:be:98:c8:6b:bb:9a:fe:85:
b3:e3:2e:1f:42:ca:63:f6:55:1d:d0:38:b8:63:93:
49:23:13:6b:bd:95:dc:cb:6a:cd:13:a5:4f:fb:6d:
45:e1:08:04:4e:d1:53:9d:50:3a:a1:e4:f2:f8:9c:
9d:b1:b5:8e:43:c0:b8:1f:ec:c4:6d:71:23:dd:43:
1e:39:a0:d8:6a:ff:65:c0:72:39:53:20:0e:f0:df:
dd:55:e4:40:8e:a7:7b:bb:66:70:10:56:b2:c2:3f:
8a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:13:B3:FB:69:18:E7:F8:3D:72:3A:FE:8F:B5:E0:3A:42:0F:D8:29
X509v3 Authority Key Identifier:
keyid:27:39:1A:E2:8A:91:D5:99:13:46:AE:DA:F1:7B:F8:60:5C:8C:F2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:5f:7d:24:2c:4c:57:d9:bf:4b:f6:e4:64:68:90:60:fb:f6:
e6:5c:07:4d:55:37:2c:3b:8e:3c:4f:31:cd:89:08:75:4d:ec:
61:d6:60:49:42:0b:2e:b7:f9:f9:dc:b4:30:f7:d7:20:24:4d:
fe:e7:23:31:96:95:49:2e:49:da:9d:88:4e:a5:ff:c5:85:6a:
43:df:94:9b:76:57:fe:ac:1e:44:0f:e6:18:03:15:25:db:22:
66:cb:1c:98:27:6c:ba:a8:f1:51:1e:c4:6f:bf:04:a3:f9:77:
08:43:ef:c6:69:4b:26:10:b7:79:55:8e:f0:64:24:77:bd:cd:
07:6c:74:ab:9d:a1:b1:3a:a0:34:8f:b7:bf:15:e8:58:c2:f2:
11:88:2e:f6:de:ac:6e:ac:5c:2f:59:04:ff:12:01:4d:60:b9:
ac:36:64:b7:29:13:20:42:ea:fb:3a:2b:c7:9b:14:ac:b9:5f:
ab:1b:3a:3f:b2:7f:03:78:06:5a:c4:e7:c3:82:07:1b:56:44:
0a:91:5f:1c:8e:ab:43:87:0f:ce:77:92:70:2a:ca:71:bb:3a:
f7:0e:18:98:05:fd:df:61:a4:87:4c:06:07:c0:72:60:28:03:
b9:0f:07:b3:9c:21:04:7e:a7:64:3c:56:2e:b0:d8:22:37:52:
1c:9f:61:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 11:59:23 2025 by rpki-client