Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
File: jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft (raw, json)
Hash identifier: OTsxRhgMxSDOHmKG9aYgYWWDuMVLDGwotMafRyU5y84=
Subject key identifier: C1:2A:4A:F9:02:14:8A:DA:4C:43:AF:B1:9F:DE:18:A9:29:96:94:CD
Authority key identifier: 8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6
Certificate issuer: /CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
Certificate serial: 01993425323DD556F58C089ECB99D42F31D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
Manifest number: 160D
Signing time: Wed 10 Sep 2025 15:01:16 +0000
Manifest this update: Wed 10 Sep 2025 15:01:16 +0000
Manifest next update: Thu 11 Sep 2025 15:01:16 +0000
Files and hashes: 1: 77z8QXKc8ERahKIbASlcnYfSpXA.roa (hash: 4+qUdKw0CqogSD0bEzw5oz5fN5HdO2eQJ/PSKGd57hQ=)
2: Vp9dMAyfVmCM5zZQhLE8hK5dRc0.roa (hash: 5cnih+GaWo66TQ4L2W2BbOxLKl4dL4P027VTj45pMMU=)
3: jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl (hash: 01ExqFmz+N/8AVXvBD6dQqZET9m69cDoYtC8o3N/7vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:25:32:3d:d5:56:f5:8c:08:9e:cb:99:d4:2f:31:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
Validity
Not Before: Sep 10 15:01:16 2025 GMT
Not After : Sep 11 15:01:16 2025 GMT
Subject: CN=c12a4af902148ada4c43afb19fde18a9299694cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:26:5d:3c:15:63:40:37:42:39:80:b4:1a:78:
63:f7:86:ef:92:f5:cf:8c:dd:61:9a:b4:06:b2:93:
10:5d:cb:44:75:6e:fa:ab:6e:6e:b0:c3:00:1c:0a:
5f:49:29:3e:61:fd:02:68:03:e5:5a:0b:68:5c:c5:
18:56:ba:64:5c:9b:a5:46:97:ad:85:7e:01:de:e7:
15:f4:c7:4c:80:b3:95:d0:e4:db:25:3c:06:98:b4:
46:73:f3:34:2a:03:c4:75:65:5b:47:4c:09:24:80:
6d:99:07:9e:d7:bc:6d:ac:e7:57:06:fb:5a:3c:71:
de:3c:7a:c8:67:77:a9:37:f5:ed:08:9a:c9:96:65:
4b:04:36:a3:f0:b0:a5:ae:b6:65:eb:45:9c:99:af:
f2:1e:0b:a5:6b:66:cc:83:44:c9:28:ce:31:eb:97:
e2:63:a0:7b:5b:dc:0a:b8:7d:1a:e3:20:11:6c:07:
7b:f1:a7:f5:9c:d9:41:96:53:51:41:96:78:63:12:
ae:3e:b2:18:f9:26:29:22:13:3a:b3:5f:49:8c:38:
58:d7:49:d6:9c:e7:7e:62:2d:6b:4f:98:22:fa:75:
2a:d3:39:a9:4c:0b:9d:3a:e7:f5:aa:17:b4:42:a2:
1c:2f:43:31:00:f9:e6:25:18:94:32:44:7b:6f:90:
d8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:2A:4A:F9:02:14:8A:DA:4C:43:AF:B1:9F:DE:18:A9:29:96:94:CD
X509v3 Authority Key Identifier:
keyid:8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b1:5c:28:aa:c8:0c:a7:f3:25:02:c4:0b:91:21:57:f0:8e:
af:81:f3:88:f9:bf:94:48:4e:7a:c6:f9:47:e6:ef:74:1b:05:
ca:08:3a:91:68:af:dc:31:dc:06:04:df:8c:e7:5d:b9:f6:c8:
56:05:a7:26:5d:a6:0d:0d:45:a0:79:c4:89:44:08:76:cb:7e:
35:d9:9d:a3:27:af:a7:74:1d:71:64:0a:c8:fb:2f:f4:2d:ee:
42:ff:18:07:41:70:f2:4b:f6:82:08:dd:16:54:9f:81:50:89:
73:b6:c2:3c:9a:04:2c:09:76:71:91:a8:b3:94:2b:e5:5f:c8:
cf:3f:20:d9:9a:ec:34:1b:ac:bb:e4:ed:56:bb:e6:48:1e:d1:
3b:a9:52:1f:16:15:77:51:ac:30:0c:9e:1f:a0:a0:52:6b:84:
c6:73:71:7f:17:d1:97:d6:a4:5f:ab:d2:75:5c:6b:1a:50:b0:
23:3d:59:1f:5d:c2:b2:f4:ad:2a:5b:6c:a5:39:a0:97:64:64:
c0:88:ec:39:0b:9d:84:01:13:38:7c:76:28:67:5d:9a:63:12:
d9:f0:79:39:1e:e8:ce:3e:5b:a4:cd:97:e3:39:9b:19:13:94:
7f:26:69:9c:e6:6f:e8:8e:6e:66:d6:98:76:f0:d1:93:69:73:
7c:ff:af:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:18:02 2025 by rpki-client