Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
File: jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft (raw, json)
Hash identifier: LjN1l1ggFNiDGJ0P7CjFaZ3eovwxAfyZne0jtu9nir8=
Subject key identifier: D6:CF:2D:3E:83:DB:DE:62:0A:2D:2E:9A:34:80:18:A8:B8:DB:42:BB
Authority key identifier: 8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6
Certificate issuer: /CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
Certificate serial: 019A3AC8AC8CF65D0DE0E182C6BEBC1FF24A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
Manifest number: 1695
Signing time: Fri 31 Oct 2025 15:00:21 +0000
Manifest this update: Fri 31 Oct 2025 15:00:21 +0000
Manifest next update: Sat 01 Nov 2025 15:00:21 +0000
Files and hashes: 1: 77z8QXKc8ERahKIbASlcnYfSpXA.roa (hash: 4+qUdKw0CqogSD0bEzw5oz5fN5HdO2eQJ/PSKGd57hQ=)
2: Vp9dMAyfVmCM5zZQhLE8hK5dRc0.roa (hash: 5cnih+GaWo66TQ4L2W2BbOxLKl4dL4P027VTj45pMMU=)
3: jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl (hash: VQe+aFfAeZLRs6XniOm51x3vGOBn3VSwMVS4o08UgfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3a:c8:ac:8c:f6:5d:0d:e0:e1:82:c6:be:bc:1f:f2:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
Validity
Not Before: Oct 31 15:00:21 2025 GMT
Not After : Nov 1 15:00:21 2025 GMT
Subject: CN=d6cf2d3e83dbde620a2d2e9a348018a8b8db42bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:95:7b:97:1c:ca:32:ca:4a:95:31:66:19:41:
8b:22:12:f3:c0:0b:3f:d4:5d:54:4b:c9:5d:87:da:
c4:ae:9f:d4:b3:08:8f:8c:d5:10:60:2b:2d:53:90:
d1:69:c7:13:c0:e8:9f:f8:9f:47:9f:45:f7:fd:84:
4a:38:67:3a:28:60:e2:75:18:6e:96:c3:b6:c1:c6:
50:80:7b:be:12:f6:f8:10:3d:9c:6f:62:9b:a6:74:
a6:00:de:20:ea:94:50:37:53:66:c9:8a:68:80:dc:
15:45:e9:84:5d:17:bb:a0:2b:d8:ed:1c:22:d6:73:
cb:3a:56:72:84:d5:c8:f1:66:81:7c:6e:c5:74:e1:
7b:1e:52:73:6d:c8:49:20:19:7f:aa:98:61:ec:29:
e6:a7:90:4b:08:5c:d6:9c:26:a1:bc:66:36:ba:3c:
88:7a:e7:d5:2e:29:f9:47:bb:ba:13:13:05:60:97:
e7:cc:3a:90:0d:a6:39:13:e9:18:7c:4f:73:cc:3a:
78:34:81:b8:06:73:fc:13:96:35:6f:bc:f3:f5:d0:
80:1f:43:91:ca:88:7e:a2:3e:cc:8a:e5:d2:f1:77:
2b:06:bd:75:b2:87:bd:45:97:59:96:77:61:35:06:
45:ef:e2:b2:d9:21:5f:b2:95:04:01:6d:15:f7:46:
83:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CF:2D:3E:83:DB:DE:62:0A:2D:2E:9A:34:80:18:A8:B8:DB:42:BB
X509v3 Authority Key Identifier:
keyid:8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:9d:72:1c:cd:fe:96:1e:7d:8f:0b:09:7e:6c:04:6c:04:58:
d4:64:ea:dd:71:0f:30:83:e5:f6:c1:61:1d:95:b5:ac:4b:cc:
b3:2c:f4:93:4d:62:b0:d0:f7:27:dd:a4:0c:ca:a4:2c:a8:f1:
8b:37:75:06:da:8e:47:7a:9d:6d:61:69:2b:b1:05:e4:62:b0:
78:7c:6a:c7:34:7b:bb:e8:97:ea:9c:0f:c2:81:be:80:62:d2:
f4:a4:af:05:66:53:a0:09:c8:ce:12:23:47:59:35:44:ad:c7:
37:28:1f:b9:9b:77:33:f3:13:19:a1:38:2b:45:53:a3:db:93:
ec:bd:af:47:53:bf:6d:dd:23:50:05:9a:49:20:b1:10:1d:06:
25:e2:e9:1d:8f:ee:ab:cf:59:05:70:6a:43:a0:ad:57:3c:97:
fc:b4:8c:7f:84:d9:39:6d:f8:a1:f8:70:4b:92:3e:93:1d:1d:
0c:29:09:b4:14:7b:94:17:47:82:56:8a:e2:7d:b5:11:ac:18:
3c:29:02:95:fa:e1:db:b3:e5:19:7e:bf:76:cc:cc:5b:b7:f0:
d9:3e:ac:a5:32:5c:6f:e8:4b:9a:c8:ff:be:5e:fa:86:02:67:
b4:20:3c:a4:31:2f:6a:36:e1:bc:0c:2e:73:a2:10:b1:8e:9e:
98:c3:94:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 19:18:24 2025 by rpki-client