Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft
File: jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft (raw, json)
Hash identifier: oG1sT9H42KibKweZRZKfftM54Tx9IY//Wy/mKu6vDSA=
Subject key identifier: AA:DA:B3:55:4E:7F:65:6A:68:3D:C9:A1:85:4D:48:67:45:8B:55:B0
Authority key identifier: 8F:3D:CF:FC:A5:79:5A:47:FC:C2:E1:38:CE:54:73:E8:00:09:82:95
Certificate issuer: /CN=8f3dcffca5795a47fcc2e138ce5473e800098295
Certificate serial: 019A71B839894D257B2A5CD365342EB53D49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:01:29 +0000
Manifest this update: Tue 11 Nov 2025 07:01:29 +0000
Manifest next update: Wed 12 Nov 2025 07:01:29 +0000
Files and hashes: 1: aavUCeaqGsuo5nwd-mihXXwQfiI.roa (hash: OxgGdErcFeJc0UOAsG6nZs2JDUonjF0ySqzr57PwuHk=)
2: jz3P_KV5Wkf8wuE4zlRz6AAJgpU.crl (hash: 8i//ygQPbhW1B2J2QejFTfzGsG8uylFXM8KTZWtCBRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:39:89:4d:25:7b:2a:5c:d3:65:34:2e:b5:3d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3dcffca5795a47fcc2e138ce5473e800098295
Validity
Not Before: Nov 11 07:01:29 2025 GMT
Not After : Nov 12 07:01:29 2025 GMT
Subject: CN=aadab3554e7f656a683dc9a1854d4867458b55b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:56:b3:12:87:57:85:24:45:dc:df:72:6f:56:
52:78:8d:6e:9c:f8:6e:6d:9b:ea:0e:00:04:3c:92:
cb:0e:96:3b:11:2e:28:1e:eb:75:2c:33:6e:9a:bf:
77:92:da:ea:17:ff:38:64:2a:82:b9:98:7e:ed:30:
bf:3c:d5:07:5d:5c:43:e6:28:f6:8d:00:3f:1b:41:
c3:42:e4:5c:60:da:0d:a8:9f:79:47:20:84:92:f0:
d6:12:ca:b7:d6:d7:23:00:04:99:52:6e:1c:ad:1f:
dd:27:d6:4b:e2:ef:ee:49:22:4c:4f:07:2a:87:74:
c9:ff:cb:18:06:59:1c:46:9a:0f:6d:e5:00:48:15:
df:f8:e8:f6:83:d9:4e:b5:18:3a:45:7d:60:76:fa:
35:62:af:10:d8:ca:3e:8f:9c:eb:ce:b7:0f:0d:3a:
df:35:cf:c0:ae:2f:3c:e6:52:b3:8c:37:17:f0:e3:
f7:b4:18:79:fe:fb:25:5a:eb:f7:d4:d4:fa:84:09:
fe:75:06:2c:26:23:f7:2f:d8:1d:cd:0e:f9:9c:ea:
b7:77:d5:00:8f:9b:ac:26:c9:d4:db:d3:1d:74:1d:
a3:57:e4:f1:b4:58:29:23:03:e4:cd:51:f8:60:c9:
a1:49:70:85:1f:39:b5:76:de:fa:14:07:b1:cf:4d:
3a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:DA:B3:55:4E:7F:65:6A:68:3D:C9:A1:85:4D:48:67:45:8B:55:B0
X509v3 Authority Key Identifier:
keyid:8F:3D:CF:FC:A5:79:5A:47:FC:C2:E1:38:CE:54:73:E8:00:09:82:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e5:76:d4:3a:64:1d:08:a6:4d:b7:69:6e:73:4f:07:7f:12:
c2:c9:51:25:0a:be:4d:87:cb:4c:06:e3:40:d8:e8:1b:26:1d:
ac:7b:f0:70:dc:0e:4e:ed:ea:a7:d3:70:76:a2:95:f8:8d:d1:
c4:31:79:f9:2d:1d:33:b6:98:14:cf:90:74:74:3a:81:93:d2:
cb:87:e7:11:d3:fa:5f:7a:13:c2:b2:cc:23:bb:b4:24:19:37:
ee:f8:33:46:83:08:ca:12:5d:13:6d:89:86:c4:6a:3d:e2:9d:
68:65:2d:aa:e9:1c:db:66:31:8d:75:a7:21:d4:79:34:72:69:
9d:3e:6b:93:25:ba:6a:9f:0b:4b:9e:ce:a2:af:ea:ca:eb:34:
32:72:d7:9c:25:90:dd:95:00:e4:b8:e6:3d:97:9b:cd:48:36:
a9:46:f5:96:21:06:8e:6d:1b:91:f6:1f:3e:c0:9e:cb:9c:9b:
2d:92:3f:82:e0:5d:e5:0f:19:cb:bb:67:4c:9e:6e:1d:a8:0a:
fb:09:d9:63:45:c3:44:6d:17:88:6f:10:83:50:85:57:27:90:
53:ed:3a:63:83:92:7d:3f:c9:bb:a9:08:13:17:bb:7f:37:b0:
ed:f4:5f:52:5c:a4:0c:2f:08:4b:7d:3a:0c:28:d8:bc:dd:20:
43:64:7c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:56 2025 by rpki-client