Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft
File: pj_zsazNggGkEWyYdXM5I0KJgB4.mft (raw, json)
Hash identifier: zMtAC0eX91PDKn8AgeUcx1R8wNy6drB3UXPVWhoI/qw=
Subject key identifier: 77:A9:49:BC:48:69:27:16:4B:C5:3D:59:9A:E8:32:D5:A4:62:EC:A3
Authority key identifier: A6:3F:F3:B1:AC:CD:82:01:A4:11:6C:98:75:73:39:23:42:89:80:1E
Certificate issuer: /CN=a63ff3b1accd8201a4116c98757339234289801e
Certificate serial: 019A70A58AC1479C8E76ECD546A244CC7C9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft
Manifest number: 05E5
Signing time: Tue 11 Nov 2025 02:01:28 +0000
Manifest this update: Tue 11 Nov 2025 02:01:28 +0000
Manifest next update: Wed 12 Nov 2025 02:01:28 +0000
Files and hashes: 1: mbvBXE7Ze3cn1Ev3k2dL5On_YTs.roa (hash: YK3JNqfED7VqhxPOSKGy2n6p5fg+7MEO42BqGf+EejI=)
2: pj_zsazNggGkEWyYdXM5I0KJgB4.crl (hash: Zs4wy2JZtkZ7S7RH7qtyoGwfJ3El/5gGNXoIuOfwm+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:8a:c1:47:9c:8e:76:ec:d5:46:a2:44:cc:7c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63ff3b1accd8201a4116c98757339234289801e
Validity
Not Before: Nov 11 02:01:28 2025 GMT
Not After : Nov 12 02:01:28 2025 GMT
Subject: CN=77a949bc486927164bc53d599ae832d5a462eca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:48:f7:2d:32:04:e9:39:8a:d8:0d:c5:ee:6b:
d9:cf:b7:e9:04:0c:dd:82:17:cd:30:fc:9a:aa:5a:
cb:d2:27:06:c6:bf:0f:7d:23:7f:bc:1d:7b:09:8a:
77:43:07:98:3d:25:2e:b5:5d:66:32:49:97:6b:55:
e8:66:9e:4a:95:fe:81:71:37:62:2a:e1:22:ef:2a:
a4:0d:fb:00:33:f8:10:e9:17:62:c2:e5:d5:df:6d:
0e:58:51:aa:bf:94:06:61:22:99:5f:d9:b3:da:90:
6a:b9:08:17:5c:4f:5b:13:0e:88:bd:ad:09:33:8f:
87:76:77:75:d2:21:aa:b9:c0:7e:5f:a0:6c:9c:71:
1b:c0:42:5b:94:ee:f1:f7:f7:d4:40:3b:91:50:0e:
24:72:95:f5:ba:7f:1e:88:3f:e6:fa:61:fc:db:99:
97:a9:af:05:16:ff:2f:49:73:12:13:27:09:f6:92:
45:74:fb:54:cf:c9:75:d3:d6:b7:ff:ab:27:88:1c:
df:d8:dd:f8:11:41:10:51:b6:62:44:5d:5d:ac:d4:
b1:87:9d:88:e2:c6:6c:dd:33:e1:f4:0e:63:7a:48:
6b:97:d1:e9:f9:73:36:c8:5f:37:4c:af:46:3c:08:
03:4f:54:92:3b:55:5e:99:d9:f1:5d:db:cd:8c:3f:
0b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A9:49:BC:48:69:27:16:4B:C5:3D:59:9A:E8:32:D5:A4:62:EC:A3
X509v3 Authority Key Identifier:
keyid:A6:3F:F3:B1:AC:CD:82:01:A4:11:6C:98:75:73:39:23:42:89:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d3:d4:30:83:5f:45:d7:06:72:23:33:f6:41:b9:29:fd:f7:
25:6c:4f:b9:c7:ea:c4:6b:08:dd:4d:ec:85:7c:6e:a6:2a:dd:
0b:e4:93:c6:35:60:28:95:92:ab:e8:e3:73:ed:9d:05:7b:d2:
ad:df:aa:e1:88:7c:ff:2c:9a:04:9d:e8:12:8f:b2:7e:d8:4f:
ac:c8:81:71:5a:d5:30:6b:8f:ed:eb:53:23:6e:86:d0:ae:35:
f3:43:60:10:f8:4c:be:6c:38:15:82:80:0a:b1:07:ec:b3:7e:
bc:23:71:3b:1d:f3:25:2b:86:6f:bd:78:3a:5b:93:2d:98:f1:
16:2a:69:95:11:f8:17:0f:86:3f:67:61:6c:55:5b:6f:b2:31:
e1:02:89:d1:c7:eb:05:7a:f1:8a:74:8b:f2:85:eb:01:fe:cf:
f3:08:13:30:73:4a:69:ba:88:24:a7:76:00:9b:01:56:a8:db:
e6:49:b3:dd:5a:b9:7b:e6:5f:73:c7:63:c7:8b:ce:31:01:4d:
38:45:01:57:7e:1e:82:a7:2f:ab:71:62:eb:1e:69:43:71:20:
f8:96:54:97:07:87:27:b4:e8:94:1b:cd:d0:8d:7f:62:1a:68:
6f:fb:37:7a:41:f6:a3:bd:d5:15:62:f1:49:de:fc:13:b9:97:
57:05:1c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:11 2025 by rpki-client