Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
File: jzHMNgWz78CbJohQgGO2_UhVYd0.mft (raw, json)
Hash identifier: H1HZ12mB22pXAgLIuaMw2oPULrYVohujW2MBRKG1wzA=
Subject key identifier: CF:78:AC:FA:79:6B:7B:3F:62:AE:B4:72:C5:36:44:C5:BE:0C:B2:0F
Authority key identifier: 8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD
Certificate issuer: /CN=8f31cc3605b3efc09b2688508063b6fd485561dd
Certificate serial: 019A21ADF89D6E0B79E42941E9E947B2E2F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
Manifest number: 0BDA
Signing time: Sun 26 Oct 2025 18:00:40 +0000
Manifest this update: Sun 26 Oct 2025 18:00:40 +0000
Manifest next update: Mon 27 Oct 2025 18:00:40 +0000
Files and hashes: 1: KGShywXbD4wB1PLsBTNT01VDQKY.roa (hash: hBh9EiIl2TqddpHizY/LGkFYV3Ncy9Yws3g05SvVJTg=)
2: jzHMNgWz78CbJohQgGO2_UhVYd0.crl (hash: jl0n7aSFmaG5mB23DpP9EPusk0AYMQOmRQIznWZWsAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 18:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ad:f8:9d:6e:0b:79:e4:29:41:e9:e9:47:b2:e2:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f31cc3605b3efc09b2688508063b6fd485561dd
Validity
Not Before: Oct 26 18:00:40 2025 GMT
Not After : Oct 27 18:00:40 2025 GMT
Subject: CN=cf78acfa796b7b3f62aeb472c53644c5be0cb20f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2f:66:46:b9:83:a8:50:92:1d:65:18:d7:b4:
eb:20:a6:b5:d1:4b:2e:a2:c6:e0:31:17:c1:b0:b8:
ca:ee:78:2d:eb:7d:93:33:7f:24:96:42:09:0f:0f:
e3:a1:95:9c:f3:f4:6b:4e:76:74:87:4a:ed:f0:16:
86:cd:13:23:60:8d:2d:7f:98:ce:79:42:68:3c:b5:
2c:cc:92:68:47:1b:c7:d1:68:e3:08:d0:1c:e2:eb:
ed:2e:d9:2d:13:5b:45:8f:91:5d:08:fd:a2:b6:f6:
a5:c0:7a:54:2b:42:80:78:8d:69:b7:82:25:e6:64:
a6:40:cc:0d:13:0a:ed:aa:b8:1d:cc:7c:4c:87:5b:
84:47:60:89:53:f8:7d:54:57:35:cf:6b:47:1b:8c:
3b:07:62:c7:8a:a6:e1:53:c3:3f:07:58:65:58:bf:
5a:94:03:94:db:70:68:9d:d1:93:60:61:65:55:46:
25:cc:3a:a3:cf:e1:d1:e3:cf:23:87:78:77:c1:e8:
e2:dc:a9:71:18:b9:a9:c8:e5:5a:11:cf:5c:c5:52:
00:33:49:e4:46:a4:9f:b2:ae:5b:23:fa:23:7d:69:
da:73:4a:fb:fd:81:6a:fd:f4:59:d6:54:4e:78:71:
05:cc:4c:d1:44:ea:e1:a8:1b:a5:ff:1d:3e:9b:51:
40:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:78:AC:FA:79:6B:7B:3F:62:AE:B4:72:C5:36:44:C5:BE:0C:B2:0F
X509v3 Authority Key Identifier:
keyid:8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f7:b4:3d:fa:2b:01:95:ab:ba:ab:c3:e7:a3:47:09:94:d0:
30:e4:82:66:43:66:8b:c1:ea:81:d7:8e:37:e7:91:ea:08:92:
e9:bb:bc:6c:57:4a:4b:8a:fe:df:89:e7:37:89:62:8b:84:47:
1a:43:2f:8b:8a:e6:34:a3:49:84:a6:7b:fc:1e:fa:33:b8:dc:
46:f0:e4:0d:53:58:2f:f8:58:43:a2:42:d5:18:26:d8:6a:f3:
f7:79:ef:27:68:38:87:f9:11:42:d6:b5:c6:f6:75:d4:bc:9f:
f3:7b:34:6e:68:7a:aa:f9:db:de:09:b4:49:af:9a:8b:67:f8:
19:d9:86:6e:39:c2:23:36:7a:e0:69:69:d3:f3:46:93:c5:66:
95:32:cf:d8:94:c8:71:9d:56:2e:bd:1c:6b:80:dd:04:33:7a:
e5:66:45:46:4f:c5:c0:90:f9:69:ed:83:c9:0b:22:ed:a1:f6:
16:c2:52:71:d2:96:bc:0d:db:94:9e:c0:fd:99:2c:93:b8:ef:
e5:d7:ed:3b:07:60:b3:c0:83:5f:b7:7e:7a:1c:b9:20:e6:a3:
a5:54:15:31:b4:6c:8a:08:2b:e7:f6:6f:46:5c:40:ee:a8:c8:
c4:1a:a4:8a:a8:b9:52:59:ba:55:b7:5a:7b:33:93:c9:67:c8:
29:9b:9c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 03:57:27 2025 by rpki-client