Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
File: jzHMNgWz78CbJohQgGO2_UhVYd0.mft (raw, json)
Hash identifier: dl5UunxUkdYw2AbSlI6m8dEDgUDwsTtQnlKeg6WRq6M=
Subject key identifier: B3:7C:AF:65:F7:C7:F6:BF:02:04:1D:1A:33:B7:28:E9:AB:C2:7D:53
Authority key identifier: 8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD
Certificate issuer: /CN=8f31cc3605b3efc09b2688508063b6fd485561dd
Certificate serial: 019934250135916C266E4F04493C4D1D55C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
Manifest number: 0B5F
Signing time: Wed 10 Sep 2025 15:01:04 +0000
Manifest this update: Wed 10 Sep 2025 15:01:04 +0000
Manifest next update: Thu 11 Sep 2025 15:01:04 +0000
Files and hashes: 1: KGShywXbD4wB1PLsBTNT01VDQKY.roa (hash: hBh9EiIl2TqddpHizY/LGkFYV3Ncy9Yws3g05SvVJTg=)
2: jzHMNgWz78CbJohQgGO2_UhVYd0.crl (hash: GZriWVmpXOGb7Ni7vqEKWdg2uMVGTacFzvXcZGfeGSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:25:01:35:91:6c:26:6e:4f:04:49:3c:4d:1d:55:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f31cc3605b3efc09b2688508063b6fd485561dd
Validity
Not Before: Sep 10 15:01:04 2025 GMT
Not After : Sep 11 15:01:04 2025 GMT
Subject: CN=b37caf65f7c7f6bf02041d1a33b728e9abc27d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e8:e0:79:67:12:1b:c0:83:55:c0:b7:b6:a3:
11:db:f4:96:91:06:91:96:ff:c8:16:2c:9f:0a:07:
55:e4:ba:9f:64:04:6a:33:f7:94:a0:97:78:bb:92:
56:0f:16:2b:8d:a5:81:59:b1:b6:d0:61:7c:86:16:
d8:05:e5:d2:42:33:89:05:01:c4:90:4a:dc:54:94:
06:70:44:5d:54:a4:1c:77:97:38:7b:14:2f:7c:0c:
35:49:79:84:34:33:3f:66:b3:f1:83:a4:00:15:9e:
f9:de:a8:90:16:ef:da:63:a1:4b:fc:b4:1b:9f:3f:
26:bc:21:b2:20:2f:bc:cb:3a:0f:75:36:69:d7:3b:
0a:4c:de:69:ba:de:57:23:f2:fc:da:84:a7:3d:96:
89:ed:b1:85:b0:13:e9:6f:1a:54:e6:06:94:85:15:
f7:00:1f:7b:86:69:92:7a:32:47:5d:64:41:14:aa:
bb:d9:19:4f:60:9b:48:c8:84:f7:8e:38:a9:01:a6:
60:27:89:f7:b5:65:f1:70:26:91:c8:d5:3c:1d:c2:
4b:95:a9:38:bd:e3:40:d9:33:68:33:30:88:db:3c:
6c:db:1f:06:5c:66:26:5f:54:9f:7d:6c:8d:5f:53:
a2:fe:fa:96:29:07:fc:9c:ed:f3:99:25:45:2a:c9:
a9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:7C:AF:65:F7:C7:F6:BF:02:04:1D:1A:33:B7:28:E9:AB:C2:7D:53
X509v3 Authority Key Identifier:
keyid:8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:28:00:bf:e9:fe:29:cc:81:bd:d2:f5:72:17:02:de:14:25:
c1:df:d7:bf:1a:3d:a2:c3:91:94:ff:ee:c8:8c:6f:37:6b:e4:
bd:30:aa:45:6b:dc:0e:7c:80:a9:15:03:77:41:33:50:b7:74:
36:fa:f7:d8:28:f0:48:02:fe:e3:6f:12:8e:16:a1:8d:2e:2e:
e9:8d:6f:f8:19:77:9c:1b:9e:04:28:b9:98:d5:f7:1c:6c:4c:
bc:c9:b2:77:29:3a:2f:b5:a1:33:05:fe:34:84:3b:77:fd:cd:
c3:1b:e1:52:88:95:27:b0:2c:7a:27:9c:1e:99:04:28:94:3e:
f0:2f:68:f0:f2:ff:ff:08:1d:0d:27:a1:e8:d6:0a:ef:97:d3:
34:3b:fa:5a:89:a2:c5:5a:fc:65:de:04:f8:16:3c:58:aa:0d:
c2:0a:7c:b7:c1:e6:d1:1a:20:b6:5f:21:ca:1a:f3:ed:51:4a:
ee:d5:57:28:f2:2f:a2:19:74:e2:a1:66:84:bf:b0:1c:03:86:
31:8c:a4:ca:15:74:b4:cf:9f:34:39:ab:3a:ef:2d:84:8b:eb:
fa:99:96:49:d1:da:46:f6:e4:e9:fa:85:7a:36:02:7a:74:5e:
90:8a:43:88:0b:d5:f7:90:dc:30:60:60:aa:9e:1e:d2:3d:54:
35:5e:b8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:13:20 2025 by rpki-client