Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
File: jz-dhbyzpBNjYsV3Pp0U455SlFM.mft (raw, json)
Hash identifier: wXc71mSG7LyWD9MAuyCc4ztLw8DYhp0wOxeA1FockPk=
Subject key identifier: C9:40:93:D6:D2:28:6A:2B:49:46:78:F3:86:B0:6F:53:CB:F6:34:00
Authority key identifier: 8F:3F:9D:85:BC:B3:A4:13:63:62:C5:77:3E:9D:14:E3:9E:52:94:53
Certificate issuer: /CN=8f3f9d85bcb3a4136362c5773e9d14e39e529453
Certificate serial: 0197BB5962DE9D131B76BF59C6E055ADF00C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
Manifest number: 061A
Signing time: Sun 29 Jun 2025 11:01:26 +0000
Manifest this update: Sun 29 Jun 2025 11:01:26 +0000
Manifest next update: Mon 30 Jun 2025 11:01:26 +0000
Files and hashes: 1: D6_4qEi07gtXF5ITukzXeqcyPaY.roa (hash: BB8G1BDTfHCkkOszf3uysnvPnN4MWEDmW1B2B7aR3bY=)
2: jz-dhbyzpBNjYsV3Pp0U455SlFM.crl (hash: rlIdt+DNGP9NzHY2u2zJf4RWEMCzBmJmTVPdC9DXuzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:59:62:de:9d:13:1b:76:bf:59:c6:e0:55:ad:f0:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3f9d85bcb3a4136362c5773e9d14e39e529453
Validity
Not Before: Jun 29 11:01:26 2025 GMT
Not After : Jun 30 11:01:26 2025 GMT
Subject: CN=c94093d6d2286a2b494678f386b06f53cbf63400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:56:67:0d:36:73:6a:59:a9:bd:5f:0b:8b:a9:
2a:75:99:29:64:77:26:3b:ae:1c:7c:4b:d5:38:7b:
3f:80:68:a5:9d:26:53:15:b7:99:c4:24:6a:88:fe:
03:d0:31:66:a6:39:a6:9c:52:cd:d0:e0:84:93:53:
16:04:86:28:bd:b2:72:e0:d8:3a:4d:ee:9b:4c:46:
dd:48:b8:74:a2:1f:95:cd:6a:3c:ff:75:ee:2f:6d:
a3:12:f8:da:2c:44:d0:bd:6d:63:a0:51:d5:a6:6a:
ca:9e:b5:73:c1:c7:ae:12:56:94:85:ff:1e:a5:a8:
e8:78:38:bd:8d:41:7f:0f:00:0a:e7:20:2c:5f:b6:
ad:6e:18:f4:2f:91:ee:a7:e5:14:1f:2e:21:ca:0f:
ee:70:a4:9a:bf:f8:0c:85:2e:60:64:31:03:13:93:
fe:f0:a7:bf:e1:63:7c:32:42:21:62:9b:a7:3a:af:
5b:21:70:9a:1c:e3:a7:b9:94:10:64:05:b0:a4:30:
ab:b6:41:bc:3d:a5:f7:20:dc:b4:41:d9:85:f6:bd:
94:40:93:d1:17:21:89:ff:dc:09:7f:69:a3:c7:63:
91:41:44:18:73:de:a9:97:41:b0:d0:69:54:e4:9f:
e3:11:3a:27:6e:8b:92:e5:ee:73:24:f0:ea:ab:83:
5c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:40:93:D6:D2:28:6A:2B:49:46:78:F3:86:B0:6F:53:CB:F6:34:00
X509v3 Authority Key Identifier:
keyid:8F:3F:9D:85:BC:B3:A4:13:63:62:C5:77:3E:9D:14:E3:9E:52:94:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:69:62:1c:8a:ee:ec:f0:f3:4a:8a:d3:24:a4:b1:90:9a:94:
74:77:30:e3:aa:fa:9e:58:2a:dd:54:2c:87:bd:93:29:cb:0b:
0f:51:ad:f5:17:79:83:07:17:6e:51:e5:99:f3:a9:a1:62:7b:
8b:d0:24:c7:3f:69:b0:5e:26:0c:2b:c8:61:44:0b:d4:b7:be:
4b:92:4d:16:36:19:4e:d1:f1:06:25:f4:71:19:11:99:b7:ec:
91:4f:83:ea:87:28:b0:f5:92:87:16:1d:05:0b:06:cb:35:4b:
ac:9a:00:8f:7a:3c:d3:9d:4a:1a:1f:f1:2a:0f:19:be:cf:22:
a5:cc:b5:1b:a1:35:05:89:44:10:4f:38:79:60:46:de:86:18:
66:14:0f:7d:f2:3f:23:e2:9a:ee:09:ce:5e:65:23:dc:52:20:
98:9d:b3:aa:3a:1e:59:85:ca:14:a8:57:4b:67:0e:db:2b:05:
d2:99:ef:ca:6a:84:16:80:32:fa:62:bc:67:2e:48:bb:28:75:
29:31:97:11:fe:ba:e7:ed:8a:19:ec:58:04:16:d9:80:75:eb:
1e:c2:7c:9d:2c:ce:fb:1e:c6:e3:e5:44:d6:f6:e5:7e:48:ce:
ad:0a:0b:75:e6:f5:a6:de:59:f6:41:94:54:8c:14:70:84:3c:
1a:ae:b3:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe7WWLenRMbdr9ZxuBVrfAMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmM2Y5ZDg1YmNiM2E0MTM2MzYyYzU3NzNlOWQxNGUzOWU1
Mjk0NTMwHhcNMjUwNjI5MTEwMTI2WhcNMjUwNjMwMTEwMTI2WjAzMTEwLwYDVQQD
EyhjOTQwOTNkNmQyMjg2YTJiNDk0Njc4ZjM4NmIwNmY1M2NiZjYzNDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8FZnDTZzalmpvV8Li6kqdZkpZHcm
O64cfEvVOHs/gGilnSZTFbeZxCRqiP4D0DFmpjmmnFLN0OCEk1MWBIYovbJy4Ng6
Te6bTEbdSLh0oh+VzWo8/3XuL22jEvjaLETQvW1joFHVpmrKnrVzwceuElaUhf8e
pajoeDi9jUF/DwAK5yAsX7atbhj0L5Hup+UUHy4hyg/ucKSav/gMhS5gZDEDE5P+
8Ke/4WN8MkIhYpunOq9bIXCaHOOnuZQQZAWwpDCrtkG8PaX3INy0QdmF9r2UQJPR
FyGJ/9wJf2mjx2ORQUQYc96pl0Gw0GlU5J/jETonbouS5e5zJPDqq4NcSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMlAk9bSKGorSUZ484awb1PL9jQAMB8GA1UdIwQY
MBaAFI8/nYW8s6QTY2LFdz6dFOOeUpRTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanotZGhieXpwQk5qWXNWM1BwMFU0NTVTbEZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9iYjBiYmEtZjA5NS00MjNlLTkyZDIt
Nzk5NWJmNjA4MDNiLzEvanotZGhieXpwQk5qWXNWM1BwMFU0NTVTbEZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9iYjBiYmEtZjA5NS00MjNlLTkyZDItNzk5NWJmNjA4MDNi
LzEvanotZGhieXpwQk5qWXNWM1BwMFU0NTVTbEZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMmliHIru
7PDzSorTJKSxkJqUdHcw46r6nlgq3VQsh72TKcsLD1Gt9Rd5gwcXblHlmfOpoWJ7
i9Akxz9psF4mDCvIYUQL1Le+S5JNFjYZTtHxBiX0cRkRmbfskU+D6ocosPWShxYd
BQsGyzVLrJoAj3o8051KGh/xKg8Zvs8ipcy1G6E1BYlEEE84eWBG3oYYZhQPffI/
I+Ka7gnOXmUj3FIgmJ2zqjoeWYXKFKhXS2cO2ysF0pnvymqEFoAy+mK8Zy5Iuyh1
KTGXEf665+2KGexYBBbZgHXrHsJ8nSzO+x7G4+VE1vblfkjOrQoLdeb1pt5Z9kGU
VIwUcIQ8Gq6ziA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 14:33:21 2025 by rpki-client