Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
File: jz-dhbyzpBNjYsV3Pp0U455SlFM.mft (raw, json)
Hash identifier: Da4V6C66ALNrNs51J4l8C3ja7VwP28C0K3mRgEZDrNQ=
Subject key identifier: 39:5F:B3:FD:F3:98:4D:26:C7:B2:26:67:3D:36:1B:E4:B5:EF:17:8B
Authority key identifier: 8F:3F:9D:85:BC:B3:A4:13:63:62:C5:77:3E:9D:14:E3:9E:52:94:53
Certificate issuer: /CN=8f3f9d85bcb3a4136362c5773e9d14e39e529453
Certificate serial: 0199FCC68CD0384B850AE7030BD98355BF2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
Manifest number: 0745
Signing time: Sun 19 Oct 2025 14:01:34 +0000
Manifest this update: Sun 19 Oct 2025 14:01:34 +0000
Manifest next update: Mon 20 Oct 2025 14:01:34 +0000
Files and hashes: 1: D6_4qEi07gtXF5ITukzXeqcyPaY.roa (hash: BB8G1BDTfHCkkOszf3uysnvPnN4MWEDmW1B2B7aR3bY=)
2: jz-dhbyzpBNjYsV3Pp0U455SlFM.crl (hash: tb+0Pc78T5b+8TovOCzVimf5HesbGolL5b7h/IvqAhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:8c:d0:38:4b:85:0a:e7:03:0b:d9:83:55:bf:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3f9d85bcb3a4136362c5773e9d14e39e529453
Validity
Not Before: Oct 19 14:01:34 2025 GMT
Not After : Oct 20 14:01:34 2025 GMT
Subject: CN=395fb3fdf3984d26c7b226673d361be4b5ef178b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ec:97:29:a9:ee:64:ff:a4:01:d8:06:9d:ed:
69:14:c1:96:da:b7:13:8d:a5:72:53:8d:22:cc:31:
fc:2d:3b:43:fa:ae:89:22:04:23:a1:37:12:54:07:
01:ca:6e:a1:e5:1f:1b:ec:53:38:84:62:d3:d0:7b:
34:73:81:1c:1f:fa:93:46:3d:3a:de:88:c5:60:57:
28:9f:24:3b:06:cb:28:3e:18:0d:43:8a:82:20:d9:
a3:20:c4:be:e4:74:07:f3:8f:3b:0e:fa:4e:63:a1:
d1:73:de:20:5f:bb:9f:70:b6:f1:0c:ed:fe:40:6b:
22:53:31:44:b2:fa:04:1a:b4:88:b3:b4:bc:40:f1:
b3:9d:1a:54:34:23:f2:ff:59:3b:98:c1:c7:80:d5:
8a:9b:87:0a:d9:77:fc:4d:88:20:b5:6c:40:b6:01:
c1:e4:96:05:13:bc:d6:6e:f8:fd:a9:17:3a:0e:95:
e3:d6:77:b3:cf:e0:db:0e:1f:0a:63:a9:08:d2:ad:
c7:04:c8:3c:21:f2:cc:e7:a1:26:ab:67:dc:8c:a7:
73:75:66:7d:fa:08:40:f5:8f:52:19:b9:94:99:27:
0c:dd:c5:43:c5:0d:2d:c1:d9:32:be:c7:fd:bc:1d:
8b:14:48:c9:c3:49:fc:0c:86:68:fe:77:38:fb:2b:
47:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:5F:B3:FD:F3:98:4D:26:C7:B2:26:67:3D:36:1B:E4:B5:EF:17:8B
X509v3 Authority Key Identifier:
keyid:8F:3F:9D:85:BC:B3:A4:13:63:62:C5:77:3E:9D:14:E3:9E:52:94:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f8:d1:bd:22:dc:c0:e1:ea:60:b9:82:b6:6b:ce:11:65:77:
ff:0d:24:a5:0a:9d:d4:6f:c8:8f:0b:d7:4b:4c:0c:84:18:2a:
26:cb:3c:32:e4:d1:92:b2:d4:47:e8:42:bd:db:7e:f4:c2:22:
f1:9c:b0:c5:b0:14:45:39:08:fe:9a:e3:21:19:44:e2:3f:0b:
7d:4a:03:47:b8:5b:ea:37:97:cd:9c:41:0d:23:ee:52:34:33:
d6:13:52:f0:39:89:97:3a:3d:40:e4:2b:58:7b:53:9e:37:69:
86:32:a7:f3:1c:c5:04:07:01:83:13:63:85:dc:24:c5:2d:72:
5e:bb:a3:cf:a5:f9:57:28:d3:95:a5:73:f2:45:3f:6a:ff:7f:
17:68:d5:d6:e2:c9:ab:48:44:9e:d8:85:92:2a:8a:1d:a9:27:
79:3e:a7:de:f7:77:45:90:99:e9:08:76:99:f8:99:0f:52:65:
51:94:a4:09:b6:81:af:44:77:9d:ac:c8:18:28:d9:3e:11:c8:
84:61:a8:16:69:3d:fc:7c:a4:b3:d5:18:44:a9:7d:18:86:09:
df:c6:f8:e6:e5:58:74:00:16:1e:77:cc:66:7f:c9:5b:90:2f:
92:44:b2:b7:5a:f0:26:14:5f:4b:e7:9d:d5:80:54:36:c4:f7:
2e:55:ef:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xozQOEuFCucDC9mDVb8sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmM2Y5ZDg1YmNiM2E0MTM2MzYyYzU3NzNlOWQxNGUzOWU1
Mjk0NTMwHhcNMjUxMDE5MTQwMTM0WhcNMjUxMDIwMTQwMTM0WjAzMTEwLwYDVQQD
EygzOTVmYjNmZGYzOTg0ZDI2YzdiMjI2NjczZDM2MWJlNGI1ZWYxNzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOyXKanuZP+kAdgGne1pFMGW2rcT
jaVyU40izDH8LTtD+q6JIgQjoTcSVAcBym6h5R8b7FM4hGLT0Hs0c4EcH/qTRj06
3ojFYFconyQ7BssoPhgNQ4qCINmjIMS+5HQH8487DvpOY6HRc94gX7ufcLbxDO3+
QGsiUzFEsvoEGrSIs7S8QPGznRpUNCPy/1k7mMHHgNWKm4cK2Xf8TYggtWxAtgHB
5JYFE7zWbvj9qRc6DpXj1nezz+DbDh8KY6kI0q3HBMg8IfLM56Emq2fcjKdzdWZ9
+ghA9Y9SGbmUmScM3cVDxQ0twdkyvsf9vB2LFEjJw0n8DIZo/nc4+ytHNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDlfs/3zmE0mx7ImZz02G+S17xeLMB8GA1UdIwQY
MBaAFI8/nYW8s6QTY2LFdz6dFOOeUpRTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanotZGhieXpwQk5qWXNWM1BwMFU0NTVTbEZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9iYjBiYmEtZjA5NS00MjNlLTkyZDIt
Nzk5NWJmNjA4MDNiLzEvanotZGhieXpwQk5qWXNWM1BwMFU0NTVTbEZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9iYjBiYmEtZjA5NS00MjNlLTkyZDItNzk5NWJmNjA4MDNi
LzEvanotZGhieXpwQk5qWXNWM1BwMFU0NTVTbEZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdvjRvSLc
wOHqYLmCtmvOEWV3/w0kpQqd1G/IjwvXS0wMhBgqJss8MuTRkrLUR+hCvdt+9MIi
8ZywxbAURTkI/prjIRlE4j8LfUoDR7hb6jeXzZxBDSPuUjQz1hNS8DmJlzo9QOQr
WHtTnjdphjKn8xzFBAcBgxNjhdwkxS1yXrujz6X5VyjTlaVz8kU/av9/F2jV1uLJ
q0hEntiFkiqKHakneT6n3vd3RZCZ6Qh2mfiZD1JlUZSkCbaBr0R3nazIGCjZPhHI
hGGoFmk9/Hyks9UYRKl9GIYJ38b45uVYdAAWHnfMZn/JW5AvkkSyt1rwJhRfS+ed
1YBUNsT3LlXvRQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:33 2025 by rpki-client