Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
File: jzj4WeXmdmKuCZkPOE-obJMnEKs.mft (raw, json)
Hash identifier: qI+/f1Mv0ZfVYlebH69svIi8ajxeCr6YQ5ul//L6VVw=
Subject key identifier: 46:DC:78:24:32:8B:D1:E0:3E:BA:23:A0:ED:DA:2F:5D:24:9F:07:10
Authority key identifier: 8F:38:F8:59:E5:E6:76:62:AE:09:99:0F:38:4F:A8:6C:93:27:10:AB
Certificate issuer: /CN=8f38f859e5e67662ae09990f384fa86c932710ab
Certificate serial: 0198D472BC0E77AAF8F86E41EDD70F5F307A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
Manifest number: 05EE
Signing time: Sat 23 Aug 2025 01:02:25 +0000
Manifest this update: Sat 23 Aug 2025 01:02:25 +0000
Manifest next update: Sun 24 Aug 2025 01:02:25 +0000
Files and hashes: 1: 9gswIUnAaS1IBv5fuNBqUKNMfqs.roa (hash: lylk+NlcGPhSxgLHOS7jiDLjzNF20oemeodaYXlxSEQ=)
2: jzj4WeXmdmKuCZkPOE-obJMnEKs.crl (hash: 9RMeSvBdZBBKX4nDCq549Yjvf7X5R1fRyo1+RrbTWu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:bc:0e:77:aa:f8:f8:6e:41:ed:d7:0f:5f:30:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f38f859e5e67662ae09990f384fa86c932710ab
Validity
Not Before: Aug 23 01:02:25 2025 GMT
Not After : Aug 24 01:02:25 2025 GMT
Subject: CN=46dc7824328bd1e03eba23a0edda2f5d249f0710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ce:b5:cc:ae:af:e3:f2:84:77:74:fb:7b:b8:
11:cf:fc:77:c9:d1:be:d4:df:49:27:8e:ca:b1:7f:
a0:bd:44:f3:a6:84:48:7c:a0:18:bf:95:a5:68:d6:
64:59:32:4c:38:0a:d3:cd:86:b2:4a:3d:21:2b:cd:
9b:fa:44:68:cf:3d:02:aa:59:62:f0:6c:59:78:4f:
67:90:d9:01:8a:15:f3:26:16:1d:8c:02:3c:d6:dd:
e4:6b:98:40:95:be:42:c5:60:2f:3f:22:09:b8:a9:
b0:67:0b:d4:79:23:89:56:9d:1f:7f:48:f8:52:6d:
ee:54:13:48:bb:89:ad:f7:05:8f:96:1f:af:fd:f9:
c1:78:33:0b:be:00:35:64:17:f7:9d:28:4e:e1:6c:
86:2e:2b:90:60:6e:38:3a:5b:3c:7c:6b:fd:09:85:
41:44:5f:e6:39:b1:4e:77:09:f2:7f:72:e9:f9:72:
5e:03:3f:ae:30:ed:33:6b:83:92:13:12:cc:a7:15:
08:61:53:df:43:ef:42:80:71:a2:7c:5c:87:7b:d0:
95:f3:c4:3d:e3:20:3b:56:68:e1:45:ef:57:56:0c:
f8:1a:d4:5d:03:ed:7f:2e:26:33:78:2c:69:ff:53:
03:19:61:6d:94:6d:cf:ac:92:b3:c1:86:8c:1a:be:
fe:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DC:78:24:32:8B:D1:E0:3E:BA:23:A0:ED:DA:2F:5D:24:9F:07:10
X509v3 Authority Key Identifier:
keyid:8F:38:F8:59:E5:E6:76:62:AE:09:99:0F:38:4F:A8:6C:93:27:10:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:36:04:82:ef:b4:0e:90:f6:04:14:96:58:58:54:4e:39:36:
6e:04:d9:e9:52:99:45:bd:82:e3:e1:47:45:0a:92:26:11:15:
3f:be:6f:9a:e0:7b:4d:ba:66:cb:98:39:89:fa:4d:67:d8:1d:
52:06:e4:77:a3:ef:c6:f8:0f:37:b3:db:25:b7:74:3a:ac:20:
e2:5b:d3:e6:ca:39:1d:93:b4:14:05:4f:bd:e7:c9:7f:9c:66:
61:a7:ef:28:8f:1c:5a:87:4a:95:dd:c3:73:80:60:a8:19:bb:
22:0a:7d:73:46:ea:90:21:b1:b3:44:9d:61:56:ec:2c:2b:08:
19:6e:22:fc:3c:71:5e:f0:91:20:a3:31:2f:03:6c:5b:3e:28:
6d:d6:24:a4:ad:ed:d2:de:27:b7:20:4a:b9:f4:82:3a:75:31:
80:62:2e:dd:5b:18:62:cc:91:e9:df:90:c6:9c:ee:0a:ae:6f:
11:01:e5:ee:f1:5d:87:3d:53:d6:07:73:0b:8e:2f:0f:71:85:
95:86:d9:ab:6c:73:ab:95:80:74:c0:8e:92:79:32:f8:b0:f2:
84:42:c9:d3:a0:3c:fa:bd:bd:81:ba:07:d9:5c:14:52:b5:2f:
e0:31:a8:f8:7b:86:bf:c3:fe:4a:6a:ab:19:b7:b3:5b:4c:6d:
86:ed:5f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:17 2025 by rpki-client