Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
File: jzj4WeXmdmKuCZkPOE-obJMnEKs.mft (raw, json)
Hash identifier: YqVMdZo+ER5Ttp+i1s1c1IO0TjbYhCrMeSCVZATltts=
Subject key identifier: D6:05:9D:49:BE:82:B6:8A:C0:43:8B:21:79:FC:50:80:C0:73:63:86
Authority key identifier: 8F:38:F8:59:E5:E6:76:62:AE:09:99:0F:38:4F:A8:6C:93:27:10:AB
Certificate issuer: /CN=8f38f859e5e67662ae09990f384fa86c932710ab
Certificate serial: 0199FB7CC611107D880C699B02206BA9D43E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
Manifest number: 0687
Signing time: Sun 19 Oct 2025 08:01:22 +0000
Manifest this update: Sun 19 Oct 2025 08:01:22 +0000
Manifest next update: Mon 20 Oct 2025 08:01:22 +0000
Files and hashes: 1: jzj4WeXmdmKuCZkPOE-obJMnEKs.crl (hash: 6K8enuiOSGu25ky89MAN5PNLhtftwfPw96Tfdsg2A/4=)
2: mXZNCAaShrlimSsEo_YH_UI8tzI.roa (hash: wxRNwEaBB0xI2itx3IM16zmFJHf/VPdbXQUT5Ylcg2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:c6:11:10:7d:88:0c:69:9b:02:20:6b:a9:d4:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f38f859e5e67662ae09990f384fa86c932710ab
Validity
Not Before: Oct 19 08:01:22 2025 GMT
Not After : Oct 20 08:01:22 2025 GMT
Subject: CN=d6059d49be82b68ac0438b2179fc5080c0736386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:79:d5:a1:28:28:82:b6:46:88:64:33:73:e4:
b7:9c:94:59:75:b8:80:44:75:e0:17:51:51:31:01:
cf:8a:de:92:81:6c:89:4e:08:d4:e8:6b:be:69:e6:
7c:36:5b:bd:3a:3a:54:1a:84:d3:3c:99:dc:9e:2c:
c9:5a:04:55:ed:aa:2f:5e:6b:72:58:f2:ba:51:a7:
29:d7:be:73:1e:9b:d7:bd:64:45:93:e6:91:17:42:
9d:48:38:19:09:14:6f:08:01:1c:35:d8:86:ce:53:
5a:12:cf:7d:22:03:ac:b6:6d:0a:05:ae:de:50:56:
ad:ce:61:ce:db:1f:cd:72:82:3f:b1:04:41:3e:ab:
05:87:8f:7d:56:65:76:53:d1:63:4d:6b:e7:8a:c6:
8c:61:cf:e7:d5:26:8f:03:00:f9:89:8d:bb:0a:08:
f5:cb:f0:a7:5e:b2:2e:5f:0b:93:6e:35:db:b3:c5:
e6:c1:98:3e:36:64:2e:20:3a:54:b0:82:5d:f1:7a:
ab:19:a7:04:a3:ce:bf:76:7e:7e:5c:fd:ad:1c:5c:
78:14:e1:a1:57:19:d7:7a:97:2f:07:13:53:11:44:
06:43:32:59:71:c8:69:0a:b7:06:33:eb:62:0b:48:
57:89:9e:3c:21:ee:c5:62:29:2a:35:e9:3c:c1:cd:
59:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:05:9D:49:BE:82:B6:8A:C0:43:8B:21:79:FC:50:80:C0:73:63:86
X509v3 Authority Key Identifier:
keyid:8F:38:F8:59:E5:E6:76:62:AE:09:99:0F:38:4F:A8:6C:93:27:10:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:d9:bd:bb:8c:86:e1:f6:a7:37:02:31:ef:d6:3f:d8:27:75:
96:2d:6f:74:59:af:6c:e7:17:d9:b9:1f:28:71:17:bf:e2:00:
16:b8:e1:e9:fe:ca:da:0d:f7:21:2b:fb:3f:42:c0:f0:a9:47:
8f:2e:c8:4f:c3:0f:43:4c:e7:b2:9e:7f:21:d2:4d:e4:9e:96:
0d:e9:a5:39:0a:1c:b4:6a:4c:63:4f:10:23:d9:d8:cb:04:e1:
bd:09:16:a7:01:53:3e:98:ce:ba:54:f8:10:29:d2:24:7a:1f:
0d:bb:37:95:41:56:e0:2a:3a:ba:c3:f7:04:b4:52:32:5f:07:
cd:cf:bd:8a:3e:de:c6:75:fb:18:6e:45:53:2d:a0:f2:f6:00:
42:c0:92:33:5a:ea:04:7d:48:d4:fe:f7:30:02:26:e2:06:e0:
2e:05:84:1c:cd:d9:fa:a8:1b:31:83:ef:73:a4:39:11:22:60:
ed:0d:19:97:67:61:3a:7d:71:2a:34:5c:48:53:69:13:c1:7f:
12:13:d9:a7:eb:d4:3c:52:02:c5:10:53:82:01:37:af:3e:4e:
20:08:6e:5d:34:61:44:a3:32:e1:fd:eb:6c:63:af:7a:71:25:
48:9d:1b:27:bd:4e:98:b4:bb:87:63:fd:05:59:e0:56:2b:8b:
be:de:94:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:39 2025 by rpki-client