Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft
File: jzdbxsgRDxrXM993rPux1uxGXLg.mft (raw, json)
Hash identifier: BvL6tUgbdrExYmqCgM2argmmWGTzGYzrvHhxZq7meGE=
Subject key identifier: DD:D0:FA:8E:43:51:D9:5C:B6:86:C4:BB:A1:36:46:C9:85:FE:10:9A
Authority key identifier: 8F:37:5B:C6:C8:11:0F:1A:D7:33:DF:77:AC:FB:B1:D6:EC:46:5C:B8
Certificate issuer: /CN=8f375bc6c8110f1ad733df77acfbb1d6ec465cb8
Certificate serial: 0198D705C3FF9FAC485A7B8591B4596A113A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzdbxsgRDxrXM993rPux1uxGXLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 13:02:15 +0000
Manifest this update: Sat 23 Aug 2025 13:02:15 +0000
Manifest next update: Sun 24 Aug 2025 13:02:15 +0000
Files and hashes: 1: WZtsrjQ6_4AAza3W0_Zf2Kriboc.roa (hash: IEF1jYRY7l8CDobzZH1+RG1BE/hQtGdqASizDfn8LB8=)
2: jzdbxsgRDxrXM993rPux1uxGXLg.crl (hash: szfMMO7oZjOyvF8N4DJF6pIUxf4h1gspQt+PfkVj+d0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzdbxsgRDxrXM993rPux1uxGXLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:c3:ff:9f:ac:48:5a:7b:85:91:b4:59:6a:11:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f375bc6c8110f1ad733df77acfbb1d6ec465cb8
Validity
Not Before: Aug 23 13:02:15 2025 GMT
Not After : Aug 24 13:02:15 2025 GMT
Subject: CN=ddd0fa8e4351d95cb686c4bba13646c985fe109a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e5:47:1f:2e:f9:cc:a2:39:50:b8:81:68:b8:
b4:c7:05:91:c6:db:5d:98:16:81:e6:fa:7c:ca:12:
6a:00:74:1f:55:08:5a:08:f7:58:2c:93:22:fe:f4:
59:bb:04:fb:f0:d8:52:63:18:91:e0:2b:31:8e:c4:
2c:0b:c7:8e:f0:23:2a:95:10:39:18:9d:f3:02:10:
bd:6d:55:f6:06:62:92:45:e6:ae:6d:7d:c5:8f:35:
5c:53:f5:ef:1a:5b:4d:a9:18:ae:aa:38:bd:99:a4:
d1:4d:3e:42:5f:7a:6d:5e:f0:f3:d3:d5:ca:0a:5b:
4a:c5:1b:7c:a7:29:95:c0:f7:84:c1:25:31:2c:19:
db:43:2f:35:25:86:6c:a4:68:2a:60:11:e4:d1:72:
3a:f1:13:b8:b4:1c:40:15:ca:af:83:ae:68:e1:b3:
9c:62:42:33:fe:00:70:f0:6b:a1:04:77:2d:52:2a:
c9:83:62:ea:e0:80:84:8a:08:d8:02:fb:18:bb:1d:
fc:33:8a:02:1e:24:9f:70:3f:11:77:d3:ab:14:2f:
52:bc:84:b6:b9:39:4d:41:52:fa:86:a0:79:5d:12:
a2:19:5d:8a:2c:b9:97:41:d9:30:8e:8f:9f:87:ea:
ba:da:64:48:18:6d:98:7b:e8:f8:f6:ad:59:be:46:
b2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D0:FA:8E:43:51:D9:5C:B6:86:C4:BB:A1:36:46:C9:85:FE:10:9A
X509v3 Authority Key Identifier:
keyid:8F:37:5B:C6:C8:11:0F:1A:D7:33:DF:77:AC:FB:B1:D6:EC:46:5C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzdbxsgRDxrXM993rPux1uxGXLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:64:dd:9f:e0:07:6c:74:26:52:6d:9a:a1:e1:1f:dd:81:7c:
85:d5:e2:0a:29:67:5d:fa:ed:6d:01:0f:24:e1:e1:a5:4c:76:
f2:d8:ff:91:1a:11:79:e0:54:0b:c1:9c:61:02:2e:08:15:e5:
a1:34:07:bd:f0:31:b1:bd:02:83:d3:7f:ef:7e:c6:41:ba:8c:
5c:91:ac:1a:1e:3a:33:c6:6c:59:5f:13:2c:eb:50:83:4f:51:
06:2d:00:55:8f:ba:b5:0e:2a:aa:47:0b:90:d6:9a:4f:55:1c:
1b:22:ec:ab:6e:7f:80:06:10:4e:f1:e9:a3:a9:66:5a:6c:d4:
0a:ab:8a:70:43:50:1b:de:39:d3:78:eb:59:fd:14:06:f7:a4:
02:35:9d:e4:b7:25:25:5c:99:de:20:65:77:6e:d5:c0:e0:4a:
4e:a1:07:a8:d1:d9:ab:e6:cb:7d:0e:53:52:5d:36:e8:40:91:
3d:4b:d7:8f:10:6f:e7:3e:ab:e1:a2:ff:92:61:8b:bb:67:4a:
0c:d9:24:4e:bf:33:43:4f:b4:96:12:ef:48:46:31:1b:25:09:
2d:c7:d5:69:01:59:ac:35:d4:6e:3e:33:52:b0:ac:b1:b5:74:
8d:0a:92:f4:ff:83:e5:78:85:f6:ce:95:2f:d0:55:6c:9d:71:
fc:98:72:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:43:14 2025 by rpki-client