Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
File: jzaP655VO90TFWJYSjNTsddVXFA.mft (raw, json)
Hash identifier: qEprIrVHqNxXoWPtFgSElfllYBUoor1LZdYMQAZLpmo=
Subject key identifier: ED:91:AB:82:3C:F2:E3:1E:E3:5E:3F:F8:33:23:66:B2:D7:2C:E8:31
Authority key identifier: 8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
Certificate issuer: /CN=8f368feb9e553bdd131562584a3353b1d7555c50
Certificate serial: 0198D65F6AA4D7F5386F32C7A3C1CD322F76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
Manifest number: 165B
Signing time: Sat 23 Aug 2025 10:00:34 +0000
Manifest this update: Sat 23 Aug 2025 10:00:34 +0000
Manifest next update: Sun 24 Aug 2025 10:00:34 +0000
Files and hashes: 1: VgDY9zN_B3grCrz_H8xjNykqXTQ.roa (hash: V5RUWHdPXufxGeDHhevmGSEqGhIbGyboqgCFXxKzrT8=)
2: eWNwoG2gNqVOl4jxtgq3km86-j8.roa (hash: tuYXWwSXyhuCjeV5A6/luy4IrIPezyScgsOJmMQtw38=)
3: jzaP655VO90TFWJYSjNTsddVXFA.crl (hash: izgHK0JHPC2mO+4mwzAYU8pm0BEbyd2pd5NvSSUNHXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:6a:a4:d7:f5:38:6f:32:c7:a3:c1:cd:32:2f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f368feb9e553bdd131562584a3353b1d7555c50
Validity
Not Before: Aug 23 10:00:34 2025 GMT
Not After : Aug 24 10:00:34 2025 GMT
Subject: CN=ed91ab823cf2e31ee35e3ff8332366b2d72ce831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:14:b7:c8:11:d7:47:1b:b2:11:7a:e2:cd:c9:
5e:7a:e3:16:f9:62:2a:b2:6b:51:47:d4:11:b1:0f:
0f:66:bd:2b:87:c3:94:94:8d:5e:fd:4c:89:88:84:
a0:41:a6:92:fd:97:7a:d4:a4:a6:73:29:07:cc:22:
fa:f0:01:a3:08:7e:76:48:4b:8b:77:f4:f1:39:8b:
66:9c:ea:28:ba:37:3a:f4:2d:f4:40:85:c4:ec:3a:
70:ec:ea:93:ef:44:2d:b0:ef:37:03:9e:7b:15:fd:
b6:be:9e:8c:03:e7:57:29:bc:28:92:22:42:b0:4b:
78:53:96:8e:06:6f:23:c7:7c:74:18:cf:2f:09:f5:
8f:df:54:47:44:a7:f9:49:1e:dd:4b:05:73:4e:ed:
bf:eb:13:15:6e:1a:2f:33:a2:23:e3:ec:c4:15:08:
53:ca:d4:a9:4d:0c:04:02:95:cd:2f:c7:a9:cf:f3:
1a:3b:54:99:7f:d9:44:7b:cd:e7:5d:5d:80:33:0d:
d9:6e:ef:37:3c:58:96:51:74:fa:12:a0:f7:2a:65:
54:46:9d:01:1f:f8:2f:44:9e:4c:b1:a1:23:23:a9:
87:17:f2:02:bc:49:2b:17:8a:e7:ee:ac:07:2b:96:
40:4e:73:1d:c2:6a:b8:80:b9:59:c3:36:03:98:c6:
de:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:91:AB:82:3C:F2:E3:1E:E3:5E:3F:F8:33:23:66:B2:D7:2C:E8:31
X509v3 Authority Key Identifier:
keyid:8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:f1:34:e3:6e:68:47:15:55:74:84:cf:cf:b5:33:09:41:ca:
d5:9f:4b:c5:6e:fb:8b:44:4b:b7:21:22:23:42:ee:5c:ec:48:
94:0f:8d:99:7c:b1:92:3f:8a:c9:7a:56:c3:00:d2:cc:66:d4:
0d:f7:05:71:76:d4:62:46:ee:ec:97:d5:e9:a0:a0:e6:ad:2f:
1f:5a:3b:04:8e:6f:5e:97:22:23:1e:1b:74:34:7b:09:05:46:
99:b2:3c:89:e7:a3:0c:be:d4:86:85:b8:01:d2:d9:d6:7a:f1:
4b:41:c0:6b:07:af:20:b8:11:dd:d9:df:48:75:9b:d6:e8:1f:
cb:88:a2:75:1e:85:58:06:9e:cb:54:f8:0f:95:df:54:15:c6:
bc:93:6d:3f:3c:ee:81:cf:e2:d8:a5:7a:42:b4:e9:49:9a:0c:
3a:ab:49:80:92:df:a7:92:db:c4:e5:ef:3f:34:88:4d:e2:45:
2e:3c:c3:52:c7:4d:4a:a3:ad:7a:07:31:74:76:cf:41:53:38:
4c:61:84:90:ff:08:63:d3:55:8b:c3:47:3c:18:e0:60:72:c4:
fb:04:4d:c4:da:ff:4c:bb:24:33:5e:85:95:7b:d6:66:d2:e7:
5a:a8:b8:00:b4:7a:85:ea:16:79:da:34:29:ec:84:24:e5:92:
ee:b7:39:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:04 2025 by rpki-client