Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
File: jzaP655VO90TFWJYSjNTsddVXFA.mft (raw, json)
Hash identifier: RNLKCHui4VwT0GP2Cz1EzTsHNvlPgX+Vpi9tvCO6Q2I=
Subject key identifier: BF:ED:9A:AC:74:C1:05:95:D9:EC:64:BF:A4:54:89:21:70:E9:6D:01
Authority key identifier: 8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
Certificate issuer: /CN=8f368feb9e553bdd131562584a3353b1d7555c50
Certificate serial: 0199FFC7EBFCC91ABF5860C3C0E936F5B487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
Manifest number: 16F5
Signing time: Mon 20 Oct 2025 04:01:56 +0000
Manifest this update: Mon 20 Oct 2025 04:01:56 +0000
Manifest next update: Tue 21 Oct 2025 04:01:56 +0000
Files and hashes: 1: VgDY9zN_B3grCrz_H8xjNykqXTQ.roa (hash: V5RUWHdPXufxGeDHhevmGSEqGhIbGyboqgCFXxKzrT8=)
2: eWNwoG2gNqVOl4jxtgq3km86-j8.roa (hash: tuYXWwSXyhuCjeV5A6/luy4IrIPezyScgsOJmMQtw38=)
3: jzaP655VO90TFWJYSjNTsddVXFA.crl (hash: HvJjEwaWFvC1znGqHq7yuPTuNhjwj0g6AY84mgDUNoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:eb:fc:c9:1a:bf:58:60:c3:c0:e9:36:f5:b4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f368feb9e553bdd131562584a3353b1d7555c50
Validity
Not Before: Oct 20 04:01:56 2025 GMT
Not After : Oct 21 04:01:56 2025 GMT
Subject: CN=bfed9aac74c10595d9ec64bfa454892170e96d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:88:fb:72:44:21:58:3a:42:71:b3:7e:b5:cd:
f9:b7:1f:dc:4f:44:1e:70:b1:e7:7f:a4:99:54:53:
07:10:39:7f:f4:00:e5:b3:89:2d:ae:da:fd:ad:f7:
8f:45:4d:98:7f:3f:8e:ef:68:ea:60:eb:d2:a3:61:
0f:33:df:a6:09:19:4a:88:93:2f:2c:f8:88:39:dd:
06:4b:c9:82:3c:1a:cd:c6:28:f1:63:02:82:88:70:
86:01:ff:91:57:a9:ca:ab:84:81:b8:35:9d:90:b7:
d8:99:34:ba:47:b7:15:37:9d:9b:e3:b8:22:25:85:
46:91:87:76:76:42:73:b6:bb:e7:a9:e6:98:11:7c:
ab:09:81:46:a0:59:02:30:80:64:87:4d:32:09:3b:
41:83:6c:6c:4c:40:f2:74:ab:85:a2:d6:28:cc:f4:
b1:f1:17:d7:a8:b3:b9:08:e5:18:16:06:b8:8a:d6:
32:97:93:f6:c6:63:8b:71:73:7e:7b:49:d5:cd:c0:
a6:d2:71:70:cf:27:0e:91:a6:c3:ab:40:b4:75:07:
dc:d4:a3:44:88:c3:4e:50:24:84:b5:32:c4:1d:eb:
a3:aa:ec:38:3e:4b:a2:9c:58:92:1e:68:73:4a:07:
8f:2a:26:4f:4e:ad:f2:f0:bd:f2:d0:6f:15:60:c9:
6c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:ED:9A:AC:74:C1:05:95:D9:EC:64:BF:A4:54:89:21:70:E9:6D:01
X509v3 Authority Key Identifier:
keyid:8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ed:1f:89:c0:4a:e8:f2:1b:78:69:8a:59:cf:d1:76:e6:c0:
2a:e7:2c:b3:25:c4:59:2d:a1:87:ba:d1:48:7b:6f:5c:3d:0e:
e9:6b:96:85:88:70:b6:46:e3:58:fe:78:f6:4a:c3:3e:a9:74:
c3:e4:13:ae:33:b0:2f:30:b9:9e:93:38:cc:b9:12:1a:c6:77:
92:07:74:23:ab:9c:c8:ad:17:29:56:29:61:8d:0e:31:79:bb:
25:56:91:8a:61:41:c3:4f:f6:38:27:b3:66:57:95:da:b6:3b:
b7:f8:25:88:ba:26:20:35:25:b7:41:82:28:78:71:db:87:77:
3f:7f:8d:49:93:7e:dc:f9:89:19:b5:b9:71:25:53:3d:27:43:
da:a2:71:72:9a:38:c9:69:b1:34:4e:c3:d6:4a:2a:84:4e:df:
df:18:a0:57:93:a4:72:bb:30:91:b0:68:e1:1b:b5:a7:df:22:
6b:29:bb:52:44:7b:1e:ee:d8:c9:87:64:b8:c1:d7:19:d5:cf:
9c:c5:4b:e4:6d:5a:de:08:11:e5:2d:44:44:47:11:dd:30:06:
2a:35:dc:b3:ec:32:58:35:78:76:ec:7e:95:66:2d:48:ff:0b:
cb:8b:e1:7d:f4:02:16:5c:49:05:9d:d9:46:e8:ae:3f:0f:e1:
b0:23:6c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:27:36 2025 by rpki-client