
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
File: jzZAFzNC-uiz0sjMH5td3RSUiT8.mft (raw, json)
Hash identifier: Zq2n4+HlqAxRCArBzc6JA3nw0WuRq1wb9HRcRWgxM4o=
Subject key identifier: 5C:75:FD:58:5A:44:03:B3:2A:F0:07:7F:34:89:13:49:7C:D6:4A:50
Authority key identifier: 8F:36:40:17:33:42:FA:E8:B3:D2:C8:CC:1F:9B:5D:DD:14:94:89:3F
Certificate issuer: /CN=8f3640173342fae8b3d2c8cc1f9b5ddd1494893f
Certificate serial: 0199FB7C87231BDAA9CE0F3A75BA2EB8260B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
Manifest number: 14AA
Signing time: Sun 19 Oct 2025 08:01:06 +0000
Manifest this update: Sun 19 Oct 2025 08:01:06 +0000
Manifest next update: Mon 20 Oct 2025 08:01:06 +0000
Files and hashes: 1: NS4aUYlRSBiLTkLyyg7u-X42X1Q.roa (hash: r06qcWYpFC8YgZh35Sp5HzeJjcmGRBfHKZK7KBnJFGA=)
2: jzZAFzNC-uiz0sjMH5td3RSUiT8.crl (hash: 8R16J0F3Pa/Kj50cduWLpKhylDP3bljnzgWLyEa6cdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:87:23:1b:da:a9:ce:0f:3a:75:ba:2e:b8:26:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3640173342fae8b3d2c8cc1f9b5ddd1494893f
Validity
Not Before: Oct 19 08:01:06 2025 GMT
Not After : Oct 20 08:01:06 2025 GMT
Subject: CN=5c75fd585a4403b32af0077f348913497cd64a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:21:fb:e0:68:9f:75:83:43:09:43:7f:66:9c:
16:0a:2b:b1:58:5a:bc:6f:65:b7:c8:08:77:74:ca:
8d:5e:ec:9e:20:6a:91:c3:d0:73:a3:7c:3a:3e:61:
db:52:62:dd:83:58:c0:c4:39:a3:0d:c6:91:7e:7a:
83:01:89:5c:98:d3:07:65:3f:4e:d2:10:0f:2c:4a:
7c:6d:bf:ea:ec:51:08:be:0e:d8:67:bc:dc:45:fd:
a0:f4:36:b3:f4:2e:9b:0b:36:e2:07:b2:a0:72:4a:
b5:56:73:5c:cc:79:05:39:1e:c7:26:4c:80:55:bd:
62:0e:c7:da:2c:c1:60:e3:bb:64:0f:16:31:e3:1f:
6d:80:0c:b9:7d:4c:8b:ab:83:f6:63:31:63:5b:3c:
99:83:90:7c:19:1e:4b:7f:cb:0a:5c:b4:72:c6:22:
ca:cd:80:7a:18:1c:38:6e:03:de:a6:a0:3a:e5:0a:
53:a8:25:00:c5:e8:66:a0:b1:23:f7:4e:aa:ab:56:
b2:c8:68:ff:34:17:90:20:f8:3d:27:ca:12:a8:b1:
44:6f:82:65:bb:0d:3c:4e:9d:9f:d7:a4:f4:e5:c2:
c2:8a:e4:70:0c:d6:0d:6f:72:58:de:03:84:f5:7d:
2a:6d:24:63:ad:e0:a3:a3:28:46:d9:0f:56:ba:29:
67:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:75:FD:58:5A:44:03:B3:2A:F0:07:7F:34:89:13:49:7C:D6:4A:50
X509v3 Authority Key Identifier:
keyid:8F:36:40:17:33:42:FA:E8:B3:D2:C8:CC:1F:9B:5D:DD:14:94:89:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ac:57:24:fe:fb:0b:0b:b3:44:19:b2:b4:aa:04:7c:d7:fe:
4a:d2:fb:b0:32:2d:8d:7b:1e:7a:35:28:27:81:3a:ec:2b:8c:
50:69:26:14:34:77:ee:f9:19:f1:66:28:21:bf:23:52:f5:f0:
7c:04:81:9e:74:5f:cb:5e:a2:35:a1:5d:22:83:9f:4e:32:ce:
a8:fb:e9:50:16:ff:be:88:8d:38:51:53:eb:a5:54:bf:82:8a:
9c:65:ce:72:ea:83:fb:c7:db:b8:30:c0:3a:59:09:9e:2f:f7:
67:03:39:b5:38:86:0d:0c:d6:a1:98:7c:ff:96:7d:b2:54:22:
a4:56:80:a4:49:ab:06:04:23:56:1d:ab:28:dd:40:72:88:6b:
06:14:a4:93:cb:13:8d:ee:7e:93:ee:24:81:c9:0e:f4:6f:32:
91:f8:6a:85:78:13:9c:59:f9:63:06:e0:ea:f7:23:36:c1:4e:
56:72:c3:3a:55:49:7d:4c:cf:a8:6e:f8:33:39:ee:d0:49:cc:
d4:b8:cc:2e:23:fc:ef:d0:25:9b:7d:55:2d:f3:66:61:34:04:
1d:c9:2d:f7:50:4b:42:84:a1:7c:64:eb:bd:2b:78:a3:d9:cb:
e3:63:bb:07:f2:cd:55:6c:94:d3:b2:b1:7f:a7:7c:e3:66:f6:
d2:8b:c0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:05 2025 by rpki-client