Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
File: rjzFZ_6_40h4rrkThhzwYAooOQM.mft (raw, json)
Hash identifier: HYnN4y1IMdSJ92L1mp8iGCJ1Uzyw7cHQKqaggy5IsXk=
Subject key identifier: 4C:12:8D:16:AD:CB:18:AF:67:0A:C1:C6:62:CA:38:7B:BD:01:3A:89
Authority key identifier: AE:3C:C5:67:FE:BF:E3:48:78:AE:B9:13:86:1C:F0:60:0A:28:39:03
Certificate issuer: /CN=ae3cc567febfe34878aeb913861cf0600a283903
Certificate serial: 0199FB4589AE7EB8C694A50587A803834B33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 07:01:02 +0000
Manifest this update: Sun 19 Oct 2025 07:01:02 +0000
Manifest next update: Mon 20 Oct 2025 07:01:02 +0000
Files and hashes: 1: cO5HXhdkW-9sTYlyxMUlTq4VrHM.roa (hash: 2vNmvGiB6oqNqpjdkXzwA+2UM7st3DevXSjO7XrFVio=)
2: rjzFZ_6_40h4rrkThhzwYAooOQM.crl (hash: FZ8sg7zU6Xnl6AzSihRzVoFx/hssh/qWW5lj+uL1KP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:89:ae:7e:b8:c6:94:a5:05:87:a8:03:83:4b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae3cc567febfe34878aeb913861cf0600a283903
Validity
Not Before: Oct 19 07:01:02 2025 GMT
Not After : Oct 20 07:01:02 2025 GMT
Subject: CN=4c128d16adcb18af670ac1c662ca387bbd013a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:93:2a:4b:5f:fd:88:b5:41:11:a2:5f:9d:51:
01:88:c7:c0:e6:63:0d:3b:0e:75:ec:fa:e0:83:0d:
fd:a2:f7:2b:10:9c:8c:f2:c8:87:b1:2a:ef:60:f8:
97:95:9b:91:42:85:43:05:2e:b4:40:81:ce:90:a2:
4a:a4:42:46:8b:6d:bf:68:1b:8a:80:6d:4b:2b:d1:
bf:a8:bb:1a:5e:57:fb:94:c3:25:9d:be:15:e0:8c:
cf:78:76:95:01:ea:b9:a1:26:23:7b:53:e4:5c:47:
0b:e0:7c:13:98:3f:d6:ac:5d:e0:e7:8a:67:cd:cc:
f7:6a:50:b2:c0:51:e9:c0:b3:3a:5d:c2:8f:ac:a3:
a3:76:10:2e:cb:dc:b9:5d:d8:25:1f:ce:23:94:ad:
d9:65:6c:00:0a:40:e2:c8:5a:83:07:d0:b1:e8:8a:
cc:f4:2c:4b:10:e1:24:ca:a8:ff:00:7c:dc:5a:19:
3b:0a:b3:c2:13:82:c6:66:9d:56:df:71:ec:fc:85:
75:3f:f3:a4:87:5b:1d:2d:8f:c3:14:05:64:1f:3e:
ca:53:b3:13:14:e5:e1:e0:0d:f4:a2:a6:a1:7d:0e:
b7:e0:70:de:bc:f8:72:9f:a3:be:f8:e4:49:10:6e:
5e:d0:bc:c8:89:8a:95:94:90:69:74:c8:a2:9a:43:
a4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:12:8D:16:AD:CB:18:AF:67:0A:C1:C6:62:CA:38:7B:BD:01:3A:89
X509v3 Authority Key Identifier:
keyid:AE:3C:C5:67:FE:BF:E3:48:78:AE:B9:13:86:1C:F0:60:0A:28:39:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:84:0f:06:0f:27:f9:ce:d4:f3:c5:d4:ef:52:ac:31:c6:ed:
2d:74:2a:b1:f9:06:e8:8c:f8:cd:53:de:0a:bb:0f:83:93:c0:
f2:74:ff:ca:55:6e:d6:5a:b6:75:54:a9:b1:70:3d:59:15:cf:
95:27:cf:1f:0b:99:49:84:4f:23:30:d6:61:a1:05:6b:7a:ff:
74:d8:2b:de:92:20:45:48:b5:8f:b9:51:d2:66:a0:78:85:69:
9a:be:b7:77:4a:0d:be:7d:1e:37:f7:c6:d3:23:48:e5:fa:31:
46:2f:1e:a7:43:61:c5:f1:b4:1c:51:7d:64:3b:b5:cb:1e:1e:
a7:c7:7d:41:96:c1:6f:e6:e9:d0:1a:28:a2:4a:8c:18:15:1c:
b5:d6:75:fe:7e:2b:ad:1d:36:4e:f0:20:89:aa:7f:02:1a:d8:
92:ca:a9:59:8f:dd:e9:6c:1a:86:ad:40:17:29:f6:91:87:13:
e6:95:91:88:d8:5b:27:88:3a:60:cc:13:8f:8c:fc:cb:a5:8c:
95:a4:5d:fe:a4:0b:ae:1c:2d:ba:f6:f3:5c:c6:da:71:c8:7a:
a9:55:38:41:6d:01:8d:50:88:ce:81:64:9f:64:5d:52:a9:4f:
79:3b:e9:e6:fb:d3:0a:30:4a:86:db:6d:a0:36:e3:dc:0a:17:
03:84:ea:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:17 2025 by rpki-client