Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
File: Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft (raw, json)
Hash identifier: HZAw99+IMvpi1ZOtvtkjxzMhEXjeoTYQlFBXAnkB6f4=
Subject key identifier: 10:F0:E5:21:FF:88:6F:2B:BE:E2:D0:ED:50:D9:38:E4:F1:6E:A1:34
Authority key identifier: 27:39:1A:E2:8A:91:D5:99:13:46:AE:DA:F1:7B:F8:60:5C:8C:F2:2E
Certificate issuer: /CN=27391ae28a91d5991346aedaf17bf8605c8cf22e
Certificate serial: 0198D66134A5B82F98FBFB73D5AC85FB1578
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
Manifest number: 11DC
Signing time: Sat 23 Aug 2025 10:02:31 +0000
Manifest this update: Sat 23 Aug 2025 10:02:31 +0000
Manifest next update: Sun 24 Aug 2025 10:02:31 +0000
Files and hashes: 1: Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl (hash: x+GbohIlj+Hh+xDOS6Mu9Kimb1xuN96ZunA7mViJM+0=)
2: Y2PRIXlvoLUvaJRI_Do9j4XcqPk.roa (hash: 5PYmU1FMb9SDbJhCU1KiV8VGC7stgGinp2hnu0BY1I0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:34:a5:b8:2f:98:fb:fb:73:d5:ac:85:fb:15:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27391ae28a91d5991346aedaf17bf8605c8cf22e
Validity
Not Before: Aug 23 10:02:31 2025 GMT
Not After : Aug 24 10:02:31 2025 GMT
Subject: CN=10f0e521ff886f2bbee2d0ed50d938e4f16ea134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7d:01:23:84:cc:50:bd:c6:12:35:e4:7e:f5:
0b:c2:1e:0f:b5:bc:71:9d:38:2f:27:39:ed:f0:a5:
f0:10:aa:44:21:7a:4a:06:70:de:b8:eb:4a:53:11:
86:9f:41:e8:69:c8:99:94:d5:19:d0:a5:98:c2:a5:
f6:80:17:ae:a4:af:2a:df:bc:b2:39:58:41:34:c1:
25:97:09:a2:57:20:15:55:bd:d7:90:e7:cd:e0:f6:
5b:79:67:2c:99:41:c1:94:dd:54:a1:0c:ca:66:27:
7e:fc:31:a4:a7:82:8b:80:b2:5e:8e:37:0e:6f:ad:
1b:3f:71:1a:5e:e9:20:c4:a6:dd:79:63:1d:63:7c:
d8:ac:fa:6f:79:b5:15:71:ba:b2:dc:f6:91:e1:6e:
3e:21:5d:69:85:3e:6b:8e:13:e7:dc:d0:59:3b:dd:
40:c0:0d:2c:d8:f4:d7:70:c7:d2:74:8f:60:d3:6f:
43:2b:7b:c4:2d:5d:e1:1c:04:cf:ac:b8:b1:06:ef:
80:a8:d1:9d:09:1f:c6:06:ad:65:9e:7c:94:c4:a9:
5c:5f:55:e8:5b:b4:42:c4:ca:3c:a0:c8:30:19:69:
9f:5e:a9:fa:d2:d5:3d:c9:98:19:49:a4:89:82:10:
03:6b:97:98:06:c4:af:72:fb:6f:88:3b:c0:f3:9d:
ce:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F0:E5:21:FF:88:6F:2B:BE:E2:D0:ED:50:D9:38:E4:F1:6E:A1:34
X509v3 Authority Key Identifier:
keyid:27:39:1A:E2:8A:91:D5:99:13:46:AE:DA:F1:7B:F8:60:5C:8C:F2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:cf:8c:4f:28:ac:35:a4:e8:c7:25:fe:03:11:68:c2:eb:ee:
28:2d:25:42:39:86:e0:e2:6e:e4:27:50:ac:23:6d:e9:52:f7:
fd:0f:a4:9f:68:82:6b:8e:53:c7:79:1c:08:37:9d:b0:8a:5a:
22:2c:94:3a:71:47:73:15:be:0d:7c:35:a7:a6:f4:8c:42:ba:
b6:f3:9a:14:1e:87:82:0d:2a:ac:e1:ba:a9:01:85:e0:36:34:
3b:b5:a7:f6:9c:49:f2:2c:86:98:af:2f:8f:df:a1:d8:a9:af:
0c:db:80:da:2a:95:51:2a:f9:6a:0f:96:f9:ea:79:3a:a3:8f:
1c:8e:cc:5f:d2:6c:33:81:4d:72:b2:b5:33:98:6a:a1:6f:67:
18:a8:ea:26:89:6b:e1:78:99:19:1d:c9:5a:12:a4:71:85:c5:
47:01:e1:09:93:76:a4:e5:ed:f7:ca:79:97:d0:ef:2b:91:a9:
1b:b8:bd:c5:b1:7c:79:16:4b:f0:9a:be:46:6d:e8:dc:3c:2b:
b9:39:a1:7c:83:e1:07:a2:58:6a:9c:0d:75:4a:2b:b3:25:cf:
6b:5b:3d:bc:09:59:95:e7:07:49:40:ed:05:6f:e2:68:ee:5e:
e5:f4:24:6f:12:b4:33:d7:23:7d:14:2b:fc:c9:08:53:7f:3c:
18:6f:f1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:08:53 2025 by rpki-client