Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
File: Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft (raw, json)
Hash identifier: SCrahuzYcN5sTvY+E/yxBbZGFSoKK9gYs0X+qc1VG7c=
Subject key identifier: 2F:FF:C7:25:3F:29:C4:03:F0:5B:AC:C2:C9:B4:D4:61:6C:09:D8:25
Authority key identifier: 27:39:1A:E2:8A:91:D5:99:13:46:AE:DA:F1:7B:F8:60:5C:8C:F2:2E
Certificate issuer: /CN=27391ae28a91d5991346aedaf17bf8605c8cf22e
Certificate serial: 0199FBEAC88AD8816C3406D6E73468F4D72C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
Manifest number: 1274
Signing time: Sun 19 Oct 2025 10:01:31 +0000
Manifest this update: Sun 19 Oct 2025 10:01:31 +0000
Manifest next update: Mon 20 Oct 2025 10:01:31 +0000
Files and hashes: 1: Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl (hash: 8TCY06152G8x+2NY+sFPCsqZFl56eld4IcWcaA3kN/M=)
2: Y2PRIXlvoLUvaJRI_Do9j4XcqPk.roa (hash: 5PYmU1FMb9SDbJhCU1KiV8VGC7stgGinp2hnu0BY1I0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:c8:8a:d8:81:6c:34:06:d6:e7:34:68:f4:d7:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27391ae28a91d5991346aedaf17bf8605c8cf22e
Validity
Not Before: Oct 19 10:01:31 2025 GMT
Not After : Oct 20 10:01:31 2025 GMT
Subject: CN=2fffc7253f29c403f05bacc2c9b4d4616c09d825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:32:58:0c:c7:59:09:f9:92:c3:06:75:a8:23:
56:4e:9f:1d:06:d4:b6:03:a5:c7:32:8f:3d:63:c9:
e2:67:cc:32:2e:5f:9d:47:d2:70:2d:db:fd:d2:21:
87:77:67:c1:f7:af:69:b4:49:68:3e:e6:0b:b0:74:
05:fe:78:5f:b6:ee:26:15:32:e3:8b:a4:de:09:c8:
d7:f3:7d:9f:b4:09:83:12:e5:d8:cf:24:4b:17:1e:
3f:39:a5:9c:84:51:e7:c9:e1:eb:86:3d:12:52:53:
15:12:5d:a7:3c:32:8a:0b:de:42:37:ff:f6:71:61:
62:42:b9:88:7c:c5:48:8c:00:97:17:4f:20:51:8e:
66:84:0c:c5:53:88:13:cf:ca:e7:ec:b9:08:60:2d:
a8:33:fd:d8:87:13:2b:25:81:99:01:fd:da:b6:63:
4f:47:d0:bd:65:b2:bc:62:51:4e:27:ee:7f:db:dd:
4c:29:81:71:65:24:a0:f6:fd:45:f8:16:98:2c:03:
76:3c:b0:83:21:54:ce:15:4f:40:36:e8:bc:64:46:
5e:d4:01:78:d9:4d:16:c3:95:e0:fb:0f:e2:6c:75:
b0:8c:f8:4c:3b:04:7a:99:db:69:9a:f6:fe:83:64:
8e:37:bf:3a:79:9a:43:d8:66:ef:33:4c:5b:e3:ea:
de:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:FF:C7:25:3F:29:C4:03:F0:5B:AC:C2:C9:B4:D4:61:6C:09:D8:25
X509v3 Authority Key Identifier:
keyid:27:39:1A:E2:8A:91:D5:99:13:46:AE:DA:F1:7B:F8:60:5C:8C:F2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:0d:d2:6c:6b:eb:ae:1f:37:4c:54:9f:1d:a5:dc:e8:30:94:
a1:cc:64:69:8c:eb:da:8c:10:34:75:06:ab:ee:ff:88:a8:cd:
51:24:57:8b:26:fb:ea:38:bc:28:1e:eb:86:11:e5:32:e1:9c:
1e:1b:ab:a1:0e:87:b6:31:56:f9:37:7c:54:c7:54:a6:52:f5:
53:c0:88:d4:12:cc:82:2d:f9:18:68:7a:33:8b:cb:41:98:8d:
e0:ae:c3:5d:87:b4:c3:55:05:f0:63:2f:b7:53:7f:be:45:68:
16:95:92:82:ed:6d:fa:3c:a7:b4:a2:a0:01:fa:6f:03:61:f5:
e6:c8:95:f2:c8:2d:f7:56:af:49:8f:aa:ca:6f:f6:cd:67:71:
7d:57:78:58:2f:43:5a:4e:fe:0e:89:d2:4a:22:22:b6:06:ba:
4d:00:da:06:a5:80:7b:78:57:7d:87:0f:22:c1:fc:92:5a:a3:
d5:d8:e0:bb:c5:d1:1d:f0:a1:06:47:ac:c1:80:50:47:5d:d5:
b6:04:da:29:81:19:f9:b5:5e:c4:fe:4c:d5:62:dd:49:ad:81:
da:6d:ef:ba:b3:8a:60:f8:74:2c:4c:63:fd:e1:96:09:4c:fe:
75:6e:8d:65:15:01:f5:73:6c:98:b2:a6:00:e0:93:9b:6e:f0:
0f:83:b3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:32:01 2025 by rpki-client