Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
File: jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft (raw, json)
Hash identifier: RpG+kcgvXMFpW/K5NTUfk8J1d0tHQkHa5pAWkmbyNeg=
Subject key identifier: 32:07:B6:FF:74:77:A5:BF:1D:65:2E:04:3D:B5:7A:6A:95:A7:57:C1
Authority key identifier: 8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6
Certificate issuer: /CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
Certificate serial: 0199FCFDBC8D4172B026FD03C197F9DF2ADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
Manifest number: 1675
Signing time: Sun 19 Oct 2025 15:01:51 +0000
Manifest this update: Sun 19 Oct 2025 15:01:51 +0000
Manifest next update: Mon 20 Oct 2025 15:01:51 +0000
Files and hashes: 1: 77z8QXKc8ERahKIbASlcnYfSpXA.roa (hash: 4+qUdKw0CqogSD0bEzw5oz5fN5HdO2eQJ/PSKGd57hQ=)
2: Vp9dMAyfVmCM5zZQhLE8hK5dRc0.roa (hash: 5cnih+GaWo66TQ4L2W2BbOxLKl4dL4P027VTj45pMMU=)
3: jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl (hash: Z8/6rowHkZVTEVxgeApQug8oS3XWoq3UE942R3+pFWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:bc:8d:41:72:b0:26:fd:03:c1:97:f9:df:2a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
Validity
Not Before: Oct 19 15:01:51 2025 GMT
Not After : Oct 20 15:01:51 2025 GMT
Subject: CN=3207b6ff7477a5bf1d652e043db57a6a95a757c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:87:3f:49:4b:a9:19:89:c9:17:73:50:eb:6f:
c0:05:3b:e6:fe:de:42:50:94:7f:a8:12:fe:c7:23:
b7:2a:b1:2d:ad:05:f7:ce:a0:b7:cf:4c:93:d2:0a:
c4:92:78:5a:1a:9b:85:25:22:47:97:08:f6:64:db:
c4:4f:13:57:6a:a8:1b:24:ab:dd:c6:1d:05:c6:30:
19:3b:3d:5f:d3:dc:2c:66:18:4f:2d:e3:9e:0b:e8:
ac:aa:23:92:2d:4e:51:5f:90:f6:a1:f6:61:11:2a:
0d:04:59:a0:f6:68:34:26:c7:57:d9:91:78:fc:23:
f2:9d:36:f1:57:a4:c1:df:2e:b9:6d:cc:9e:95:04:
90:e5:51:2d:c4:73:56:d4:a9:50:4d:8a:d9:90:df:
13:8f:19:d2:dc:a8:83:f9:81:2b:9b:9f:f2:0a:d7:
7e:82:ed:26:65:3d:5e:c4:c5:0a:e3:f2:81:2e:74:
cc:07:33:77:2a:38:91:20:09:97:43:99:63:22:27:
f7:16:0d:3e:37:b2:f2:aa:4f:4d:f2:df:28:c0:91:
72:81:cb:d8:c7:c8:9a:b8:b1:95:1e:b8:cb:38:96:
1d:17:90:f9:b7:b3:1a:66:d6:03:36:d3:2f:ca:be:
e3:b9:64:14:32:af:65:af:e6:49:d1:1c:46:49:62:
04:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:07:B6:FF:74:77:A5:BF:1D:65:2E:04:3D:B5:7A:6A:95:A7:57:C1
X509v3 Authority Key Identifier:
keyid:8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:74:09:1f:3e:6f:01:0c:d1:a6:63:0c:a3:6f:d2:7a:40:a8:
37:99:52:0f:2f:10:1e:e1:88:d9:03:2a:54:7e:8e:9d:73:17:
06:57:8a:75:a8:78:02:a1:c6:92:e6:48:d7:93:a8:8f:cc:df:
13:bb:85:9d:76:73:a2:e7:dc:4d:a0:75:cf:80:fb:92:9f:34:
55:88:52:07:57:41:c8:45:5f:9b:05:44:48:51:e3:4e:be:af:
d4:76:61:60:b7:84:0d:18:67:96:74:05:0e:ae:77:58:56:36:
ec:d1:bc:22:22:30:8a:85:61:82:70:60:41:5d:ab:79:b8:3b:
1e:29:b9:95:a2:52:62:d4:4c:93:ab:df:3e:26:d1:61:52:33:
1b:60:41:b0:11:c6:6a:03:53:73:8f:b1:7a:bd:3a:fa:1f:7f:
20:10:8d:8f:ea:56:ae:66:aa:a1:30:b6:e6:37:49:8c:f9:8f:
c7:f7:c1:0a:7b:55:50:60:f8:af:24:2b:3a:1b:22:d2:38:4f:
9a:d4:a5:e8:df:10:dd:af:34:f4:7b:c9:79:f8:f5:87:1d:b6:
f5:bb:b0:58:33:a2:0a:db:59:3d:a5:93:ad:98:bd:a2:fc:5f:
0b:5b:0e:8d:3b:3b:9d:77:83:7e:ec:ef:5d:81:ee:ca:36:13:
a5:f1:60:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:57 2025 by rpki-client