Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
File: jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft (raw, json)
Hash identifier: G/eEWSAaUkFQvNTThr4Q0t5s4gLGyqPX/mK8QIR3vMU=
Subject key identifier: BF:25:64:2B:7D:BF:81:7F:2B:59:9E:9D:9E:51:7B:2D:AD:E1:B2:CC
Authority key identifier: 8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6
Certificate issuer: /CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
Certificate serial: 0198D583BBCF7EEE4AF62BD329D42CEAA819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 06:00:36 +0000
Manifest this update: Sat 23 Aug 2025 06:00:36 +0000
Manifest next update: Sun 24 Aug 2025 06:00:36 +0000
Files and hashes: 1: 77z8QXKc8ERahKIbASlcnYfSpXA.roa (hash: 4+qUdKw0CqogSD0bEzw5oz5fN5HdO2eQJ/PSKGd57hQ=)
2: Vp9dMAyfVmCM5zZQhLE8hK5dRc0.roa (hash: 5cnih+GaWo66TQ4L2W2BbOxLKl4dL4P027VTj45pMMU=)
3: jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl (hash: cTJpKPnrSGNEdBqyQfFtHT7GxOPQg8D7kDGwM1FFnSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:bb:cf:7e:ee:4a:f6:2b:d3:29:d4:2c:ea:a8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
Validity
Not Before: Aug 23 06:00:36 2025 GMT
Not After : Aug 24 06:00:36 2025 GMT
Subject: CN=bf25642b7dbf817f2b599e9d9e517b2dade1b2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fd:03:eb:2d:1d:f0:35:48:6d:21:4e:78:b7:
d0:dc:29:bb:c6:81:d8:85:90:8c:24:21:dd:79:ca:
34:f4:dd:01:bf:11:49:a8:54:77:01:0c:d0:b0:67:
5a:58:4d:ea:95:b9:80:88:ff:b2:d8:0a:32:77:2d:
ad:e3:88:22:e4:d2:d8:57:e4:0f:c0:60:53:20:6b:
4b:8a:88:7b:3b:ab:39:88:1a:44:5d:f6:b9:0b:6c:
86:2e:db:62:bb:ae:c4:35:63:9a:4f:93:f2:ab:96:
1e:7e:a8:8a:5d:b8:32:42:9a:08:5c:45:18:7c:06:
77:cd:57:eb:2e:a8:b5:68:b3:5a:8c:cb:41:8b:93:
56:36:f1:7d:1b:d6:e1:e4:e0:83:8b:eb:18:45:06:
f9:9d:01:25:29:8c:51:1f:c8:15:9c:a7:4b:65:41:
bf:bc:ed:37:1e:ab:f6:d6:a9:45:5b:34:3b:07:ad:
de:13:71:f2:62:9a:7f:cc:74:5f:0b:9f:55:ae:6a:
60:ba:f0:ba:a6:a7:05:dc:62:16:7a:93:95:ae:6b:
81:22:ba:42:39:3a:bd:79:2e:69:80:7a:48:7b:1f:
df:47:08:d6:67:ff:ab:4c:30:71:96:31:fc:69:88:
d5:07:63:2a:46:81:44:bf:03:09:bf:1c:56:be:0c:
9e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:25:64:2B:7D:BF:81:7F:2B:59:9E:9D:9E:51:7B:2D:AD:E1:B2:CC
X509v3 Authority Key Identifier:
keyid:8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:88:89:98:02:e1:cc:c4:2f:94:60:c6:b8:07:13:bf:d8:5e:
92:cb:7e:f3:e4:c0:64:ee:fb:fd:40:e1:4d:6f:77:4e:b4:e3:
48:4c:25:a0:6c:ab:dc:d2:70:9e:3e:01:34:42:24:53:66:d5:
c8:25:00:76:06:43:6b:8c:31:d0:6b:c2:f2:29:ac:cc:d4:00:
7b:c5:f0:82:cb:8b:d1:e9:5c:1b:2c:08:a1:79:44:a8:fa:f8:
dc:a4:42:30:61:06:c9:6d:94:a0:eb:4f:4a:e1:98:2f:b0:f6:
f9:5a:7c:c9:4f:76:ef:71:e3:30:b2:e2:9e:41:f6:93:30:3a:
e0:fa:7c:86:45:71:fc:05:b4:93:e1:b0:4f:25:17:0d:6e:1e:
f9:dd:21:80:ba:80:8b:56:1d:2b:43:1a:cc:8b:ab:65:03:b0:
8a:d7:ba:dc:cf:ea:bb:be:4d:10:ad:e8:0d:26:21:4c:fa:77:
df:12:7e:01:cd:24:d5:20:dd:56:12:e1:0a:d1:3e:0d:d1:fd:
c9:a7:b9:34:ab:78:12:68:7a:b9:87:81:9c:94:e9:ba:07:26:
1e:8a:39:9b:f7:f0:1e:60:41:28:e7:fc:a9:24:10:ab:19:c6:
7b:fc:34:be:51:0d:01:c5:95:78:6e:01:39:57:5d:ab:d7:0c:
76:60:eb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:33:03 2025 by rpki-client