Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
File: jzHMNgWz78CbJohQgGO2_UhVYd0.mft (raw, json)
Hash identifier: OWzQMApEvySTM11iP5GK2ThiLPVqrJhhPRQjE7mRwA8=
Subject key identifier: 7F:D2:E8:45:D1:A4:CC:9C:F6:DA:18:32:FD:A5:39:35:20:C0:DB:CD
Authority key identifier: 8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD
Certificate issuer: /CN=8f31cc3605b3efc09b2688508063b6fd485561dd
Certificate serial: 0198D7737937CB10C4C8399636264D390330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
Manifest number: 0B2F
Signing time: Sat 23 Aug 2025 15:02:05 +0000
Manifest this update: Sat 23 Aug 2025 15:02:05 +0000
Manifest next update: Sun 24 Aug 2025 15:02:05 +0000
Files and hashes: 1: KGShywXbD4wB1PLsBTNT01VDQKY.roa (hash: hBh9EiIl2TqddpHizY/LGkFYV3Ncy9Yws3g05SvVJTg=)
2: jzHMNgWz78CbJohQgGO2_UhVYd0.crl (hash: vS8Q2+IpY0fP+tte3uxrgNfIO9UHW9k/NM/na+k3iXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:79:37:cb:10:c4:c8:39:96:36:26:4d:39:03:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f31cc3605b3efc09b2688508063b6fd485561dd
Validity
Not Before: Aug 23 15:02:05 2025 GMT
Not After : Aug 24 15:02:05 2025 GMT
Subject: CN=7fd2e845d1a4cc9cf6da1832fda5393520c0dbcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:67:8c:aa:f5:ad:36:1c:64:3a:4d:7e:71:c0:
7b:25:43:55:31:f9:64:5a:fe:1c:50:04:99:98:5a:
16:23:a9:a9:36:54:01:f6:2f:6c:88:05:6a:7e:21:
30:95:b5:a3:c1:98:75:b3:96:ba:ba:28:ed:59:ac:
98:b3:c6:f0:10:6a:de:0d:ef:f0:93:ba:61:ad:3a:
78:cb:2c:d3:65:54:51:54:8e:8e:0e:c9:63:79:96:
5b:ec:6a:b9:cb:ae:d9:95:7c:cc:c3:48:af:1b:a5:
3e:6e:fd:0d:3f:7d:33:ef:19:e6:fe:db:5c:d1:1c:
77:b2:eb:19:f9:8d:bc:85:ca:8a:4b:88:84:8b:4f:
19:d7:99:d0:a7:1f:e2:f1:19:b0:65:47:6e:37:25:
10:54:c2:7e:60:d3:b4:0c:b1:eb:cd:4d:77:5c:d6:
42:be:7a:a2:f2:f2:3a:96:0b:fa:f1:d3:41:cc:20:
7b:b9:0d:e3:9b:77:7b:e5:67:11:05:03:37:f4:12:
a1:d5:32:f8:6f:5d:88:e6:f8:f0:13:c7:0a:13:72:
db:7d:14:a6:bc:49:95:21:58:3c:15:8b:de:78:bb:
ce:46:51:01:f7:c3:75:cb:01:ca:88:92:fc:da:fc:
a5:3d:0d:49:0c:14:b7:89:43:5c:45:c6:e6:a8:9c:
b6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D2:E8:45:D1:A4:CC:9C:F6:DA:18:32:FD:A5:39:35:20:C0:DB:CD
X509v3 Authority Key Identifier:
keyid:8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d2:3f:cd:04:01:1a:5f:48:9b:a7:80:bb:72:f4:f5:2f:9e:
ba:83:e0:51:80:6e:28:b7:fe:74:09:33:5c:b5:3b:31:50:8c:
e5:ad:9a:05:a7:a7:43:dd:52:91:4f:a0:e8:46:60:5b:0a:8f:
0c:ea:1c:6e:d3:46:30:f5:43:e8:af:db:9f:d8:cd:d4:de:91:
dd:09:11:7f:40:ac:1e:90:fc:f5:f4:d5:9d:f8:24:33:36:31:
ce:af:29:63:a2:03:25:88:b5:a4:1b:d7:10:36:5f:11:6b:65:
57:cd:92:7a:9a:eb:18:75:5b:dd:1c:25:ed:08:a4:0c:43:97:
5d:43:3f:95:a7:21:ac:3c:d9:23:27:7b:2a:e8:d1:0f:ae:cd:
9d:9a:b0:ea:5f:5b:5e:13:24:c3:7b:37:5e:71:c5:52:c4:d8:
5f:56:72:e8:2b:26:9a:a2:b1:57:e5:28:75:a4:d2:79:87:0f:
0e:da:db:f4:19:c3:6a:46:7d:73:88:34:10:be:4d:3a:e6:48:
6e:7d:5e:69:24:a4:53:b3:08:cf:b7:a7:9a:fe:46:d4:d8:0e:
28:38:70:bb:73:05:4a:7c:98:16:49:36:05:01:cc:1f:6b:19:
32:d8:6d:0e:d8:3c:30:f7:ff:f0:4d:48:24:28:ec:b7:6f:d9:
af:71:d6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:21:55 2025 by rpki-client