Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
File: jz-dhbyzpBNjYsV3Pp0U455SlFM.mft (raw, json)
Hash identifier: R49FFc/F6XczSj37/o9YoKr9V2yuicViml0s3C1dJpA=
Subject key identifier: 2F:B8:4D:81:D0:A2:E2:CF:78:DB:0A:F1:BD:A1:33:8C:43:23:E3:3E
Authority key identifier: 8F:3F:9D:85:BC:B3:A4:13:63:62:C5:77:3E:9D:14:E3:9E:52:94:53
Certificate issuer: /CN=8f3f9d85bcb3a4136362c5773e9d14e39e529453
Certificate serial: 01987C77A1A4EC1BCB1F89DC1507FBB26702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
Manifest number: 067E
Signing time: Tue 05 Aug 2025 23:01:11 +0000
Manifest this update: Tue 05 Aug 2025 23:01:11 +0000
Manifest next update: Wed 06 Aug 2025 23:01:11 +0000
Files and hashes: 1: D6_4qEi07gtXF5ITukzXeqcyPaY.roa (hash: BB8G1BDTfHCkkOszf3uysnvPnN4MWEDmW1B2B7aR3bY=)
2: jz-dhbyzpBNjYsV3Pp0U455SlFM.crl (hash: g9y26uOHKmRjI1VBDTBYoKwWBbeRcVxoNfh9rJmdU7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:a1:a4:ec:1b:cb:1f:89:dc:15:07:fb:b2:67:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3f9d85bcb3a4136362c5773e9d14e39e529453
Validity
Not Before: Aug 5 23:01:11 2025 GMT
Not After : Aug 6 23:01:11 2025 GMT
Subject: CN=2fb84d81d0a2e2cf78db0af1bda1338c4323e33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cf:0c:1c:43:c3:67:d6:c5:5b:70:7b:80:cb:
6a:2d:a9:67:62:f7:cd:74:a0:77:0a:e0:c2:05:56:
6b:19:1c:88:81:da:29:5e:28:0a:ee:bc:b9:08:13:
4e:09:1c:37:5b:0d:79:9a:66:34:0c:4e:4a:7a:3a:
c0:e3:36:9f:5f:61:48:cf:88:2c:b4:34:7c:d2:34:
97:c5:88:72:95:3a:a8:0a:c4:5a:4d:8d:bd:ed:59:
eb:48:1c:85:a8:fe:3b:02:d3:7d:e5:1d:e2:e7:74:
d5:49:36:fa:25:55:7c:d2:28:41:f9:00:67:ce:0c:
c9:e1:cc:96:2a:e6:18:7b:df:eb:8a:0f:de:ac:5d:
34:7e:7c:7b:fc:01:05:c0:4b:17:98:0f:a3:cd:b3:
ab:7a:25:b3:0c:c4:93:40:f4:3d:ed:d7:f6:a8:57:
1f:e5:bb:ee:64:7a:3c:00:5a:2a:f4:73:71:98:25:
62:43:1b:96:99:d5:91:d7:1e:c6:7d:55:33:11:23:
b2:55:46:e7:42:71:0f:4d:98:d8:ca:50:b8:d5:29:
72:a5:d6:d8:cd:58:b6:c9:e9:83:6c:7a:db:53:7f:
b3:26:d1:15:56:83:c4:e2:ed:bd:a4:b3:ec:6e:e5:
95:b9:3b:cc:26:b2:85:49:64:75:9e:37:d9:25:65:
67:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B8:4D:81:D0:A2:E2:CF:78:DB:0A:F1:BD:A1:33:8C:43:23:E3:3E
X509v3 Authority Key Identifier:
keyid:8F:3F:9D:85:BC:B3:A4:13:63:62:C5:77:3E:9D:14:E3:9E:52:94:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:86:f1:3b:92:ac:04:10:a0:fb:44:f1:0c:90:c9:bf:c6:92:
d8:5f:45:51:cd:49:40:0c:1b:f2:99:3e:c7:51:8c:23:52:01:
be:b0:ff:c5:b6:7c:ac:6d:9a:00:e1:aa:97:d9:f8:23:cd:be:
e9:00:a9:c5:21:1f:27:4f:ab:4a:06:8b:33:42:2a:c8:ed:6a:
b8:d3:a8:cd:57:be:bb:9a:1f:cd:5e:b8:0b:44:e6:9f:6d:ae:
09:74:39:e6:95:36:36:a4:5b:72:64:15:b7:92:cc:e6:e8:ce:
50:cb:5a:5b:b6:26:7b:0a:d9:3c:8b:45:ef:08:b3:6a:83:ad:
aa:ce:8e:5e:9b:b8:a8:03:53:2d:05:ea:15:61:50:0b:ea:e9:
2c:3b:28:e1:03:52:30:79:35:0c:3c:90:cb:62:64:23:46:d9:
62:da:ef:8f:31:3f:32:7f:45:ee:cf:86:43:97:98:a6:14:93:
fa:b7:b2:4d:36:b9:0e:fc:ab:d2:19:94:25:bf:22:25:1e:8e:
ba:8e:38:80:8e:cc:93:6a:c0:94:53:9e:f5:fe:72:84:a0:55:
1a:e7:ec:07:c4:16:ab:08:b8:e8:fc:d8:05:25:1e:40:22:10:
a5:46:5d:5e:cb:b1:56:8f:3c:eb:28:7d:b6:a8:a0:08:6c:d1:
62:ea:c9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:44:16 2025 by rpki-client