Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
File: jzj4WeXmdmKuCZkPOE-obJMnEKs.mft (raw, json)
Hash identifier: CYR9D16M+FwlIsJxocwZve4MkSruUmeA3raHuBxiFBc=
Subject key identifier: A0:AB:78:E9:64:A4:FA:3F:16:85:33:A2:13:D6:C0:A2:91:BC:06:DE
Authority key identifier: 8F:38:F8:59:E5:E6:76:62:AE:09:99:0F:38:4F:A8:6C:93:27:10:AB
Certificate issuer: /CN=8f38f859e5e67662ae09990f384fa86c932710ab
Certificate serial: 019A4E86A90D046A72A1D8C3A4CFBC1B244F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
Manifest number: 06B2
Signing time: Tue 04 Nov 2025 11:00:39 +0000
Manifest this update: Tue 04 Nov 2025 11:00:39 +0000
Manifest next update: Wed 05 Nov 2025 11:00:39 +0000
Files and hashes: 1: jzj4WeXmdmKuCZkPOE-obJMnEKs.crl (hash: ELQ5Rr3pINerqm+NDTakttRk83X+9kviSPMBT7BXn7Q=)
2: mXZNCAaShrlimSsEo_YH_UI8tzI.roa (hash: wxRNwEaBB0xI2itx3IM16zmFJHf/VPdbXQUT5Ylcg2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:a9:0d:04:6a:72:a1:d8:c3:a4:cf:bc:1b:24:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f38f859e5e67662ae09990f384fa86c932710ab
Validity
Not Before: Nov 4 11:00:39 2025 GMT
Not After : Nov 5 11:00:39 2025 GMT
Subject: CN=a0ab78e964a4fa3f168533a213d6c0a291bc06de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9b:47:23:4e:42:7c:59:66:05:57:61:18:0e:
74:fd:1a:22:58:97:85:b5:f0:3d:36:6f:46:e3:07:
ae:66:09:5e:1b:a4:5b:a4:09:ef:d4:e1:9a:d6:1a:
87:f4:db:9e:d9:e8:55:5d:4e:8f:82:f2:22:f0:83:
c5:65:13:80:fb:7b:38:51:7f:21:cc:50:d6:b3:b7:
74:bd:34:8f:c3:ac:15:bd:cf:cd:a8:7b:dc:c3:b3:
7d:22:a7:e6:0a:8f:9d:7f:ef:ad:cf:91:5a:02:d2:
db:29:69:2e:50:a6:a7:87:db:c4:c9:4a:81:64:42:
73:fc:00:5c:d7:99:d7:bb:7f:02:ca:12:ee:31:ed:
96:b7:4d:77:ac:a4:01:91:3b:53:41:3c:41:81:9c:
5a:64:fb:00:13:4e:9d:51:b4:4a:58:d2:38:5c:8f:
52:84:c2:04:6b:99:80:38:7c:4e:dd:89:61:c4:35:
25:a1:dd:28:01:83:9d:9f:44:8b:22:ad:02:c4:6e:
da:f8:13:63:3e:de:74:98:aa:66:95:ed:a1:90:d0:
b0:53:9e:db:2c:01:16:59:b6:1a:b1:4d:be:da:f7:
2f:d8:66:0b:02:be:cb:fc:58:e6:31:02:b6:cf:07:
89:07:44:90:84:5f:30:7a:8d:bf:1a:8e:1d:c0:fe:
62:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AB:78:E9:64:A4:FA:3F:16:85:33:A2:13:D6:C0:A2:91:BC:06:DE
X509v3 Authority Key Identifier:
keyid:8F:38:F8:59:E5:E6:76:62:AE:09:99:0F:38:4F:A8:6C:93:27:10:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:95:f6:19:53:ed:3b:f6:27:de:5e:66:17:07:f7:ca:80:b8:
da:16:2e:98:8e:a9:f9:6d:11:22:db:35:2d:1b:e8:99:55:77:
6b:17:e2:92:95:f6:92:e8:4d:a7:10:de:16:f8:dc:b2:7b:ed:
23:bf:31:8f:90:9c:8d:5b:bd:8f:3f:22:5c:cd:17:44:4e:8d:
c9:ee:92:ab:b2:11:13:a6:04:b9:25:c9:86:8c:df:3e:47:5b:
bb:2b:3b:a5:31:ad:db:a0:15:3a:b6:bc:f5:2f:15:6d:0e:c7:
d2:ad:83:48:66:d7:31:6c:cc:6e:98:d0:2a:02:8d:bd:18:ca:
4c:60:12:c7:b4:02:44:60:13:b5:4c:78:94:cf:54:3d:87:55:
e2:49:b2:13:93:da:f8:f8:17:8e:09:44:86:6b:54:71:44:68:
aa:40:14:06:c5:40:7e:c8:f0:16:8f:f3:05:b7:e7:7c:94:72:
01:18:e3:2b:e4:d9:1d:da:1e:3a:2e:55:f5:b0:e5:ce:27:b9:
38:15:5b:d7:c6:84:1c:a0:70:d1:d5:81:84:95:27:41:0a:89:
48:ec:99:5a:63:66:f3:2c:b4:b6:bc:38:6e:76:87:cf:1a:a2:
2c:8c:9b:02:99:06:fa:9b:cf:37:f0:89:70:45:9f:88:02:01:
87:76:c6:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhqkNBGpyodjDpM+8GyRPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMzhmODU5ZTVlNjc2NjJhZTA5OTkwZjM4NGZhODZjOTMy
NzEwYWIwHhcNMjUxMTA0MTEwMDM5WhcNMjUxMTA1MTEwMDM5WjAzMTEwLwYDVQQD
EyhhMGFiNzhlOTY0YTRmYTNmMTY4NTMzYTIxM2Q2YzBhMjkxYmMwNmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ZtHI05CfFlmBVdhGA50/RoiWJeF
tfA9Nm9G4weuZgleG6RbpAnv1OGa1hqH9Nue2ehVXU6PgvIi8IPFZROA+3s4UX8h
zFDWs7d0vTSPw6wVvc/NqHvcw7N9IqfmCo+df++tz5FaAtLbKWkuUKanh9vEyUqB
ZEJz/ABc15nXu38CyhLuMe2Wt013rKQBkTtTQTxBgZxaZPsAE06dUbRKWNI4XI9S
hMIEa5mAOHxO3YlhxDUlod0oAYOdn0SLIq0CxG7a+BNjPt50mKpmle2hkNCwU57b
LAEWWbYasU2+2vcv2GYLAr7L/FjmMQK2zweJB0SQhF8weo2/Go4dwP5iXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKCreOlkpPo/FoUzohPWwKKRvAbeMB8GA1UdIwQY
MBaAFI84+Fnl5nZirgmZDzhPqGyTJxCrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanpqNFdlWG1kbUt1Q1prUE9FLW9iSk1uRUtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8xY2E0N2MtYjA4Ny00NmVmLWEwNTEt
YWIwYmM1MmExODgzLzEvanpqNFdlWG1kbUt1Q1prUE9FLW9iSk1uRUtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8xY2E0N2MtYjA4Ny00NmVmLWEwNTEtYWIwYmM1MmExODgz
LzEvanpqNFdlWG1kbUt1Q1prUE9FLW9iSk1uRUtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE5X2GVPt
O/Yn3l5mFwf3yoC42hYumI6p+W0RIts1LRvomVV3axfikpX2kuhNpxDeFvjcsnvt
I78xj5CcjVu9jz8iXM0XRE6Nye6Sq7IRE6YEuSXJhozfPkdbuys7pTGt26AVOra8
9S8VbQ7H0q2DSGbXMWzMbpjQKgKNvRjKTGASx7QCRGATtUx4lM9UPYdV4kmyE5Pa
+PgXjglEhmtUcURoqkAUBsVAfsjwFo/zBbfnfJRyARjjK+TZHdoeOi5V9bDlzie5
OBVb18aEHKBw0dWBhJUnQQqJSOyZWmNm8yy0trw4bnaHzxqiLIybApkG+pvPN/CJ
cEWfiAIBh3bGDA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:34 2025 by rpki-client