Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
File: jzj4WeXmdmKuCZkPOE-obJMnEKs.mft (raw, json)
Hash identifier: MCiKHWyAREGoVuHDI6Y8d9W2iRFcSqN0huoxRblYkP4=
Subject key identifier: 96:6C:85:83:A3:96:7D:58:5E:FE:83:2B:32:3E:62:83:31:4D:F1:95
Authority key identifier: 8F:38:F8:59:E5:E6:76:62:AE:09:99:0F:38:4F:A8:6C:93:27:10:AB
Certificate issuer: /CN=8f38f859e5e67662ae09990f384fa86c932710ab
Certificate serial: 019873E2475B52B3820494EE35612668E02D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
Manifest number: 05BC
Signing time: Mon 04 Aug 2025 07:01:05 +0000
Manifest this update: Mon 04 Aug 2025 07:01:05 +0000
Manifest next update: Tue 05 Aug 2025 07:01:05 +0000
Files and hashes: 1: 9gswIUnAaS1IBv5fuNBqUKNMfqs.roa (hash: lylk+NlcGPhSxgLHOS7jiDLjzNF20oemeodaYXlxSEQ=)
2: jzj4WeXmdmKuCZkPOE-obJMnEKs.crl (hash: so5Yoe/y8FOkQfljtKd9nNl3wns43AGao2Y9VhuxQnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:47:5b:52:b3:82:04:94:ee:35:61:26:68:e0:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f38f859e5e67662ae09990f384fa86c932710ab
Validity
Not Before: Aug 4 07:01:05 2025 GMT
Not After : Aug 5 07:01:05 2025 GMT
Subject: CN=966c8583a3967d585efe832b323e6283314df195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:44:d9:80:6b:24:0b:2b:45:f7:9b:6e:a4:4c:
a6:41:3c:06:48:55:22:a8:77:c8:81:04:36:b8:cf:
26:9f:0c:92:39:3e:d6:9c:cf:c7:c8:bd:02:a1:b9:
c0:af:3d:c9:b6:97:a9:42:9e:03:92:48:9b:11:88:
3d:3c:a4:76:5d:b7:74:bd:31:a6:2a:da:4e:27:eb:
40:37:b0:b0:18:ff:88:51:8c:b9:9a:8e:46:6e:02:
35:35:64:15:b3:e7:9b:84:ac:5d:4c:86:74:26:76:
43:0a:a3:83:42:92:e5:4f:6c:00:79:fd:58:d9:67:
0b:b4:31:81:87:5c:d5:b4:b2:a5:1d:77:0c:2c:72:
92:de:e4:75:dd:7a:04:ff:6e:8a:2f:93:7f:27:f3:
0a:7e:78:5f:38:af:ea:eb:d2:b8:92:39:a0:05:4e:
62:ce:d7:a0:fa:b6:11:07:7d:55:27:eb:dc:bb:03:
c1:60:ef:2f:58:f6:fc:ce:7e:a5:c2:e4:5b:76:64:
0d:89:ae:43:91:77:91:ed:76:9b:17:e4:89:e9:e7:
30:54:d3:d4:e1:79:5c:17:3d:80:01:7e:be:e2:13:
51:5f:c4:98:7a:fd:d0:16:70:5d:3c:d5:db:ca:5c:
39:7e:82:af:4a:61:92:c3:e4:3c:f6:6f:59:89:8a:
10:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6C:85:83:A3:96:7D:58:5E:FE:83:2B:32:3E:62:83:31:4D:F1:95
X509v3 Authority Key Identifier:
keyid:8F:38:F8:59:E5:E6:76:62:AE:09:99:0F:38:4F:A8:6C:93:27:10:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c6:d3:79:a1:c3:da:58:bd:ef:3f:ca:57:fe:08:37:d5:3e:
ad:24:3d:cb:6e:16:1f:57:33:37:ba:3a:00:03:03:c5:c5:49:
fd:5d:ef:5f:f6:90:18:0d:46:58:95:77:26:90:ea:fb:c3:80:
29:63:09:93:86:d0:4d:e1:ad:9a:fe:07:ee:e4:3a:16:a2:13:
14:e4:05:af:bb:c8:d9:e3:ec:2d:c9:e5:d3:bf:c4:50:a5:69:
db:ad:8e:c2:78:c9:6f:85:70:8d:b2:45:7c:90:d2:a1:17:41:
a9:fa:39:ef:47:62:20:3a:69:7d:6b:6c:7d:f7:c7:c9:ce:73:
83:b5:30:80:10:dd:f9:73:22:ae:77:d0:2b:ac:e8:0b:69:d4:
19:c0:d1:9b:e6:a0:da:51:f1:83:c7:c2:91:a4:d6:7a:7c:b0:
c8:ac:11:23:fd:d0:66:71:19:2c:42:91:b8:34:7f:17:07:a8:
bd:1c:05:27:bc:2c:30:ae:7a:7e:37:03:20:f9:3c:83:b0:38:
a7:ff:7e:10:61:f4:63:06:b5:f6:16:e6:0e:46:3a:a3:5b:a0:
50:60:f7:88:23:5c:a0:88:32:e2:52:83:9a:d5:49:40:79:18:
d1:55:09:f9:de:77:a2:c8:3b:2f:0d:90:bc:94:b9:2d:99:71:
c8:c0:9d:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4kdbUrOCBJTuNWEmaOAtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMzhmODU5ZTVlNjc2NjJhZTA5OTkwZjM4NGZhODZjOTMy
NzEwYWIwHhcNMjUwODA0MDcwMTA1WhcNMjUwODA1MDcwMTA1WjAzMTEwLwYDVQQD
Eyg5NjZjODU4M2EzOTY3ZDU4NWVmZTgzMmIzMjNlNjI4MzMxNGRmMTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkTZgGskCytF95tupEymQTwGSFUi
qHfIgQQ2uM8mnwySOT7WnM/HyL0CobnArz3JtpepQp4DkkibEYg9PKR2Xbd0vTGm
KtpOJ+tAN7CwGP+IUYy5mo5GbgI1NWQVs+ebhKxdTIZ0JnZDCqODQpLlT2wAef1Y
2WcLtDGBh1zVtLKlHXcMLHKS3uR13XoE/26KL5N/J/MKfnhfOK/q69K4kjmgBU5i
zteg+rYRB31VJ+vcuwPBYO8vWPb8zn6lwuRbdmQNia5DkXeR7XabF+SJ6ecwVNPU
4XlcFz2AAX6+4hNRX8SYev3QFnBdPNXbylw5foKvSmGSw+Q89m9ZiYoQDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZshYOjln1YXv6DKzI+YoMxTfGVMB8GA1UdIwQY
MBaAFI84+Fnl5nZirgmZDzhPqGyTJxCrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanpqNFdlWG1kbUt1Q1prUE9FLW9iSk1uRUtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8xY2E0N2MtYjA4Ny00NmVmLWEwNTEt
YWIwYmM1MmExODgzLzEvanpqNFdlWG1kbUt1Q1prUE9FLW9iSk1uRUtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8xY2E0N2MtYjA4Ny00NmVmLWEwNTEtYWIwYmM1MmExODgz
LzEvanpqNFdlWG1kbUt1Q1prUE9FLW9iSk1uRUtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnsbTeaHD
2li97z/KV/4IN9U+rSQ9y24WH1czN7o6AAMDxcVJ/V3vX/aQGA1GWJV3JpDq+8OA
KWMJk4bQTeGtmv4H7uQ6FqITFOQFr7vI2ePsLcnl07/EUKVp262OwnjJb4VwjbJF
fJDSoRdBqfo570diIDppfWtsfffHyc5zg7UwgBDd+XMirnfQK6zoC2nUGcDRm+ag
2lHxg8fCkaTWenywyKwRI/3QZnEZLEKRuDR/FweovRwFJ7wsMK56fjcDIPk8g7A4
p/9+EGH0Ywa19hbmDkY6o1ugUGD3iCNcoIgy4lKDmtVJQHkY0VUJ+d53osg7Lw2Q
vJS5LZlxyMCdlw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:20:54 2025 by rpki-client