Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft
File: jzdbxsgRDxrXM993rPux1uxGXLg.mft (raw, json)
Hash identifier: KAZb6DB2i5EluuIt5k4vpmcs7GZayRCtGvi+P+1c2R8=
Subject key identifier: 8B:DB:B2:04:70:AF:93:00:5A:D6:2F:57:A4:3B:A2:7D:27:D0:E7:22
Authority key identifier: 8F:37:5B:C6:C8:11:0F:1A:D7:33:DF:77:AC:FB:B1:D6:EC:46:5C:B8
Certificate issuer: /CN=8f375bc6c8110f1ad733df77acfbb1d6ec465cb8
Certificate serial: 019A4DAAD269A114B30A478CF13CA65AD9BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzdbxsgRDxrXM993rPux1uxGXLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 07:00:31 +0000
Manifest this update: Tue 04 Nov 2025 07:00:31 +0000
Manifest next update: Wed 05 Nov 2025 07:00:31 +0000
Files and hashes: 1: WZtsrjQ6_4AAza3W0_Zf2Kriboc.roa (hash: IEF1jYRY7l8CDobzZH1+RG1BE/hQtGdqASizDfn8LB8=)
2: jzdbxsgRDxrXM993rPux1uxGXLg.crl (hash: 1c/l32VbNL/ObiXDXgpNzDTSb7tG1GAZSgHTNwYuYEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzdbxsgRDxrXM993rPux1uxGXLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:d2:69:a1:14:b3:0a:47:8c:f1:3c:a6:5a:d9:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f375bc6c8110f1ad733df77acfbb1d6ec465cb8
Validity
Not Before: Nov 4 07:00:31 2025 GMT
Not After : Nov 5 07:00:31 2025 GMT
Subject: CN=8bdbb20470af93005ad62f57a43ba27d27d0e722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:16:a9:b0:37:ee:cd:37:20:d5:ec:16:76:c6:
8a:8f:05:57:11:d5:54:e5:d1:db:f5:65:d1:ba:69:
72:19:df:80:ee:58:a1:3e:0e:bc:00:5d:fb:b7:2c:
52:cf:af:14:a2:bf:ff:b9:94:31:fd:0a:36:d1:14:
bd:aa:d2:7f:14:29:59:3e:2a:5f:22:67:a9:97:d4:
61:c6:7c:71:14:cf:6a:9b:56:85:72:74:26:14:65:
49:07:36:81:ee:d1:f8:10:36:8a:bb:9d:b5:a3:29:
00:dc:41:ff:9e:83:cc:02:b8:b9:c8:4d:94:92:87:
5a:8e:ac:5e:60:00:3b:ad:a2:c5:d0:01:be:17:e3:
f9:e8:73:f8:35:b4:ae:cf:c9:a3:63:70:79:9b:85:
11:3c:9c:e1:a1:f4:62:b8:08:df:43:d7:73:fc:57:
f5:24:fd:78:ba:43:db:aa:72:f5:96:5f:da:21:a7:
ae:60:71:d4:2b:b9:c0:72:c9:81:9d:8e:fb:46:87:
93:93:ea:3f:ca:0b:f7:82:0f:8e:c8:04:ac:2a:33:
64:1f:17:8c:d2:11:56:29:a2:6a:c0:d5:2d:ff:f5:
eb:cb:24:0c:1f:f6:57:2e:6b:4c:d6:20:bc:0e:60:
29:64:93:f6:ae:95:b7:20:15:de:03:82:8d:ba:14:
3c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:DB:B2:04:70:AF:93:00:5A:D6:2F:57:A4:3B:A2:7D:27:D0:E7:22
X509v3 Authority Key Identifier:
keyid:8F:37:5B:C6:C8:11:0F:1A:D7:33:DF:77:AC:FB:B1:D6:EC:46:5C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzdbxsgRDxrXM993rPux1uxGXLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:0f:de:cd:73:ce:5c:bb:44:49:b8:d1:99:15:40:78:f9:7e:
02:8b:93:ba:d0:bd:d8:4a:1e:38:cb:d4:4d:61:ea:fd:9a:16:
9b:bb:7e:34:8f:0c:6a:b0:39:be:bb:68:2c:c9:57:7e:b5:f4:
7c:a6:84:ad:0c:48:e5:37:0a:38:5a:1f:ce:06:57:7e:39:b7:
03:26:d7:eb:ef:11:db:3d:58:46:ec:30:e7:1a:c8:61:d1:72:
d2:78:5a:7f:4b:af:ba:cf:09:94:8f:d7:b7:62:a6:dd:70:0c:
3e:32:96:26:40:10:49:58:b0:0f:e2:2e:e9:87:8f:e4:f5:01:
0d:b8:11:76:45:c2:c6:c5:be:6a:f4:ac:b4:bd:7a:67:3c:2e:
51:d5:1a:61:be:c5:3b:88:61:3e:ff:eb:fd:7e:4d:c3:3f:91:
b4:d3:03:02:6b:aa:c8:14:d6:b2:29:e0:90:99:09:58:45:f3:
d3:24:47:5f:c7:f8:be:a5:0c:f3:66:39:38:f7:19:f7:96:8c:
ff:fc:cc:c4:ef:d6:d0:75:29:0e:4c:41:7d:9f:f8:49:5c:21:
45:5b:0e:eb:ce:96:c5:b2:f3:27:af:5d:34:99:1a:a1:6f:13:
eb:b4:13:14:72:b5:77:e9:d6:be:ef:13:5c:92:62:40:67:43:
f4:79:e0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:27:40 2025 by rpki-client