Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft
File: jzdbxsgRDxrXM993rPux1uxGXLg.mft (raw, json)
Hash identifier: zBSh+oDalxBG2TgEuoO1/3cF2xpDTYMpD7WH1YewEh0=
Subject key identifier: 17:B3:96:C5:CD:A3:8B:26:66:F0:81:C5:81:A1:C6:82:C7:D1:84:F0
Authority key identifier: 8F:37:5B:C6:C8:11:0F:1A:D7:33:DF:77:AC:FB:B1:D6:EC:46:5C:B8
Certificate issuer: /CN=8f375bc6c8110f1ad733df77acfbb1d6ec465cb8
Certificate serial: 01988BB356576546865856F5842A4C31D6EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzdbxsgRDxrXM993rPux1uxGXLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft
Manifest number: 1624
Signing time: Fri 08 Aug 2025 22:00:42 +0000
Manifest this update: Fri 08 Aug 2025 22:00:42 +0000
Manifest next update: Sat 09 Aug 2025 22:00:42 +0000
Files and hashes: 1: WZtsrjQ6_4AAza3W0_Zf2Kriboc.roa (hash: IEF1jYRY7l8CDobzZH1+RG1BE/hQtGdqASizDfn8LB8=)
2: jzdbxsgRDxrXM993rPux1uxGXLg.crl (hash: XkBI4xakruktd4qvLzg4yn6Uvol2uOwgtB/w7NkNmh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzdbxsgRDxrXM993rPux1uxGXLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:b3:56:57:65:46:86:58:56:f5:84:2a:4c:31:d6:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f375bc6c8110f1ad733df77acfbb1d6ec465cb8
Validity
Not Before: Aug 8 22:00:42 2025 GMT
Not After : Aug 9 22:00:42 2025 GMT
Subject: CN=17b396c5cda38b2666f081c581a1c682c7d184f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bc:d5:4b:2a:24:d0:e7:98:97:98:d0:14:e4:
bd:6b:a6:ca:53:67:c1:75:cb:30:d4:db:ce:38:eb:
40:1f:91:01:28:36:fb:dc:e1:79:da:66:e3:17:1e:
8b:f4:80:21:bf:18:56:cc:32:58:81:00:42:49:82:
5e:62:fd:78:92:64:ad:f1:f5:2f:5c:07:b9:be:e5:
c4:ad:73:b6:e9:75:45:20:40:8c:4d:ab:c4:5f:02:
3f:de:ed:67:9e:3e:56:14:35:f3:f7:b5:1d:54:bd:
8f:ce:10:6e:9f:e5:b7:7b:34:76:af:85:e5:b3:39:
53:0c:8c:de:17:5e:99:c4:ee:ac:40:18:b9:15:26:
fc:26:50:21:63:4c:04:9b:19:72:7a:65:aa:89:46:
e7:d1:e3:74:76:14:39:06:3f:68:44:63:d5:82:07:
7c:72:54:b9:7d:51:35:c7:13:0a:87:ab:be:57:d9:
99:5f:3f:e1:46:ec:bb:ca:1c:21:da:a4:11:08:cc:
a9:89:42:bd:15:f8:ed:5b:22:0d:06:29:5e:a1:fe:
2e:ad:8a:8e:bd:83:05:19:a9:9f:4a:ad:c9:60:95:
eb:f9:81:ec:b4:0b:d3:bc:bb:c9:15:53:d9:0b:6f:
6a:8d:43:88:a5:87:01:5b:39:06:3e:8e:28:ed:61:
6a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B3:96:C5:CD:A3:8B:26:66:F0:81:C5:81:A1:C6:82:C7:D1:84:F0
X509v3 Authority Key Identifier:
keyid:8F:37:5B:C6:C8:11:0F:1A:D7:33:DF:77:AC:FB:B1:D6:EC:46:5C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzdbxsgRDxrXM993rPux1uxGXLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d1:a8:1e:5a:5a:62:cf:c3:55:9f:51:e2:a3:87:90:17:9a:
dd:33:0d:39:fb:84:3a:c5:87:10:19:9a:ad:b4:f3:32:dc:19:
da:93:31:a2:82:e5:fd:40:0d:8e:02:d5:fd:94:10:db:94:65:
b3:9d:ee:5a:1a:27:ed:15:41:36:cf:68:39:f2:ec:fb:37:d8:
c2:9c:ce:d0:e4:4b:b1:ca:bf:5a:89:6b:40:d5:19:b0:00:e3:
c6:54:68:33:ed:a5:b5:16:e5:a4:c3:53:35:c0:19:d1:4a:71:
a5:85:80:35:8d:73:08:ae:d6:aa:1a:f5:00:4f:e0:31:2b:b0:
a8:6a:76:18:32:22:32:16:f1:2b:fe:73:7c:95:b2:f2:43:98:
7d:48:23:9f:e2:bb:5c:88:db:86:a5:cd:71:0c:e1:6a:a2:90:
bb:67:91:ee:0b:ec:77:34:7c:7b:dc:6d:89:7a:b2:91:23:a0:
58:dd:7f:bf:89:a9:5b:4c:a5:fd:e9:ff:ea:63:02:50:98:60:
7b:6c:16:2e:c2:57:73:cd:13:9e:92:d0:d1:1d:88:00:aa:d4:
59:9b:ac:98:f7:a2:03:77:5c:70:03:1d:43:08:66:94:12:40:
24:1c:2e:3c:60:29:fb:07:1e:cd:bd:3a:f4:10:14:e3:4f:15:
55:15:43:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:32 2025 by rpki-client