Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft
File: jzztMLKFLlUseDdGcAPxdepZ3nM.mft (raw, json)
Hash identifier: m831CbmJFHxZhgsGgLN43GeaiPDlSiUd4rHYm1JKYpM=
Subject key identifier: 7A:E2:CD:F7:79:F6:A6:B9:53:23:D9:F1:2E:95:76:65:AF:4F:8A:A4
Authority key identifier: 8F:3C:ED:30:B2:85:2E:55:2C:78:37:46:70:03:F1:75:EA:59:DE:73
Certificate issuer: /CN=8f3ced30b2852e552c7837467003f175ea59de73
Certificate serial: 019A4F62296EC03AD872C1C4AAB12925BC41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzztMLKFLlUseDdGcAPxdepZ3nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft
Manifest number: 0C15
Signing time: Tue 04 Nov 2025 15:00:24 +0000
Manifest this update: Tue 04 Nov 2025 15:00:24 +0000
Manifest next update: Wed 05 Nov 2025 15:00:24 +0000
Files and hashes: 1: jzztMLKFLlUseDdGcAPxdepZ3nM.crl (hash: SAYbPd14BywqkYvcJyOZ8l74c5b8lHUuP8f1co3mU0w=)
2: zFUJjDGEsZJOucFbVCUxDXzsMU8.roa (hash: 2ZiCqHTVImshB2FLBBPRqOl/4XNJLXBYYXR20S0fJAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzztMLKFLlUseDdGcAPxdepZ3nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:29:6e:c0:3a:d8:72:c1:c4:aa:b1:29:25:bc:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3ced30b2852e552c7837467003f175ea59de73
Validity
Not Before: Nov 4 15:00:24 2025 GMT
Not After : Nov 5 15:00:24 2025 GMT
Subject: CN=7ae2cdf779f6a6b95323d9f12e957665af4f8aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:39:f2:ab:af:36:ed:0d:a5:cc:c6:40:8b:57:
cb:af:29:75:79:fc:c6:96:ce:0d:fc:82:c6:dc:e1:
33:d0:0d:a8:27:d8:80:c7:75:99:67:db:24:76:2f:
2f:38:c0:9e:0e:f5:91:5a:bd:c6:a8:ea:cb:c6:42:
5d:42:fc:6c:65:3c:79:58:9b:4e:0e:d5:a5:f6:4c:
bb:06:7b:5a:63:ac:2d:fc:c5:4d:a9:37:48:ae:5f:
ab:78:d0:ab:ef:94:c2:e5:89:02:c3:ae:74:18:65:
77:37:0f:bc:51:be:50:3e:6f:e8:e3:9f:24:05:e3:
c0:a1:40:4c:95:dc:1f:45:c0:6a:da:76:7f:d9:8b:
51:ee:ff:37:34:2b:4e:43:43:dc:14:73:c5:64:6c:
7a:2e:c9:56:64:7e:3e:98:1b:ed:6d:d5:9a:2c:62:
ba:fb:78:1b:62:fc:90:88:40:1f:c6:20:14:41:2e:
94:a5:96:02:6c:f7:30:ef:64:5e:f9:c7:7f:87:60:
36:50:f3:dc:c6:65:d7:10:51:a7:31:0c:08:9c:51:
f8:47:7c:fd:ad:9f:be:b8:7c:e1:28:c9:95:28:a4:
7f:00:c7:d9:f3:b9:00:3d:27:d8:7f:38:c8:a4:ba:
d0:f4:5a:68:a3:b5:e4:7c:fb:ad:4d:02:4a:bb:16:
64:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E2:CD:F7:79:F6:A6:B9:53:23:D9:F1:2E:95:76:65:AF:4F:8A:A4
X509v3 Authority Key Identifier:
keyid:8F:3C:ED:30:B2:85:2E:55:2C:78:37:46:70:03:F1:75:EA:59:DE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzztMLKFLlUseDdGcAPxdepZ3nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:4b:b7:5a:24:40:b7:60:9c:ec:8b:ab:78:50:31:cb:67:7d:
c6:31:48:10:b7:3a:45:a9:fa:87:7e:33:9d:d4:fd:33:70:c9:
76:e3:e6:88:3d:c9:72:70:9c:b7:0e:e6:25:c2:93:12:35:25:
a6:74:f1:e8:bf:5f:53:78:88:84:4a:54:eb:3b:48:b0:5f:06:
19:70:76:31:eb:f1:4f:3c:b1:5e:57:d7:f3:6c:b5:c1:82:46:
6a:fa:52:a7:50:d9:42:e5:66:1c:ca:dc:2f:6a:3e:58:37:53:
e5:15:b7:8b:ed:1f:b9:56:a3:a9:8f:45:78:18:ae:0b:52:e1:
e1:39:0f:8e:72:e0:d1:17:3e:69:3f:d0:7a:26:57:70:b9:56:
3e:9e:ee:77:27:08:1c:4f:c9:5b:44:28:ed:2a:cd:d3:59:fd:
34:1b:df:59:27:b9:23:7c:bb:18:b7:da:a7:d6:c2:72:cd:e7:
93:1a:c6:35:a0:d3:ee:8a:4b:d2:01:73:af:a7:74:f3:6f:fa:
0a:2e:93:aa:9a:ca:1a:76:fd:2b:40:33:fe:7d:59:71:90:21:
8d:fc:d3:7b:f7:7f:43:41:02:5a:33:82:1c:76:d7:24:68:15:
36:7a:61:32:8c:eb:71:cf:78:ff:11:8d:46:47:09:8b:4e:6c:
48:65:7d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:56:48 2025 by rpki-client