Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft
File: JzWxnbJ9Py131AgYhFO-JrNFUK0.mft (raw, json)
Hash identifier: pT5nK5jZtR6A++Ho7V+BUUesBp8g9dqhwRu5B2k8Isc=
Subject key identifier: B6:44:FC:09:1F:D1:C3:5D:09:5E:80:F9:B1:7A:CB:2F:1C:8C:D6:46
Authority key identifier: 27:35:B1:9D:B2:7D:3F:2D:77:D4:08:18:84:53:BE:26:B3:45:50:AD
Certificate issuer: /CN=2735b19db27d3f2d77d408188453be26b34550ad
Certificate serial: 019A4E861EB7F64BB0836C8F8929AD37B528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft
Manifest number: 0470
Signing time: Tue 04 Nov 2025 11:00:03 +0000
Manifest this update: Tue 04 Nov 2025 11:00:03 +0000
Manifest next update: Wed 05 Nov 2025 11:00:03 +0000
Files and hashes: 1: 8Xi47DC6XLMifd_h4diEuTQqT_o.roa (hash: CN0wU8kNDOjW0/AZxclgk/MCq6Ngl7PcvBwvgiUpVIs=)
2: JzWxnbJ9Py131AgYhFO-JrNFUK0.crl (hash: sOXJToS/PVHbsvSx+4w9aPQiIa/7EtX56bU3Etoc+bU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:1e:b7:f6:4b:b0:83:6c:8f:89:29:ad:37:b5:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2735b19db27d3f2d77d408188453be26b34550ad
Validity
Not Before: Nov 4 11:00:03 2025 GMT
Not After : Nov 5 11:00:03 2025 GMT
Subject: CN=b644fc091fd1c35d095e80f9b17acb2f1c8cd646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c3:73:ea:df:6c:c2:ed:ae:65:7f:2f:6b:56:
d8:21:1a:33:fe:f9:29:37:ce:08:63:f2:f6:10:ad:
02:a9:43:1a:73:80:d6:af:23:08:c5:fd:2a:b7:04:
1e:42:80:ce:22:9b:40:05:bd:55:26:bb:ba:2a:a9:
82:ed:c1:30:4c:a7:fd:33:8e:37:71:42:11:ab:4a:
9d:84:27:63:08:25:da:a2:aa:4b:54:28:92:ca:28:
96:92:4a:a0:02:2c:cc:4a:37:4b:1e:68:00:34:76:
93:39:85:ac:94:c8:ce:bc:1e:02:c3:cf:9a:6b:18:
e5:15:e2:16:19:b3:6d:62:26:1a:6c:53:b0:ee:db:
f1:8d:bf:70:76:96:d2:11:e6:24:b1:70:88:a0:85:
d5:60:76:3f:88:d5:a6:5c:10:8f:43:9a:fa:a4:c2:
0d:a3:5b:63:de:0a:f5:5e:98:30:f6:5c:d7:d2:6e:
fe:8a:fd:50:a9:fc:7f:f4:2e:92:e5:35:7b:21:bd:
4c:ff:db:5d:5a:7c:fd:06:33:c4:6e:b3:04:b2:2d:
0b:26:e0:64:6a:03:e3:49:cc:aa:ce:ee:b2:01:e9:
35:d4:74:b4:20:ee:ed:11:ff:51:3a:9d:e9:b9:41:
f3:b8:7b:55:3c:e6:54:84:53:e3:01:91:64:d2:02:
dd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:44:FC:09:1F:D1:C3:5D:09:5E:80:F9:B1:7A:CB:2F:1C:8C:D6:46
X509v3 Authority Key Identifier:
keyid:27:35:B1:9D:B2:7D:3F:2D:77:D4:08:18:84:53:BE:26:B3:45:50:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:51:0e:73:da:bc:89:41:a1:cc:8f:f3:47:94:76:7c:9c:b8:
b4:ea:5d:f2:a9:71:22:31:aa:c9:db:67:af:e4:84:60:14:9f:
4b:f0:3b:93:d5:ce:cb:59:9e:16:ed:44:cb:e2:56:a2:f1:11:
70:6d:f5:f5:87:4a:ae:48:77:d4:63:e4:b4:0a:d0:a0:ec:44:
75:7d:63:e4:61:98:20:5c:48:17:ed:ca:03:31:97:58:b6:69:
00:1b:a8:28:f4:4a:e9:57:62:22:54:52:f2:c1:63:85:b6:04:
54:1f:ae:ff:09:f1:29:79:8e:35:ad:11:30:bb:5e:e6:f3:72:
20:f9:2e:bc:49:58:47:c4:36:af:52:9e:14:0e:78:1d:f4:22:
7a:6a:36:f1:a4:bb:d4:c9:fa:38:a1:fa:bb:d6:4f:44:58:ff:
f0:9b:05:8d:46:44:4f:c3:3d:0b:7e:8e:84:f6:8b:fb:b3:09:
17:44:20:22:a5:ec:28:dd:19:f3:2f:58:d4:da:dd:e1:1b:07:
bb:f2:43:69:89:a0:cd:e2:3a:d3:c3:7e:e3:96:c8:78:ad:ab:
46:c7:17:a4:ad:6b:04:5e:46:84:e2:04:59:45:69:9d:ce:11:
ae:fc:c8:f7:47:d1:70:2a:10:1c:59:0e:c8:8d:66:f2:60:e0:
99:f9:91:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:38:53 2025 by rpki-client