Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
File: jzZAFzNC-uiz0sjMH5td3RSUiT8.mft (raw, json)
Hash identifier: z3gJ9sgyCiAOAz9JSywb2YgIUs+depZH/1tNg4sWbgw=
Subject key identifier: 8E:97:B5:ED:11:97:8E:0C:CD:51:AE:47:79:11:EB:3E:65:1F:36:8A
Authority key identifier: 8F:36:40:17:33:42:FA:E8:B3:D2:C8:CC:1F:9B:5D:DD:14:94:89:3F
Certificate issuer: /CN=8f3640173342fae8b3d2c8cc1f9b5ddd1494893f
Certificate serial: 01987373E987FAE0FBE57A43AEF06DD7C247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
Manifest number: 13DF
Signing time: Mon 04 Aug 2025 05:00:32 +0000
Manifest this update: Mon 04 Aug 2025 05:00:32 +0000
Manifest next update: Tue 05 Aug 2025 05:00:32 +0000
Files and hashes: 1: NS4aUYlRSBiLTkLyyg7u-X42X1Q.roa (hash: r06qcWYpFC8YgZh35Sp5HzeJjcmGRBfHKZK7KBnJFGA=)
2: jzZAFzNC-uiz0sjMH5td3RSUiT8.crl (hash: ad7cz888AQJhBL9nEooWD3upx7wbmMGE6ywrbxBuxxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:73:e9:87:fa:e0:fb:e5:7a:43:ae:f0:6d:d7:c2:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3640173342fae8b3d2c8cc1f9b5ddd1494893f
Validity
Not Before: Aug 4 05:00:32 2025 GMT
Not After : Aug 5 05:00:32 2025 GMT
Subject: CN=8e97b5ed11978e0ccd51ae477911eb3e651f368a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:00:a3:0b:4e:db:c8:8e:a2:46:01:cb:8d:c4:
a1:68:38:db:0b:7a:95:fc:37:96:7f:da:23:27:17:
c9:97:8a:39:24:aa:43:67:62:7a:31:3f:20:6f:5b:
dd:fb:c0:80:5a:0c:a0:ef:0d:7f:82:1e:9f:4a:34:
64:ef:17:29:af:8b:29:5f:c6:50:db:b7:11:73:62:
37:72:6b:b7:d5:dd:8d:77:2b:4d:f6:ae:37:3a:e3:
3a:6f:3b:61:41:94:cd:5b:ba:0c:73:58:54:73:e2:
ff:26:56:e2:fe:6e:63:7a:f8:3d:c3:53:ab:03:07:
40:86:1a:bf:93:8b:0c:04:67:67:8a:9c:a9:49:3b:
38:8b:36:3b:0e:23:af:ea:6a:8d:ef:c4:95:af:ce:
f1:c2:08:e6:6d:13:38:78:30:dd:6b:1b:80:34:b6:
f7:e3:62:b3:30:3f:da:b4:1a:29:5b:bf:ee:dd:f4:
01:1f:2c:d4:81:ea:30:ac:13:d0:fe:47:97:3f:2f:
dd:d1:7b:c3:3c:c5:21:f2:4a:11:be:02:a4:75:e0:
84:24:dd:2d:b9:f2:08:a1:a0:13:ec:4d:84:41:4d:
30:d0:75:80:db:51:d8:18:10:91:b2:17:e2:9b:e3:
34:b9:b3:14:2e:c1:d0:f3:8f:ec:3b:09:60:ff:30:
29:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:97:B5:ED:11:97:8E:0C:CD:51:AE:47:79:11:EB:3E:65:1F:36:8A
X509v3 Authority Key Identifier:
keyid:8F:36:40:17:33:42:FA:E8:B3:D2:C8:CC:1F:9B:5D:DD:14:94:89:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:26:31:9a:21:19:03:5a:66:01:d3:33:ca:b2:32:a2:1d:cd:
27:87:e0:86:be:7c:10:c0:61:3d:22:c2:11:15:83:ef:be:33:
6e:1d:a3:6f:e1:66:7f:8c:ff:37:5a:82:05:67:36:f9:b2:c0:
de:ae:05:59:0d:0f:0e:40:8e:b2:4f:a6:79:fb:59:61:51:79:
6a:f9:9d:80:4d:56:e6:bd:9f:9c:64:ef:16:08:c8:6e:4d:ae:
36:c6:4f:83:ad:53:24:a6:1e:d6:7f:83:67:53:df:18:ae:77:
ac:fc:35:c7:b5:fb:64:ed:62:e7:fe:48:35:1d:d4:69:bf:c7:
63:07:0b:07:ba:7c:40:11:94:c4:ae:84:f2:76:8e:96:e5:fd:
d9:f0:0e:6f:2e:8e:ad:32:f7:66:2c:5b:84:84:0c:39:b5:ae:
68:71:03:35:3c:b8:84:69:a0:a0:0c:be:5d:fb:24:c6:11:0f:
53:2f:05:f3:81:fd:f6:7c:fd:92:f8:3e:1d:b5:dc:d1:66:0c:
1d:84:86:7c:b6:48:43:04:3b:49:33:c9:a9:bb:d8:ff:48:d3:
96:08:af:4f:60:a5:17:30:4a:b0:14:d7:0a:be:08:3d:8c:4a:
b8:ea:d5:aa:40:e5:92:35:d6:e9:02:d0:6b:4c:7f:c4:1e:ef:
b8:38:15:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:35 2025 by rpki-client