Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
File: rjzFZ_6_40h4rrkThhzwYAooOQM.mft (raw, json)
Hash identifier: Q6BG8GQIhOOC0IJ1PgvcL4Ge1mFGdyWXxPOeMyilnDg=
Subject key identifier: 4F:BC:D5:13:DD:B7:50:D9:DA:11:8E:AA:1E:78:E5:75:55:71:19:8E
Authority key identifier: AE:3C:C5:67:FE:BF:E3:48:78:AE:B9:13:86:1C:F0:60:0A:28:39:03
Certificate issuer: /CN=ae3cc567febfe34878aeb913861cf0600a283903
Certificate serial: 019A541B15611D5CE9C28FCB4D4837E250F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 13:00:52 +0000
Manifest this update: Wed 05 Nov 2025 13:00:52 +0000
Manifest next update: Thu 06 Nov 2025 13:00:52 +0000
Files and hashes: 1: cO5HXhdkW-9sTYlyxMUlTq4VrHM.roa (hash: 2vNmvGiB6oqNqpjdkXzwA+2UM7st3DevXSjO7XrFVio=)
2: rjzFZ_6_40h4rrkThhzwYAooOQM.crl (hash: QPRkv1huJe0Y5f+cric+lZRxXVvwbGPO0cIQSSuJ7T0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1b:15:61:1d:5c:e9:c2:8f:cb:4d:48:37:e2:50:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae3cc567febfe34878aeb913861cf0600a283903
Validity
Not Before: Nov 5 13:00:52 2025 GMT
Not After : Nov 6 13:00:52 2025 GMT
Subject: CN=4fbcd513ddb750d9da118eaa1e78e5755571198e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6a:7f:73:f3:5e:d6:24:a0:04:23:62:64:e1:
6d:d8:90:05:d3:1a:5a:4b:2c:8a:84:e0:0b:78:e1:
94:36:8e:fd:86:c2:77:9b:23:dd:9a:e2:c3:a2:f9:
35:0a:43:44:6a:a4:ba:f0:9b:ee:b9:fb:fa:ed:17:
55:74:a2:e0:ce:61:78:d6:7e:26:97:a8:1b:2e:d3:
5c:25:46:d6:4b:7a:19:bd:09:e8:6c:f4:47:78:8f:
89:f9:c0:bd:30:58:f3:11:bb:ce:db:9c:ce:dd:a8:
eb:dc:15:88:a8:a7:d1:30:e1:5f:57:ed:af:3f:1c:
f6:5f:39:01:e2:ed:cf:9b:26:fd:9d:8e:d3:42:05:
4c:59:1a:09:3f:83:27:74:1a:29:a4:49:b8:95:6a:
fa:7b:8f:b8:57:e1:aa:2e:9c:f0:27:d7:10:54:23:
68:ec:22:e2:b2:e4:f2:2f:24:52:c6:04:73:23:1f:
a8:a1:2a:e2:7b:9c:ca:a3:41:b0:fa:b7:d5:dc:92:
9e:8b:4e:2c:81:2c:a4:de:9a:77:ed:50:b3:0d:da:
e1:8d:6e:cc:dc:c5:2f:c6:8e:92:41:8e:fe:73:e3:
52:b8:19:5b:bd:1e:81:fa:15:2b:b0:ba:b1:24:c3:
51:69:1c:05:35:09:11:60:7d:97:23:be:79:be:53:
e7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BC:D5:13:DD:B7:50:D9:DA:11:8E:AA:1E:78:E5:75:55:71:19:8E
X509v3 Authority Key Identifier:
keyid:AE:3C:C5:67:FE:BF:E3:48:78:AE:B9:13:86:1C:F0:60:0A:28:39:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f7:25:20:f6:35:97:7d:a1:34:2c:65:4d:cd:a3:8f:cb:67:
64:1f:9f:07:14:a4:01:1c:fc:8a:35:ba:d8:44:87:b1:a6:16:
0d:ec:32:a9:a8:7b:70:63:3a:86:db:93:8c:55:3f:49:90:ec:
74:8d:f8:3f:a6:f5:8e:57:ea:ce:a5:f6:4b:2a:4d:cc:c1:69:
35:77:f4:5a:91:2d:c6:a8:68:fe:68:c8:d1:91:b1:0e:d4:80:
b2:57:9c:62:b3:2d:9e:46:8f:ef:33:c0:ea:9d:96:7f:0a:f7:
2b:ca:3f:93:c2:a4:76:67:da:8b:b8:08:a6:2e:61:1c:fa:87:
ff:2c:98:a6:ff:b0:f7:91:9a:e2:42:87:4a:fd:40:cc:1a:1b:
72:83:6e:6e:84:48:78:01:9d:e9:e6:70:3d:f6:49:f2:ba:1c:
7f:f4:43:a4:5b:a0:27:61:56:02:f1:48:4d:34:3e:9d:47:24:
dd:42:f2:ae:4f:6d:80:b0:17:96:13:4a:01:8e:bb:99:fe:13:
4d:1c:27:d2:36:a0:bd:c6:60:e9:bb:96:d5:4b:a2:6a:a2:68:
38:bd:7f:6d:91:44:b8:94:2d:18:fc:4e:c9:8d:16:21:d0:b9:
63:08:12:d4:74:5f:9e:bf:7b:dd:21:b0:4a:04:48:ff:46:ad:
9b:95:ab:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:06:30 2025 by rpki-client