Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
File: Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft (raw, json)
Hash identifier: FwDxi/6Mhoic3yvbOHKAvA7E1NW1DaIIdo6qqNvZLaM=
Subject key identifier: 9E:4C:DF:8B:57:2C:8B:C3:5E:60:A3:B5:83:07:BC:0A:6F:1C:5B:99
Authority key identifier: 27:39:1A:E2:8A:91:D5:99:13:46:AE:DA:F1:7B:F8:60:5C:8C:F2:2E
Certificate issuer: /CN=27391ae28a91d5991346aedaf17bf8605c8cf22e
Certificate serial: 019A50E35B12A30C22AE0638BF655E8F9D95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
Manifest number: 12A0
Signing time: Tue 04 Nov 2025 22:01:08 +0000
Manifest this update: Tue 04 Nov 2025 22:01:08 +0000
Manifest next update: Wed 05 Nov 2025 22:01:08 +0000
Files and hashes: 1: Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl (hash: sxSjfQa64xb/ndTUVsA2U2DFMlnRhkzxGIftRZUdT7E=)
2: Y2PRIXlvoLUvaJRI_Do9j4XcqPk.roa (hash: 5PYmU1FMb9SDbJhCU1KiV8VGC7stgGinp2hnu0BY1I0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:5b:12:a3:0c:22:ae:06:38:bf:65:5e:8f:9d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27391ae28a91d5991346aedaf17bf8605c8cf22e
Validity
Not Before: Nov 4 22:01:08 2025 GMT
Not After : Nov 5 22:01:08 2025 GMT
Subject: CN=9e4cdf8b572c8bc35e60a3b58307bc0a6f1c5b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dc:bc:72:a4:d9:6e:ed:7f:5f:1d:89:65:a4:
1e:69:10:ff:34:aa:84:ab:7a:f1:fa:1a:b3:88:43:
1a:4f:b0:91:ad:b9:27:96:1a:25:40:c8:1f:be:59:
b7:ab:3c:7c:a7:46:b4:a3:f6:dc:bd:9e:91:71:14:
f6:1e:64:83:5d:64:a7:45:67:b4:ba:b5:11:0e:20:
71:c4:ff:8c:37:ea:1f:52:cc:e4:dc:36:63:7f:63:
3c:24:47:d2:12:02:ed:34:ba:1e:14:1e:ef:8e:62:
6d:d2:b6:89:38:b4:68:42:2d:77:0d:f3:a2:59:97:
50:31:6d:be:03:94:90:b3:f8:80:56:46:b4:49:06:
62:82:76:ed:8d:a1:12:86:f1:a7:fa:17:01:b1:f8:
89:12:68:b6:31:b7:b8:71:43:28:78:0c:f5:38:19:
ed:44:37:35:9f:01:e1:d2:3f:df:30:b3:57:b9:5d:
af:34:8b:91:b8:88:e5:9d:d5:28:01:2d:22:c8:df:
1f:81:66:a3:4c:02:ae:9e:e8:58:0a:bd:62:2d:f6:
5a:e6:bb:7a:00:bc:b3:14:24:27:3b:7a:eb:04:58:
98:66:39:3c:e6:e2:49:eb:6b:ed:68:ef:34:94:f2:
66:d7:60:4c:d8:52:df:5d:be:b2:26:25:c3:c1:88:
8b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4C:DF:8B:57:2C:8B:C3:5E:60:A3:B5:83:07:BC:0A:6F:1C:5B:99
X509v3 Authority Key Identifier:
keyid:27:39:1A:E2:8A:91:D5:99:13:46:AE:DA:F1:7B:F8:60:5C:8C:F2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:2d:d2:78:83:09:a0:d9:cb:6f:0a:8c:0d:87:71:88:a5:34:
ba:6c:b7:e8:a5:cd:c2:c5:77:f8:64:74:92:fc:7d:16:1f:8a:
64:21:6a:9f:59:04:31:b3:8d:70:e5:f2:ab:9d:a4:65:86:97:
49:4e:84:12:38:64:79:12:28:fc:5f:97:01:81:bf:a4:d5:ab:
09:82:2a:75:ee:d1:c5:92:63:c9:f9:23:b6:27:99:7a:fd:44:
c2:22:1f:83:67:2b:f1:54:7f:2c:3d:c7:3c:28:90:fc:35:ba:
7d:48:38:4e:41:b6:7d:46:75:b4:d2:91:26:cd:77:41:ce:09:
9f:7e:15:81:26:7f:7e:80:5c:c9:b4:a6:fe:e2:8f:95:6a:31:
ce:cf:50:97:5a:b2:27:99:fc:7b:1d:85:c8:ea:b2:ff:95:ab:
84:53:56:8b:1c:f4:b8:03:73:42:a8:d8:71:5a:56:ef:67:ef:
08:71:dc:fa:12:2c:4f:1c:ab:80:ed:de:14:6e:8d:7f:76:77:
c0:3e:0f:ba:b3:8a:74:f7:4c:17:e1:ee:ff:97:78:24:02:dd:
28:2f:a9:da:bf:41:de:b2:41:14:23:33:50:6a:00:f4:4e:e2:
c2:62:1e:84:e1:2f:d9:eb:4f:a0:db:61:ce:87:43:d6:56:23:
5a:96:4b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:47:11 2025 by rpki-client