Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
File: jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft (raw, json)
Hash identifier: f3+4HH1xyaY5PL9LEU04wxspwd6LfSkjVGTGAOH2cz4=
Subject key identifier: 77:EF:24:B5:88:3D:B0:7E:6C:DA:D1:0B:F0:45:63:DE:B1:78:83:9D
Authority key identifier: 8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6
Certificate issuer: /CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
Certificate serial: 0197857CD9946EFF630AD40A6B97F5877D57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
Manifest number: 152E
Signing time: Thu 19 Jun 2025 00:00:41 +0000
Manifest this update: Thu 19 Jun 2025 00:00:41 +0000
Manifest next update: Fri 20 Jun 2025 00:00:41 +0000
Files and hashes: 1: 77z8QXKc8ERahKIbASlcnYfSpXA.roa (hash: 4+qUdKw0CqogSD0bEzw5oz5fN5HdO2eQJ/PSKGd57hQ=)
2: Vp9dMAyfVmCM5zZQhLE8hK5dRc0.roa (hash: 5cnih+GaWo66TQ4L2W2BbOxLKl4dL4P027VTj45pMMU=)
3: jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl (hash: z1++hr+LcSR6MUpbJkkx/czBG8fmb/AtHSFxFTMjx6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 23:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:85:7c:d9:94:6e:ff:63:0a:d4:0a:6b:97:f5:87:7d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
Validity
Not Before: Jun 19 00:00:41 2025 GMT
Not After : Jun 20 00:00:41 2025 GMT
Subject: CN=77ef24b5883db07e6cdad10bf04563deb178839d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b5:59:7c:fb:fb:96:70:d9:7b:1e:e9:13:e1:
68:40:c3:6b:22:ab:48:1a:d5:e7:d0:63:ad:e6:eb:
39:66:09:15:81:9f:14:df:16:c0:29:43:25:47:56:
47:e3:a6:7b:09:9b:d3:a4:3f:d9:8d:bf:93:3b:b6:
cf:55:aa:0d:bf:5f:fc:6e:48:7d:d6:49:22:c4:7d:
64:0b:1f:c7:33:ec:8f:08:47:f5:cf:a3:8f:a1:14:
ad:9e:b5:25:2f:94:d8:5b:61:a9:ad:af:f4:ef:d6:
48:dc:b7:9d:b2:45:07:14:3e:89:8b:dd:74:40:31:
32:b9:9f:42:c6:09:2b:8a:1d:5b:ba:f2:b1:2e:8d:
53:fb:e5:50:44:58:bb:20:af:67:f7:50:13:1c:0f:
4c:47:a9:dc:d6:27:4f:82:dd:11:13:57:ee:66:13:
d9:c4:ba:a1:ad:3f:1e:97:64:03:c8:23:b2:4b:bf:
c9:80:0b:3f:68:54:80:11:17:54:57:6e:af:dc:17:
75:8b:0c:9c:3c:88:a2:d7:bf:1b:7f:aa:32:73:e0:
a7:31:8c:48:17:74:ba:15:e7:03:35:cd:a6:75:63:
71:c9:2c:60:b4:90:f1:52:2b:95:33:34:f6:bf:fe:
f9:28:34:b6:3a:1c:0d:05:c7:8e:4d:3a:0e:ec:5f:
bd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:EF:24:B5:88:3D:B0:7E:6C:DA:D1:0B:F0:45:63:DE:B1:78:83:9D
X509v3 Authority Key Identifier:
keyid:8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:14:df:f0:ed:de:c5:b5:bc:f7:a7:3e:a5:cf:34:32:a8:b9:
38:d6:f3:ce:1c:59:d0:89:63:26:12:13:d1:72:f4:c4:c6:22:
88:3f:7c:68:58:04:2a:d6:8e:ff:40:08:da:78:0d:18:10:27:
0a:04:45:59:c6:75:4d:34:54:d6:fa:1c:7f:ed:c2:a5:6a:52:
2e:66:35:71:81:09:aa:42:b1:e6:64:1c:38:d4:c3:09:b8:86:
bb:b5:c6:b2:80:6d:87:db:b6:2f:16:f6:79:9a:82:fe:81:8c:
c1:c9:5e:3e:5e:80:6e:f8:7c:83:2b:bd:d1:dc:8d:56:71:4c:
d3:ca:87:b6:3e:52:46:59:c6:fb:2c:31:0f:d7:4f:ca:eb:18:
54:c5:26:bc:df:62:39:de:c6:b8:f1:ce:c7:87:b5:2b:81:13:
ef:df:40:ae:79:fe:d4:07:c4:10:4b:17:a1:83:a8:33:b5:83:
c4:56:fc:73:e4:ec:ad:f7:b3:6b:14:56:b8:55:3f:5b:dc:8e:
4f:93:8a:46:59:a8:51:83:54:7a:fc:85:e7:5b:03:1e:74:a8:
7a:03:29:c8:9c:48:52:bb:d6:26:a8:23:c2:02:27:16:c9:ff:
43:52:ee:1f:df:7b:02:79:49:9d:e0:fa:c4:27:7a:9a:2e:58:
5d:6e:a0:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeFfNmUbv9jCtQKa5f1h31XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmM2Y5ZTdmZmU4ODU4Mzg3ZWQxYjNhN2VjYTc2MjA1ZWYw
ZTIxZjYwHhcNMjUwNjE5MDAwMDQxWhcNMjUwNjIwMDAwMDQxWjAzMTEwLwYDVQQD
Eyg3N2VmMjRiNTg4M2RiMDdlNmNkYWQxMGJmMDQ1NjNkZWIxNzg4MzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7VZfPv7lnDZex7pE+FoQMNrIqtI
GtXn0GOt5us5ZgkVgZ8U3xbAKUMlR1ZH46Z7CZvTpD/Zjb+TO7bPVaoNv1/8bkh9
1kkixH1kCx/HM+yPCEf1z6OPoRStnrUlL5TYW2Gpra/079ZI3LedskUHFD6Ji910
QDEyuZ9Cxgkrih1buvKxLo1T++VQRFi7IK9n91ATHA9MR6nc1idPgt0RE1fuZhPZ
xLqhrT8el2QDyCOyS7/JgAs/aFSAERdUV26v3Bd1iwycPIii178bf6oyc+CnMYxI
F3S6FecDNc2mdWNxySxgtJDxUiuVMzT2v/75KDS2OhwNBceOTToO7F+93QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHfvJLWIPbB+bNrRC/BFY96xeIOdMB8GA1UdIwQY
MBaAFI8/nn/+iFg4ftGzp+ynYgXvDiH2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanotZWZfNklXRGgtMGJPbjdLZGlCZThPSWZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy84NDIwZTYtOGMzZS00Y2NiLWIxNDMt
ZTdhY2Y5NDFmMzc1LzEvanotZWZfNklXRGgtMGJPbjdLZGlCZThPSWZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy84NDIwZTYtOGMzZS00Y2NiLWIxNDMtZTdhY2Y5NDFmMzc1
LzEvanotZWZfNklXRGgtMGJPbjdLZGlCZThPSWZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdhTf8O3e
xbW896c+pc80Mqi5ONbzzhxZ0IljJhIT0XL0xMYiiD98aFgEKtaO/0AI2ngNGBAn
CgRFWcZ1TTRU1vocf+3CpWpSLmY1cYEJqkKx5mQcONTDCbiGu7XGsoBth9u2Lxb2
eZqC/oGMwclePl6Abvh8gyu90dyNVnFM08qHtj5SRlnG+ywxD9dPyusYVMUmvN9i
Od7GuPHOx4e1K4ET799Arnn+1AfEEEsXoYOoM7WDxFb8c+TsrfezaxRWuFU/W9yO
T5OKRlmoUYNUevyF51sDHnSoegMpyJxIUrvWJqgjwgInFsn/Q1LuH997AnlJneD6
xCd6mi5YXW6gUA==
-----END CERTIFICATE-----
Generated at Thu Jun 19 07:35:07 2025 by rpki-client