Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
File: jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft (raw, json)
Hash identifier: LvcUoM0NbrLfYeGjJjm5XI/jheS1AAOK2u58zbwrMaY=
Subject key identifier: 7B:9A:0C:F3:68:33:C8:2C:AB:BB:E8:75:5B:EA:36:4C:12:8B:36:48
Authority key identifier: 8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6
Certificate issuer: /CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
Certificate serial: 019A53E4185524B21F6D33D553697C0CF44D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
Manifest number: 16A2
Signing time: Wed 05 Nov 2025 12:00:48 +0000
Manifest this update: Wed 05 Nov 2025 12:00:48 +0000
Manifest next update: Thu 06 Nov 2025 12:00:48 +0000
Files and hashes: 1: 77z8QXKc8ERahKIbASlcnYfSpXA.roa (hash: 4+qUdKw0CqogSD0bEzw5oz5fN5HdO2eQJ/PSKGd57hQ=)
2: Vp9dMAyfVmCM5zZQhLE8hK5dRc0.roa (hash: 5cnih+GaWo66TQ4L2W2BbOxLKl4dL4P027VTj45pMMU=)
3: jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl (hash: gX+hmpjfujKa0507foG7Ovvh9VRlsGXyczFPS9u6X2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e4:18:55:24:b2:1f:6d:33:d5:53:69:7c:0c:f4:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
Validity
Not Before: Nov 5 12:00:48 2025 GMT
Not After : Nov 6 12:00:48 2025 GMT
Subject: CN=7b9a0cf36833c82cabbbe8755bea364c128b3648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:76:8e:97:17:f4:6d:db:a8:0f:4a:e0:69:c4:
c0:86:b5:a0:9c:2b:ff:02:6d:f1:1a:23:3a:e1:7d:
0b:23:86:e6:89:a1:80:2e:91:79:5b:bc:56:18:65:
e8:23:75:74:3d:80:a5:b6:3e:40:b3:b5:06:49:8e:
2e:11:39:82:8c:8f:78:a6:ab:72:78:be:4f:42:56:
b7:39:3f:b7:39:21:f8:96:c4:bc:48:8f:3c:87:5d:
d9:52:34:96:85:7a:ed:37:59:77:74:9b:b5:1d:1e:
4a:5e:45:44:3f:3c:02:93:82:55:a6:1c:ea:7f:7e:
0e:29:82:7b:37:9d:e9:c8:83:09:7f:a4:0f:39:46:
e9:a9:fc:5d:86:df:bb:25:5d:61:c2:87:5e:71:61:
50:2b:bd:08:8b:19:7f:3d:de:32:e0:3b:44:04:47:
20:12:27:2d:81:ff:d3:8a:e9:70:26:7a:2f:cb:28:
21:fa:13:6b:1f:db:d1:a6:50:19:b7:f4:3b:9a:cb:
e4:9f:4a:53:d8:d1:99:17:bb:af:6e:a0:01:bf:53:
5e:64:b6:4a:bf:a1:bc:a2:8c:5b:4e:b9:b2:45:c6:
92:05:76:a1:f5:ef:1e:00:a3:e4:83:34:22:e0:96:
0e:50:9c:ad:36:6a:c2:d9:1c:02:9a:d1:f4:d0:d6:
e0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:9A:0C:F3:68:33:C8:2C:AB:BB:E8:75:5B:EA:36:4C:12:8B:36:48
X509v3 Authority Key Identifier:
keyid:8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f3:93:b9:5e:75:11:4a:c1:6c:e0:c7:d0:83:12:f5:7a:69:
de:c2:44:e3:43:63:f1:b9:e9:8c:67:d0:7f:90:9a:cd:f0:bc:
59:98:50:43:62:80:e4:13:4f:d6:c6:88:d4:89:99:ee:31:45:
b0:cf:95:7f:2d:86:19:bc:49:b6:e5:2c:f8:d8:09:ee:fb:34:
5d:de:58:27:9a:2c:29:bd:93:46:42:98:cf:36:6a:c5:a6:b0:
ff:c8:dc:15:5f:f7:2d:91:88:65:09:75:0f:ff:b4:36:65:04:
fe:90:8e:05:ec:c1:ae:df:e6:56:5e:d4:5a:54:99:b2:34:fe:
77:a7:db:0f:46:08:4d:c2:f3:03:db:21:25:c0:c6:98:6f:7e:
be:2e:3d:c1:6d:d9:ec:55:22:53:56:b7:33:71:09:47:63:7a:
a2:55:87:21:82:9d:c7:b8:e3:5d:fe:65:1c:0a:33:8a:ce:dc:
08:8c:93:b3:fb:ed:46:92:c0:cc:d6:10:c7:ab:c3:4e:b5:e0:
dc:b3:60:a3:32:33:7c:fa:d8:4a:7f:ec:88:40:b5:c7:e9:5a:
2c:3f:d0:32:ad:54:92:53:bb:ab:0e:e1:ac:8b:0f:e8:a5:bd:
c6:1c:39:ad:20:20:a8:99:c8:46:6a:72:09:70:7d:19:d5:70:
de:f0:5c:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpT5BhVJLIfbTPVU2l8DPRNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmM2Y5ZTdmZmU4ODU4Mzg3ZWQxYjNhN2VjYTc2MjA1ZWYw
ZTIxZjYwHhcNMjUxMTA1MTIwMDQ4WhcNMjUxMTA2MTIwMDQ4WjAzMTEwLwYDVQQD
Eyg3YjlhMGNmMzY4MzNjODJjYWJiYmU4NzU1YmVhMzY0YzEyOGIzNjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnaOlxf0bduoD0rgacTAhrWgnCv/
Am3xGiM64X0LI4bmiaGALpF5W7xWGGXoI3V0PYCltj5As7UGSY4uETmCjI94pqty
eL5PQla3OT+3OSH4lsS8SI88h13ZUjSWhXrtN1l3dJu1HR5KXkVEPzwCk4JVphzq
f34OKYJ7N53pyIMJf6QPOUbpqfxdht+7JV1hwodecWFQK70Iixl/Pd4y4DtEBEcg
Eictgf/TiulwJnovyygh+hNrH9vRplAZt/Q7msvkn0pT2NGZF7uvbqABv1NeZLZK
v6G8ooxbTrmyRcaSBXah9e8eAKPkgzQi4JYOUJytNmrC2RwCmtH00NbgxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHuaDPNoM8gsq7vodVvqNkwSizZIMB8GA1UdIwQY
MBaAFI8/nn/+iFg4ftGzp+ynYgXvDiH2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanotZWZfNklXRGgtMGJPbjdLZGlCZThPSWZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy84NDIwZTYtOGMzZS00Y2NiLWIxNDMt
ZTdhY2Y5NDFmMzc1LzEvanotZWZfNklXRGgtMGJPbjdLZGlCZThPSWZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy84NDIwZTYtOGMzZS00Y2NiLWIxNDMtZTdhY2Y5NDFmMzc1
LzEvanotZWZfNklXRGgtMGJPbjdLZGlCZThPSWZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGfOTuV51
EUrBbODH0IMS9Xpp3sJE40Nj8bnpjGfQf5CazfC8WZhQQ2KA5BNP1saI1ImZ7jFF
sM+Vfy2GGbxJtuUs+NgJ7vs0Xd5YJ5osKb2TRkKYzzZqxaaw/8jcFV/3LZGIZQl1
D/+0NmUE/pCOBezBrt/mVl7UWlSZsjT+d6fbD0YITcLzA9shJcDGmG9+vi49wW3Z
7FUiU1a3M3EJR2N6olWHIYKdx7jjXf5lHAozis7cCIyTs/vtRpLAzNYQx6vDTrXg
3LNgozIzfPrYSn/siEC1x+laLD/QMq1UklO7qw7hrIsP6KW9xhw5rSAgqJnIRmpy
CXB9GdVw3vBc7g==
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:47:36 2025 by rpki-client