Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
File: jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft (raw, json)
Hash identifier: FaNIekSonwGPca/3Hp5BomwnLNOUqRs2wyLKpWXUakM=
Subject key identifier: 65:BA:B1:75:47:3B:F5:28:70:7C:54:02:8D:07:49:CB:58:B4:C0:68
Authority key identifier: 8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6
Certificate issuer: /CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
Certificate serial: 01988A331AED7EEEFCA89609A7FA7AA14F01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
Manifest number: 15B5
Signing time: Fri 08 Aug 2025 15:01:01 +0000
Manifest this update: Fri 08 Aug 2025 15:01:01 +0000
Manifest next update: Sat 09 Aug 2025 15:01:01 +0000
Files and hashes: 1: 77z8QXKc8ERahKIbASlcnYfSpXA.roa (hash: 4+qUdKw0CqogSD0bEzw5oz5fN5HdO2eQJ/PSKGd57hQ=)
2: Vp9dMAyfVmCM5zZQhLE8hK5dRc0.roa (hash: 5cnih+GaWo66TQ4L2W2BbOxLKl4dL4P027VTj45pMMU=)
3: jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl (hash: i+OVZmeS2T1udEho9z5XlqnvjC7pxMAxwviOliJ74aI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 15:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:33:1a:ed:7e:ee:fc:a8:96:09:a7:fa:7a:a1:4f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
Validity
Not Before: Aug 8 15:01:01 2025 GMT
Not After : Aug 9 15:01:01 2025 GMT
Subject: CN=65bab175473bf528707c54028d0749cb58b4c068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:51:9a:c4:09:c4:b2:d0:04:6f:de:51:b9:62:
d2:61:75:56:f9:28:a6:6a:6e:39:2d:17:a6:b9:23:
47:92:9f:03:b4:26:46:1e:84:46:37:2e:f2:7d:a6:
09:b7:36:33:47:65:91:3d:99:4a:42:79:70:eb:96:
49:88:a7:5d:f7:76:2e:a6:9b:d9:c9:18:35:0a:45:
f8:7f:49:de:10:0c:0b:4f:26:8f:ef:56:61:d1:db:
30:8c:f7:8c:f8:4d:82:7d:95:e7:4c:76:68:e6:75:
b0:35:08:19:92:f3:4f:72:ea:57:09:47:5b:34:e2:
4b:35:61:f5:80:c9:5d:64:8d:07:29:68:90:2c:07:
05:e5:99:99:4e:34:1a:8f:d1:84:74:65:2b:c0:8c:
5b:1f:2b:3f:15:19:1d:cb:b2:f9:2f:af:20:1b:bf:
79:ee:c4:04:ae:c2:13:c2:17:0b:77:0a:7a:dd:9e:
96:25:64:1c:78:2a:e5:bc:ec:3a:c8:33:e5:21:c1:
4a:4b:d7:86:ad:b2:dd:b6:da:2b:ce:d0:91:6d:66:
31:ca:1f:b1:bc:84:b7:e3:fe:eb:12:a5:c7:d9:f3:
7b:a5:df:72:2d:60:23:37:c2:92:39:67:f3:6b:0b:
47:c5:dd:74:d5:46:d1:76:f7:22:dd:80:52:8e:d1:
7a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:BA:B1:75:47:3B:F5:28:70:7C:54:02:8D:07:49:CB:58:B4:C0:68
X509v3 Authority Key Identifier:
keyid:8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:00:9d:4e:c0:c9:1d:2c:fc:08:98:1d:06:1d:1a:5b:a4:cc:
cf:05:6b:c6:56:9d:f9:8a:05:d4:76:d6:3c:12:5c:a4:fe:d4:
0e:21:9b:19:78:f5:96:27:e0:db:35:6f:a9:1d:2a:99:ad:ef:
f6:0a:ea:b9:7f:9e:0f:08:34:cc:e4:52:50:7c:c7:66:76:49:
08:98:ed:13:0e:65:ef:4e:21:91:47:19:c5:01:b9:b7:08:cd:
15:f8:85:da:18:c1:03:48:4a:59:d5:96:db:b4:f9:10:4e:e0:
e2:6c:67:21:07:0e:6e:8b:75:d9:00:80:7a:50:e7:9d:1a:b3:
15:79:dc:23:2e:1b:da:a2:e8:fb:5b:cd:fd:eb:16:c9:b3:c8:
7f:94:5b:54:a1:9a:4d:5e:ad:41:b3:b1:71:45:4a:d1:ee:b4:
33:89:a6:d1:17:53:27:36:33:4c:55:12:12:ac:51:35:d0:88:
36:8b:9a:4f:41:d6:5c:e0:67:ce:b6:53:ff:b3:17:d1:be:ac:
bd:d6:7f:db:ba:15:71:02:9c:2e:bf:33:a7:b5:02:9f:7e:5a:
b5:5f:67:bb:7d:33:e4:27:c8:e6:66:5f:c7:2f:e3:b6:dd:1d:
a5:2e:fb:bb:07:2f:ef:ca:ad:ae:30:29:f9:bc:e6:80:34:48:
cf:d0:bf:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:02:33 2025 by rpki-client