Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft
File: jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft (raw, json)
Hash identifier: sVAyivv1CjDgytVKA+94q8IXFSpDo23X2rCXSP5FGCU=
Subject key identifier: 03:F1:70:69:1A:34:57:CA:2F:CE:0F:6E:93:C9:C6:38:AC:97:07:8C
Authority key identifier: 8F:3D:CF:FC:A5:79:5A:47:FC:C2:E1:38:CE:54:73:E8:00:09:82:95
Certificate issuer: /CN=8f3dcffca5795a47fcc2e138ce5473e800098295
Certificate serial: 019A4D06383C6E0C5C890E999388B9245D5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 04:00:44 +0000
Manifest this update: Tue 04 Nov 2025 04:00:44 +0000
Manifest next update: Wed 05 Nov 2025 04:00:44 +0000
Files and hashes: 1: aavUCeaqGsuo5nwd-mihXXwQfiI.roa (hash: OxgGdErcFeJc0UOAsG6nZs2JDUonjF0ySqzr57PwuHk=)
2: jz3P_KV5Wkf8wuE4zlRz6AAJgpU.crl (hash: LtUvxqF3PMgMKv+bHp09k30LYVQBRXRaDKDBHQ8Tn+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:38:3c:6e:0c:5c:89:0e:99:93:88:b9:24:5d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3dcffca5795a47fcc2e138ce5473e800098295
Validity
Not Before: Nov 4 04:00:44 2025 GMT
Not After : Nov 5 04:00:44 2025 GMT
Subject: CN=03f170691a3457ca2fce0f6e93c9c638ac97078c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:55:de:e8:89:7d:5e:02:20:fd:79:84:96:04:
f7:1e:19:68:ac:62:7c:25:8c:a5:8a:f6:d7:c8:3d:
92:2a:ff:a3:e6:48:f4:46:48:e2:1f:a6:10:50:b8:
af:61:ab:96:3d:a7:c5:3c:b7:26:17:46:5c:b4:06:
ea:f4:d3:8e:f5:9f:d5:3d:98:7d:82:36:14:90:7c:
55:a9:52:90:c9:49:00:3c:b5:de:8c:de:f8:d6:23:
8c:8e:3f:51:73:cb:bf:a7:0e:2e:51:74:62:91:09:
0c:78:60:bc:28:77:1d:38:54:da:a2:2e:14:3b:0b:
9c:aa:54:e7:c0:82:5c:18:01:bb:a7:1b:ed:3a:d6:
74:54:5e:c2:7a:6b:c4:25:a6:31:0c:76:d0:ee:34:
4f:cb:6a:81:a1:c4:d8:55:69:6e:d2:da:5a:4b:08:
58:77:8b:89:c8:28:52:e4:e0:67:cd:0f:ad:fc:ef:
fe:e7:97:5e:c4:2d:d3:21:28:30:40:0b:c5:de:1f:
a7:68:3d:fe:d5:b4:dc:8c:07:54:df:37:1b:a1:7e:
0f:10:19:59:26:c5:35:57:95:de:7f:77:5c:d6:e8:
56:50:f8:db:92:88:8e:54:de:5e:0c:16:bb:3a:11:
81:9d:99:60:51:f4:58:ee:6c:eb:a0:af:5b:e8:86:
09:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F1:70:69:1A:34:57:CA:2F:CE:0F:6E:93:C9:C6:38:AC:97:07:8C
X509v3 Authority Key Identifier:
keyid:8F:3D:CF:FC:A5:79:5A:47:FC:C2:E1:38:CE:54:73:E8:00:09:82:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:83:3d:be:b2:b3:b5:ac:09:e9:85:d3:2d:8e:85:9a:ea:04:
4a:2a:36:82:24:23:09:e0:d7:dc:43:3e:83:fa:f2:07:c1:c2:
d7:b5:53:b2:54:70:28:f1:0a:fd:20:11:69:aa:6a:46:a1:c9:
d1:4f:f6:1d:a6:b8:c3:22:85:32:66:20:11:48:72:9c:4a:a6:
ef:50:2e:a8:c8:a2:48:01:59:56:c4:73:58:a5:f3:b3:b7:75:
f5:a9:6d:9f:a6:b0:ed:f9:82:b0:40:24:c0:82:0d:0f:00:fa:
b8:e4:24:3f:75:6f:f1:0b:59:cd:d8:22:ca:06:4b:ea:3a:08:
94:18:30:35:e2:74:68:52:1f:2c:3e:d3:7b:01:27:bb:f6:9f:
cb:a3:42:07:e0:cb:2b:c5:64:ee:e6:5d:9e:24:31:ca:39:3a:
fc:b7:a5:40:e5:11:76:d0:e3:78:c7:ad:3a:52:8b:b5:68:78:
20:b6:07:03:76:3e:e3:6d:55:08:85:b9:52:c0:2a:d9:58:67:
1f:52:94:c1:f4:3d:1a:b8:5f:92:b2:ce:a7:28:77:1f:e5:ee:
e2:b0:7b:30:f0:3e:35:f4:4e:58:5b:75:22:30:b0:bf:d5:3f:
2f:52:f8:5a:c2:41:88:b7:3a:4c:23:e6:db:90:a4:bc:40:6b:
07:9d:dc:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:43:40 2025 by rpki-client