Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
File: jzHMNgWz78CbJohQgGO2_UhVYd0.mft (raw, json)
Hash identifier: fbZfJgG4RoLDVQcD+0EMZqNhPUKlEvZeAWb5dGEEmuM=
Subject key identifier: F0:B4:BA:2D:5F:34:54:0D:BE:58:3D:EC:83:86:35:52:4C:BE:99:B0
Authority key identifier: 8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD
Certificate issuer: /CN=8f31cc3605b3efc09b2688508063b6fd485561dd
Certificate serial: 019874F4EB0F1FC3A64EAAE9507B9DBE46A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
Manifest number: 0AFC
Signing time: Mon 04 Aug 2025 12:01:04 +0000
Manifest this update: Mon 04 Aug 2025 12:01:04 +0000
Manifest next update: Tue 05 Aug 2025 12:01:04 +0000
Files and hashes: 1: KGShywXbD4wB1PLsBTNT01VDQKY.roa (hash: hBh9EiIl2TqddpHizY/LGkFYV3Ncy9Yws3g05SvVJTg=)
2: jzHMNgWz78CbJohQgGO2_UhVYd0.crl (hash: CWTSlvVarVXKHTbtLaqiO8nZNVDcwEOS04VXLd9GZqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:eb:0f:1f:c3:a6:4e:aa:e9:50:7b:9d:be:46:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f31cc3605b3efc09b2688508063b6fd485561dd
Validity
Not Before: Aug 4 12:01:04 2025 GMT
Not After : Aug 5 12:01:04 2025 GMT
Subject: CN=f0b4ba2d5f34540dbe583dec838635524cbe99b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3e:13:22:10:c7:99:f7:b1:08:36:91:fe:a4:
5e:d0:ca:03:8f:4c:c3:e7:49:f8:d5:f1:9c:3d:a8:
bc:f4:a0:c3:3d:66:03:2e:33:26:5c:f2:4c:56:e7:
42:27:d0:8d:d4:9f:8e:6f:53:50:4d:85:82:71:86:
03:95:79:a1:36:ad:db:43:78:b6:a7:53:e2:76:46:
64:5e:ce:aa:a7:bc:ab:45:59:90:ab:ac:c0:32:29:
72:8f:a7:f6:41:de:35:ae:1f:b1:39:23:2d:f5:bc:
94:02:b6:3f:24:f4:be:f1:77:d2:3c:6f:4f:80:1f:
55:15:61:60:fb:d8:c2:ce:8f:20:9d:eb:d3:ca:4c:
39:78:f8:40:1e:31:34:ee:0f:6a:a6:5e:67:b2:48:
14:24:05:93:cf:1e:cf:27:25:ae:c8:73:b2:56:d7:
d8:e0:10:9d:76:af:fa:ec:5d:f7:f1:a4:3b:4e:d7:
d0:85:06:48:6d:b8:07:ff:2d:47:32:b3:aa:37:4a:
8f:e0:e1:e5:97:17:d7:c6:94:82:f2:1d:74:c9:72:
c0:9d:e3:0b:4c:27:49:33:a0:4a:3e:ca:f0:61:89:
d7:ff:5d:0f:d4:4e:7d:d4:49:42:fe:be:eb:86:52:
62:fd:a7:b3:9b:41:4f:d4:e9:7a:3a:ba:2a:8a:c4:
91:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B4:BA:2D:5F:34:54:0D:BE:58:3D:EC:83:86:35:52:4C:BE:99:B0
X509v3 Authority Key Identifier:
keyid:8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:7e:28:40:67:6d:d2:74:b2:29:70:06:6b:0a:df:0d:2e:c8:
21:e2:f3:a4:8f:b3:51:28:f1:b0:93:b3:83:58:03:36:52:58:
b5:ba:9b:e7:f6:4a:a8:a5:07:7c:70:0d:42:41:08:54:d1:5d:
10:61:0c:ff:2a:23:df:7d:1f:71:f1:8e:3d:dc:0a:d9:8b:68:
ca:22:1b:2b:30:0a:dc:ba:0b:84:65:38:fd:22:a7:f3:40:79:
ec:87:70:64:0a:64:a6:61:f5:0f:76:fc:27:c0:b6:6e:f0:77:
86:6c:93:09:ac:1b:17:95:15:d3:f4:27:c0:fb:66:1e:36:33:
57:79:09:81:84:72:e4:c6:6a:df:8a:f4:e4:96:0c:61:ac:c2:
b6:00:72:46:3d:9b:56:15:ae:87:55:8f:46:a1:e4:eb:b2:ac:
6a:1e:98:1d:23:1a:d8:86:89:54:b4:48:ac:1b:2f:6a:95:64:
e7:df:48:85:c8:ca:4d:a5:76:0d:10:a3:5f:70:58:ed:4e:a6:
43:34:d0:b6:32:78:7f:f8:8a:b0:2b:0b:2e:31:fc:64:bb:ef:
ab:15:f1:fc:67:56:42:3f:c2:78:0e:ce:46:f3:8f:d4:73:2c:
12:e6:99:be:73:17:e9:24:82:e8:9c:44:a3:a8:7e:75:cc:a3:
94:ca:fd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:34:01 2025 by rpki-client