Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
File: jzHMNgWz78CbJohQgGO2_UhVYd0.mft (raw, json)
Hash identifier: hLIDPJgXa2Arg9d+GOetQo+GFB64XxrITr2KSjRz660=
Subject key identifier: 6E:BB:C2:73:82:10:57:AB:03:32:DA:B5:B9:D4:64:B5:3C:6C:0A:1D
Authority key identifier: 8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD
Certificate issuer: /CN=8f31cc3605b3efc09b2688508063b6fd485561dd
Certificate serial: 019A4E190434F503DC9CAED716BF8794364A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
Manifest number: 0BF1
Signing time: Tue 04 Nov 2025 09:00:53 +0000
Manifest this update: Tue 04 Nov 2025 09:00:53 +0000
Manifest next update: Wed 05 Nov 2025 09:00:53 +0000
Files and hashes: 1: KGShywXbD4wB1PLsBTNT01VDQKY.roa (hash: hBh9EiIl2TqddpHizY/LGkFYV3Ncy9Yws3g05SvVJTg=)
2: jzHMNgWz78CbJohQgGO2_UhVYd0.crl (hash: OcGorYF+IFpjYfsuJGfM7l7tqIPc7iUNQCWOtOvay5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:04:34:f5:03:dc:9c:ae:d7:16:bf:87:94:36:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f31cc3605b3efc09b2688508063b6fd485561dd
Validity
Not Before: Nov 4 09:00:53 2025 GMT
Not After : Nov 5 09:00:53 2025 GMT
Subject: CN=6ebbc273821057ab0332dab5b9d464b53c6c0a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2f:24:eb:61:31:71:b1:63:16:4e:01:a1:d9:
2b:48:fc:37:bc:d5:35:2b:08:12:ec:30:98:24:e7:
c1:a5:34:b1:31:dc:84:13:3f:57:cb:b9:42:76:c9:
0e:1b:cc:5f:5a:26:ad:5f:b3:b5:e4:03:5a:f6:d5:
32:25:cc:d0:6f:94:1c:5b:3d:4e:98:74:d1:18:1a:
fc:13:59:54:6d:cd:24:b0:b0:cc:85:46:d8:46:39:
16:b5:61:71:7b:39:b6:8a:ea:1e:16:6b:34:4f:bb:
91:a4:25:85:e0:ff:9e:9e:1a:34:fd:3f:6c:0a:f0:
5d:b3:b9:77:85:d9:b5:ce:70:de:d5:b4:d7:84:dc:
5b:4b:ed:d5:9c:7f:fc:65:bb:38:1e:bd:31:38:16:
21:ec:7b:4f:4f:bc:10:ef:fd:51:e8:43:82:a8:5c:
d9:27:78:fb:f1:59:10:28:79:26:25:2c:0e:32:9d:
c7:ba:16:f0:a6:40:fc:b1:1f:fc:e1:ae:7e:e8:9f:
84:74:f2:dd:e5:fa:fb:ae:c8:8e:d8:0e:82:53:22:
39:66:37:41:5f:06:f3:ce:08:98:f1:e3:5f:16:f9:
c8:3d:19:a6:33:a5:de:6b:14:ae:a5:35:a7:c9:60:
e6:c2:c2:bb:f6:79:6b:c7:97:35:eb:67:08:b5:40:
f9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BB:C2:73:82:10:57:AB:03:32:DA:B5:B9:D4:64:B5:3C:6C:0A:1D
X509v3 Authority Key Identifier:
keyid:8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:dd:47:8a:dc:c6:e6:e4:94:79:74:79:a3:78:fb:09:02:81:
75:d3:71:86:a8:a5:75:12:83:20:0d:b9:39:a8:61:25:a2:de:
64:ce:42:66:64:7d:af:dd:06:dd:f9:d5:58:c6:a0:18:ae:c3:
0e:dd:88:98:a6:44:60:49:59:28:d2:62:60:71:89:6c:78:3f:
ed:52:a3:ab:73:4e:f8:e2:8d:6b:50:2b:b0:02:f2:bd:4c:8e:
8f:f3:fb:7b:59:38:a0:82:9e:bc:c9:ff:f6:23:a8:8a:a3:df:
d4:83:d0:47:a9:9c:c3:4e:f0:10:d0:16:30:1d:a4:84:8a:85:
a2:87:86:22:c0:fc:39:3e:5a:d3:4c:98:a9:7b:4b:63:ba:5d:
a8:8d:9c:7a:56:4f:80:f4:49:cc:bc:63:ff:69:1d:fe:b3:40:
ab:f9:af:3c:11:98:5c:40:04:92:b4:12:bd:88:c0:70:96:23:
2a:d9:13:7d:d2:c7:3e:ec:41:bd:8f:5f:56:5a:9a:ac:7c:de:
d7:8e:80:87:a5:75:5f:6e:02:d5:80:ec:8a:46:8f:32:85:3f:
7a:dc:99:e6:d4:dc:13:c9:f3:b4:82:a9:48:ef:94:bf:8b:b7:
80:01:23:c0:6f:42:8d:f7:14:e0:2f:48:d2:08:5a:ee:d6:5d:
7e:2c:b3:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGQQ09QPcnK7XFr+HlDZKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMzFjYzM2MDViM2VmYzA5YjI2ODg1MDgwNjNiNmZkNDg1
NTYxZGQwHhcNMjUxMTA0MDkwMDUzWhcNMjUxMTA1MDkwMDUzWjAzMTEwLwYDVQQD
Eyg2ZWJiYzI3MzgyMTA1N2FiMDMzMmRhYjViOWQ0NjRiNTNjNmMwYTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC8k62ExcbFjFk4BodkrSPw3vNU1
KwgS7DCYJOfBpTSxMdyEEz9Xy7lCdskOG8xfWiatX7O15ANa9tUyJczQb5QcWz1O
mHTRGBr8E1lUbc0ksLDMhUbYRjkWtWFxezm2iuoeFms0T7uRpCWF4P+enho0/T9s
CvBds7l3hdm1znDe1bTXhNxbS+3VnH/8Zbs4Hr0xOBYh7HtPT7wQ7/1R6EOCqFzZ
J3j78VkQKHkmJSwOMp3HuhbwpkD8sR/84a5+6J+EdPLd5fr7rsiO2A6CUyI5ZjdB
XwbzzgiY8eNfFvnIPRmmM6XeaxSupTWnyWDmwsK79nlrx5c162cItUD5UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG67wnOCEFerAzLatbnUZLU8bAodMB8GA1UdIwQY
MBaAFI8xzDYFs+/AmyaIUIBjtv1IVWHdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanpITU5nV3o3OENiSm9oUWdHTzJfVWhWWWQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hM2E1YTQtZDA3ZC00YWJkLWIxMjkt
MjI3Zjc0OTdkYzFlLzEvanpITU5nV3o3OENiSm9oUWdHTzJfVWhWWWQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9hM2E1YTQtZDA3ZC00YWJkLWIxMjktMjI3Zjc0OTdkYzFl
LzEvanpITU5nV3o3OENiSm9oUWdHTzJfVWhWWWQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO91HitzG
5uSUeXR5o3j7CQKBddNxhqildRKDIA25OahhJaLeZM5CZmR9r90G3fnVWMagGK7D
Dt2ImKZEYElZKNJiYHGJbHg/7VKjq3NO+OKNa1ArsALyvUyOj/P7e1k4oIKevMn/
9iOoiqPf1IPQR6mcw07wENAWMB2khIqFooeGIsD8OT5a00yYqXtLY7pdqI2celZP
gPRJzLxj/2kd/rNAq/mvPBGYXEAEkrQSvYjAcJYjKtkTfdLHPuxBvY9fVlqarHze
146Ah6V1X24C1YDsikaPMoU/etyZ5tTcE8nztIKpSO+Uv4u3gAEjwG9CjfcU4C9I
0gha7tZdfiyzdQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:14:00 2025 by rpki-client