Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
File: jnADx8Z3zDvWhgMXaZKj69AvRss.mft (raw, json)
Hash identifier: Ea9ZQcwt2oNqtyBZXGTpsDLqWtGQHhEOeNKsNHQ0Bus=
Subject key identifier: B2:11:15:79:9F:B0:4C:D1:38:84:E5:81:67:33:5E:BC:68:D1:A8:B6
Authority key identifier: 8E:70:03:C7:C6:77:CC:3B:D6:86:03:17:69:92:A3:EB:D0:2F:46:CB
Certificate issuer: /CN=8e7003c7c677cc3bd68603176992a3ebd02f46cb
Certificate serial: 0197BCA2B93EA66E8A4963618B1671AD9056
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
Manifest number: 08A9
Signing time: Sun 29 Jun 2025 17:01:10 +0000
Manifest this update: Sun 29 Jun 2025 17:01:10 +0000
Manifest next update: Mon 30 Jun 2025 17:01:10 +0000
Files and hashes: 1: Ai-_WODQT5gjGDaQ6CXKPNkmTMg.roa (hash: WNvkuBtCgqvZC4hHmC3CVdy2TgQFB8OfoCsx9x6UKkg=)
2: jnADx8Z3zDvWhgMXaZKj69AvRss.crl (hash: IjFcU/Iv3RpfHK6XYRLS6rTftPxuWbb16USqJRr4OXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bc:a2:b9:3e:a6:6e:8a:49:63:61:8b:16:71:ad:90:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7003c7c677cc3bd68603176992a3ebd02f46cb
Validity
Not Before: Jun 29 17:01:10 2025 GMT
Not After : Jun 30 17:01:10 2025 GMT
Subject: CN=b21115799fb04cd13884e58167335ebc68d1a8b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:11:95:a1:49:30:4f:dc:65:73:ac:19:b4:d7:
7b:c3:3e:83:3e:3e:2f:c8:47:a2:75:1b:0d:f1:8f:
b7:f4:86:05:40:6f:16:26:30:ed:0f:1f:52:85:56:
b2:ab:74:db:be:85:5c:e4:63:2b:8b:0f:0d:cd:39:
2b:ef:b9:f6:e7:13:45:c6:d2:bb:f7:a1:9b:9d:ca:
ee:a7:e3:1a:5a:13:00:94:3e:7c:67:a1:bb:e9:43:
52:e4:84:53:25:e3:b4:6e:39:ff:21:a5:5e:b0:fe:
99:e2:9c:94:40:2b:07:d9:c0:72:a0:74:8e:b8:61:
20:73:70:54:56:e2:44:db:78:ae:97:3e:ab:bc:a2:
b1:2b:80:db:2d:34:2b:ba:8b:12:32:c3:95:c4:85:
70:63:bc:76:18:69:d0:62:b5:fc:14:df:f2:c2:cd:
bd:93:a6:42:7f:d4:27:c5:28:09:43:d5:40:f0:74:
77:d2:ae:0e:69:2b:e7:f7:d4:02:9c:a5:7c:61:2d:
23:b2:a9:42:18:4a:c4:d5:12:ef:0e:36:af:86:d3:
f6:42:5e:94:e5:86:74:72:9a:77:9f:65:eb:e7:89:
d6:b0:a2:07:51:74:df:8b:e2:76:51:2e:c0:78:82:
6f:86:66:b5:b8:4a:c0:9c:17:93:7a:55:05:8b:20:
64:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:11:15:79:9F:B0:4C:D1:38:84:E5:81:67:33:5E:BC:68:D1:A8:B6
X509v3 Authority Key Identifier:
keyid:8E:70:03:C7:C6:77:CC:3B:D6:86:03:17:69:92:A3:EB:D0:2F:46:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:9f:a6:64:59:fc:47:6d:29:86:03:09:92:da:27:93:45:d5:
67:64:16:d8:97:7e:84:32:ca:e7:63:6d:82:b4:f5:fc:a2:44:
d6:74:fb:e6:d7:11:9d:cc:19:41:58:db:f2:ee:96:a3:58:07:
2b:fc:32:e3:c7:c7:d1:53:fa:15:90:3f:55:2c:4b:d3:d3:fa:
7f:a7:2d:e1:5b:f9:fb:83:f3:ab:ac:9c:04:7c:c4:aa:c5:85:
61:7e:b1:da:99:2e:bb:e4:fd:1a:47:cc:84:92:02:2d:21:10:
e1:0b:07:c5:97:1f:5c:b5:2c:79:b6:4e:98:41:94:e1:3d:7c:
fc:ee:9d:b0:5c:0a:5a:2c:8f:ca:ec:0e:c9:ac:94:86:32:f1:
59:4f:d1:11:32:ab:81:ef:b9:92:53:72:d5:bc:64:c0:4a:84:
1d:4d:4b:77:61:a8:97:2f:5d:b8:b9:e9:ec:af:1c:7b:f9:d3:
a2:56:0e:83:10:cb:d9:d6:29:70:a0:67:47:75:cc:e3:1f:61:
e6:b3:c7:6f:ea:a1:62:73:5d:65:08:ae:a7:4f:02:bb:fe:be:
e3:6a:2c:84:90:a3:ec:b1:06:dd:73:23:36:18:8d:5f:4f:18:
a8:3a:50:b0:d0:9d:66:7b:08:ac:56:e2:aa:12:35:42:49:7f:
88:54:30:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe8ork+pm6KSWNhixZxrZBWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNzAwM2M3YzY3N2NjM2JkNjg2MDMxNzY5OTJhM2ViZDAy
ZjQ2Y2IwHhcNMjUwNjI5MTcwMTEwWhcNMjUwNjMwMTcwMTEwWjAzMTEwLwYDVQQD
EyhiMjExMTU3OTlmYjA0Y2QxMzg4NGU1ODE2NzMzNWViYzY4ZDFhOGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBGVoUkwT9xlc6wZtNd7wz6DPj4v
yEeidRsN8Y+39IYFQG8WJjDtDx9ShVayq3TbvoVc5GMriw8NzTkr77n25xNFxtK7
96Gbncrup+MaWhMAlD58Z6G76UNS5IRTJeO0bjn/IaVesP6Z4pyUQCsH2cByoHSO
uGEgc3BUVuJE23iulz6rvKKxK4DbLTQruosSMsOVxIVwY7x2GGnQYrX8FN/yws29
k6ZCf9QnxSgJQ9VA8HR30q4OaSvn99QCnKV8YS0jsqlCGErE1RLvDjavhtP2Ql6U
5YZ0cpp3n2Xr54nWsKIHUXTfi+J2US7AeIJvhma1uErAnBeTelUFiyBkQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLIRFXmfsEzROITlgWczXrxo0ai2MB8GA1UdIwQY
MBaAFI5wA8fGd8w71oYDF2mSo+vQL0bLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam5BRHg4WjN6RHZXaGdNWGFaS2o2OUF2UnNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi84ZDM0MTktNzhlMC00MTc2LTgyMTMt
ZjE3ZjAwNTYxMDhjLzEvam5BRHg4WjN6RHZXaGdNWGFaS2o2OUF2UnNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi84ZDM0MTktNzhlMC00MTc2LTgyMTMtZjE3ZjAwNTYxMDhj
LzEvam5BRHg4WjN6RHZXaGdNWGFaS2o2OUF2UnNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdZ+mZFn8
R20phgMJktonk0XVZ2QW2Jd+hDLK52NtgrT1/KJE1nT75tcRncwZQVjb8u6Wo1gH
K/wy48fH0VP6FZA/VSxL09P6f6ct4Vv5+4Pzq6ycBHzEqsWFYX6x2pkuu+T9GkfM
hJICLSEQ4QsHxZcfXLUsebZOmEGU4T18/O6dsFwKWiyPyuwOyayUhjLxWU/RETKr
ge+5klNy1bxkwEqEHU1Ld2Goly9duLnp7K8ce/nTolYOgxDL2dYpcKBnR3XM4x9h
5rPHb+qhYnNdZQiup08Cu/6+42oshJCj7LEG3XMjNhiNX08YqDpQsNCdZnsIrFbi
qhI1Qkl/iFQwUA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 20:57:39 2025 by rpki-client