Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft
File: Jg8Qh8zQbmtHZDxOvni8z1885dI.mft (raw, json)
Hash identifier: ap4fvKZx2r/bOCfu88XUZoBav+bdkYn5VT8mfQ06H5A=
Subject key identifier: BF:C2:D7:AB:CD:2F:35:50:00:0F:5B:89:B8:37:3A:55:D7:94:B3:39
Authority key identifier: 26:0F:10:87:CC:D0:6E:6B:47:64:3C:4E:BE:78:BC:CF:5F:3C:E5:D2
Certificate issuer: /CN=260f1087ccd06e6b47643c4ebe78bccf5f3ce5d2
Certificate serial: 0197B820CA46CFAB06B6D72335577E08B28A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft
Manifest number: 2B
Signing time: Sat 28 Jun 2025 20:00:46 +0000
Manifest this update: Sat 28 Jun 2025 20:00:46 +0000
Manifest next update: Sun 29 Jun 2025 20:00:46 +0000
Files and hashes: 1: Jg8Qh8zQbmtHZDxOvni8z1885dI.crl (hash: iXnXuyhibcco0yj0qeE99uQa0uE8UYW+MbAfMLF+Ljs=)
2: Z56wz9s-yA71TOQ3V7HmB0iZlE0.roa (hash: DwyslAfs3QgOyERfkmn0OYGStc2kCKpsEIT1p+3pYB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:ca:46:cf:ab:06:b6:d7:23:35:57:7e:08:b2:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260f1087ccd06e6b47643c4ebe78bccf5f3ce5d2
Validity
Not Before: Jun 28 20:00:46 2025 GMT
Not After : Jun 29 20:00:46 2025 GMT
Subject: CN=bfc2d7abcd2f3550000f5b89b8373a55d794b339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2e:0c:73:73:07:b7:f1:0d:ca:3e:fb:7a:70:
2c:4a:4c:82:3f:07:a7:59:ef:9a:e5:f2:8b:a8:e7:
e1:70:7a:0b:03:9b:23:bd:ec:53:a3:ef:ca:da:89:
2a:5b:dc:52:ef:76:ec:1b:2b:11:36:cf:f2:a8:b1:
8b:db:4c:bb:2f:01:63:17:d2:aa:d2:79:b1:16:27:
4f:70:38:8e:12:f4:19:3d:bc:f7:d4:1a:30:b2:fa:
2f:f8:1f:2a:b5:7a:4a:6b:7b:61:35:8d:e4:05:fa:
58:3b:7c:8f:ab:0e:51:9e:0d:bf:40:66:c4:40:6a:
ce:31:dd:24:61:04:39:6a:a4:a3:87:86:21:a5:c6:
75:f6:1d:d5:a4:11:80:83:c1:f5:69:92:a0:8a:d9:
a6:e7:7f:4a:81:e9:14:04:2a:41:a8:5b:01:46:f3:
85:7e:fe:c1:d2:28:04:02:2e:2d:cb:62:72:0b:ed:
cc:56:de:ec:fa:67:25:04:a8:62:60:b2:4b:d5:5a:
c0:85:a6:c0:ac:66:84:4e:ff:cc:18:f6:1d:19:73:
84:79:ba:96:c8:e5:00:9d:0b:6b:0a:f4:23:32:f2:
f3:b6:71:be:0c:13:63:4f:ab:14:42:21:89:b7:bd:
39:83:de:7d:ea:c5:f2:c6:fe:49:94:ad:53:66:30:
85:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C2:D7:AB:CD:2F:35:50:00:0F:5B:89:B8:37:3A:55:D7:94:B3:39
X509v3 Authority Key Identifier:
keyid:26:0F:10:87:CC:D0:6E:6B:47:64:3C:4E:BE:78:BC:CF:5F:3C:E5:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:a1:6f:6e:04:c3:fc:55:4e:aa:9b:56:46:93:31:b0:a0:98:
8c:4f:62:4b:59:4d:0a:b9:bf:90:1e:ef:15:e7:7c:49:85:96:
7c:8a:1d:a4:69:ab:af:57:14:88:87:99:02:9d:7c:c8:96:9a:
65:a9:ac:a6:b6:e3:4f:04:dc:83:2d:e3:7a:dc:2b:e0:93:58:
a3:c1:11:77:67:37:13:c2:0a:e7:dc:ce:5a:0b:7e:1b:2f:a0:
9b:95:bb:40:4d:e6:9a:e1:c3:cf:72:ce:e3:5a:f7:44:b5:2b:
7d:a8:79:3a:f3:50:29:61:5a:07:30:bc:e1:c7:1b:fb:c3:f8:
07:2d:37:66:e6:8b:d5:e2:de:d4:85:ab:8a:dc:55:39:94:34:
c1:9e:aa:7d:dc:8b:5d:28:24:cf:29:e4:50:bb:35:07:90:2e:
a6:de:32:36:ab:2c:8b:52:c3:09:15:50:0f:31:7a:81:65:4a:
bb:ed:5e:f5:34:a5:9f:40:cf:0e:f1:9c:c9:6f:6e:42:90:a4:
1d:89:20:8b:8d:d3:a2:9b:e8:05:e3:34:2e:4c:52:15:4f:77:
b4:0f:f3:61:c2:91:91:b7:18:a2:33:88:f2:f4:e2:b6:52:97:
5b:29:7e:56:57:ac:37:f2:82:13:05:38:58:ac:8d:0a:c4:b1:
5a:62:d7:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IMpGz6sGttcjNVd+CLKKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MGYxMDg3Y2NkMDZlNmI0NzY0M2M0ZWJlNzhiY2NmNWYz
Y2U1ZDIwHhcNMjUwNjI4MjAwMDQ2WhcNMjUwNjI5MjAwMDQ2WjAzMTEwLwYDVQQD
EyhiZmMyZDdhYmNkMmYzNTUwMDAwZjViODliODM3M2E1NWQ3OTRiMzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1S4Mc3MHt/ENyj77enAsSkyCPwen
We+a5fKLqOfhcHoLA5sjvexTo+/K2okqW9xS73bsGysRNs/yqLGL20y7LwFjF9Kq
0nmxFidPcDiOEvQZPbz31Bowsvov+B8qtXpKa3thNY3kBfpYO3yPqw5Rng2/QGbE
QGrOMd0kYQQ5aqSjh4YhpcZ19h3VpBGAg8H1aZKgitmm539KgekUBCpBqFsBRvOF
fv7B0igEAi4ty2JyC+3MVt7s+mclBKhiYLJL1VrAhabArGaETv/MGPYdGXOEebqW
yOUAnQtrCvQjMvLztnG+DBNjT6sUQiGJt705g9596sXyxv5JlK1TZjCFNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/C16vNLzVQAA9bibg3OlXXlLM5MB8GA1UdIwQY
MBaAFCYPEIfM0G5rR2Q8Tr54vM9fPOXSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmc4UWg4elFibXRIWkR4T3ZuaTh6MTg4NWRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy84NTM2ODItMzAzNS00NGZiLWI3YWUt
MTliMTJhOTU1MDY1LzEvSmc4UWg4elFibXRIWkR4T3ZuaTh6MTg4NWRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy84NTM2ODItMzAzNS00NGZiLWI3YWUtMTliMTJhOTU1MDY1
LzEvSmc4UWg4elFibXRIWkR4T3ZuaTh6MTg4NWRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhKFvbgTD
/FVOqptWRpMxsKCYjE9iS1lNCrm/kB7vFed8SYWWfIodpGmrr1cUiIeZAp18yJaa
ZamsprbjTwTcgy3jetwr4JNYo8ERd2c3E8IK59zOWgt+Gy+gm5W7QE3mmuHDz3LO
41r3RLUrfah5OvNQKWFaBzC84ccb+8P4By03ZuaL1eLe1IWritxVOZQ0wZ6qfdyL
XSgkzynkULs1B5Aupt4yNqssi1LDCRVQDzF6gWVKu+1e9TSln0DPDvGcyW9uQpCk
HYkgi43TopvoBeM0LkxSFU93tA/zYcKRkbcYojOI8vTitlKXWyl+VlesN/KCEwU4
WKyNCsSxWmLXJg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:37:14 2025 by rpki-client