Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft
File: JijMfwbqCaJH9r6enldMTze06bY.mft (raw, json)
Hash identifier: KQofKv+6iOeuwuWDMNHuZ51rxHszcSmOTKvxXkN1gns=
Subject key identifier: 7A:A8:EB:BD:FE:07:3C:6E:24:FC:E9:BF:B8:1F:3D:F8:27:AD:6D:C2
Authority key identifier: 26:28:CC:7F:06:EA:09:A2:47:F6:BE:9E:9E:57:4C:4F:37:B4:E9:B6
Certificate issuer: /CN=2628cc7f06ea09a247f6be9e9e574c4f37b4e9b6
Certificate serial: 0198D58386A0FBBD53C4C86EBBA6A96BEA55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 06:00:23 +0000
Manifest this update: Sat 23 Aug 2025 06:00:23 +0000
Manifest next update: Sun 24 Aug 2025 06:00:23 +0000
Files and hashes: 1: JijMfwbqCaJH9r6enldMTze06bY.crl (hash: X7I19Q9KmaSkK7fW9jppjk/ot6pWnd5rc3CzXcf0rSc=)
2: hwIYyALOwoBN5zxSDcMvXKZuEhU.roa (hash: UgZLdR3szHuIjLGcrVjUdsIwYk5m69uSb6Pgyz7tXrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:86:a0:fb:bd:53:c4:c8:6e:bb:a6:a9:6b:ea:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2628cc7f06ea09a247f6be9e9e574c4f37b4e9b6
Validity
Not Before: Aug 23 06:00:23 2025 GMT
Not After : Aug 24 06:00:23 2025 GMT
Subject: CN=7aa8ebbdfe073c6e24fce9bfb81f3df827ad6dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:98:69:30:5d:3c:76:b1:c4:df:7c:2d:ec:97:
71:f7:bb:12:ff:be:4a:fc:34:28:c0:eb:f4:e4:cd:
7d:81:3a:68:06:78:28:63:23:88:31:de:b4:92:d4:
d5:b3:88:9f:df:b2:8e:3a:d4:b6:fd:de:0e:17:6f:
ff:30:78:ef:86:20:40:a1:f7:f3:45:fe:f5:8f:e0:
6a:ed:68:6a:71:c9:c0:65:74:4c:3e:55:c3:fc:e9:
47:32:20:d0:6b:49:91:43:c4:6a:26:0d:2c:37:2a:
ab:71:e5:2a:27:e9:32:2d:ca:55:b4:54:dd:a6:c5:
d5:6b:c6:d0:90:d6:97:06:07:e9:7d:02:d0:02:d0:
6a:05:9a:9a:31:d7:9d:c6:ba:8e:a0:bd:75:40:4a:
2e:69:6e:b5:dd:aa:3d:ed:53:bc:35:5f:f4:e4:f3:
a3:61:c5:ca:04:b3:83:26:27:9a:9f:9c:80:04:fc:
e5:63:48:98:72:0c:d6:90:da:26:39:7c:f6:a9:ee:
0c:cb:a7:f5:3a:3c:53:30:51:ff:ff:ca:aa:d9:7b:
c3:41:98:75:02:4a:3d:68:9b:bd:59:63:0f:2a:74:
f1:36:91:a0:5c:8d:04:2e:e6:de:84:c3:41:b8:b8:
5e:24:dc:0d:b3:06:57:03:cc:f2:87:7e:34:f1:f1:
96:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A8:EB:BD:FE:07:3C:6E:24:FC:E9:BF:B8:1F:3D:F8:27:AD:6D:C2
X509v3 Authority Key Identifier:
keyid:26:28:CC:7F:06:EA:09:A2:47:F6:BE:9E:9E:57:4C:4F:37:B4:E9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:fe:0c:0a:37:d4:b8:02:5b:da:0d:fd:ab:79:37:5b:7b:d7:
65:e4:c7:e7:f3:8f:9d:5e:c5:8e:c5:6f:16:2e:dd:3e:2c:09:
c4:75:7b:7b:9f:dd:3d:d1:78:6a:13:d1:c8:36:51:0a:62:8f:
c3:28:71:f2:19:c3:4b:22:08:d2:02:5d:98:05:90:aa:75:0e:
fd:4b:84:f6:29:06:76:36:70:6f:a5:cf:2a:79:9a:f0:91:21:
30:ab:a0:dd:b3:e5:b3:a2:66:1f:a7:6e:3b:bf:71:73:36:f4:
55:ce:af:95:f5:61:44:44:f8:b6:c7:d0:40:ed:82:5d:35:35:
2f:dd:30:68:1b:2a:97:33:f5:d6:85:80:09:6c:06:a6:a1:80:
b9:aa:65:f2:fd:3f:cf:03:8c:3e:7e:2e:7a:34:15:82:d5:8a:
0b:f6:c2:e3:54:2b:59:b2:d0:4e:d6:9c:30:09:90:95:8b:b3:
af:e0:55:01:d2:90:42:09:6d:9a:7e:7a:f5:bc:c7:ed:66:1a:
9a:bd:7b:68:14:8a:36:b7:39:f7:75:4c:9a:da:53:f1:b5:d1:
3d:64:5f:b3:be:87:db:39:a7:16:39:7b:3f:18:85:58:7b:e8:
20:0e:33:63:26:50:0e:c9:50:8a:09:d9:6d:42:26:10:85:f2:
68:e9:c0:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg4ag+71TxMhuu6apa+pVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MjhjYzdmMDZlYTA5YTI0N2Y2YmU5ZTllNTc0YzRmMzdi
NGU5YjYwHhcNMjUwODIzMDYwMDIzWhcNMjUwODI0MDYwMDIzWjAzMTEwLwYDVQQD
Eyg3YWE4ZWJiZGZlMDczYzZlMjRmY2U5YmZiODFmM2RmODI3YWQ2ZGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuphpMF08drHE33wt7Jdx97sS/75K
/DQowOv05M19gTpoBngoYyOIMd60ktTVs4if37KOOtS2/d4OF2//MHjvhiBAoffz
Rf71j+Bq7WhqccnAZXRMPlXD/OlHMiDQa0mRQ8RqJg0sNyqrceUqJ+kyLcpVtFTd
psXVa8bQkNaXBgfpfQLQAtBqBZqaMdedxrqOoL11QEouaW613ao97VO8NV/05POj
YcXKBLODJiean5yABPzlY0iYcgzWkNomOXz2qe4My6f1OjxTMFH//8qq2XvDQZh1
Ako9aJu9WWMPKnTxNpGgXI0ELubehMNBuLheJNwNswZXA8zyh3408fGWQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqo673+BzxuJPzpv7gfPfgnrW3CMB8GA1UdIwQY
MBaAFCYozH8G6gmiR/a+np5XTE83tOm2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmlqTWZ3YnFDYUpIOXI2ZW5sZE1UemUwNmJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8yNzE0NWEtM2U2Zi00YjkyLWI5NWIt
MTJhMjk3NjFlMDk0LzEvSmlqTWZ3YnFDYUpIOXI2ZW5sZE1UemUwNmJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8yNzE0NWEtM2U2Zi00YjkyLWI5NWItMTJhMjk3NjFlMDk0
LzEvSmlqTWZ3YnFDYUpIOXI2ZW5sZE1UemUwNmJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2/4MCjfU
uAJb2g39q3k3W3vXZeTH5/OPnV7FjsVvFi7dPiwJxHV7e5/dPdF4ahPRyDZRCmKP
wyhx8hnDSyII0gJdmAWQqnUO/UuE9ikGdjZwb6XPKnma8JEhMKug3bPls6JmH6du
O79xczb0Vc6vlfVhRET4tsfQQO2CXTU1L90waBsqlzP11oWACWwGpqGAuapl8v0/
zwOMPn4uejQVgtWKC/bC41QrWbLQTtacMAmQlYuzr+BVAdKQQgltmn569bzH7WYa
mr17aBSKNrc593VMmtpT8bXRPWRfs76H2zmnFjl7PxiFWHvoIA4zYyZQDslQignZ
bUImEIXyaOnACA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:47:38 2025 by rpki-client