Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
File: K8J94IFvfguHpzPdMZkInlN_Jhw.mft (raw, json)
Hash identifier: v1cUTvSPV7phrMxdPQT28Fy2XlKseWcRfXL6Ds+vIZs=
Subject key identifier: 41:BC:8C:5A:45:00:D0:C6:90:E5:2C:20:61:45:27:40:D8:2E:13:6F
Authority key identifier: 2B:C2:7D:E0:81:6F:7E:0B:87:A7:33:DD:31:99:08:9E:53:7F:26:1C
Certificate issuer: /CN=2bc27de0816f7e0b87a733dd3199089e537f261c
Certificate serial: 0197C312B5FDF73E6FCE7680BDCDFD1BD864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
Manifest number: 0BAC
Signing time: Mon 30 Jun 2025 23:01:12 +0000
Manifest this update: Mon 30 Jun 2025 23:01:12 +0000
Manifest next update: Tue 01 Jul 2025 23:01:12 +0000
Files and hashes: 1: 37DCbHhm2sTXZoKnRAO3SOggtQQ.roa (hash: +uLJpv1JAEXe6w9bK9Js8rFmAHbw+aILnxdKvgw5Rzc=)
2: K8J94IFvfguHpzPdMZkInlN_Jhw.crl (hash: 23VGk8WPRd9jDZ1W8p9ZkZ22BNtHwhE5iI4dOLaI770=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:12:b5:fd:f7:3e:6f:ce:76:80:bd:cd:fd:1b:d8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc27de0816f7e0b87a733dd3199089e537f261c
Validity
Not Before: Jun 30 23:01:12 2025 GMT
Not After : Jul 1 23:01:12 2025 GMT
Subject: CN=41bc8c5a4500d0c690e52c2061452740d82e136f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:71:49:c9:ea:42:00:c6:c0:b8:af:f6:b8:86:
b2:15:91:2c:78:23:20:9d:ad:44:bb:fa:17:dc:ba:
82:e0:b5:6a:09:28:ce:c9:2f:40:30:b4:81:e9:b9:
f8:bc:b4:1a:08:28:97:dd:8e:e6:39:96:af:6c:f0:
2b:2c:0c:fd:a8:c2:91:29:43:5d:58:f5:3b:e4:69:
e8:ac:5a:74:79:15:92:c9:c8:4a:29:87:77:2c:f2:
4f:92:fa:3a:77:52:b7:46:94:4b:ea:95:bb:f8:41:
c4:26:23:3b:1e:ea:b1:56:ff:fb:f7:c9:32:aa:bc:
36:22:8e:44:fc:cf:78:f0:be:e4:ba:5a:3b:d7:f8:
a5:d4:96:62:e3:dd:89:b4:8b:0f:74:bc:a3:b8:ca:
9b:41:02:2c:00:21:85:76:3c:b0:02:cf:cf:49:b1:
8d:8b:29:a7:35:d1:e3:b5:9e:a8:9e:bb:e7:1c:ad:
f1:cb:df:21:f1:18:c0:a7:af:70:c5:4d:44:32:1e:
0a:5f:72:a2:21:6b:11:19:ca:a8:2a:6e:3d:e3:2f:
bc:01:17:ad:88:21:b7:05:ed:a6:2e:78:8c:0c:2e:
c0:e3:41:e0:e1:53:1a:b2:ab:13:68:24:45:56:9b:
0c:f8:62:94:c0:11:70:87:6d:be:f6:5e:2e:04:9e:
c6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:BC:8C:5A:45:00:D0:C6:90:E5:2C:20:61:45:27:40:D8:2E:13:6F
X509v3 Authority Key Identifier:
keyid:2B:C2:7D:E0:81:6F:7E:0B:87:A7:33:DD:31:99:08:9E:53:7F:26:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:fb:de:c4:b4:31:a8:48:07:83:87:eb:aa:40:06:2f:e7:91:
c1:68:a0:02:ef:51:36:f2:8b:5a:97:21:e0:d6:32:e8:52:44:
0a:ee:ef:09:1e:6d:00:6b:e2:86:95:99:66:81:5d:23:c3:0d:
9e:ad:fa:ca:ff:20:3f:59:6d:69:d7:21:7a:f4:b8:66:95:5a:
ca:ed:5f:ff:d7:d5:47:a5:70:27:e2:4d:34:99:5a:49:50:a5:
a1:0a:dc:1f:83:d5:6e:49:0c:63:86:ea:ec:85:90:2f:a0:40:
a0:86:66:ba:7b:b8:89:19:8d:63:0d:dd:c4:97:cd:9a:c3:5e:
85:9c:99:95:2b:d4:a6:de:89:fa:b3:c8:94:cd:76:8e:27:0f:
57:11:64:cc:be:7f:03:f8:78:a4:22:6f:b4:8c:2a:6a:2f:42:
09:3d:f5:8e:14:61:cf:84:66:d0:ee:3c:b3:6b:9d:89:ed:50:
fc:21:94:37:d9:b4:5f:e2:a3:1d:72:68:f3:f5:72:36:eb:00:
db:c5:0f:03:7b:f2:0d:d9:39:1a:8e:e0:6a:5c:00:12:98:58:
04:b4:9d:af:77:a2:34:4e:d6:db:cc:05:f9:70:b6:d0:2a:d7:
3d:97:74:3e:e2:4b:f9:e1:43:56:e2:a4:1a:89:3d:b2:c8:01:
b1:a2:4b:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfDErX99z5vznaAvc39G9hkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiYzI3ZGUwODE2ZjdlMGI4N2E3MzNkZDMxOTkwODllNTM3
ZjI2MWMwHhcNMjUwNjMwMjMwMTEyWhcNMjUwNzAxMjMwMTEyWjAzMTEwLwYDVQQD
Eyg0MWJjOGM1YTQ1MDBkMGM2OTBlNTJjMjA2MTQ1Mjc0MGQ4MmUxMzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnFJyepCAMbAuK/2uIayFZEseCMg
na1Eu/oX3LqC4LVqCSjOyS9AMLSB6bn4vLQaCCiX3Y7mOZavbPArLAz9qMKRKUNd
WPU75GnorFp0eRWSychKKYd3LPJPkvo6d1K3RpRL6pW7+EHEJiM7HuqxVv/798ky
qrw2Io5E/M948L7kulo71/il1JZi492JtIsPdLyjuMqbQQIsACGFdjywAs/PSbGN
iymnNdHjtZ6onrvnHK3xy98h8RjAp69wxU1EMh4KX3KiIWsRGcqoKm494y+8ARet
iCG3Be2mLniMDC7A40Hg4VMasqsTaCRFVpsM+GKUwBFwh22+9l4uBJ7GtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEG8jFpFANDGkOUsIGFFJ0DYLhNvMB8GA1UdIwQY
MBaAFCvCfeCBb34Lh6cz3TGZCJ5TfyYcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzhKOTRJRnZmZ3VIcHpQZE1aa0lubE5fSmh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy82ZDg1NGMtYzUxMy00MjkwLTk1ZDQt
OTNmOWFlZmVlYjEyLzEvSzhKOTRJRnZmZ3VIcHpQZE1aa0lubE5fSmh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy82ZDg1NGMtYzUxMy00MjkwLTk1ZDQtOTNmOWFlZmVlYjEy
LzEvSzhKOTRJRnZmZ3VIcHpQZE1aa0lubE5fSmh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADPvexLQx
qEgHg4frqkAGL+eRwWigAu9RNvKLWpch4NYy6FJECu7vCR5tAGvihpWZZoFdI8MN
nq36yv8gP1ltadchevS4ZpVayu1f/9fVR6VwJ+JNNJlaSVCloQrcH4PVbkkMY4bq
7IWQL6BAoIZmunu4iRmNYw3dxJfNmsNehZyZlSvUpt6J+rPIlM12jicPVxFkzL5/
A/h4pCJvtIwqai9CCT31jhRhz4Rm0O48s2udie1Q/CGUN9m0X+KjHXJo8/VyNusA
28UPA3vyDdk5Go7galwAEphYBLSdr3eiNE7W28wF+XC20CrXPZd0PuJL+eFDVuKk
Gok9ssgBsaJLrg==
-----END CERTIFICATE-----
Generated at Tue Jul 1 08:11:31 2025 by rpki-client