Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft
File: j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft (raw, json)
Hash identifier: UYk/VxajsVl2ycJhn0S4bNUTxYygUiGnlgBHqGHSKSg=
Subject key identifier: 08:C0:2C:A7:41:FC:2F:B8:A4:28:B0:93:F3:9A:E7:26:5D:C4:5C:CE
Authority key identifier: 8F:E6:92:65:8A:EF:09:3D:9E:36:03:13:2B:96:5B:F1:BE:07:5D:37
Certificate issuer: /CN=8fe692658aef093d9e3603132b965bf1be075d37
Certificate serial: 0197B7B3021052B770BE23B8A967D9A71F03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft
Manifest number: 029E
Signing time: Sat 28 Jun 2025 18:00:51 +0000
Manifest this update: Sat 28 Jun 2025 18:00:51 +0000
Manifest next update: Sun 29 Jun 2025 18:00:51 +0000
Files and hashes: 1: j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl (hash: frUC/gf1iRa4rli7UT3X+IuCRlNH1CRaagM/ftz1k8E=)
2: m_DyVhepA8h1XGWM-orUdoIVf7o.roa (hash: saVyyQ5v2TSsmPKMina7v4SF//mHS3btHrahjrjyKxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:02:10:52:b7:70:be:23:b8:a9:67:d9:a7:1f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe692658aef093d9e3603132b965bf1be075d37
Validity
Not Before: Jun 28 18:00:51 2025 GMT
Not After : Jun 29 18:00:51 2025 GMT
Subject: CN=08c02ca741fc2fb8a428b093f39ae7265dc45cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d0:ac:9d:40:cd:57:0d:c3:22:1c:8b:82:04:
b6:09:5a:fc:10:75:92:49:f0:bd:dc:17:23:ad:69:
71:72:cb:3c:e3:5d:98:ba:63:82:6f:43:cf:41:35:
02:e3:bc:00:97:05:7e:09:7a:18:ed:b0:af:81:99:
64:46:15:cf:04:dc:28:78:11:fa:15:77:fc:c1:24:
76:1d:e5:b6:2c:43:54:08:60:0f:c3:dc:d7:2f:d0:
bf:47:62:a2:72:21:3f:cf:6c:d8:b4:42:f4:49:41:
69:9f:a0:87:71:49:09:7b:47:f5:f6:10:a1:18:99:
6c:ab:ad:b5:77:96:24:0f:e9:ac:cb:97:57:3d:d6:
46:36:fb:78:5f:fc:f5:79:58:e2:75:41:da:4f:fe:
7c:10:fc:2b:40:92:30:46:c0:97:d9:69:9c:be:cb:
44:af:5a:14:9a:6d:20:c9:25:07:ce:5f:31:6c:e3:
dd:1b:87:3e:4c:7a:29:a2:74:9e:09:c9:9a:a6:78:
ad:8d:70:1b:b9:ca:d0:8c:3b:f6:8e:48:ff:54:65:
ad:b9:c5:c9:de:4b:5b:67:52:1e:0b:9c:07:51:25:
0c:68:01:6e:f1:f8:07:ba:b8:bc:64:43:66:d8:ca:
6e:33:9d:6e:db:3a:0b:20:15:ce:da:34:d0:ee:ab:
a2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C0:2C:A7:41:FC:2F:B8:A4:28:B0:93:F3:9A:E7:26:5D:C4:5C:CE
X509v3 Authority Key Identifier:
keyid:8F:E6:92:65:8A:EF:09:3D:9E:36:03:13:2B:96:5B:F1:BE:07:5D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:1b:c0:d9:32:4a:64:40:ad:5d:32:c0:d7:86:f7:84:56:1d:
08:19:09:f6:f9:06:fe:78:8b:dd:4c:ea:e5:8d:72:21:84:d2:
f8:f2:2b:a3:9f:3d:2f:ba:7a:58:4f:24:92:1e:99:71:89:77:
38:bf:d7:2a:aa:e7:33:f1:87:39:95:7b:81:4a:f9:56:0a:6c:
b1:0a:34:18:c1:c9:2d:7e:a8:32:8e:b0:22:64:3f:55:40:9d:
1b:4c:58:26:76:13:ef:27:a8:fa:ce:99:18:93:4b:34:bc:4a:
b5:b5:b0:cb:aa:a9:76:3f:af:2c:40:b2:97:9f:ef:e5:22:60:
6d:fa:10:bd:c4:f7:7d:b0:25:57:cf:67:b8:66:73:15:51:5b:
3d:03:fd:89:67:c5:99:58:80:53:2e:1a:33:0f:3c:d8:d8:a9:
7d:74:40:db:1d:03:fc:93:98:28:cf:1e:b0:bd:b1:35:9e:7a:
05:ce:76:a6:dd:d8:9e:ba:27:96:07:89:43:fa:88:db:3d:1f:
03:8e:b3:c4:a8:59:c9:15:21:14:1c:4d:95:32:29:62:50:44:
a6:98:9e:08:b0:05:ad:44:2d:66:f9:63:75:80:98:6b:cf:ba:
56:ff:6a:d8:7c:9d:3a:d2:89:3b:e3:bf:75:a1:b2:18:3f:a7:
ec:37:9a:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3swIQUrdwviO4qWfZpx8DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmZTY5MjY1OGFlZjA5M2Q5ZTM2MDMxMzJiOTY1YmYxYmUw
NzVkMzcwHhcNMjUwNjI4MTgwMDUxWhcNMjUwNjI5MTgwMDUxWjAzMTEwLwYDVQQD
EygwOGMwMmNhNzQxZmMyZmI4YTQyOGIwOTNmMzlhZTcyNjVkYzQ1Y2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdCsnUDNVw3DIhyLggS2CVr8EHWS
SfC93BcjrWlxcss8412YumOCb0PPQTUC47wAlwV+CXoY7bCvgZlkRhXPBNwoeBH6
FXf8wSR2HeW2LENUCGAPw9zXL9C/R2KiciE/z2zYtEL0SUFpn6CHcUkJe0f19hCh
GJlsq621d5YkD+msy5dXPdZGNvt4X/z1eVjidUHaT/58EPwrQJIwRsCX2WmcvstE
r1oUmm0gySUHzl8xbOPdG4c+THoponSeCcmapnitjXAbucrQjDv2jkj/VGWtucXJ
3ktbZ1IeC5wHUSUMaAFu8fgHuri8ZENm2MpuM51u2zoLIBXO2jTQ7quinQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjALKdB/C+4pCiwk/Oa5yZdxFzOMB8GA1UdIwQY
MBaAFI/mkmWK7wk9njYDEyuWW/G+B103MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvai1hU1pZcnZDVDJlTmdNVEs1WmI4YjRIWFRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8wYTliMzEtN2VkNy00OGNhLWEzMDQt
YWVlNTY3MTczNjE1LzEvai1hU1pZcnZDVDJlTmdNVEs1WmI4YjRIWFRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8wYTliMzEtN2VkNy00OGNhLWEzMDQtYWVlNTY3MTczNjE1
LzEvai1hU1pZcnZDVDJlTmdNVEs1WmI4YjRIWFRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACBvA2TJK
ZECtXTLA14b3hFYdCBkJ9vkG/niL3Uzq5Y1yIYTS+PIro589L7p6WE8kkh6ZcYl3
OL/XKqrnM/GHOZV7gUr5VgpssQo0GMHJLX6oMo6wImQ/VUCdG0xYJnYT7yeo+s6Z
GJNLNLxKtbWwy6qpdj+vLECyl5/v5SJgbfoQvcT3fbAlV89nuGZzFVFbPQP9iWfF
mViAUy4aMw882NipfXRA2x0D/JOYKM8esL2xNZ56Bc52pt3YnronlgeJQ/qI2z0f
A46zxKhZyRUhFBxNlTIpYlBEppieCLAFrUQtZvljdYCYa8+6Vv9q2HydOtKJO+O/
daGyGD+n7DeaxQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:34:10 2025 by rpki-client