Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
File: J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft (raw, json)
Hash identifier: CljskZcUQDLKR0eLDINfhar7Cb6rZLUzp44VKU3D2YU=
Subject key identifier: 01:BB:AF:AD:DB:81:C6:C2:7E:7C:51:6B:4B:F1:61:F4:79:AF:27:15
Authority key identifier: 27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28
Certificate issuer: /CN=27802685da734b157a2db9ccff76dd4e48911928
Certificate serial: 0198D706033CCBCB67990E679005FD323E0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
Manifest number: 1363
Signing time: Sat 23 Aug 2025 13:02:32 +0000
Manifest this update: Sat 23 Aug 2025 13:02:32 +0000
Manifest next update: Sun 24 Aug 2025 13:02:32 +0000
Files and hashes: 1: J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl (hash: ywpiMuGMs0cj6BraZySZNsWYA0dvY39bp72vhDJSu3w=)
2: bMRktPBk3GJGItNskNyUqcrOWmw.roa (hash: oN+XpyM7329DMObxCObtViAvj7EaNMyaASixYhlQlxY=)
3: qA9dHWC6g1Mf2FGuCg-UfT6dHa4.roa (hash: tu6gozK2xpe2ojLmfpogjmMhCMxCaqiedX62p8ai78g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:03:3c:cb:cb:67:99:0e:67:90:05:fd:32:3e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27802685da734b157a2db9ccff76dd4e48911928
Validity
Not Before: Aug 23 13:02:32 2025 GMT
Not After : Aug 24 13:02:32 2025 GMT
Subject: CN=01bbafaddb81c6c27e7c516b4bf161f479af2715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:20:66:87:ac:8a:2d:c3:ac:a6:b0:e3:43:0b:
08:44:06:55:1a:a7:d3:06:40:82:61:71:23:d3:b6:
63:8b:39:6b:e6:4a:48:d4:e0:2a:fd:e2:9a:dc:e2:
e7:1b:6c:fc:e3:0a:bd:a2:6a:20:93:2c:54:e9:b2:
68:d3:be:4d:81:eb:26:5a:00:70:ca:81:07:fa:df:
61:91:8f:10:44:92:5e:d6:6c:99:97:a1:7e:61:a8:
11:53:e4:58:c4:27:88:6a:59:45:85:ed:11:6d:0e:
fb:03:7c:88:0d:c8:64:d1:e5:8f:43:ab:1c:44:af:
0d:27:68:25:08:38:2d:b9:62:fe:41:c4:6f:af:cd:
b6:cf:ce:10:5b:71:4a:df:53:ca:b9:bb:9b:73:00:
e2:6a:d0:df:6a:25:c9:c0:48:f7:f2:a8:dd:98:78:
83:a1:46:f0:44:db:cb:11:c3:25:68:0f:49:fc:39:
81:95:68:e1:40:13:e9:df:44:45:66:45:ab:b1:eb:
76:0d:f6:b0:d7:3d:84:c5:ae:82:60:5d:62:34:e1:
bd:41:5a:62:47:b9:b9:0c:f0:78:59:f8:d6:b5:d8:
7c:c6:3a:38:1b:f4:90:7d:70:fd:25:71:e1:b2:10:
5f:5d:7b:fe:1b:01:8e:bb:8d:5d:3f:f3:9f:79:68:
14:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BB:AF:AD:DB:81:C6:C2:7E:7C:51:6B:4B:F1:61:F4:79:AF:27:15
X509v3 Authority Key Identifier:
keyid:27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:0e:0a:64:41:ae:17:c7:54:d7:f5:ba:9a:ba:e0:cd:05:c4:
8f:4f:9f:f7:5c:0a:0b:bf:ff:c4:36:a8:bb:8a:0b:48:c2:e9:
29:3a:b8:e4:2d:5e:d0:4a:b0:7b:d3:b1:29:c8:10:cf:e1:a9:
85:a4:0f:26:10:cc:1e:ba:67:12:ab:2b:af:07:4e:93:fd:38:
6e:ca:9c:bc:28:c2:40:23:e9:d6:af:3b:30:40:7e:50:11:2f:
2d:2e:b8:28:af:bc:86:52:24:b3:90:f2:fa:7b:9e:70:da:aa:
52:60:f0:d7:8c:4b:46:41:75:28:67:31:92:22:bb:b6:88:51:
68:e3:10:07:fc:74:28:cf:36:a0:c2:84:42:5b:ca:4b:50:70:
6f:5b:e8:74:d4:7c:e0:1c:2f:30:47:98:24:5c:89:3c:f3:4e:
92:cb:c9:73:8e:8c:52:49:42:07:ce:3c:6b:05:18:65:64:c2:
8e:3a:73:f1:63:82:48:c5:39:9d:7e:c6:1c:00:5c:33:30:ca:
f5:23:0a:12:96:34:e5:1a:ce:f9:14:3f:fe:10:01:c1:e6:f0:
1d:1c:05:df:a1:8e:44:ac:23:ea:30:a9:7b:9d:74:ef:9c:01:
a0:4c:3a:83:94:29:77:8a:be:c8:b9:f2:67:14:4b:81:02:55:
36:ea:a4:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXBgM8y8tnmQ5nkAX9Mj4KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ODAyNjg1ZGE3MzRiMTU3YTJkYjljY2ZmNzZkZDRlNDg5
MTE5MjgwHhcNMjUwODIzMTMwMjMyWhcNMjUwODI0MTMwMjMyWjAzMTEwLwYDVQQD
EygwMWJiYWZhZGRiODFjNmMyN2U3YzUxNmI0YmYxNjFmNDc5YWYyNzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCBmh6yKLcOsprDjQwsIRAZVGqfT
BkCCYXEj07Zjizlr5kpI1OAq/eKa3OLnG2z84wq9omogkyxU6bJo075NgesmWgBw
yoEH+t9hkY8QRJJe1myZl6F+YagRU+RYxCeIallFhe0RbQ77A3yIDchk0eWPQ6sc
RK8NJ2glCDgtuWL+QcRvr822z84QW3FK31PKububcwDiatDfaiXJwEj38qjdmHiD
oUbwRNvLEcMlaA9J/DmBlWjhQBPp30RFZkWrset2Dfaw1z2Exa6CYF1iNOG9QVpi
R7m5DPB4WfjWtdh8xjo4G/SQfXD9JXHhshBfXXv+GwGOu41dP/OfeWgUwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAG7r63bgcbCfnxRa0vxYfR5rycVMB8GA1UdIwQY
MBaAFCeAJoXac0sVei25zP923U5IkRkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjRBbWhkcHpTeFY2TGJuTV8zYmRUa2lSR1NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ZTVkNjUtNTkxMi00MThlLTljMDEt
MTIzYTg2ZDk0ODE4LzEvSjRBbWhkcHpTeFY2TGJuTV8zYmRUa2lSR1NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi84ZTVkNjUtNTkxMi00MThlLTljMDEtMTIzYTg2ZDk0ODE4
LzEvSjRBbWhkcHpTeFY2TGJuTV8zYmRUa2lSR1NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMA4KZEGu
F8dU1/W6mrrgzQXEj0+f91wKC7//xDaou4oLSMLpKTq45C1e0Eqwe9OxKcgQz+Gp
haQPJhDMHrpnEqsrrwdOk/04bsqcvCjCQCPp1q87MEB+UBEvLS64KK+8hlIks5Dy
+nuecNqqUmDw14xLRkF1KGcxkiK7tohRaOMQB/x0KM82oMKEQlvKS1Bwb1vodNR8
4BwvMEeYJFyJPPNOksvJc46MUklCB848awUYZWTCjjpz8WOCSMU5nX7GHABcMzDK
9SMKEpY05RrO+RQ//hABwebwHRwF36GORKwj6jCpe51075wBoEw6g5Qpd4q+yLny
ZxRLgQJVNuqk5w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:26:08 2025 by rpki-client