Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
File: J-D3u75AMaJO8bnbGWqrBkLoSgY.mft (raw, json)
Hash identifier: JpMN7yweI/nxzKmVJgTW0fYbwmW0UaUcmA9w5ZCczZg=
Subject key identifier: 1A:16:76:C7:29:72:4F:29:14:09:91:32:40:CD:3F:EA:58:33:BC:A8
Authority key identifier: 27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06
Certificate issuer: /CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
Certificate serial: 0198D4DFF37DB2447D408B798114E9CDB41D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 03:01:43 +0000
Manifest this update: Sat 23 Aug 2025 03:01:43 +0000
Manifest next update: Sun 24 Aug 2025 03:01:43 +0000
Files and hashes: 1: IjluqbVdM5zm7wvPSgQZOmXQjag.roa (hash: QKwqMUOeWOJatNvuP/XT/XSpsSd9RiOppxhqX3P9KPo=)
2: J-D3u75AMaJO8bnbGWqrBkLoSgY.crl (hash: eyWUeYIQk12UFVdpWIxx+sVvCCwE6ZK0/U2/HhcKiwU=)
3: YY-hoyGXDDo8SiePezL_ZO2nNOw.roa (hash: A3j7uoljgavovkzwgqN6nFVhnXRD4UmTm39D3QvLFO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:f3:7d:b2:44:7d:40:8b:79:81:14:e9:cd:b4:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
Validity
Not Before: Aug 23 03:01:43 2025 GMT
Not After : Aug 24 03:01:43 2025 GMT
Subject: CN=1a1676c729724f291409913240cd3fea5833bca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:08:89:5e:61:b3:46:62:e5:ea:9d:fe:25:2a:
85:eb:90:1c:61:96:dc:e8:21:91:65:77:d3:d4:7b:
a6:64:cf:85:3e:a5:d5:74:1e:15:af:ac:88:5d:3d:
1d:a0:0c:c8:95:6c:ea:be:48:6d:68:c0:80:0a:c1:
76:15:25:17:bb:9e:8f:2a:56:71:8c:9f:de:5c:db:
5e:5f:57:ea:01:92:03:64:f1:ef:b7:8d:65:92:78:
79:49:64:1e:46:28:1c:bd:43:bc:78:7e:cd:6d:59:
b6:ed:04:76:b5:e3:84:75:57:c1:70:7c:8f:8f:5e:
08:e2:0d:9c:c1:c1:7a:60:e8:50:7b:c6:ca:c4:76:
dc:3f:29:ab:2f:53:ca:88:65:08:f0:c6:44:69:1b:
08:b6:d0:34:9d:c8:4e:d2:a7:15:e6:88:44:67:a0:
d0:fd:69:2f:c7:cd:8e:8a:d8:f4:d9:1c:64:2b:45:
6a:79:72:41:30:52:66:9b:29:88:83:94:8c:d4:42:
b1:06:0d:7e:12:a6:fb:f7:bf:04:be:27:00:f5:2c:
53:14:36:f6:25:ff:86:c8:2e:af:9c:ce:96:0e:ff:
a4:c4:52:4a:b4:34:57:b6:42:28:7c:5c:a8:df:76:
7e:53:14:dc:9a:a5:0c:86:9a:b2:6f:f2:ce:37:63:
4a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:16:76:C7:29:72:4F:29:14:09:91:32:40:CD:3F:EA:58:33:BC:A8
X509v3 Authority Key Identifier:
keyid:27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:9e:22:9e:0d:8b:70:8f:d2:a3:60:80:d4:3f:02:d9:24:e9:
db:92:95:11:87:15:b9:74:e0:27:71:93:a9:99:16:76:e9:fc:
c8:35:3d:10:83:47:6e:23:ed:e5:8b:d0:1f:82:8a:20:7b:8b:
3f:57:05:b6:77:41:13:a0:18:1a:c5:7c:08:02:0f:e3:d2:25:
41:a3:ce:d5:e3:dd:8a:5c:7e:34:e3:48:63:89:89:3d:8f:2a:
8a:69:c9:4c:d8:5e:73:c4:f9:f5:89:f3:93:52:c6:72:6d:54:
7b:4f:04:ec:05:59:ef:53:91:36:37:92:68:16:29:02:45:13:
7b:05:61:63:ba:cb:dc:fe:a8:2c:8d:70:e2:52:b6:71:24:b2:
64:8f:ac:af:2a:f6:3a:d3:ca:55:e9:9b:84:af:66:62:65:af:
86:37:ee:6a:db:c2:3d:d1:73:fc:69:64:c6:dc:06:8f:33:9b:
76:4b:87:53:e3:c0:9c:2d:60:cf:0a:37:bc:29:d6:40:71:55:
bd:62:5c:59:7d:bb:1a:0e:3b:9f:85:4d:7b:44:88:34:4b:17:
cf:d3:bd:ab:01:bd:08:01:d2:36:7d:66:f5:86:fd:8c:b9:06:
7c:1f:99:ec:4e:34:f0:27:41:9e:a0:bf:71:4f:a9:6f:10:98:
6c:35:15:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU3/N9skR9QIt5gRTpzbQdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZTBmN2JiYmU0MDMxYTI0ZWYxYjlkYjE5NmFhYjA2NDJl
ODRhMDYwHhcNMjUwODIzMDMwMTQzWhcNMjUwODI0MDMwMTQzWjAzMTEwLwYDVQQD
EygxYTE2NzZjNzI5NzI0ZjI5MTQwOTkxMzI0MGNkM2ZlYTU4MzNiY2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogiJXmGzRmLl6p3+JSqF65AcYZbc
6CGRZXfT1HumZM+FPqXVdB4Vr6yIXT0doAzIlWzqvkhtaMCACsF2FSUXu56PKlZx
jJ/eXNteX1fqAZIDZPHvt41lknh5SWQeRigcvUO8eH7NbVm27QR2teOEdVfBcHyP
j14I4g2cwcF6YOhQe8bKxHbcPymrL1PKiGUI8MZEaRsIttA0nchO0qcV5ohEZ6DQ
/Wkvx82Oitj02RxkK0VqeXJBMFJmmymIg5SM1EKxBg1+Eqb7978EvicA9SxTFDb2
Jf+GyC6vnM6WDv+kxFJKtDRXtkIofFyo33Z+UxTcmqUMhpqyb/LON2NKHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBoWdscpck8pFAmRMkDNP+pYM7yoMB8GA1UdIwQY
MBaAFCfg97u+QDGiTvG52xlqqwZC6EoGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSi1EM3U3NUFNYUpPOGJuYkdXcXJCa0xvU2dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC84YWJhNzEtM2JhOC00YjhkLThlYjYt
MzQ2YTNlYzE4NjhjLzEvSi1EM3U3NUFNYUpPOGJuYkdXcXJCa0xvU2dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC84YWJhNzEtM2JhOC00YjhkLThlYjYtMzQ2YTNlYzE4Njhj
LzEvSi1EM3U3NUFNYUpPOGJuYkdXcXJCa0xvU2dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ54ing2L
cI/So2CA1D8C2STp25KVEYcVuXTgJ3GTqZkWdun8yDU9EINHbiPt5YvQH4KKIHuL
P1cFtndBE6AYGsV8CAIP49IlQaPO1ePdilx+NONIY4mJPY8qimnJTNhec8T59Ynz
k1LGcm1Ue08E7AVZ71ORNjeSaBYpAkUTewVhY7rL3P6oLI1w4lK2cSSyZI+sryr2
OtPKVembhK9mYmWvhjfuatvCPdFz/GlkxtwGjzObdkuHU+PAnC1gzwo3vCnWQHFV
vWJcWX27Gg47n4VNe0SINEsXz9O9qwG9CAHSNn1m9Yb9jLkGfB+Z7E408CdBnqC/
cU+pbxCYbDUVaw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:12:56 2025 by rpki-client