Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.mft
File: jqzH87IYxJLYjb68nNy5otLTDtE.mft (raw, json)
Hash identifier: 1dWRKKkWLtk78tZzjMVBlR7F8SbKbZVJe4pVclYEykw=
Subject key identifier: E9:23:A9:B6:17:B2:18:69:43:64:9C:17:1D:34:6A:EE:91:DE:C2:3D
Authority key identifier: 8E:AC:C7:F3:B2:18:C4:92:D8:8D:BE:BC:9C:DC:B9:A2:D2:D3:0E:D1
Certificate issuer: /CN=8eacc7f3b218c492d88dbebc9cdcb9a2d2d30ed1
Certificate serial: 0197C80352C9C673EE6459CBCC0533F343F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.mft
Manifest number: 15BC
Signing time: Tue 01 Jul 2025 22:02:30 +0000
Manifest this update: Tue 01 Jul 2025 22:02:30 +0000
Manifest next update: Wed 02 Jul 2025 22:02:30 +0000
Files and hashes: 1: G4xGjeiK9NbX0jXJY8uDkRmJuDc.roa (hash: muHuLGPiPatokQGw15YR2MNayDycTrh2aeAcpqtHkYI=)
2: _bjBL5LK2WVAfL5nxIuCTdAEYdU.roa (hash: hu7dwrJP9WhWK3glmNV0xBWx3TcYlk14ctZGu4bZyLs=)
3: jqzH87IYxJLYjb68nNy5otLTDtE.crl (hash: iIP/K6ikaoSl7ZHpJO9uOqXk9twMUGttAxnJcJGdPZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 22:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:03:52:c9:c6:73:ee:64:59:cb:cc:05:33:f3:43:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eacc7f3b218c492d88dbebc9cdcb9a2d2d30ed1
Validity
Not Before: Jul 1 22:02:30 2025 GMT
Not After : Jul 2 22:02:30 2025 GMT
Subject: CN=e923a9b617b2186943649c171d346aee91dec23d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8b:10:eb:50:4f:28:f9:93:21:e9:f1:15:0c:
51:3f:5e:33:e2:b3:1b:98:58:4c:eb:42:a1:55:17:
da:b6:3e:37:ea:dc:6c:ef:fb:dc:de:a0:81:7d:12:
fc:1b:b3:28:f3:0a:f5:86:b7:20:aa:e6:85:3f:be:
4b:f2:c1:46:4a:c8:d9:d5:77:2d:b3:34:85:7c:c9:
3f:4c:24:f8:6d:a4:d5:2a:94:36:92:be:77:e4:f5:
fa:ac:48:a8:c7:15:81:32:57:7b:44:0d:ad:43:c5:
8c:20:f7:bf:b1:42:17:fb:48:b2:54:09:e0:f6:93:
5e:84:1d:a0:04:7d:1a:77:e4:4d:57:14:ce:b9:8d:
1f:cc:15:27:cf:9c:db:11:ab:cc:17:ce:f3:8a:1a:
1c:6d:84:5e:c0:54:64:f1:1d:a9:8d:72:33:94:56:
4a:fd:ee:37:c4:6a:db:08:70:9a:61:75:86:42:4a:
1d:b4:59:be:80:4e:99:f1:dc:83:fa:84:29:34:aa:
21:ef:c2:16:89:ec:ec:59:5f:98:d9:d3:71:d1:84:
76:72:d7:7a:17:17:28:5f:7b:87:c3:df:f4:2a:a1:
54:66:08:74:c9:bb:77:61:78:4a:29:15:79:8b:4b:
fe:6f:77:09:11:96:a0:90:69:c1:33:b2:06:9c:a6:
97:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:23:A9:B6:17:B2:18:69:43:64:9C:17:1D:34:6A:EE:91:DE:C2:3D
X509v3 Authority Key Identifier:
keyid:8E:AC:C7:F3:B2:18:C4:92:D8:8D:BE:BC:9C:DC:B9:A2:D2:D3:0E:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:3c:75:77:df:12:8a:30:39:19:9c:f8:e2:07:8a:89:f5:e7:
77:f2:37:3c:44:21:af:0b:e3:12:c7:f8:06:73:d5:47:e5:36:
e9:e3:a6:3c:51:0f:ba:41:45:15:23:82:4a:d1:e4:36:0b:fa:
fd:4b:0e:98:1c:a1:46:a2:f8:04:3b:19:0a:d9:af:60:b9:be:
f1:51:dd:1b:e3:08:1a:65:7b:f2:0f:69:7e:76:60:cf:1e:99:
5e:33:11:01:a9:b4:78:2b:a4:cc:69:da:3a:96:76:11:d8:62:
b4:e7:66:f0:54:56:80:d8:04:e9:74:ce:97:4d:1c:40:a0:37:
63:94:83:a8:6a:3e:f0:a7:7d:15:6f:97:01:b7:91:55:29:3c:
87:cb:92:eb:5a:b8:c8:b9:f3:c5:36:c7:3d:02:43:03:28:38:
80:9f:34:3f:77:cf:12:c7:f3:6c:61:f7:8f:d4:34:96:67:61:
17:ed:b4:7f:12:2b:45:5b:76:1d:0d:e8:50:f1:2f:38:2f:e9:
15:7b:72:91:3d:29:d0:fc:2f:13:33:99:87:16:d3:3a:f4:02:
d8:cd:7c:a7:00:21:81:4b:26:38:3e:97:9c:01:97:31:b0:d5:
48:6c:bd:05:84:4c:32:1c:94:89:5d:3b:08:e8:8a:fb:c0:b8:
b8:82:cd:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfIA1LJxnPuZFnLzAUz80PwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYWNjN2YzYjIxOGM0OTJkODhkYmViYzljZGNiOWEyZDJk
MzBlZDEwHhcNMjUwNzAxMjIwMjMwWhcNMjUwNzAyMjIwMjMwWjAzMTEwLwYDVQQD
EyhlOTIzYTliNjE3YjIxODY5NDM2NDljMTcxZDM0NmFlZTkxZGVjMjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIsQ61BPKPmTIenxFQxRP14z4rMb
mFhM60KhVRfatj436txs7/vc3qCBfRL8G7Mo8wr1hrcgquaFP75L8sFGSsjZ1Xct
szSFfMk/TCT4baTVKpQ2kr535PX6rEioxxWBMld7RA2tQ8WMIPe/sUIX+0iyVAng
9pNehB2gBH0ad+RNVxTOuY0fzBUnz5zbEavMF87zihocbYRewFRk8R2pjXIzlFZK
/e43xGrbCHCaYXWGQkodtFm+gE6Z8dyD+oQpNKoh78IWiezsWV+Y2dNx0YR2ctd6
FxcoX3uHw9/0KqFUZgh0ybt3YXhKKRV5i0v+b3cJEZagkGnBM7IGnKaXmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOkjqbYXshhpQ2ScFx00au6R3sI9MB8GA1UdIwQY
MBaAFI6sx/OyGMSS2I2+vJzcuaLS0w7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanF6SDg3SVl4SkxZamI2OG5OeTVvdExURHRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9iZDQyZWEtZWJiNi00NDQ1LWJkMjAt
Nzc1ZGE2YWEzMTIzLzEvanF6SDg3SVl4SkxZamI2OG5OeTVvdExURHRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9iZDQyZWEtZWJiNi00NDQ1LWJkMjAtNzc1ZGE2YWEzMTIz
LzEvanF6SDg3SVl4SkxZamI2OG5OeTVvdExURHRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJjx1d98S
ijA5GZz44geKifXnd/I3PEQhrwvjEsf4BnPVR+U26eOmPFEPukFFFSOCStHkNgv6
/UsOmByhRqL4BDsZCtmvYLm+8VHdG+MIGmV78g9pfnZgzx6ZXjMRAam0eCukzGna
OpZ2EdhitOdm8FRWgNgE6XTOl00cQKA3Y5SDqGo+8Kd9FW+XAbeRVSk8h8uS61q4
yLnzxTbHPQJDAyg4gJ80P3fPEsfzbGH3j9Q0lmdhF+20fxIrRVt2HQ3oUPEvOC/p
FXtykT0p0PwvEzOZhxbTOvQC2M18pwAhgUsmOD6XnAGXMbDVSGy9BYRMMhyUiV07
COiK+8C4uILNCg==
-----END CERTIFICATE-----
Generated at Wed Jul 2 05:23:41 2025 by rpki-client