Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
File: jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft (raw, json)
Hash identifier: 1WMVz5zZlRP2lK2G1cqNsklxoa1Va4tJpV9Gz+LzPPs=
Subject key identifier: CC:B6:0A:FB:21:29:91:DD:75:FA:6E:35:72:E3:AB:33:1D:F9:9B:3E
Authority key identifier: 8C:22:89:AE:0B:10:62:93:50:DA:0A:50:E8:7B:38:91:09:F1:6C:2E
Certificate issuer: /CN=8c2289ae0b10629350da0a50e87b389109f16c2e
Certificate serial: 0197D6D073E3DD09199E9774538527080371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
Manifest number: 0271
Signing time: Fri 04 Jul 2025 19:01:14 +0000
Manifest this update: Fri 04 Jul 2025 19:01:14 +0000
Manifest next update: Sat 05 Jul 2025 19:01:14 +0000
Files and hashes: 1: RhJqWm0s7H9JSpG-oB16vDuB6kk.roa (hash: bJdYRJsXAlzRdfbbxHF22ta+TfJKXfgxRqEjBlrSXVg=)
2: hfMD5MhoHKjDWV0Lg-kB6Qn7NIw.roa (hash: 7j9B0FnRG/QF0eLBUbMO8Y6cUWQTPrhU1jAqJD4B+34=)
3: jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl (hash: s02MP+QCS3gPznK93CYrgXb6SOnGnusZXEBdteWJkRc=)
4: l0kAn8ApI2SNAoJbZCIEyIXuAX4.roa (hash: B0SI0CCL7BAZvHBp4fUMaxE46b5MHfw4w3OsX4XuXk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 19:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d6:d0:73:e3:dd:09:19:9e:97:74:53:85:27:08:03:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c2289ae0b10629350da0a50e87b389109f16c2e
Validity
Not Before: Jul 4 19:01:14 2025 GMT
Not After : Jul 5 19:01:14 2025 GMT
Subject: CN=ccb60afb212991dd75fa6e3572e3ab331df99b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:84:64:0d:b6:4e:27:c2:97:41:e8:b5:81:16:
ae:d9:e6:91:be:89:0f:6c:2b:9d:51:45:68:5c:0c:
d2:ee:32:ac:13:b9:37:0b:46:7b:d3:f2:8c:ca:6a:
94:ff:3d:94:e4:29:01:2e:1f:62:83:0b:ce:e8:5d:
6a:00:a1:ab:37:2e:a3:90:0c:9a:9e:56:e4:44:51:
33:8a:77:36:45:32:5d:51:c6:86:db:d9:aa:40:32:
49:13:4b:cc:e7:76:0c:91:ee:86:f6:31:ac:74:57:
c1:4e:91:38:95:ad:25:c7:0e:87:2e:c2:f9:46:01:
e4:5a:f3:fd:40:e5:60:52:7d:9f:c3:d2:28:3f:cd:
ac:9c:8b:63:1d:d4:16:b5:be:63:09:56:57:36:67:
cd:e7:c8:04:97:50:98:0a:e4:fc:02:be:5d:59:57:
5a:bd:74:93:64:83:2f:70:ab:b5:14:6e:39:f9:b0:
44:b3:42:82:15:e2:a7:41:ce:e0:4c:28:d6:35:c1:
b6:ef:a3:fe:2b:5c:4b:6f:ef:f3:c5:d8:53:7c:ff:
11:1e:12:80:76:a3:4b:29:fc:1a:37:08:82:19:de:
7d:e8:2e:be:60:dc:f8:b9:3c:f0:d4:3b:88:3a:56:
28:d1:41:f4:e9:8b:ca:0b:c8:47:3b:07:e4:40:9b:
c4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B6:0A:FB:21:29:91:DD:75:FA:6E:35:72:E3:AB:33:1D:F9:9B:3E
X509v3 Authority Key Identifier:
keyid:8C:22:89:AE:0B:10:62:93:50:DA:0A:50:E8:7B:38:91:09:F1:6C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:1d:9d:bd:b3:ec:d2:ea:4f:c6:0e:d6:1c:d0:37:72:81:ce:
f8:23:78:ac:ad:2a:48:12:b5:67:8d:9b:af:99:a6:33:33:80:
d6:6c:71:fa:5b:3a:6a:65:39:6f:29:34:fe:a0:01:85:71:80:
9e:34:af:91:c7:1e:35:14:c5:8d:e3:80:da:5a:05:45:09:a4:
7a:a8:c4:30:8e:0e:8d:ee:40:b1:7c:b8:59:69:fe:25:3f:44:
cf:a8:f1:db:07:17:43:04:a5:a1:48:b8:3a:4b:0c:ac:0e:ff:
36:9d:7a:6a:0a:3f:6c:76:39:ca:1f:9e:69:19:a2:3a:e6:2f:
66:b6:bc:06:f5:eb:5e:5a:17:ac:d8:3c:ae:81:20:98:b9:f9:
f4:bd:58:ac:33:a3:51:b5:a7:c0:ef:36:77:0b:e8:5e:2f:25:
94:3d:8d:bd:9b:f6:31:ee:22:a2:02:43:bd:d0:e6:a8:b3:fa:
6a:87:88:40:9b:d1:47:72:69:35:3e:4e:bb:7f:40:06:18:ff:
4e:1d:30:9e:70:bf:a5:7d:e0:80:b7:54:a2:4f:e1:25:87:ef:
e7:b4:37:e3:5d:6a:8b:38:b4:57:fc:d7:b3:0b:d8:6b:fa:4e:
44:75:34:3a:8c:b8:97:86:97:80:4b:1b:ad:6f:07:0c:e0:12:
b4:80:3e:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfW0HPj3QkZnpd0U4UnCANxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMjI4OWFlMGIxMDYyOTM1MGRhMGE1MGU4N2IzODkxMDlm
MTZjMmUwHhcNMjUwNzA0MTkwMTE0WhcNMjUwNzA1MTkwMTE0WjAzMTEwLwYDVQQD
EyhjY2I2MGFmYjIxMjk5MWRkNzVmYTZlMzU3MmUzYWIzMzFkZjk5YjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoRkDbZOJ8KXQei1gRau2eaRvokP
bCudUUVoXAzS7jKsE7k3C0Z70/KMymqU/z2U5CkBLh9igwvO6F1qAKGrNy6jkAya
nlbkRFEzinc2RTJdUcaG29mqQDJJE0vM53YMke6G9jGsdFfBTpE4la0lxw6HLsL5
RgHkWvP9QOVgUn2fw9IoP82snItjHdQWtb5jCVZXNmfN58gEl1CYCuT8Ar5dWVda
vXSTZIMvcKu1FG45+bBEs0KCFeKnQc7gTCjWNcG276P+K1xLb+/zxdhTfP8RHhKA
dqNLKfwaNwiCGd596C6+YNz4uTzw1DuIOlYo0UH06YvKC8hHOwfkQJvEVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMy2CvshKZHddfpuNXLjqzMd+Zs+MB8GA1UdIwQY
MBaAFIwiia4LEGKTUNoKUOh7OJEJ8WwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakNLSnJnc1FZcE5RMmdwUTZIczRrUW54YkM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8zNDMzNzktZjhlMS00YmU2LWJlMDEt
ZjgzOTQ2YzJjODJlLzEvakNLSnJnc1FZcE5RMmdwUTZIczRrUW54YkM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8zNDMzNzktZjhlMS00YmU2LWJlMDEtZjgzOTQ2YzJjODJl
LzEvakNLSnJnc1FZcE5RMmdwUTZIczRrUW54YkM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWR2dvbPs
0upPxg7WHNA3coHO+CN4rK0qSBK1Z42br5mmMzOA1mxx+ls6amU5byk0/qABhXGA
njSvkcceNRTFjeOA2loFRQmkeqjEMI4Oje5AsXy4WWn+JT9Ez6jx2wcXQwSloUi4
OksMrA7/Np16ago/bHY5yh+eaRmiOuYvZra8BvXrXloXrNg8roEgmLn59L1YrDOj
UbWnwO82dwvoXi8llD2NvZv2Me4iogJDvdDmqLP6aoeIQJvRR3JpNT5Ou39ABhj/
Th0wnnC/pX3ggLdUok/hJYfv57Q3411qizi0V/zXswvYa/pORHU0Ooy4l4aXgEsb
rW8HDOAStIA+Ew==
-----END CERTIFICATE-----
Generated at Sat Jul 5 05:24:35 2025 by rpki-client