Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
File: jsM7jhNW_M_INGbu2KhlUSp9APE.mft (raw, json)
Hash identifier: a0Wr+/9E3MbldEpev9blHLrCN737A1ynQ0UCvQqhW2o=
Subject key identifier: 66:28:B2:66:23:0B:21:96:47:97:CC:D5:67:6F:04:64:8F:09:20:48
Authority key identifier: 8E:C3:3B:8E:13:56:FC:CF:C8:34:66:EE:D8:A8:65:51:2A:7D:00:F1
Certificate issuer: /CN=8ec33b8e1356fccfc83466eed8a865512a7d00f1
Certificate serial: 0198D660576F553936C00230CC74B905BD9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:01:34 +0000
Manifest this update: Sat 23 Aug 2025 10:01:34 +0000
Manifest next update: Sun 24 Aug 2025 10:01:34 +0000
Files and hashes: 1: jsM7jhNW_M_INGbu2KhlUSp9APE.crl (hash: WRWKjpkAJVCkt/ii26Nr0RCJsSC4RtiQ6IjKnuoeqkA=)
2: qwVGjqL0m5G9ustOpPZ5FS2RFbA.roa (hash: QQptDB1uT/9FFhotqk1bN1Jx0M0NJncKcjU5av3+7no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:57:6f:55:39:36:c0:02:30:cc:74:b9:05:bd:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec33b8e1356fccfc83466eed8a865512a7d00f1
Validity
Not Before: Aug 23 10:01:34 2025 GMT
Not After : Aug 24 10:01:34 2025 GMT
Subject: CN=6628b266230b21964797ccd5676f04648f092048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:95:c9:9a:f1:c7:7e:a5:6d:f9:0d:46:e6:4a:
e9:09:7b:9f:c6:a5:ae:9b:e4:08:ed:b9:53:63:35:
19:1d:e6:f2:6d:3a:ae:ed:7d:7a:94:ac:e5:42:02:
4e:6a:34:0e:e9:80:6e:3b:bb:d5:30:69:60:41:4c:
06:e5:b0:01:fc:c3:8d:64:3d:e9:5f:6f:a3:6b:29:
ac:34:ac:77:80:18:e1:2e:23:cf:5c:37:fa:87:b2:
62:66:30:a2:43:d4:7b:f5:1f:6e:e4:82:58:e9:e4:
4d:da:f5:67:01:d6:15:a7:0f:27:70:b7:0c:10:e6:
b2:2e:09:4b:b7:d3:ac:ee:95:ef:41:d2:f9:f3:2a:
c5:9d:09:ff:b9:ce:cf:c4:9a:47:51:be:cb:d2:37:
4c:f5:6c:85:0c:7b:a2:1d:0b:9d:12:a2:48:f8:9a:
46:5e:0b:b2:6b:8e:e4:d4:6c:f0:1e:1c:b9:2b:ff:
42:61:43:0e:69:7c:94:e8:b2:40:f3:8f:cf:7f:70:
ab:c2:07:2e:77:02:20:f5:61:c9:04:27:d9:a9:fc:
0a:80:86:e3:ec:f9:0f:13:d7:0a:bd:d2:e9:ab:e6:
45:1f:d8:b9:f1:1a:44:b0:e6:ce:32:40:e6:2b:55:
7d:c0:f9:da:5e:88:40:33:d3:72:3e:f3:1d:aa:42:
0a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:28:B2:66:23:0B:21:96:47:97:CC:D5:67:6F:04:64:8F:09:20:48
X509v3 Authority Key Identifier:
keyid:8E:C3:3B:8E:13:56:FC:CF:C8:34:66:EE:D8:A8:65:51:2A:7D:00:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:5c:2a:1f:1d:f2:c7:2b:cd:dc:c6:67:cf:6b:3a:11:8d:9e:
9f:d1:d5:de:86:3c:4f:04:cf:0b:c9:72:ae:9c:05:1b:5b:6d:
41:51:27:98:b6:d1:ab:f7:b1:7f:0b:64:09:da:ee:8f:d8:3c:
ad:76:aa:4d:15:6d:40:b6:60:2d:2f:ef:36:f5:9f:c4:9a:a4:
d9:e0:4e:26:3b:83:c8:d6:b6:f7:c5:2e:0d:4c:d4:a3:a0:d5:
8a:b6:f7:79:3f:91:38:89:ce:22:8b:ef:c2:68:cd:8b:6d:a2:
89:9d:e1:ce:d9:da:30:a2:dd:00:ad:a0:33:63:f3:35:9b:38:
aa:20:d7:fe:bb:a5:c2:d9:73:ce:6a:bc:15:ce:50:3d:08:0d:
93:93:b2:61:23:0f:a0:20:75:7a:10:8b:da:81:9a:5b:9b:22:
1d:ce:c0:8b:32:ad:0e:b9:59:55:fe:34:aa:95:a8:1a:fa:35:
aa:89:02:77:32:a9:51:3b:82:0e:24:12:76:e2:66:f2:69:7b:
e3:f0:b2:0a:a1:78:7c:12:fa:e5:c4:40:78:0d:95:c2:40:96:
49:5b:bb:d2:4b:dc:1e:3e:d0:e6:72:c4:4d:f4:31:2f:92:a5:
be:60:f3:83:cf:13:0f:3d:dd:e1:61:35:e1:8d:9b:e5:c3:7c:
ea:b8:6b:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYFdvVTk2wAIwzHS5Bb2bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYzMzYjhlMTM1NmZjY2ZjODM0NjZlZWQ4YTg2NTUxMmE3
ZDAwZjEwHhcNMjUwODIzMTAwMTM0WhcNMjUwODI0MTAwMTM0WjAzMTEwLwYDVQQD
Eyg2NjI4YjI2NjIzMGIyMTk2NDc5N2NjZDU2NzZmMDQ2NDhmMDkyMDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5XJmvHHfqVt+Q1G5krpCXufxqWu
m+QI7blTYzUZHebybTqu7X16lKzlQgJOajQO6YBuO7vVMGlgQUwG5bAB/MONZD3p
X2+jaymsNKx3gBjhLiPPXDf6h7JiZjCiQ9R79R9u5IJY6eRN2vVnAdYVpw8ncLcM
EOayLglLt9Os7pXvQdL58yrFnQn/uc7PxJpHUb7L0jdM9WyFDHuiHQudEqJI+JpG
Xguya47k1GzwHhy5K/9CYUMOaXyU6LJA84/Pf3CrwgcudwIg9WHJBCfZqfwKgIbj
7PkPE9cKvdLpq+ZFH9i58RpEsObOMkDmK1V9wPnaXohAM9NyPvMdqkIKGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYosmYjCyGWR5fM1WdvBGSPCSBIMB8GA1UdIwQY
MBaAFI7DO44TVvzPyDRm7tioZVEqfQDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanNNN2poTldfTV9JTkdidTJLaGxVU3A5QVBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9iNzI4MDYtNDllOC00MTEyLWEyMzUt
MWMxZTg1MzJkNWIwLzEvanNNN2poTldfTV9JTkdidTJLaGxVU3A5QVBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9iNzI4MDYtNDllOC00MTEyLWEyMzUtMWMxZTg1MzJkNWIw
LzEvanNNN2poTldfTV9JTkdidTJLaGxVU3A5QVBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm1wqHx3y
xyvN3MZnz2s6EY2en9HV3oY8TwTPC8lyrpwFG1ttQVEnmLbRq/exfwtkCdruj9g8
rXaqTRVtQLZgLS/vNvWfxJqk2eBOJjuDyNa298UuDUzUo6DVirb3eT+ROInOIovv
wmjNi22iiZ3hztnaMKLdAK2gM2PzNZs4qiDX/rulwtlzzmq8Fc5QPQgNk5OyYSMP
oCB1ehCL2oGaW5siHc7AizKtDrlZVf40qpWoGvo1qokCdzKpUTuCDiQSduJm8ml7
4/CyCqF4fBL65cRAeA2VwkCWSVu70kvcHj7Q5nLETfQxL5KlvmDzg88TDz3d4WE1
4Y2b5cN86rhrZQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:22:00 2025 by rpki-client