Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
File: _jHd7yXZbISwAaKsUEewTgYKCsM.mft (raw, json)
Hash identifier: SOLa4KLvlo5w/i6RqVAhDeMrwjQ5udEa+NZaZI2I7+Q=
Subject key identifier: 2F:65:F7:E9:27:B9:8D:25:28:D3:5A:E9:09:55:89:E2:35:FB:E5:C4
Authority key identifier: FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
Certificate issuer: /CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Certificate serial: 0197B7EA79907DB85A4B3230034A83AE2C17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 19:01:26 +0000
Manifest this update: Sat 28 Jun 2025 19:01:26 +0000
Manifest next update: Sun 29 Jun 2025 19:01:26 +0000
Files and hashes: 1: 8ydVbA0sRc2KQJCu7PF_TgB9YOc.roa (hash: ldViVOYSsfn20bEs9Oqh1Yf20Me7yZtpfiOBMHbpOTM=)
2: F-qMZsrYFuWs3mqxVuy5Uc_QajI.roa (hash: 8P5DrUp/opHUhrTa0qnhwTNZG/EzRMCLBAaUpNYWajY=)
3: _jHd7yXZbISwAaKsUEewTgYKCsM.crl (hash: whQnfFPQCoVek94RUvXIOR685LCRkD426C3UNkGKteU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:79:90:7d:b8:5a:4b:32:30:03:4a:83:ae:2c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Validity
Not Before: Jun 28 19:01:26 2025 GMT
Not After : Jun 29 19:01:26 2025 GMT
Subject: CN=2f65f7e927b98d2528d35ae9095589e235fbe5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:45:e6:70:4f:74:9b:c7:7a:ce:49:f1:e3:34:
f7:4d:eb:f8:0a:47:87:6e:f0:ba:e8:ad:72:ea:92:
1b:2e:f4:be:a4:2d:ba:77:56:13:3a:f5:c6:68:62:
ac:de:06:be:68:34:ab:4c:90:c6:fe:38:61:9a:25:
0a:d5:5d:f7:20:bf:86:54:6b:70:2e:d2:26:a9:05:
dd:60:ea:1a:30:89:0b:06:5a:49:67:68:13:12:fc:
4d:a7:7a:36:2c:48:bb:0a:31:53:01:40:0d:3f:22:
f5:05:20:1d:92:4e:78:8d:15:cb:01:b7:dd:c6:da:
8b:19:e5:0e:df:20:12:6e:48:d2:85:5c:86:b7:5e:
61:38:52:44:72:0f:70:10:8b:6c:59:d2:30:7c:07:
97:d8:fb:6c:04:b1:a1:c9:ce:b0:e9:4f:be:b3:a1:
3a:25:ff:bb:7c:d7:45:f8:16:ea:81:36:c4:a3:33:
c9:55:da:60:6f:2a:38:c9:bd:a9:42:31:58:11:f5:
35:b3:b3:05:14:66:5a:c9:8d:4b:6e:a8:84:c0:b8:
71:f2:42:74:55:f5:c9:33:d4:c6:d6:7c:97:f8:dc:
72:30:d1:88:a3:bd:56:40:92:07:02:2a:07:b0:66:
74:88:40:84:0f:8a:e5:1a:c4:4f:bd:6e:44:ef:25:
de:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:65:F7:E9:27:B9:8D:25:28:D3:5A:E9:09:55:89:E2:35:FB:E5:C4
X509v3 Authority Key Identifier:
keyid:FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e9:ce:39:b6:8e:f3:37:c9:14:8e:2e:f7:d5:17:f7:57:cd:
57:e2:d3:d3:26:57:e6:3f:fe:90:09:61:30:2d:f1:29:ac:71:
80:85:a7:77:43:7d:87:23:bf:93:77:20:01:35:34:4b:e6:f9:
3a:b4:f0:1e:2f:e6:31:8d:4a:60:ea:d2:e2:f1:5a:5c:b0:4b:
50:94:9f:58:62:7d:fd:f8:77:13:f9:99:99:0d:48:d4:96:6c:
34:9e:09:40:da:b6:ae:65:18:95:c0:b4:c6:c2:78:76:1f:98:
d8:78:8d:f5:1d:a2:aa:9b:f4:a8:cb:a4:2f:f9:de:77:cf:dc:
35:ac:ff:23:e0:36:2a:da:6a:b5:e5:fb:53:50:0a:79:86:06:
35:39:37:54:5f:50:54:2c:0c:fd:14:bf:c6:84:9a:55:ef:46:
3a:06:c3:9c:c7:b5:3c:e4:a1:62:af:fe:da:d9:b6:00:b6:e5:
25:64:c8:ce:81:cc:f4:3d:c6:a8:f5:b6:58:6c:86:1f:e7:65:
63:e3:4a:3f:0c:a0:76:a0:ab:ab:48:64:1f:69:c1:77:42:bc:
be:0b:6e:9e:28:46:5f:e9:ca:62:1d:c5:22:cb:38:13:88:60:
fe:68:21:37:53:33:f6:ff:48:62:54:7a:5f:e0:6a:0b:33:54:
94:6f:87:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36nmQfbhaSzIwA0qDriwXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMzFkZGVmMjVkOTZjODRiMDAxYTJhYzUwNDdiMDRlMDYw
YTBhYzMwHhcNMjUwNjI4MTkwMTI2WhcNMjUwNjI5MTkwMTI2WjAzMTEwLwYDVQQD
EygyZjY1ZjdlOTI3Yjk4ZDI1MjhkMzVhZTkwOTU1ODllMjM1ZmJlNWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0XmcE90m8d6zknx4zT3Tev4CkeH
bvC66K1y6pIbLvS+pC26d1YTOvXGaGKs3ga+aDSrTJDG/jhhmiUK1V33IL+GVGtw
LtImqQXdYOoaMIkLBlpJZ2gTEvxNp3o2LEi7CjFTAUANPyL1BSAdkk54jRXLAbfd
xtqLGeUO3yASbkjShVyGt15hOFJEcg9wEItsWdIwfAeX2PtsBLGhyc6w6U++s6E6
Jf+7fNdF+BbqgTbEozPJVdpgbyo4yb2pQjFYEfU1s7MFFGZayY1LbqiEwLhx8kJ0
VfXJM9TG1nyX+NxyMNGIo71WQJIHAioHsGZ0iECED4rlGsRPvW5E7yXeVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC9l9+knuY0lKNNa6QlVieI1++XEMB8GA1UdIwQY
MBaAFP4x3e8l2WyEsAGirFBHsE4GCgrDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2pIZDd5WFpiSVN3QWFLc1VFZXdUZ1lLQ3NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83YzBmMTQtNWIyNC00YjFiLThlYjUt
YjRkOGMyYjdhMTAzLzEvX2pIZDd5WFpiSVN3QWFLc1VFZXdUZ1lLQ3NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy83YzBmMTQtNWIyNC00YjFiLThlYjUtYjRkOGMyYjdhMTAz
LzEvX2pIZDd5WFpiSVN3QWFLc1VFZXdUZ1lLQ3NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI+nOObaO
8zfJFI4u99UX91fNV+LT0yZX5j/+kAlhMC3xKaxxgIWnd0N9hyO/k3cgATU0S+b5
OrTwHi/mMY1KYOrS4vFaXLBLUJSfWGJ9/fh3E/mZmQ1I1JZsNJ4JQNq2rmUYlcC0
xsJ4dh+Y2HiN9R2iqpv0qMukL/ned8/cNaz/I+A2KtpqteX7U1AKeYYGNTk3VF9Q
VCwM/RS/xoSaVe9GOgbDnMe1POShYq/+2tm2ALblJWTIzoHM9D3GqPW2WGyGH+dl
Y+NKPwygdqCrq0hkH2nBd0K8vgtunihGX+nKYh3FIss4E4hg/mghN1Mz9v9IYlR6
X+BqCzNUlG+H5Q==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:41:28 2025 by rpki-client