Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
File: jjvz0Ldl8upCRh0SN85-reQ7aK8.mft (raw, json)
Hash identifier: qxQcRm0uF87FRStiZcnixqYAESTn1SaOojxE59ePDWw=
Subject key identifier: D7:58:3A:48:2F:70:9F:E9:10:8C:09:4E:F6:A6:71:FD:AB:ED:9D:90
Authority key identifier: 8E:3B:F3:D0:B7:65:F2:EA:42:46:1D:12:37:CE:7E:AD:E4:3B:68:AF
Certificate issuer: /CN=8e3bf3d0b765f2ea42461d1237ce7eade43b68af
Certificate serial: 0198D4A7D0F94C41CB899411BE9B7E8FDECE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
Manifest number: 0C71
Signing time: Sat 23 Aug 2025 02:00:24 +0000
Manifest this update: Sat 23 Aug 2025 02:00:24 +0000
Manifest next update: Sun 24 Aug 2025 02:00:24 +0000
Files and hashes: 1: 2W4793sjPA5QMW_mlfEBfSoM2Is.roa (hash: xqASKHMV7rljYXyQYNSClQ6vovvo85JsyWpLw7N75ps=)
2: jjvz0Ldl8upCRh0SN85-reQ7aK8.crl (hash: hPreVIEbEauJ6XXuCmOZ1dj/78tm8g1HEf6Gvz9O0zU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:d0:f9:4c:41:cb:89:94:11:be:9b:7e:8f:de:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3bf3d0b765f2ea42461d1237ce7eade43b68af
Validity
Not Before: Aug 23 02:00:24 2025 GMT
Not After : Aug 24 02:00:24 2025 GMT
Subject: CN=d7583a482f709fe9108c094ef6a671fdabed9d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5c:ce:f1:2b:24:66:e6:75:94:ea:f5:59:49:
6c:ec:45:be:16:82:70:33:38:e2:71:5b:97:71:78:
45:2d:3a:a5:2c:2c:60:ad:4c:7e:55:dc:2c:e8:e6:
6c:76:9f:24:d1:a2:29:c6:a2:59:6c:a8:99:2c:19:
1b:c6:8c:bf:97:96:e4:ab:b9:ee:d7:6e:6b:c9:03:
cc:f3:09:85:5c:23:09:ed:f1:e4:d1:63:bf:41:8e:
bf:cd:59:8c:54:c4:1a:75:fb:96:fa:8a:c6:f6:0c:
89:7c:e1:20:5a:ab:b2:a4:c4:8a:18:56:b2:83:ef:
3b:71:26:2f:40:c2:da:cf:56:36:89:75:50:24:79:
ea:41:54:cb:1b:58:05:6e:a5:b2:b9:f0:04:69:33:
46:fd:3a:bb:88:8b:84:d2:13:53:2e:1d:3d:e3:2b:
6f:95:f0:b1:58:ed:33:11:26:a7:d7:f7:09:2f:84:
97:90:92:c0:b8:05:25:64:18:94:62:05:b2:d4:30:
e1:d6:21:df:f1:08:f9:77:0c:9b:4e:d8:45:d0:82:
b9:c4:af:48:b8:6c:b7:8b:89:48:eb:96:83:03:ae:
e8:df:ad:6e:e3:2d:17:60:06:8a:7f:f1:92:e1:a3:
20:a4:ab:d1:e6:b5:55:e8:b1:bd:0e:a1:61:93:b6:
3c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:58:3A:48:2F:70:9F:E9:10:8C:09:4E:F6:A6:71:FD:AB:ED:9D:90
X509v3 Authority Key Identifier:
keyid:8E:3B:F3:D0:B7:65:F2:EA:42:46:1D:12:37:CE:7E:AD:E4:3B:68:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:46:14:57:77:3a:ef:90:36:88:17:1c:28:a1:0f:82:13:10:
cc:a9:95:11:55:c2:7c:0e:40:ad:43:e6:7b:1a:98:a2:00:f1:
57:1b:5a:be:74:e9:62:b9:26:58:c1:62:f6:07:5b:7f:65:0f:
a7:9d:2b:b1:99:51:da:f4:68:d9:aa:7b:1a:7b:a8:ab:e5:bf:
82:bb:cc:ce:28:3d:e6:77:bb:9f:94:9b:f5:30:97:8e:be:da:
27:45:12:54:94:19:24:8d:d8:b3:87:11:75:42:fc:95:65:7b:
4b:83:b7:0b:97:40:1e:c2:a5:ae:fc:4a:73:15:d0:aa:91:12:
96:c2:b4:e0:76:1e:1b:08:bf:3a:35:d6:34:94:40:06:14:e2:
ee:c0:83:33:a4:c6:dd:e2:9b:7e:19:42:d4:84:ff:cf:cb:70:
d6:8b:e1:61:be:ae:af:15:f2:f2:86:05:18:3b:e1:44:dc:ce:
39:45:42:cc:a8:6f:b6:b6:fb:95:a2:b3:f0:c1:e1:43:a9:fd:
6c:9e:7c:25:8f:ea:81:25:df:52:e0:c6:54:9d:4b:6d:bc:43:
5c:10:39:cc:86:3a:6c:e6:74:75:46:20:8e:2e:6e:d3:73:bc:
4d:d5:52:2b:ee:f5:39:bc:ee:9a:16:39:c8:d8:c5:40:df:72:
9f:8c:8c:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp9D5TEHLiZQRvpt+j97OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlM2JmM2QwYjc2NWYyZWE0MjQ2MWQxMjM3Y2U3ZWFkZTQz
YjY4YWYwHhcNMjUwODIzMDIwMDI0WhcNMjUwODI0MDIwMDI0WjAzMTEwLwYDVQQD
EyhkNzU4M2E0ODJmNzA5ZmU5MTA4YzA5NGVmNmE2NzFmZGFiZWQ5ZDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1zO8SskZuZ1lOr1WUls7EW+FoJw
MzjicVuXcXhFLTqlLCxgrUx+Vdws6OZsdp8k0aIpxqJZbKiZLBkbxoy/l5bkq7nu
125ryQPM8wmFXCMJ7fHk0WO/QY6/zVmMVMQadfuW+orG9gyJfOEgWquypMSKGFay
g+87cSYvQMLaz1Y2iXVQJHnqQVTLG1gFbqWyufAEaTNG/Tq7iIuE0hNTLh094ytv
lfCxWO0zESan1/cJL4SXkJLAuAUlZBiUYgWy1DDh1iHf8Qj5dwybTthF0IK5xK9I
uGy3i4lI65aDA67o361u4y0XYAaKf/GS4aMgpKvR5rVV6LG9DqFhk7Y8ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdYOkgvcJ/pEIwJTvamcf2r7Z2QMB8GA1UdIwQY
MBaAFI4789C3ZfLqQkYdEjfOfq3kO2ivMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamp2ejBMZGw4dXBDUmgwU044NS1yZVE3YUs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC82MTkyNTAtMTJlNy00ZWExLTkzOWMt
NTE3NjZiOWNhODZmLzEvamp2ejBMZGw4dXBDUmgwU044NS1yZVE3YUs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC82MTkyNTAtMTJlNy00ZWExLTkzOWMtNTE3NjZiOWNhODZm
LzEvamp2ejBMZGw4dXBDUmgwU044NS1yZVE3YUs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGUYUV3c6
75A2iBccKKEPghMQzKmVEVXCfA5ArUPmexqYogDxVxtavnTpYrkmWMFi9gdbf2UP
p50rsZlR2vRo2ap7Gnuoq+W/grvMzig95ne7n5Sb9TCXjr7aJ0USVJQZJI3Ys4cR
dUL8lWV7S4O3C5dAHsKlrvxKcxXQqpESlsK04HYeGwi/OjXWNJRABhTi7sCDM6TG
3eKbfhlC1IT/z8tw1ovhYb6urxXy8oYFGDvhRNzOOUVCzKhvtrb7laKz8MHhQ6n9
bJ58JY/qgSXfUuDGVJ1LbbxDXBA5zIY6bOZ0dUYgji5u03O8TdVSK+71ObzumhY5
yNjFQN9yn4yMxQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:05 2025 by rpki-client