Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
File: J_8gRAummKTcBDm8F5-zOj7hzJU.mft (raw, json)
Hash identifier: toGbQjm83WXtJGV2YWvsMvpqxcSy2LW7370/+BtlTIM=
Subject key identifier: AA:E0:1B:DE:4F:A2:17:2B:CD:D2:D1:CF:B0:28:1B:87:12:59:41:EE
Authority key identifier: 27:FF:20:44:0B:A6:98:A4:DC:04:39:BC:17:9F:B3:3A:3E:E1:CC:95
Certificate issuer: /CN=27ff20440ba698a4dc0439bc179fb33a3ee1cc95
Certificate serial: 0198D8503CF35AE819252213A39FD26143E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
Manifest number: 0D21
Signing time: Sat 23 Aug 2025 19:03:13 +0000
Manifest this update: Sat 23 Aug 2025 19:03:13 +0000
Manifest next update: Sun 24 Aug 2025 19:03:13 +0000
Files and hashes: 1: J_8gRAummKTcBDm8F5-zOj7hzJU.crl (hash: jiquA0YgEIBeQj7YuIBj+6ar2R/gAY3ZNTOjUXkPHTs=)
2: _tUXooY9b06bDKDjgo1P9zjilGI.roa (hash: eyE2Sp1NPUfSOv01mHhVH2OIahlIo+oZSctInWb+NT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:50:3c:f3:5a:e8:19:25:22:13:a3:9f:d2:61:43:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ff20440ba698a4dc0439bc179fb33a3ee1cc95
Validity
Not Before: Aug 23 19:03:13 2025 GMT
Not After : Aug 24 19:03:13 2025 GMT
Subject: CN=aae01bde4fa2172bcdd2d1cfb0281b87125941ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:33:03:26:91:e4:fb:3b:67:db:71:db:26:56:
79:ef:59:ef:e2:39:d7:e6:b9:fa:df:5d:93:d0:de:
35:22:0b:25:36:fd:9a:4f:a9:ee:ed:22:b1:a5:5c:
c8:fb:c2:1d:12:99:06:b4:d5:1c:3d:de:8b:9b:96:
ca:ee:4b:76:55:4f:b4:e9:88:fc:0c:e2:8a:85:3a:
84:c4:84:6c:f2:58:da:e1:64:da:b5:05:6d:b2:16:
59:fb:cc:43:7c:50:93:55:9b:c9:9b:91:e0:94:1f:
5d:2f:41:75:d0:be:c6:b8:ef:c0:32:c3:6e:a9:76:
0a:39:1b:eb:7b:6c:5a:0a:3d:e2:3e:44:ad:6a:90:
7b:88:ba:d4:46:33:ac:5e:71:d7:50:d1:5e:f9:16:
79:10:ce:59:c9:c4:11:3a:ca:eb:06:72:c1:db:dd:
63:0c:d9:eb:47:5a:30:dd:f9:31:cc:b5:02:65:02:
1d:98:8f:2d:d8:62:80:74:c5:b6:d8:10:dd:93:ed:
d1:5d:87:be:e6:27:35:9f:d1:42:e0:75:84:67:6f:
71:19:dc:f1:59:c6:b6:6f:51:90:f2:0c:08:16:ad:
e3:a4:fe:ca:41:5f:51:a5:e8:3a:ae:9e:e2:25:76:
34:43:28:e2:72:5e:a1:b6:1e:f3:7d:3c:4d:94:12:
cc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E0:1B:DE:4F:A2:17:2B:CD:D2:D1:CF:B0:28:1B:87:12:59:41:EE
X509v3 Authority Key Identifier:
keyid:27:FF:20:44:0B:A6:98:A4:DC:04:39:BC:17:9F:B3:3A:3E:E1:CC:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ad:a6:ad:1a:fb:cf:07:6e:cd:1d:f0:b1:14:88:31:ae:7c:
b5:15:18:6d:fc:30:f3:04:78:6a:42:16:e7:90:17:10:b6:74:
14:4a:b2:ed:ec:c7:c6:b8:e6:9a:e5:48:1b:71:a4:e0:63:a5:
40:f4:d7:66:5b:4d:f3:0d:5f:5b:36:2a:9b:32:e1:6f:23:03:
f4:d5:d2:c7:fe:59:2d:54:eb:1c:2a:33:16:e6:36:cb:e9:4b:
14:c1:38:5a:7b:04:76:9f:62:96:a6:86:ef:47:34:fa:6b:b6:
bc:53:0b:2a:a6:ea:5b:a7:2e:d3:22:65:ca:d2:cc:eb:db:00:
16:3f:a0:28:d9:6e:56:37:42:44:38:84:84:20:2a:c6:39:82:
f0:84:1b:6b:a7:04:c5:3b:e1:e7:70:f2:2d:40:0d:68:e0:fb:
a6:44:33:9e:02:c1:d3:94:1f:f4:d8:91:e2:5d:18:df:e8:be:
2c:10:0b:6a:37:0d:3a:79:c1:6d:de:f6:ed:af:70:43:e8:d1:
1f:e9:77:5c:f0:81:24:a9:fa:e5:6a:b3:de:8d:de:85:08:2a:
e1:0b:3c:81:ce:f3:92:45:7b:4a:27:0a:65:96:4c:98:12:69:
17:85:fe:ed:1c:92:c3:1c:f2:fa:79:32:70:41:05:6a:f4:3f:
90:cd:2b:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYUDzzWugZJSITo5/SYUPlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZmYyMDQ0MGJhNjk4YTRkYzA0MzliYzE3OWZiMzNhM2Vl
MWNjOTUwHhcNMjUwODIzMTkwMzEzWhcNMjUwODI0MTkwMzEzWjAzMTEwLwYDVQQD
EyhhYWUwMWJkZTRmYTIxNzJiY2RkMmQxY2ZiMDI4MWI4NzEyNTk0MWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+TMDJpHk+ztn23HbJlZ571nv4jnX
5rn6312T0N41IgslNv2aT6nu7SKxpVzI+8IdEpkGtNUcPd6Lm5bK7kt2VU+06Yj8
DOKKhTqExIRs8lja4WTatQVtshZZ+8xDfFCTVZvJm5HglB9dL0F10L7GuO/AMsNu
qXYKORvre2xaCj3iPkStapB7iLrURjOsXnHXUNFe+RZ5EM5ZycQROsrrBnLB291j
DNnrR1ow3fkxzLUCZQIdmI8t2GKAdMW22BDdk+3RXYe+5ic1n9FC4HWEZ29xGdzx
Wca2b1GQ8gwIFq3jpP7KQV9Rpeg6rp7iJXY0Qyjicl6hth7zfTxNlBLMhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKrgG95PohcrzdLRz7AoG4cSWUHuMB8GA1UdIwQY
MBaAFCf/IEQLppik3AQ5vBefszo+4cyVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSl84Z1JBdW1tS1RjQkRtOEY1LXpPajdoekpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yMWRlYmEtZGI2Ni00NzAyLWJkYmYt
MDkxMTVkNTkyZTZmLzEvSl84Z1JBdW1tS1RjQkRtOEY1LXpPajdoekpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8yMWRlYmEtZGI2Ni00NzAyLWJkYmYtMDkxMTVkNTkyZTZm
LzEvSl84Z1JBdW1tS1RjQkRtOEY1LXpPajdoekpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP62mrRr7
zwduzR3wsRSIMa58tRUYbfww8wR4akIW55AXELZ0FEqy7ezHxrjmmuVIG3Gk4GOl
QPTXZltN8w1fWzYqmzLhbyMD9NXSx/5ZLVTrHCozFuY2y+lLFME4WnsEdp9ilqaG
70c0+mu2vFMLKqbqW6cu0yJlytLM69sAFj+gKNluVjdCRDiEhCAqxjmC8IQba6cE
xTvh53DyLUANaOD7pkQzngLB05Qf9NiR4l0Y3+i+LBALajcNOnnBbd727a9wQ+jR
H+l3XPCBJKn65Wqz3o3ehQgq4Qs8gc7zkkV7SicKZZZMmBJpF4X+7RySwxzy+nky
cEEFavQ/kM0rYw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:51:15 2025 by rpki-client