Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.mft
File: jZCoyIbumsQjhhb5JjHruLx243E.mft (raw, json)
Hash identifier: nIatCqQMbM6cgTfiJxlBzYoMi+HC+Sgs+HYBb06hc0M=
Subject key identifier: 48:27:D4:5B:65:DD:51:A9:9D:32:C5:47:7F:CA:2E:FF:5F:87:F1:AC
Authority key identifier: 8D:90:A8:C8:86:EE:9A:C4:23:86:16:F9:26:31:EB:B8:BC:76:E3:71
Certificate issuer: /CN=8d90a8c886ee9ac4238616f92631ebb8bc76e371
Certificate serial: 0198D54E871EA3DCBA2B2F63C5D7871AD7C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZCoyIbumsQjhhb5JjHruLx243E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.mft
Manifest number: 07
Signing time: Sat 23 Aug 2025 05:02:29 +0000
Manifest this update: Sat 23 Aug 2025 05:02:29 +0000
Manifest next update: Sun 24 Aug 2025 05:02:29 +0000
Files and hashes: 1: jZCoyIbumsQjhhb5JjHruLx243E.crl (hash: LgAs1y1mx9Xs6Gho+0aBr8u9Vh0WCPI4jn1erJE7vTE=)
2: usm9wn0ranV8cJoAdmlA0D2Pk2s.roa (hash: lnjChVLXxICPBgsN6v1LDI5Ki8JFy1bjGXMD/7hIN1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZCoyIbumsQjhhb5JjHruLx243E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:87:1e:a3:dc:ba:2b:2f:63:c5:d7:87:1a:d7:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d90a8c886ee9ac4238616f92631ebb8bc76e371
Validity
Not Before: Aug 23 05:02:29 2025 GMT
Not After : Aug 24 05:02:29 2025 GMT
Subject: CN=4827d45b65dd51a99d32c5477fca2eff5f87f1ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:07:48:7a:77:91:d9:2f:89:41:8a:7f:d9:f7:
2c:42:9e:57:dd:ac:4d:c2:ee:15:6f:19:19:a9:e6:
2e:2f:e0:c2:ca:90:8b:f3:5e:74:d0:bc:a2:2a:21:
0a:77:22:38:1a:54:a3:7f:f1:d9:4c:8b:0c:f3:e3:
69:91:38:ad:e9:b7:20:f6:7a:99:f1:b6:d8:23:4d:
be:81:aa:93:ef:8b:37:a7:a6:c0:87:47:d5:a1:0b:
44:25:3a:91:ec:2f:6b:cc:28:11:29:5c:4b:a9:ba:
d8:85:c5:ef:79:86:64:a7:6d:86:32:c0:e9:f3:17:
75:36:c8:3a:26:de:a6:3a:e9:7a:47:f3:b1:3a:56:
92:d7:4d:ea:d4:c2:9d:d3:fe:51:e0:b9:85:57:6d:
b2:2d:c6:39:a1:e8:81:11:e5:66:45:3f:84:4a:66:
95:89:e5:49:9d:c6:99:a0:d2:30:cb:f6:12:28:18:
4a:27:99:36:85:c2:36:1a:fc:10:c7:1e:c5:9e:e6:
96:98:6d:61:78:cc:50:ed:d6:bd:f5:80:d5:5e:e1:
80:0b:d0:1d:c3:1f:86:9e:7c:49:8b:86:19:41:d7:
7a:84:cd:71:78:a2:32:68:f2:f6:7e:be:58:67:03:
1c:fb:88:d0:d4:4d:71:5d:d2:bf:41:cf:ae:ee:75:
18:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:27:D4:5B:65:DD:51:A9:9D:32:C5:47:7F:CA:2E:FF:5F:87:F1:AC
X509v3 Authority Key Identifier:
keyid:8D:90:A8:C8:86:EE:9A:C4:23:86:16:F9:26:31:EB:B8:BC:76:E3:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZCoyIbumsQjhhb5JjHruLx243E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:0f:38:d3:0c:d7:86:e2:c8:7a:d2:09:8e:68:8e:b0:ce:52:
3b:aa:fc:42:0f:6a:93:5c:f5:f5:89:7a:83:7e:0f:ef:cb:08:
af:c6:88:f5:45:fd:dd:59:7d:62:5f:2d:35:cc:9d:c8:0d:3e:
4f:00:e9:48:fb:79:3c:b2:ec:b2:82:9d:4b:e5:b7:23:b4:89:
c7:de:69:91:da:9d:b6:9a:2f:ac:fb:1f:af:9e:05:79:f0:9f:
ef:5e:97:3d:f0:a6:96:43:31:97:82:2d:90:e6:48:8f:bd:7d:
3c:ef:97:b8:30:fb:12:fe:51:cc:ee:d8:9b:5f:d5:b1:3e:37:
36:d9:94:c0:8a:ae:60:ae:e6:eb:13:3b:26:c4:ab:94:a5:23:
9f:0d:3a:ec:37:12:ed:ec:6b:2b:3a:f7:68:a8:c7:2e:08:7d:
46:33:3d:d0:94:75:ed:55:57:56:38:92:e7:11:c4:27:cb:0f:
69:dd:87:6a:c2:84:5d:10:13:57:7a:f0:34:2a:4a:f1:44:76:
99:4d:c3:6c:45:ec:29:23:17:3f:8c:a5:bf:9f:c0:bb:0b:b9:
33:76:63:eb:e5:d2:72:a0:13:04:44:4c:21:93:69:e4:1f:73:
94:c7:3e:bf:6a:1d:d1:1d:71:32:82:a6:fe:18:d5:a5:97:98:
de:03:20:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVToceo9y6Ky9jxdeHGtfFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkOTBhOGM4ODZlZTlhYzQyMzg2MTZmOTI2MzFlYmI4YmM3
NmUzNzEwHhcNMjUwODIzMDUwMjI5WhcNMjUwODI0MDUwMjI5WjAzMTEwLwYDVQQD
Eyg0ODI3ZDQ1YjY1ZGQ1MWE5OWQzMmM1NDc3ZmNhMmVmZjVmODdmMWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwdIeneR2S+JQYp/2fcsQp5X3axN
wu4VbxkZqeYuL+DCypCL81500LyiKiEKdyI4GlSjf/HZTIsM8+NpkTit6bcg9nqZ
8bbYI02+gaqT74s3p6bAh0fVoQtEJTqR7C9rzCgRKVxLqbrYhcXveYZkp22GMsDp
8xd1Nsg6Jt6mOul6R/OxOlaS103q1MKd0/5R4LmFV22yLcY5oeiBEeVmRT+ESmaV
ieVJncaZoNIwy/YSKBhKJ5k2hcI2GvwQxx7FnuaWmG1heMxQ7da99YDVXuGAC9Ad
wx+GnnxJi4YZQdd6hM1xeKIyaPL2fr5YZwMc+4jQ1E1xXdK/Qc+u7nUYOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEgn1Ftl3VGpnTLFR3/KLv9fh/GsMB8GA1UdIwQY
MBaAFI2QqMiG7prEI4YW+SYx67i8duNxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalpDb3lJYnVtc1FqaGhiNUpqSHJ1THgyNDNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC85YjBlZDctOWZkNi00Y2E2LWE1NzUt
MzZhYTkxMDY5Y2JkLzEvalpDb3lJYnVtc1FqaGhiNUpqSHJ1THgyNDNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC85YjBlZDctOWZkNi00Y2E2LWE1NzUtMzZhYTkxMDY5Y2Jk
LzEvalpDb3lJYnVtc1FqaGhiNUpqSHJ1THgyNDNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfw840wzX
huLIetIJjmiOsM5SO6r8Qg9qk1z19Yl6g34P78sIr8aI9UX93Vl9Yl8tNcydyA0+
TwDpSPt5PLLssoKdS+W3I7SJx95pkdqdtpovrPsfr54FefCf716XPfCmlkMxl4It
kOZIj719PO+XuDD7Ev5RzO7Ym1/VsT43NtmUwIquYK7m6xM7JsSrlKUjnw067DcS
7exrKzr3aKjHLgh9RjM90JR17VVXVjiS5xHEJ8sPad2HasKEXRATV3rwNCpK8UR2
mU3DbEXsKSMXP4ylv5/Auwu5M3Zj6+XScqATBERMIZNp5B9zlMc+v2od0R1xMoKm
/hjVpZeY3gMglA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:25:56 2025 by rpki-client