Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
File: 1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft (raw, json)
Hash identifier: yDbT1Z1MbRtAWJ94WEQdDScHGu3dLmuXonj1q7tk8B8=
Subject key identifier: 48:52:E6:BA:C9:1D:50:50:13:0C:A7:AA:0F:E1:78:7F:D6:65:D0:66
Authority key identifier: FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39
Certificate issuer: /CN=fa3c481607619c835d09f2471d976d7cf74a0439
Certificate serial: 0197B7B38E83D2C800D4B969B7C4714A9A81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
Manifest number: 08E5
Signing time: Sat 28 Jun 2025 18:01:27 +0000
Manifest this update: Sat 28 Jun 2025 18:01:27 +0000
Manifest next update: Sun 29 Jun 2025 18:01:27 +0000
Files and hashes: 1: 1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl (hash: jx/WnOcphvddKFdUrxYogt9OvcvDt6l06HJnGTfOnWo=)
2: Sm1L2uD9xe6VKth3NCE80Tv0dS4.roa (hash: 4pEKUYq0mI20y4yprrQN9bkk++T0cMvg0WwPL7Akx3E=)
3: wE4iXQHrpihOXjgvME7qpP1G1M8.roa (hash: 5SJHRAX4MIESmj0+ywOG6OpEbcFrbWg8slbXKt2TqRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:8e:83:d2:c8:00:d4:b9:69:b7:c4:71:4a:9a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3c481607619c835d09f2471d976d7cf74a0439
Validity
Not Before: Jun 28 18:01:27 2025 GMT
Not After : Jun 29 18:01:27 2025 GMT
Subject: CN=4852e6bac91d5050130ca7aa0fe1787fd665d066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ee:04:93:74:4e:a0:b3:6d:56:c2:14:7e:fb:
a9:cc:71:7d:ec:de:3f:52:34:fc:db:32:21:b3:40:
26:13:5e:7c:3d:52:78:32:01:c9:c5:05:a5:6f:f8:
85:8a:9b:d2:38:44:14:8a:80:c9:35:10:1e:91:84:
ec:04:7c:35:11:05:da:a5:3f:b8:3d:0b:ac:a3:5f:
65:18:31:b8:f0:15:9d:be:fe:31:14:6d:bc:65:8d:
19:ec:c7:12:e2:7e:92:4d:6c:97:65:5c:0a:4d:9a:
5b:7a:6f:19:45:f6:28:14:f6:34:9c:a6:08:a3:b8:
cb:f0:5b:1d:e6:54:d0:73:cb:55:58:d2:a8:1f:a0:
13:dc:6c:f3:88:6a:9f:dc:8c:9f:4d:e9:cc:0b:45:
fd:29:7b:2f:58:2e:ed:b3:f9:4c:4b:62:c7:af:ae:
8a:de:f0:4b:72:f9:0e:f8:d3:20:a0:37:17:f8:3b:
0e:eb:77:be:0f:8c:a9:4f:74:6e:ec:9c:15:e9:32:
c5:3c:94:4b:d0:84:74:4d:84:34:29:40:7a:c2:ef:
ab:59:eb:cf:fe:34:c7:18:e6:64:ab:f4:fe:77:58:
a0:e4:db:bb:68:55:27:c6:0a:82:3f:31:9b:ef:0f:
2a:b9:c9:95:63:64:bf:54:f7:4a:f0:94:eb:79:e7:
ee:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:52:E6:BA:C9:1D:50:50:13:0C:A7:AA:0F:E1:78:7F:D6:65:D0:66
X509v3 Authority Key Identifier:
keyid:FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:1a:ab:38:f1:c5:fd:0e:9d:7e:02:23:db:37:21:13:d2:e8:
1d:a9:87:21:cf:4b:49:ff:94:9c:01:83:b7:ab:1a:68:36:16:
7b:ae:c8:7d:7e:04:2f:15:d2:96:c3:85:10:1e:99:e9:19:87:
2d:3a:d6:60:4b:06:d8:19:23:e6:e2:92:79:e9:9a:0b:36:a6:
8d:ca:23:44:24:8a:23:32:a6:e9:b6:1a:a6:48:ba:d0:1f:0f:
36:24:cc:62:d0:af:ca:57:df:bc:00:00:db:f9:d8:c0:a6:85:
46:83:ce:9a:86:b7:fb:33:18:31:c4:c7:f7:c6:2c:47:20:2a:
fb:7d:44:8c:20:04:62:01:33:50:58:a9:02:e9:ae:00:e3:94:
5c:e7:d6:df:a7:d0:78:6b:1d:8a:5e:7c:5e:1b:53:29:05:2f:
16:1a:82:9a:ba:3b:3d:0c:2a:87:45:a8:5a:9c:c8:ff:4a:b4:
f7:d4:2c:e9:05:ab:95:52:64:4e:99:a8:8c:1d:56:78:10:9c:
eb:fa:f5:5b:d3:9f:1f:ec:4a:e8:17:e8:df:df:87:e2:03:dc:
5a:5f:16:30:c0:92:18:c8:96:54:b9:1e:87:fd:29:b0:56:6e:
29:a5:27:85:d6:94:fb:9f:e8:12:df:22:0c:9a:83:9f:3f:ae:
4d:19:6b:43
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZe3s46D0sgA1Llpt8RxSpqBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhM2M0ODE2MDc2MTljODM1ZDA5ZjI0NzFkOTc2ZDdjZjc0
YTA0MzkwHhcNMjUwNjI4MTgwMTI3WhcNMjUwNjI5MTgwMTI3WjAzMTEwLwYDVQQD
Eyg0ODUyZTZiYWM5MWQ1MDUwMTMwY2E3YWEwZmUxNzg3ZmQ2NjVkMDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1u4Ek3ROoLNtVsIUfvupzHF97N4/
UjT82zIhs0AmE158PVJ4MgHJxQWlb/iFipvSOEQUioDJNRAekYTsBHw1EQXapT+4
PQuso19lGDG48BWdvv4xFG28ZY0Z7McS4n6STWyXZVwKTZpbem8ZRfYoFPY0nKYI
o7jL8Fsd5lTQc8tVWNKoH6AT3GzziGqf3IyfTenMC0X9KXsvWC7ts/lMS2LHr66K
3vBLcvkO+NMgoDcX+DsO63e+D4ypT3Ru7JwV6TLFPJRL0IR0TYQ0KUB6wu+rWevP
/jTHGOZkq/T+d1ig5Nu7aFUnxgqCPzGb7w8qucmVY2S/VPdK8JTreefu2wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFEhS5rrJHVBQEwynqg/heH/WZdBmMB8GA1UdIwQY
MBaAFPo8SBYHYZyDXQnyRx2XbXz3SgQ5MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1qeElGZ2RobklOZENmSkhIWmR0ZlBkS0JEay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvOTk4NDhiLWM0ZjgtNDZhYi04OTIz
LTEzMDQ0NTRiZjI5ZC8xLzEtanhJRmdkaG5JTmRDZkpISFpkdGZQZEtCRGsubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzRmLzk5ODQ4Yi1jNGY4LTQ2YWItODkyMy0xMzA0NDU0YmYy
OWQvMS8xLWp4SUZnZGhuSU5kQ2ZKSEhaZHRmUGRLQkRrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmRqr
OPHF/Q6dfgIj2zchE9LoHamHIc9LSf+UnAGDt6saaDYWe67IfX4ELxXSlsOFEB6Z
6RmHLTrWYEsG2Bkj5uKSeemaCzamjcojRCSKIzKm6bYapki60B8PNiTMYtCvylff
vAAA2/nYwKaFRoPOmoa3+zMYMcTH98YsRyAq+31EjCAEYgEzUFipAumuAOOUXOfW
36fQeGsdil58XhtTKQUvFhqCmro7PQwqh0WoWpzI/0q099Qs6QWrlVJkTpmojB1W
eBCc6/r1W9OfH+xK6Bfo39+H4gPcWl8WMMCSGMiWVLkeh/0psFZuKaUnhdaU+5/o
Et8iDJqDnz+uTRlrQw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:32:52 2025 by rpki-client