Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft
File: jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft (raw, json)
Hash identifier: Z4zzcup8682sfrjq/4nyuo2Bb0I2INbVqffaSbUYYNg=
Subject key identifier: A9:F8:5C:7B:24:54:91:28:A8:4D:09:2F:60:C0:37:E8:11:DF:9A:1E
Authority key identifier: 8E:0F:68:38:67:EF:76:9A:0A:22:AD:E1:71:18:ED:06:FA:57:B8:1F
Certificate issuer: /CN=8e0f683867ef769a0a22ade17118ed06fa57b81f
Certificate serial: 0198D5F1C9A5DB74C07206CCDD962DCC02FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jg9oOGfvdpoKIq3hcRjtBvpXuB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft
Manifest number: 0598
Signing time: Sat 23 Aug 2025 08:00:49 +0000
Manifest this update: Sat 23 Aug 2025 08:00:49 +0000
Manifest next update: Sun 24 Aug 2025 08:00:49 +0000
Files and hashes: 1: 960ydd6N5IVjJ8SKw0-cCFu0l5A.roa (hash: vdzIyqJL7Fj4rd7R5SOUV3BY5/WQ96AWM5L49KfXiUE=)
2: jg9oOGfvdpoKIq3hcRjtBvpXuB8.crl (hash: brg2TcGJi0N1X3KDTWtdCYQCllwWqpmSA8BuFj1l4A0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jg9oOGfvdpoKIq3hcRjtBvpXuB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:c9:a5:db:74:c0:72:06:cc:dd:96:2d:cc:02:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0f683867ef769a0a22ade17118ed06fa57b81f
Validity
Not Before: Aug 23 08:00:49 2025 GMT
Not After : Aug 24 08:00:49 2025 GMT
Subject: CN=a9f85c7b24549128a84d092f60c037e811df9a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c6:be:3b:dd:2b:9c:39:ac:06:cc:08:35:ce:
20:db:0f:c5:9c:a4:d7:1d:89:04:1c:e1:05:27:c0:
de:a8:7f:43:db:43:dd:58:41:8e:0e:85:e7:f6:f2:
4b:23:3c:c7:2e:59:2a:b9:de:34:10:b7:66:15:cf:
74:d9:95:77:28:00:c3:8f:1e:f7:f7:5d:b6:3b:38:
76:3e:d5:d5:51:a1:fc:d3:4c:e4:4d:4e:31:1b:2d:
9d:c1:a1:04:8b:12:30:86:85:01:f3:2a:9c:c3:e5:
72:14:45:71:43:04:66:1e:f5:48:a1:10:b4:f7:7b:
f6:5c:a4:a1:ed:1e:0e:08:db:1b:49:c7:e0:d4:d3:
e0:90:b7:74:48:64:c0:b9:15:70:91:65:67:fc:43:
73:0d:03:a6:41:a3:16:88:43:3c:af:c8:c4:eb:ed:
1a:1b:b5:ad:e0:69:87:5b:55:2f:24:ea:3a:09:d2:
9f:28:34:a3:44:ce:22:0a:4e:3f:dc:0a:8f:9d:de:
0b:0f:c7:a9:2a:cf:3a:f6:4c:0b:e9:06:5d:92:0d:
2c:07:37:0e:8e:b6:1e:e2:07:ce:fd:e0:ba:2c:48:
ee:d1:9e:ac:b5:09:1a:65:3e:a6:ec:b2:a4:da:00:
65:1f:07:7b:a0:72:b3:5f:cf:da:2b:7f:56:37:d8:
c0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F8:5C:7B:24:54:91:28:A8:4D:09:2F:60:C0:37:E8:11:DF:9A:1E
X509v3 Authority Key Identifier:
keyid:8E:0F:68:38:67:EF:76:9A:0A:22:AD:E1:71:18:ED:06:FA:57:B8:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jg9oOGfvdpoKIq3hcRjtBvpXuB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:b2:a3:11:4c:6c:50:06:d9:a2:f6:88:2e:15:9c:fd:84:e6:
a7:e6:0d:67:a9:d9:a7:65:18:ad:19:7b:30:4e:7d:e5:58:a1:
1b:68:dc:b4:ef:15:d4:db:e4:da:12:87:b1:17:65:fc:57:a6:
2c:fd:40:44:27:a8:5e:84:ef:f1:fe:a3:5a:65:e8:65:07:ee:
d4:5a:6e:21:74:40:d2:77:2d:2a:ec:c4:02:a0:83:40:d6:1a:
d1:35:b1:5e:13:e9:9c:e1:39:b6:1e:db:41:a8:f0:2c:5d:de:
22:9d:13:f5:e6:e4:80:06:74:05:3e:28:89:a6:05:3b:64:a7:
9c:28:a4:35:01:a2:c3:81:d5:50:d9:22:c0:93:f5:f0:b9:d7:
19:00:81:5d:94:82:89:c2:fe:6b:df:20:e4:15:0d:83:17:3e:
c0:23:5d:b4:a1:0a:80:f5:8c:f7:16:0d:36:1e:eb:bf:6e:ad:
9a:ea:a1:41:dd:fe:8f:ae:8c:e2:15:11:e9:f1:da:b1:e0:e1:
59:ab:b8:12:3f:aa:48:e4:25:4e:bf:fa:c1:61:b9:2c:10:3d:
60:cd:22:09:85:17:f3:28:cb:63:3c:fe:0a:78:30:8e:d5:34:
fc:90:ba:01:52:1e:92:12:e1:7b:54:7d:bd:d4:90:6f:55:2a:
44:69:2b:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8cml23TAcgbM3ZYtzAL8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMGY2ODM4NjdlZjc2OWEwYTIyYWRlMTcxMThlZDA2ZmE1
N2I4MWYwHhcNMjUwODIzMDgwMDQ5WhcNMjUwODI0MDgwMDQ5WjAzMTEwLwYDVQQD
EyhhOWY4NWM3YjI0NTQ5MTI4YTg0ZDA5MmY2MGMwMzdlODExZGY5YTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsa+O90rnDmsBswINc4g2w/FnKTX
HYkEHOEFJ8DeqH9D20PdWEGODoXn9vJLIzzHLlkqud40ELdmFc902ZV3KADDjx73
9122Ozh2PtXVUaH800zkTU4xGy2dwaEEixIwhoUB8yqcw+VyFEVxQwRmHvVIoRC0
93v2XKSh7R4OCNsbScfg1NPgkLd0SGTAuRVwkWVn/ENzDQOmQaMWiEM8r8jE6+0a
G7Wt4GmHW1UvJOo6CdKfKDSjRM4iCk4/3AqPnd4LD8epKs869kwL6QZdkg0sBzcO
jrYe4gfO/eC6LEju0Z6stQkaZT6m7LKk2gBlHwd7oHKzX8/aK39WN9jA/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKn4XHskVJEoqE0JL2DAN+gR35oeMB8GA1UdIwQY
MBaAFI4PaDhn73aaCiKt4XEY7Qb6V7gfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamc5b09HZnZkcG9LSXEzaGNSanRCdnBYdUI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC84NmMwMDItNzU4Yi00OTVhLWI5Y2Qt
N2IwZGMwMGE4YzIwLzEvamc5b09HZnZkcG9LSXEzaGNSanRCdnBYdUI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC84NmMwMDItNzU4Yi00OTVhLWI5Y2QtN2IwZGMwMGE4YzIw
LzEvamc5b09HZnZkcG9LSXEzaGNSanRCdnBYdUI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlrKjEUxs
UAbZovaILhWc/YTmp+YNZ6nZp2UYrRl7ME595VihG2jctO8V1Nvk2hKHsRdl/Fem
LP1ARCeoXoTv8f6jWmXoZQfu1FpuIXRA0nctKuzEAqCDQNYa0TWxXhPpnOE5th7b
QajwLF3eIp0T9ebkgAZ0BT4oiaYFO2SnnCikNQGiw4HVUNkiwJP18LnXGQCBXZSC
icL+a98g5BUNgxc+wCNdtKEKgPWM9xYNNh7rv26tmuqhQd3+j66M4hUR6fHaseDh
Wau4Ej+qSOQlTr/6wWG5LBA9YM0iCYUX8yjLYzz+CngwjtU0/JC6AVIekhLhe1R9
vdSQb1UqRGkrzg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:12 2025 by rpki-client