Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft
File: jV8GavgNDp8H6oeyS9r6WdH18m8.mft (raw, json)
Hash identifier: Gfw02Qq7o0HHJFq6SXef3oJGVroJJwlbY9WOyapMmTk=
Subject key identifier: 7B:D5:39:4D:20:94:3B:27:F2:EB:98:3D:A1:6E:13:C2:25:C8:3D:CD
Authority key identifier: 8D:5F:06:6A:F8:0D:0E:9F:07:EA:87:B2:4B:DA:FA:59:D1:F5:F2:6F
Certificate issuer: /CN=8d5f066af80d0e9f07ea87b24bdafa59d1f5f26f
Certificate serial: 0197B6D7B4972D2F50BFFC4B521C59C9A0B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jV8GavgNDp8H6oeyS9r6WdH18m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 14:01:18 +0000
Manifest this update: Sat 28 Jun 2025 14:01:18 +0000
Manifest next update: Sun 29 Jun 2025 14:01:18 +0000
Files and hashes: 1: Nu6PzktHZPkZpTfNWDAC1WQ31fs.roa (hash: 0olptWKqLuwlqgvdBxIZwPcl+HWoWf7gPYNB7LvpZJo=)
2: jV8GavgNDp8H6oeyS9r6WdH18m8.crl (hash: Xv9Ib+9m8hzG7X2zQH/i4XM1sjRzFmBTjKkaP5UJrFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jV8GavgNDp8H6oeyS9r6WdH18m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:b4:97:2d:2f:50:bf:fc:4b:52:1c:59:c9:a0:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d5f066af80d0e9f07ea87b24bdafa59d1f5f26f
Validity
Not Before: Jun 28 14:01:18 2025 GMT
Not After : Jun 29 14:01:18 2025 GMT
Subject: CN=7bd5394d20943b27f2eb983da16e13c225c83dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2b:24:c3:62:25:f5:90:e5:6e:af:f2:97:e1:
92:92:81:1b:2a:83:7b:42:d4:d7:ba:0b:15:a1:7a:
d6:21:f1:97:56:71:40:83:99:d7:ed:dd:27:b2:23:
06:9a:f1:af:77:88:7c:32:8e:bd:86:05:75:8f:16:
ae:74:72:f9:8e:79:1f:e5:b7:99:c0:d5:4a:c2:b8:
50:48:8a:a6:e6:35:ec:10:af:10:3b:4e:23:6d:b4:
74:ac:2d:21:8e:95:eb:6f:ad:10:fe:97:62:e7:0d:
18:3d:bb:c1:ef:97:6c:9a:f7:8d:fe:68:77:1c:13:
ce:a7:52:a6:5c:89:ec:4e:ca:50:b5:2a:0d:55:d0:
fa:ff:ae:c2:85:a7:07:76:66:c4:a7:06:ad:1d:ca:
2e:02:98:76:0d:93:46:fc:39:47:e9:98:31:7f:2d:
5a:0b:f3:5c:40:c8:ed:d7:89:48:25:b6:75:03:95:
3e:56:29:ce:04:d2:76:1a:6d:a3:d5:18:e5:3a:a9:
de:b4:e6:00:cb:44:17:30:66:5a:19:9e:fe:3d:d5:
78:15:2d:a4:6f:d7:2f:8b:e3:69:46:ca:38:77:f3:
23:f5:b3:6c:4f:0e:44:52:a9:31:f9:4b:56:ac:06:
37:fa:3c:60:0f:bd:67:1f:5c:b2:a8:48:5c:b2:a0:
08:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D5:39:4D:20:94:3B:27:F2:EB:98:3D:A1:6E:13:C2:25:C8:3D:CD
X509v3 Authority Key Identifier:
keyid:8D:5F:06:6A:F8:0D:0E:9F:07:EA:87:B2:4B:DA:FA:59:D1:F5:F2:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jV8GavgNDp8H6oeyS9r6WdH18m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:4d:dd:b3:8a:3e:25:e6:ca:d4:61:06:02:6f:e6:13:13:59:
d9:31:aa:5b:b2:10:d4:e1:44:5d:47:53:2f:0c:69:67:0a:56:
70:1a:42:a6:66:33:a0:8f:f7:e7:2c:52:a4:a9:ad:6a:87:ba:
5e:0e:96:21:60:6a:ff:d1:1f:de:b9:80:4d:e4:f2:63:55:fd:
72:f3:c9:4b:f3:95:42:00:13:aa:63:d0:2e:ff:74:9d:4d:b8:
63:74:bd:43:5e:27:85:53:c1:02:14:db:33:f2:dc:0c:87:a5:
dc:e7:56:f0:bf:0a:cd:06:d0:40:43:ff:4a:06:78:5e:b0:70:
03:eb:4e:33:00:2d:0a:61:a0:02:00:e4:18:f2:68:bc:e0:d8:
3d:02:af:95:82:d7:29:07:42:21:30:4f:30:fd:06:ed:74:ab:
7e:1b:36:6e:ec:6c:d7:9e:0c:09:5b:08:d3:03:12:18:25:46:
b3:b5:43:21:45:ee:e3:6c:b6:1c:87:e0:90:68:3a:be:56:9d:
2f:4b:2e:5e:14:da:81:80:7f:a8:17:19:44:60:35:f7:85:36:
26:75:4c:1b:ce:ee:35:d2:1a:1b:33:22:13:00:a4:63:7f:a9:
47:36:7f:e1:81:c5:65:1d:f5:a0:93:73:32:d5:ef:48:c1:6d:
d9:8c:4a:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe217SXLS9Qv/xLUhxZyaC0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNWYwNjZhZjgwZDBlOWYwN2VhODdiMjRiZGFmYTU5ZDFm
NWYyNmYwHhcNMjUwNjI4MTQwMTE4WhcNMjUwNjI5MTQwMTE4WjAzMTEwLwYDVQQD
Eyg3YmQ1Mzk0ZDIwOTQzYjI3ZjJlYjk4M2RhMTZlMTNjMjI1YzgzZGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSskw2Il9ZDlbq/yl+GSkoEbKoN7
QtTXugsVoXrWIfGXVnFAg5nX7d0nsiMGmvGvd4h8Mo69hgV1jxaudHL5jnkf5beZ
wNVKwrhQSIqm5jXsEK8QO04jbbR0rC0hjpXrb60Q/pdi5w0YPbvB75dsmveN/mh3
HBPOp1KmXInsTspQtSoNVdD6/67ChacHdmbEpwatHcouAph2DZNG/DlH6Zgxfy1a
C/NcQMjt14lIJbZ1A5U+VinOBNJ2Gm2j1RjlOqnetOYAy0QXMGZaGZ7+PdV4FS2k
b9cvi+NpRso4d/Mj9bNsTw5EUqkx+UtWrAY3+jxgD71nH1yyqEhcsqAIqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvVOU0glDsn8uuYPaFuE8IlyD3NMB8GA1UdIwQY
MBaAFI1fBmr4DQ6fB+qHskva+lnR9fJvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalY4R2F2Z05EcDhINm9leVM5cjZXZEgxOG04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zMzBlNGQtYTlkOS00YjdlLTg2M2Mt
NmYzYWE4OTQzZTY4LzEvalY4R2F2Z05EcDhINm9leVM5cjZXZEgxOG04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8zMzBlNGQtYTlkOS00YjdlLTg2M2MtNmYzYWE4OTQzZTY4
LzEvalY4R2F2Z05EcDhINm9leVM5cjZXZEgxOG04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXU3ds4o+
JebK1GEGAm/mExNZ2TGqW7IQ1OFEXUdTLwxpZwpWcBpCpmYzoI/35yxSpKmtaoe6
Xg6WIWBq/9Ef3rmATeTyY1X9cvPJS/OVQgATqmPQLv90nU24Y3S9Q14nhVPBAhTb
M/LcDIel3OdW8L8KzQbQQEP/SgZ4XrBwA+tOMwAtCmGgAgDkGPJovODYPQKvlYLX
KQdCITBPMP0G7XSrfhs2buxs154MCVsI0wMSGCVGs7VDIUXu42y2HIfgkGg6vlad
L0suXhTagYB/qBcZRGA194U2JnVMG87uNdIaGzMiEwCkY3+pRzZ/4YHFZR31oJNz
MtXvSMFt2YxKjQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:45:56 2025 by rpki-client