Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3b11de-900f-4378-84eb-7870c645e219/1/jxy5c3UkxDf2-nUhF2uwq3H77mM.mft
File: jxy5c3UkxDf2-nUhF2uwq3H77mM.mft (raw, json)
Hash identifier: FIzlcG+3A54TgbPYBdgg5CPDCm1QGGcNn0ek9G+rKnY=
Subject key identifier: 0D:AC:F0:6F:11:A4:0E:BF:28:A5:25:AD:E7:40:57:EE:96:03:D9:78
Authority key identifier: 8F:1C:B9:73:75:24:C4:37:F6:FA:75:21:17:6B:B0:AB:71:FB:EE:63
Certificate issuer: /CN=8f1cb9737524c437f6fa7521176bb0ab71fbee63
Certificate serial: 0197CF4DC90DDF9B4BF166818F67633C7FCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxy5c3UkxDf2-nUhF2uwq3H77mM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3b11de-900f-4378-84eb-7870c645e219/1/jxy5c3UkxDf2-nUhF2uwq3H77mM.mft
Manifest number: 0744
Signing time: Thu 03 Jul 2025 08:01:10 +0000
Manifest this update: Thu 03 Jul 2025 08:01:10 +0000
Manifest next update: Fri 04 Jul 2025 08:01:10 +0000
Files and hashes: 1: CSyvgilT5mnW9pyqSyfTaCfKxrY.roa (hash: tpDRNnsrbKfOJ2P6aML+VDmpLs4+ujzAYf4aKfdZnQg=)
2: jxy5c3UkxDf2-nUhF2uwq3H77mM.crl (hash: hxm4yeZXbSkx5nOdLqRTVBx1F6BLIOAXURnUabBtIxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3b11de-900f-4378-84eb-7870c645e219/1/jxy5c3UkxDf2-nUhF2uwq3H77mM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3b11de-900f-4378-84eb-7870c645e219/1/jxy5c3UkxDf2-nUhF2uwq3H77mM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxy5c3UkxDf2-nUhF2uwq3H77mM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cf:4d:c9:0d:df:9b:4b:f1:66:81:8f:67:63:3c:7f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f1cb9737524c437f6fa7521176bb0ab71fbee63
Validity
Not Before: Jul 3 08:01:10 2025 GMT
Not After : Jul 4 08:01:10 2025 GMT
Subject: CN=0dacf06f11a40ebf28a525ade74057ee9603d978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:29:ea:bd:b7:a5:d9:18:62:b7:cc:8b:2a:4b:
b1:d6:8b:10:bf:3f:13:7d:52:7c:54:dc:67:1c:9b:
0d:fc:3a:37:1f:67:4e:6d:6f:7e:03:26:41:d9:79:
fe:13:05:5d:18:4a:c7:60:98:13:6f:d6:34:3a:a3:
a3:af:51:f9:df:8a:c1:20:3a:d3:47:a9:54:44:2e:
55:ab:70:a6:b7:2e:de:e9:e5:80:c9:95:9a:0d:ad:
0c:3b:63:ee:8c:76:46:2c:0a:fc:8b:3c:c2:4f:7a:
e5:f7:18:00:62:cb:4a:0f:fc:66:14:04:7b:06:0d:
b0:79:52:ba:3b:3c:95:df:ee:20:3e:f6:bb:12:b7:
f1:85:ee:d9:ea:1e:d2:c7:bc:ab:a7:e8:db:d3:8a:
58:f5:dc:e7:d8:a1:d0:94:37:42:3b:6d:1b:a1:58:
02:3b:81:8f:4f:13:89:16:18:ed:d1:7d:88:fd:70:
55:94:b4:68:96:19:6f:18:7d:44:d6:15:d8:09:18:
a7:3d:82:41:69:d8:cf:43:cc:36:fc:82:f5:dd:f5:
76:35:3b:72:46:bd:c1:12:f6:83:22:8a:a1:15:f9:
8f:09:36:d5:62:78:aa:c9:2e:53:3b:25:91:13:5c:
45:96:09:db:77:67:3a:b0:3b:b7:45:69:b2:bc:73:
33:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AC:F0:6F:11:A4:0E:BF:28:A5:25:AD:E7:40:57:EE:96:03:D9:78
X509v3 Authority Key Identifier:
keyid:8F:1C:B9:73:75:24:C4:37:F6:FA:75:21:17:6B:B0:AB:71:FB:EE:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxy5c3UkxDf2-nUhF2uwq3H77mM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3b11de-900f-4378-84eb-7870c645e219/1/jxy5c3UkxDf2-nUhF2uwq3H77mM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3b11de-900f-4378-84eb-7870c645e219/1/jxy5c3UkxDf2-nUhF2uwq3H77mM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:86:41:6d:90:f9:d2:8d:5b:00:3a:c6:c7:94:80:06:81:95:
6c:88:3c:49:6d:40:ba:27:70:ca:a3:f2:81:26:77:a1:f1:51:
9b:4b:ff:4f:45:dd:d8:a6:c2:e8:ea:6b:ca:01:22:73:41:e3:
b7:89:8a:8f:2c:12:c3:82:6f:62:b1:e5:aa:57:be:44:d4:c5:
29:0e:c3:c2:3d:2e:b4:81:94:23:5d:13:86:d4:82:c9:81:11:
37:1a:96:51:d1:95:44:32:ba:a9:1f:30:38:b3:c1:c2:db:83:
83:a6:9c:99:a6:66:df:ca:42:6a:ba:61:91:ed:a1:39:42:a4:
e7:0b:77:27:c7:6d:e8:e9:59:2c:7a:88:3c:f0:f5:8b:5b:4d:
cf:85:f2:1b:f4:91:16:a9:10:56:9a:bd:92:3a:1f:70:90:5c:
b7:24:2f:fd:a5:85:8d:a4:96:ce:68:56:20:65:80:92:f0:19:
7c:26:11:8a:e1:38:03:e6:e7:87:8d:18:7c:18:fa:9f:c1:32:
e9:96:a8:e7:50:c6:62:4e:a8:7e:63:e4:6e:4c:77:66:21:8b:
12:f5:fe:3a:bf:6c:3f:2b:1c:c5:36:9b:14:0f:3b:43:30:97:
5d:94:c2:c1:d8:9d:cc:d2:9f:05:9b:f5:c7:51:d2:88:b0:48:
df:ff:da:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfPTckN35tL8WaBj2djPH/KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMWNiOTczNzUyNGM0MzdmNmZhNzUyMTE3NmJiMGFiNzFm
YmVlNjMwHhcNMjUwNzAzMDgwMTEwWhcNMjUwNzA0MDgwMTEwWjAzMTEwLwYDVQQD
EygwZGFjZjA2ZjExYTQwZWJmMjhhNTI1YWRlNzQwNTdlZTk2MDNkOTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSnqvbel2Rhit8yLKkux1osQvz8T
fVJ8VNxnHJsN/Do3H2dObW9+AyZB2Xn+EwVdGErHYJgTb9Y0OqOjr1H534rBIDrT
R6lURC5Vq3Cmty7e6eWAyZWaDa0MO2PujHZGLAr8izzCT3rl9xgAYstKD/xmFAR7
Bg2weVK6OzyV3+4gPva7Erfxhe7Z6h7Sx7yrp+jb04pY9dzn2KHQlDdCO20boVgC
O4GPTxOJFhjt0X2I/XBVlLRolhlvGH1E1hXYCRinPYJBadjPQ8w2/IL13fV2NTty
Rr3BEvaDIoqhFfmPCTbVYniqyS5TOyWRE1xFlgnbd2c6sDu3RWmyvHMznQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2s8G8RpA6/KKUlredAV+6WA9l4MB8GA1UdIwQY
MBaAFI8cuXN1JMQ39vp1IRdrsKtx++5jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanh5NWMzVWt4RGYyLW5VaEYydXdxM0g3N21NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8zYjExZGUtOTAwZi00Mzc4LTg0ZWIt
Nzg3MGM2NDVlMjE5LzEvanh5NWMzVWt4RGYyLW5VaEYydXdxM0g3N21NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8zYjExZGUtOTAwZi00Mzc4LTg0ZWItNzg3MGM2NDVlMjE5
LzEvanh5NWMzVWt4RGYyLW5VaEYydXdxM0g3N21NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY4ZBbZD5
0o1bADrGx5SABoGVbIg8SW1AuidwyqPygSZ3ofFRm0v/T0Xd2KbC6OprygEic0Hj
t4mKjywSw4JvYrHlqle+RNTFKQ7Dwj0utIGUI10ThtSCyYERNxqWUdGVRDK6qR8w
OLPBwtuDg6acmaZm38pCarphke2hOUKk5wt3J8dt6OlZLHqIPPD1i1tNz4XyG/SR
FqkQVpq9kjofcJBctyQv/aWFjaSWzmhWIGWAkvAZfCYRiuE4A+bnh40YfBj6n8Ey
6Zao51DGYk6ofmPkbkx3ZiGLEvX+Or9sPyscxTabFA87QzCXXZTCwdidzNKfBZv1
x1HSiLBI3//alQ==
-----END CERTIFICATE-----
Generated at Thu Jul 3 14:19:07 2025 by rpki-client