Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft
File: Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft (raw, json)
Hash identifier: bi14QsG9ilamWtlg0VKaM8YvaZKwErbjI/pKzbXs7sI=
Subject key identifier: 90:38:73:EE:A8:26:55:F1:64:88:1C:DC:A0:0D:D0:FF:67:51:D2:DC
Authority key identifier: 27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
Certificate issuer: /CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Certificate serial: 0198D5BB7DD81041E0AE0F9537812C1D5EFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft
Manifest number: 1552
Signing time: Sat 23 Aug 2025 07:01:31 +0000
Manifest this update: Sat 23 Aug 2025 07:01:31 +0000
Manifest next update: Sun 24 Aug 2025 07:01:31 +0000
Files and hashes: 1: 6dw1Aml1bh-S2rgu2FLftIv8mdo.roa (hash: bjVQxAFYHa6cLLC44/QIlf7ibxA9hm/+3ibLRF7oZiU=)
2: GB7clsDZOHQr1LdusJTcl_G1778.roa (hash: qc0Ls2xstb+cEZ6tCvVbKsbdZ77Q8gYB2ZQnMh9vnLQ=)
3: Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl (hash: JAOofevaDpfSdzgAqqM2OjCYT8k0dpOtGmNxPnXRpuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:7d:d8:10:41:e0:ae:0f:95:37:81:2c:1d:5e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Validity
Not Before: Aug 23 07:01:31 2025 GMT
Not After : Aug 24 07:01:31 2025 GMT
Subject: CN=903873eea82655f164881cdca00dd0ff6751d2dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a8:9c:fc:35:93:f3:d7:0f:50:6a:fc:1c:b8:
36:c0:7c:20:c4:46:79:25:23:cf:6a:f0:46:63:29:
87:05:7d:5a:3d:3c:ea:47:4e:3e:53:d4:d4:23:64:
8f:46:84:12:db:30:9e:69:e9:79:88:43:e9:e6:c5:
b5:43:48:7f:d9:bc:c2:76:61:85:65:95:2e:70:a6:
0a:dd:d8:a1:36:f9:8d:5f:63:c6:7c:05:a3:3c:cc:
98:d5:62:0c:7f:76:c4:f9:6a:58:2a:c0:a1:8c:cc:
44:57:ad:00:23:0f:ec:35:19:a2:04:f1:d7:40:71:
02:2c:91:84:99:8b:c2:85:9b:66:a5:38:01:cf:49:
82:d9:a7:0b:24:b5:e7:ef:eb:95:da:bb:3e:52:59:
5e:f2:cf:2d:5a:3e:e3:b1:aa:d8:7d:f0:12:ee:f3:
36:42:8d:00:2f:b8:dd:4d:ab:13:4d:a1:0d:3b:c1:
a8:77:83:b1:f4:06:80:44:82:6c:7d:91:61:1b:15:
a9:fe:45:4e:cd:a5:b0:6f:93:3f:95:a3:38:4b:9e:
20:ff:4e:74:72:e9:b4:2e:b1:69:86:79:b9:27:63:
bd:02:08:42:3e:9d:c3:7b:68:59:e3:aa:1e:72:77:
92:da:3b:34:97:23:73:30:37:6f:2b:1f:1e:db:23:
ad:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:38:73:EE:A8:26:55:F1:64:88:1C:DC:A0:0D:D0:FF:67:51:D2:DC
X509v3 Authority Key Identifier:
keyid:27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:8b:27:89:d7:fa:7f:9e:cf:48:33:16:9d:69:73:14:11:5a:
af:9c:1a:b4:1c:35:f2:11:17:06:74:d8:8d:11:47:fe:ed:15:
eb:a0:ee:7b:96:f2:cc:71:7c:1c:1f:bc:fc:57:72:07:c6:fb:
32:c9:bb:62:87:6d:09:cc:cf:f5:04:d1:51:af:96:f1:48:bb:
ad:97:2c:c3:93:69:9f:97:7e:ba:c5:28:75:b9:85:a3:87:62:
70:6a:2d:ee:08:ea:93:cc:fb:f1:0c:48:5d:e9:d8:a4:a2:d6:
57:17:93:6f:79:12:e5:ca:6a:df:3d:0d:1e:15:e3:d5:79:d8:
0d:62:25:f4:27:ca:f5:f8:77:b6:83:55:4b:7c:ac:b5:7d:ff:
f9:90:0f:40:c7:2c:17:d8:f5:b7:c0:b7:6b:0e:fb:8e:9f:12:
b9:31:44:fe:1f:63:60:dc:d9:29:d5:25:d4:43:1c:9b:c0:36:
18:23:2f:9d:12:31:7c:f0:8a:71:07:53:22:c9:e4:2a:a2:e3:
d1:30:d0:0d:93:41:4f:a1:9b:92:55:f9:86:5a:ea:d4:26:c5:
c4:50:44:39:65:29:09:55:4a:a0:1f:4a:4a:b4:a6:a2:be:69:
c9:0c:6e:c3:13:d9:61:f9:fe:2d:7d:33:31:6e:08:d0:65:d6:
d1:f0:5a:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu33YEEHgrg+VN4EsHV76MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MmVkMDkwYWNmN2M4MjlhMjJiYmZiZTJiMGU5OThjZDIw
YWQ4MjYwHhcNMjUwODIzMDcwMTMxWhcNMjUwODI0MDcwMTMxWjAzMTEwLwYDVQQD
Eyg5MDM4NzNlZWE4MjY1NWYxNjQ4ODFjZGNhMDBkZDBmZjY3NTFkMmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaic/DWT89cPUGr8HLg2wHwgxEZ5
JSPPavBGYymHBX1aPTzqR04+U9TUI2SPRoQS2zCeael5iEPp5sW1Q0h/2bzCdmGF
ZZUucKYK3dihNvmNX2PGfAWjPMyY1WIMf3bE+WpYKsChjMxEV60AIw/sNRmiBPHX
QHECLJGEmYvChZtmpTgBz0mC2acLJLXn7+uV2rs+Ulle8s8tWj7jsarYffAS7vM2
Qo0AL7jdTasTTaENO8God4Ox9AaARIJsfZFhGxWp/kVOzaWwb5M/laM4S54g/050
cum0LrFphnm5J2O9AghCPp3De2hZ46oecneS2js0lyNzMDdvKx8e2yOttwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJA4c+6oJlXxZIgc3KAN0P9nUdLcMB8GA1UdIwQY
MBaAFCcu0JCs98gpoiu/visOmYzSCtgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnk3UWtLejN5Q21pSzctLUt3NlpqTklLMkNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9hMTVmOTYtZWMxOC00NjQ0LTg5YjMt
YWNjMjJiYjRkY2VkLzEvSnk3UWtLejN5Q21pSzctLUt3NlpqTklLMkNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9hMTVmOTYtZWMxOC00NjQ0LTg5YjMtYWNjMjJiYjRkY2Vk
LzEvSnk3UWtLejN5Q21pSzctLUt3NlpqTklLMkNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhIsnidf6
f57PSDMWnWlzFBFar5watBw18hEXBnTYjRFH/u0V66Due5byzHF8HB+8/FdyB8b7
Msm7YodtCczP9QTRUa+W8Ui7rZcsw5Npn5d+usUodbmFo4dicGot7gjqk8z78QxI
XenYpKLWVxeTb3kS5cpq3z0NHhXj1XnYDWIl9CfK9fh3toNVS3ystX3/+ZAPQMcs
F9j1t8C3aw77jp8SuTFE/h9jYNzZKdUl1EMcm8A2GCMvnRIxfPCKcQdTIsnkKqLj
0TDQDZNBT6GbklX5hlrq1CbFxFBEOWUpCVVKoB9KSrSmor5pyQxuwxPZYfn+LX0z
MW4I0GXW0fBagA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:43:12 2025 by rpki-client