Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
File: Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft (raw, json)
Hash identifier: Mz/Amiw2bO443karj+fUme5C2moFcPRd/glV4wISypE=
Subject key identifier: A7:91:39:AC:37:4D:36:4E:9B:E8:27:3F:0B:DA:4D:74:A3:EB:57:FD
Authority key identifier: 26:6E:0C:40:E4:E9:37:0D:B9:9A:D2:7A:97:29:8D:7D:05:59:8F:73
Certificate issuer: /CN=266e0c40e4e9370db99ad27a97298d7d05598f73
Certificate serial: 0197B70F20A32E1DFC55CA20888A3B782BC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 15:01:51 +0000
Manifest this update: Sat 28 Jun 2025 15:01:51 +0000
Manifest next update: Sun 29 Jun 2025 15:01:51 +0000
Files and hashes: 1: 8uqjL1Q7jgFdAvMEecW_AW4apnU.roa (hash: IZPA4o1k55p7lULIvDMGq6iadu+UZEquYpH4pdM728U=)
2: Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl (hash: 0HW8Pr+gnQ3xbHAujARwZWU1fj02iPb+W6dLy7fXRt0=)
3: LrkB9dXr22HFK0At5t4rrNYD7PQ.roa (hash: pK+9flLjEvjRYAQ3vaW216H5wdCjdNXzoh5ryOe38KA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:20:a3:2e:1d:fc:55:ca:20:88:8a:3b:78:2b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=266e0c40e4e9370db99ad27a97298d7d05598f73
Validity
Not Before: Jun 28 15:01:51 2025 GMT
Not After : Jun 29 15:01:51 2025 GMT
Subject: CN=a79139ac374d364e9be8273f0bda4d74a3eb57fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:48:71:be:c2:64:6b:0e:bc:91:e7:4d:bf:c2:
67:e7:f7:b4:9c:d8:36:46:bf:b3:fa:e9:f7:ba:ff:
5d:91:0f:d4:7e:28:21:e9:09:eb:50:76:cc:c3:d5:
c9:92:a7:19:0b:49:7f:c9:93:94:d5:8d:16:86:0a:
8c:3b:e7:e3:e3:c4:25:9b:ec:53:ac:c5:33:ae:02:
da:83:24:c7:98:a5:1a:4a:92:bf:41:f9:65:4f:f5:
81:80:95:c6:9b:91:0e:d9:80:e5:0f:c2:a8:44:0a:
e0:c2:bf:fb:50:fb:e6:97:81:bd:87:6c:df:d9:77:
f7:b2:bd:02:2c:9d:cf:9c:f6:8c:e6:26:6c:0f:68:
b4:c7:c2:35:54:3e:e1:7b:1a:29:fa:18:40:39:27:
d5:a9:6a:2c:80:9f:4e:a8:0a:c0:7b:71:76:c5:2a:
25:ee:07:d5:8d:ee:84:40:c2:1e:78:83:0e:98:12:
e2:33:14:bb:fe:86:c4:fa:23:d3:55:bf:0e:64:5f:
99:0e:f1:b7:9f:1e:6c:25:4e:e4:a3:1c:a0:b1:4b:
72:f9:ef:86:0e:4b:f0:3d:c5:c6:40:7c:d0:c2:94:
66:20:f8:4d:c2:fa:7c:bd:c7:d4:55:4b:23:6e:91:
76:74:c7:77:c8:6b:21:13:e8:77:d9:05:30:73:67:
0e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:91:39:AC:37:4D:36:4E:9B:E8:27:3F:0B:DA:4D:74:A3:EB:57:FD
X509v3 Authority Key Identifier:
keyid:26:6E:0C:40:E4:E9:37:0D:B9:9A:D2:7A:97:29:8D:7D:05:59:8F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ab:d4:08:38:49:2b:9c:83:22:4c:48:66:01:40:7d:d7:fe:
60:94:43:26:18:2b:b6:48:46:a3:73:78:90:f9:10:81:a6:fb:
f4:16:08:61:84:a9:7c:e6:28:14:6b:1d:56:ac:f5:61:f8:9b:
3d:91:22:d3:ca:c6:ae:5a:77:a9:e4:ba:ea:18:fc:bb:de:18:
10:57:a5:9a:96:42:06:37:f5:5c:11:ec:57:16:5c:10:46:68:
5a:dc:fc:43:38:8f:28:c7:9f:3c:e9:7e:5b:c2:bd:6c:af:55:
fc:fc:4f:3e:99:22:b5:21:86:1d:d3:89:03:7f:f6:e7:00:10:
b8:12:58:36:7a:5c:1e:8d:28:d1:2a:a9:80:0a:01:01:69:96:
8e:3c:39:9f:8e:7f:d9:6e:3e:e4:f6:17:37:7e:e7:45:fb:d1:
91:c9:c8:f1:09:17:3c:36:7d:8a:8a:d3:77:4c:ec:e1:56:c7:
0b:69:2d:2e:73:b1:0f:d5:9a:47:71:9b:21:a7:47:13:55:ea:
96:ad:8f:56:50:8d:aa:12:10:88:f8:de:16:35:a7:3f:4a:9e:
b6:87:f4:1d:e6:df:f6:30:d4:b9:96:6a:df:1c:fa:7e:8b:fd:
83:59:97:89:dd:8e:39:85:35:f3:ca:2d:ea:31:2e:2c:86:74:
dd:0f:6c:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DyCjLh38VcogiIo7eCvAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NmUwYzQwZTRlOTM3MGRiOTlhZDI3YTk3Mjk4ZDdkMDU1
OThmNzMwHhcNMjUwNjI4MTUwMTUxWhcNMjUwNjI5MTUwMTUxWjAzMTEwLwYDVQQD
EyhhNzkxMzlhYzM3NGQzNjRlOWJlODI3M2YwYmRhNGQ3NGEzZWI1N2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEhxvsJkaw68kedNv8Jn5/e0nNg2
Rr+z+un3uv9dkQ/Ufigh6QnrUHbMw9XJkqcZC0l/yZOU1Y0WhgqMO+fj48Qlm+xT
rMUzrgLagyTHmKUaSpK/QfllT/WBgJXGm5EO2YDlD8KoRArgwr/7UPvml4G9h2zf
2Xf3sr0CLJ3PnPaM5iZsD2i0x8I1VD7hexop+hhAOSfVqWosgJ9OqArAe3F2xSol
7gfVje6EQMIeeIMOmBLiMxS7/obE+iPTVb8OZF+ZDvG3nx5sJU7koxygsUty+e+G
DkvwPcXGQHzQwpRmIPhNwvp8vcfUVUsjbpF2dMd3yGshE+h32QUwc2cOqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKeROaw3TTZOm+gnPwvaTXSj61f9MB8GA1UdIwQY
MBaAFCZuDEDk6TcNuZrSepcpjX0FWY9zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm00TVFPVHBOdzI1bXRKNmx5bU5mUVZaajNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC85ZTU3YWEtODkwMS00YmQ4LTgyOTUt
OWMxYTUzNTgwZTM5LzEvSm00TVFPVHBOdzI1bXRKNmx5bU5mUVZaajNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC85ZTU3YWEtODkwMS00YmQ4LTgyOTUtOWMxYTUzNTgwZTM5
LzEvSm00TVFPVHBOdzI1bXRKNmx5bU5mUVZaajNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOavUCDhJ
K5yDIkxIZgFAfdf+YJRDJhgrtkhGo3N4kPkQgab79BYIYYSpfOYoFGsdVqz1Yfib
PZEi08rGrlp3qeS66hj8u94YEFelmpZCBjf1XBHsVxZcEEZoWtz8QziPKMefPOl+
W8K9bK9V/PxPPpkitSGGHdOJA3/25wAQuBJYNnpcHo0o0SqpgAoBAWmWjjw5n45/
2W4+5PYXN37nRfvRkcnI8QkXPDZ9iorTd0zs4VbHC2ktLnOxD9WaR3GbIadHE1Xq
lq2PVlCNqhIQiPjeFjWnP0qetof0Hebf9jDUuZZq3xz6fov9g1mXid2OOYU188ot
6jEuLIZ03Q9s7w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:34:55 2025 by rpki-client