Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
File: jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft (raw, json)
Hash identifier: uzpmokj2zlAw783Au5CFifw9bSodfNKgjOhph9cxOKA=
Subject key identifier: 2E:8C:A4:68:A6:74:96:C3:E9:14:D6:A1:5D:0F:E5:26:58:E4:23:E3
Authority key identifier: 8C:3F:53:8F:8A:01:ED:D0:A7:6B:00:8B:4D:45:D4:1F:67:82:1B:D2
Certificate issuer: /CN=8c3f538f8a01edd0a76b008b4d45d41f67821bd2
Certificate serial: 0197B77C60463C4BF5FCD933FC351B7FD69B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
Manifest number: 0926
Signing time: Sat 28 Jun 2025 17:01:11 +0000
Manifest this update: Sat 28 Jun 2025 17:01:11 +0000
Manifest next update: Sun 29 Jun 2025 17:01:11 +0000
Files and hashes: 1: jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl (hash: rf6ULvBq/kRYDrfFz9AdXqPc6PQhzjdBuklnF1cJzak=)
2: y1KtkhbJcf8xMKGegKszt0QDaOo.roa (hash: MP5sL9q4mE2nj3U5Tn7LLkafXsvaYmUnSKWAsDGsqZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:60:46:3c:4b:f5:fc:d9:33:fc:35:1b:7f:d6:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c3f538f8a01edd0a76b008b4d45d41f67821bd2
Validity
Not Before: Jun 28 17:01:11 2025 GMT
Not After : Jun 29 17:01:11 2025 GMT
Subject: CN=2e8ca468a67496c3e914d6a15d0fe52658e423e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:46:47:28:8c:fd:d3:69:c1:0b:46:63:d5:7b:
54:66:01:ab:48:f6:a4:87:22:4a:c0:f6:bd:53:c6:
50:d6:55:31:c9:65:10:2f:c2:71:1a:01:76:16:37:
7c:f1:22:9f:86:3e:47:22:0a:fc:78:d2:05:c3:eb:
86:ee:11:55:93:fe:e2:31:81:f0:a8:c6:55:f0:51:
63:e1:61:3b:76:73:e5:b3:f1:99:5f:6d:57:fe:8f:
bd:5b:bc:60:ca:aa:0a:42:3a:0a:21:52:96:0f:6e:
a0:66:2d:ae:f1:43:11:db:49:ff:70:e7:6d:16:66:
fe:a6:81:39:96:c9:38:50:0c:e7:1f:a1:e3:e5:ad:
12:57:c7:7a:d5:11:91:0b:98:96:10:c6:00:33:30:
a9:ce:ae:88:94:86:bf:18:4b:f8:f4:a5:a6:9b:fd:
ca:b4:b5:b1:61:c0:b6:58:e8:b6:58:1b:81:e7:11:
ff:50:c5:bb:58:53:5f:cb:88:65:77:e4:17:3d:bd:
f7:53:a0:4e:bf:fd:4d:98:34:90:6d:17:34:29:c3:
52:d4:2e:28:d0:e4:e6:ac:ed:6e:2d:06:67:d1:38:
af:f9:68:77:07:e6:bd:5a:2a:49:29:f7:2b:76:1a:
8d:cf:7d:25:3f:43:ae:71:b4:03:fd:99:66:b9:a7:
db:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8C:A4:68:A6:74:96:C3:E9:14:D6:A1:5D:0F:E5:26:58:E4:23:E3
X509v3 Authority Key Identifier:
keyid:8C:3F:53:8F:8A:01:ED:D0:A7:6B:00:8B:4D:45:D4:1F:67:82:1B:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:28:87:40:ce:83:bb:c6:4c:15:47:ca:99:d9:18:43:9a:c3:
df:49:a0:68:d8:04:72:a3:42:51:f9:f6:ca:b0:17:f1:39:18:
67:ea:17:f8:26:e8:46:bf:c3:45:79:ce:f6:2e:0b:2d:f5:7c:
f4:c4:f0:89:b9:0e:78:ab:47:fa:b1:b5:50:50:5b:ad:3c:fb:
07:3f:28:35:65:13:a7:10:11:7e:5d:43:68:b8:4e:5f:b6:ef:
48:bf:65:17:6b:c0:13:e8:40:38:0e:9c:24:4b:85:9b:e1:ea:
c5:1a:59:95:b8:07:99:33:1b:04:86:a3:44:32:9a:c4:cd:34:
04:19:5c:7a:b2:5f:14:cc:7a:3e:ef:22:65:9d:7b:95:e8:7a:
1b:59:a7:05:39:3c:83:d0:7c:99:6b:18:01:80:f3:87:16:48:
ac:6f:b9:d0:28:0e:bc:20:35:16:d7:f6:7b:43:d2:70:88:17:
55:54:f0:ab:11:87:21:bd:c7:1f:f6:e5:4b:63:e1:49:a1:11:
81:ff:34:8f:51:c1:ac:65:3d:43:56:c9:b9:8a:9d:1e:08:86:
ff:b0:aa:d3:b2:7c:6f:64:53:c9:d0:27:c2:f1:0a:57:2d:85:
e6:ed:af:ff:21:3d:27:3f:6e:73:3d:e4:8c:18:c1:4a:9e:f3:
90:f3:b8:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fGBGPEv1/Nkz/DUbf9abMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjM2Y1MzhmOGEwMWVkZDBhNzZiMDA4YjRkNDVkNDFmNjc4
MjFiZDIwHhcNMjUwNjI4MTcwMTExWhcNMjUwNjI5MTcwMTExWjAzMTEwLwYDVQQD
EygyZThjYTQ2OGE2NzQ5NmMzZTkxNGQ2YTE1ZDBmZTUyNjU4ZTQyM2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUZHKIz902nBC0Zj1XtUZgGrSPak
hyJKwPa9U8ZQ1lUxyWUQL8JxGgF2Fjd88SKfhj5HIgr8eNIFw+uG7hFVk/7iMYHw
qMZV8FFj4WE7dnPls/GZX21X/o+9W7xgyqoKQjoKIVKWD26gZi2u8UMR20n/cOdt
Fmb+poE5lsk4UAznH6Hj5a0SV8d61RGRC5iWEMYAMzCpzq6IlIa/GEv49KWmm/3K
tLWxYcC2WOi2WBuB5xH/UMW7WFNfy4hld+QXPb33U6BOv/1NmDSQbRc0KcNS1C4o
0OTmrO1uLQZn0Tiv+Wh3B+a9WipJKfcrdhqNz30lP0OucbQD/ZlmuafbZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC6MpGimdJbD6RTWoV0P5SZY5CPjMB8GA1UdIwQY
MBaAFIw/U4+KAe3Qp2sAi01F1B9nghvSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakQ5VGo0b0I3ZENuYXdDTFRVWFVIMmVDRzlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9hMTg4MmUtMGM0Yy00Njk2LTg4NWQt
Y2Q2YTUwMzE2M2Q2LzEvakQ5VGo0b0I3ZENuYXdDTFRVWFVIMmVDRzlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9hMTg4MmUtMGM0Yy00Njk2LTg4NWQtY2Q2YTUwMzE2M2Q2
LzEvakQ5VGo0b0I3ZENuYXdDTFRVWFVIMmVDRzlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfCiHQM6D
u8ZMFUfKmdkYQ5rD30mgaNgEcqNCUfn2yrAX8TkYZ+oX+CboRr/DRXnO9i4LLfV8
9MTwibkOeKtH+rG1UFBbrTz7Bz8oNWUTpxARfl1DaLhOX7bvSL9lF2vAE+hAOA6c
JEuFm+HqxRpZlbgHmTMbBIajRDKaxM00BBlcerJfFMx6Pu8iZZ17leh6G1mnBTk8
g9B8mWsYAYDzhxZIrG+50CgOvCA1Ftf2e0PScIgXVVTwqxGHIb3HH/blS2PhSaER
gf80j1HBrGU9Q1bJuYqdHgiG/7Cq07J8b2RTydAnwvEKVy2F5u2v/yE9Jz9ucz3k
jBjBSp7zkPO4Vg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:40:28 2025 by rpki-client