Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
File: J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft (raw, json)
Hash identifier: ghIAppNI3E7eEHOuDgI6JsPsg1ff/o/wN9Aw6htnCfI=
Subject key identifier: 37:4E:11:7E:9D:3F:39:03:EC:89:11:B5:45:7E:A5:DD:35:5C:C2:86
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 0197B77C3B7CF457F6BD5C3785F569B0C727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
Manifest number: 0B12
Signing time: Sat 28 Jun 2025 17:01:01 +0000
Manifest this update: Sat 28 Jun 2025 17:01:01 +0000
Manifest next update: Sun 29 Jun 2025 17:01:01 +0000
Files and hashes: 1: 4Q0OMlDeRzDSOzAw8LxkvQaDF7E.roa (hash: U7GjqbV2dOQXajvpmYRAMgZ0b0HIaEV5bZmn2apsyWk=)
2: 9BTsC-VY_sKGkh2euSED3WOM9ZI.roa (hash: viXsjra2jhTZdPzpqdc9qlQE8a3DDErudBN55tMe3Wg=)
3: J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl (hash: JkQ8LpRkdyVS5LQOoyUiwYHqSRRMUIJnajBpFjCCSUg=)
4: RXaHa7HQXaOor19kJAnyP5kxxU0.roa (hash: 1Jda3owwY018JsVQMIcmSKXtEtxhwgl86WeJsxIjRh4=)
5: Tw_Tm39J15PuLnPwr2dqvdn-Dh4.roa (hash: a0LH5SVtRHj2tzuff6IHJP/0pDujnltOOGwLPXcyclc=)
6: fTlQ_aFq0HxtikyWXBVM7-ai5xg.roa (hash: bP/GLXVxFeAxAAJqxWAhSYOyK1jAs2dAu7nJ/iPPogI=)
7: oQEA3DnBm500dJBYY9a5KgZXmQQ.roa (hash: TzJe0tF7p07+4ocoJWUSx+pyInMnz9/Rqe/WjvQu6+Q=)
8: zg4MjXATnC0iLIUH-MKaHL7sg6w.roa (hash: UiidXY2RTo7YfVgqJA3FQpeWQuCf9FUQ5InMtkG9nzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:3b:7c:f4:57:f6:bd:5c:37:85:f5:69:b0:c7:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Jun 28 17:01:01 2025 GMT
Not After : Jun 29 17:01:01 2025 GMT
Subject: CN=374e117e9d3f3903ec8911b5457ea5dd355cc286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:7b:72:88:76:3f:f9:1d:e4:71:49:a7:fc:bf:
01:84:63:e2:d8:13:36:43:9b:97:c7:a0:ce:6c:cd:
e1:71:e4:70:4d:c0:73:6e:41:63:bd:dd:6c:f8:79:
e2:cd:a0:3b:cd:37:26:a8:bf:e0:a0:48:7b:ad:84:
1d:2c:13:ca:9c:90:22:9a:3a:d5:f3:70:f3:26:c8:
d4:dd:5d:79:69:6f:7a:85:c6:6b:64:e7:de:f9:3c:
06:cf:37:fc:f9:d1:04:f1:49:b6:d9:9a:dc:3e:0f:
8e:a1:28:b4:a1:f4:9b:4c:0d:57:e7:0b:46:29:fc:
f1:45:b8:c5:0f:dd:ea:a0:b4:4d:94:ce:95:1f:8f:
6f:bf:96:a9:ec:35:25:d9:e4:2a:82:9c:bd:86:33:
8e:69:92:dc:d3:c4:b1:83:9b:6a:eb:94:81:c9:c1:
2e:31:71:dd:82:2d:61:56:50:20:c3:50:e4:cb:25:
1d:ba:33:2b:17:9d:a0:8c:cf:af:4a:08:07:33:38:
0c:e2:85:1e:a1:0f:4b:0a:a1:72:55:74:63:8b:ce:
22:93:54:a1:e9:96:9e:d8:27:39:37:93:e9:dd:33:
81:6f:f0:c8:e3:ea:0e:78:23:b3:5d:57:76:1b:dd:
92:1a:60:43:ef:b9:3d:ef:e8:0f:4f:c8:7e:d8:03:
bb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4E:11:7E:9D:3F:39:03:EC:89:11:B5:45:7E:A5:DD:35:5C:C2:86
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:03:5d:56:c3:93:82:a0:76:f4:8c:c0:27:87:e7:ac:0e:4d:
c5:22:88:b3:dc:c1:fa:55:1a:4d:f4:ca:75:2b:a5:5d:84:cb:
26:a8:ee:14:d5:ca:4f:63:28:b3:15:45:91:4c:93:09:35:81:
ab:11:55:c7:8c:8a:9d:78:b5:c5:6f:8b:c5:a1:3d:99:8c:fa:
89:23:bb:e3:0f:ec:d0:46:b0:6d:19:ed:26:9a:92:96:6f:f7:
43:bc:ef:21:78:20:72:0d:c0:13:0e:5f:4f:6e:43:7f:ba:6e:
7f:bb:6e:db:bf:37:83:10:0d:7d:fc:ea:52:14:26:e1:2d:70:
86:6b:ce:cf:2c:f8:a0:86:57:00:72:54:7f:85:56:2a:17:5e:
b7:ff:d3:19:87:71:fd:a2:0c:c0:6d:e6:e1:1c:ba:b6:f4:d9:
89:02:75:35:71:db:01:0d:c4:bd:13:48:f0:f6:9d:96:04:c6:
3c:03:60:0c:69:93:d7:2c:b0:8c:0d:16:c3:d9:cb:ed:05:5e:
f2:c5:5b:8b:9d:73:9b:5e:a8:5a:47:24:28:bf:1f:de:94:d1:
94:5d:47:ff:ad:2b:b7:a1:b2:28:ef:63:44:c5:43:b9:db:4c:
fd:08:f2:f3:1f:cb:9b:cc:eb:5b:3b:d5:6f:be:2e:42:40:f7:
00:a7:bb:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fDt89Ff2vVw3hfVpsMcnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YzhiNDI3YzMxMzU5OGE5MmU4ZDhlYzYwZTI5NTBkYTM5
ZmMyYzkwHhcNMjUwNjI4MTcwMTAxWhcNMjUwNjI5MTcwMTAxWjAzMTEwLwYDVQQD
EygzNzRlMTE3ZTlkM2YzOTAzZWM4OTExYjU0NTdlYTVkZDM1NWNjMjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/HtyiHY/+R3kcUmn/L8BhGPi2BM2
Q5uXx6DObM3hceRwTcBzbkFjvd1s+HnizaA7zTcmqL/goEh7rYQdLBPKnJAimjrV
83DzJsjU3V15aW96hcZrZOfe+TwGzzf8+dEE8Um22ZrcPg+OoSi0ofSbTA1X5wtG
KfzxRbjFD93qoLRNlM6VH49vv5ap7DUl2eQqgpy9hjOOaZLc08Sxg5tq65SBycEu
MXHdgi1hVlAgw1DkyyUdujMrF52gjM+vSggHMzgM4oUeoQ9LCqFyVXRji84ik1Sh
6Zae2Cc5N5Pp3TOBb/DI4+oOeCOzXVd2G92SGmBD77k97+gPT8h+2AO7CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdOEX6dPzkD7IkRtUV+pd01XMKGMB8GA1UdIwQY
MBaAFCfItCfDE1mKkujY7GDilQ2jn8LJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzct
MWM2ZWU0NGUxMWFkLzEvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzctMWM2ZWU0NGUxMWFk
LzEvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEwNdVsOT
gqB29IzAJ4fnrA5NxSKIs9zB+lUaTfTKdSulXYTLJqjuFNXKT2MosxVFkUyTCTWB
qxFVx4yKnXi1xW+LxaE9mYz6iSO74w/s0EawbRntJpqSlm/3Q7zvIXggcg3AEw5f
T25Df7puf7tu2783gxANffzqUhQm4S1whmvOzyz4oIZXAHJUf4VWKhdet//TGYdx
/aIMwG3m4Ry6tvTZiQJ1NXHbAQ3EvRNI8PadlgTGPANgDGmT1yywjA0Ww9nL7QVe
8sVbi51zm16oWkckKL8f3pTRlF1H/60rt6GyKO9jRMVDudtM/Qjy8x/Lm8zrWzvV
b74uQkD3AKe7Yg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:06:02 2025 by rpki-client