Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
File: jpC9KHAFDIRHehYesJDwXrliAWw.mft (raw, json)
Hash identifier: YqOagvsiCmhy5m+blU3NuRVkSPJlt6IfVOzQbi+7jug=
Subject key identifier: B0:F1:B1:21:FE:E1:F5:0F:C8:DF:E7:EE:74:E8:15:5C:45:0A:9F:DD
Authority key identifier: 8E:90:BD:28:70:05:0C:84:47:7A:16:1E:B0:90:F0:5E:B9:62:01:6C
Certificate issuer: /CN=8e90bd2870050c84477a161eb090f05eb962016c
Certificate serial: 0198D583C299490D36CECD6A1E41D3B6A9BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
Manifest number: 15DB
Signing time: Sat 23 Aug 2025 06:00:38 +0000
Manifest this update: Sat 23 Aug 2025 06:00:38 +0000
Manifest next update: Sun 24 Aug 2025 06:00:38 +0000
Files and hashes: 1: BSlnEx89lgl_01HQ-REkDQoHDZg.roa (hash: MlbhOxiaJMprDhYtQeIoXiaVKxfqoVezHoPe9+NM65Y=)
2: dKs_OVLBRUdu5eRJeY09vs38U8U.roa (hash: 2juP1UOIoyK0h+ulYDMXknIUbcCOY8A/8FAOZg52IL0=)
3: jpC9KHAFDIRHehYesJDwXrliAWw.crl (hash: iBsOQnAEQAAcZBFjMV1+EGqEZipqeIWZ/2/hzoAxuo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:c2:99:49:0d:36:ce:cd:6a:1e:41:d3:b6:a9:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e90bd2870050c84477a161eb090f05eb962016c
Validity
Not Before: Aug 23 06:00:38 2025 GMT
Not After : Aug 24 06:00:38 2025 GMT
Subject: CN=b0f1b121fee1f50fc8dfe7ee74e8155c450a9fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0b:06:ae:ad:da:7e:76:80:ba:6d:01:7b:3b:
82:13:42:59:77:83:f4:cc:fa:47:72:fa:0b:b7:c4:
84:fd:4c:52:e1:1e:e8:d7:b2:80:0b:3c:dd:6a:99:
36:84:02:99:37:02:00:94:2d:62:61:56:03:25:b0:
b0:29:d0:7b:e7:d7:cd:2b:47:0b:27:3f:1d:3f:dc:
41:e3:18:69:ef:a8:41:f6:17:60:1c:3e:49:f8:36:
6b:d5:ec:c5:4f:d9:07:91:14:98:42:ed:47:d3:cf:
11:6e:16:e9:3f:42:b9:07:08:92:01:9f:26:c5:35:
f9:1c:7b:fa:44:db:72:e6:85:b4:5e:62:e9:be:f4:
87:bc:53:eb:83:43:60:da:ed:d3:93:f0:33:21:4a:
b1:d1:65:38:48:69:76:72:d5:05:53:a3:3c:b2:2d:
26:73:5c:b8:cf:e9:ca:4b:c7:69:5b:19:55:82:e0:
9e:56:09:77:a9:03:1c:64:4c:ff:8a:5b:4d:85:7b:
7e:4a:b7:70:f2:9f:6f:12:ec:a7:4c:e7:41:2e:90:
65:e7:bf:20:4f:0c:0a:1a:a8:96:28:f9:0a:68:30:
d6:9b:ef:28:59:de:64:2b:b7:ba:cf:92:8c:00:48:
ce:ae:a7:85:f8:48:e4:a9:c8:37:7d:7d:77:68:7d:
ed:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F1:B1:21:FE:E1:F5:0F:C8:DF:E7:EE:74:E8:15:5C:45:0A:9F:DD
X509v3 Authority Key Identifier:
keyid:8E:90:BD:28:70:05:0C:84:47:7A:16:1E:B0:90:F0:5E:B9:62:01:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:2b:1a:4b:8b:9e:bc:b6:a4:9a:ad:4c:af:1e:83:37:6d:34:
b4:4f:ce:5b:ce:b9:ca:20:46:74:f6:7b:0b:e9:4d:28:be:c9:
a8:97:67:cd:9a:31:19:29:0f:9a:f6:e2:6c:88:46:72:93:2b:
65:44:55:1e:5a:b8:68:50:ae:9c:35:3d:12:26:5c:ca:6d:61:
e1:66:96:c5:4e:1f:f5:ea:50:82:9e:46:d8:76:28:8f:d1:6c:
35:4f:70:1f:f0:97:af:bd:0e:00:fc:45:56:a0:8c:55:ea:68:
90:bd:88:63:91:c6:28:9e:7c:bc:09:32:bd:7d:bd:b5:67:cc:
4f:40:e4:48:a4:ac:a5:09:35:80:55:dc:bc:30:99:dc:d8:f1:
0e:68:af:57:53:86:9d:ed:ef:06:10:0d:b9:a5:7c:d3:78:f6:
7f:d1:c8:03:63:ac:76:a6:80:8a:67:3b:b4:46:8f:6b:01:eb:
be:07:1f:83:f9:03:7c:e0:5e:bf:24:9c:4a:d6:42:8d:59:a9:
14:ab:9e:56:b2:92:f1:9c:79:94:ce:c2:9a:9c:4d:3d:bb:e6:
24:9a:e3:8b:f0:7b:7a:42:07:c9:42:84:98:d8:c9:0e:90:88:
96:a9:35:d7:d5:72:0d:1e:39:cd:64:ba:b4:0a:a1:8f:69:34:
66:b1:43:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg8KZSQ02zs1qHkHTtqm6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlOTBiZDI4NzAwNTBjODQ0NzdhMTYxZWIwOTBmMDVlYjk2
MjAxNmMwHhcNMjUwODIzMDYwMDM4WhcNMjUwODI0MDYwMDM4WjAzMTEwLwYDVQQD
EyhiMGYxYjEyMWZlZTFmNTBmYzhkZmU3ZWU3NGU4MTU1YzQ1MGE5ZmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswsGrq3afnaAum0BezuCE0JZd4P0
zPpHcvoLt8SE/UxS4R7o17KACzzdapk2hAKZNwIAlC1iYVYDJbCwKdB759fNK0cL
Jz8dP9xB4xhp76hB9hdgHD5J+DZr1ezFT9kHkRSYQu1H088RbhbpP0K5BwiSAZ8m
xTX5HHv6RNty5oW0XmLpvvSHvFPrg0Ng2u3Tk/AzIUqx0WU4SGl2ctUFU6M8si0m
c1y4z+nKS8dpWxlVguCeVgl3qQMcZEz/iltNhXt+Srdw8p9vEuynTOdBLpBl578g
TwwKGqiWKPkKaDDWm+8oWd5kK7e6z5KMAEjOrqeF+Ejkqcg3fX13aH3tywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLDxsSH+4fUPyN/n7nToFVxFCp/dMB8GA1UdIwQY
MBaAFI6QvShwBQyER3oWHrCQ8F65YgFsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanBDOUtIQUZESVJIZWhZZXNKRHdYcmxpQVd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yOGUxMTMtMzkzMS00ZDNkLWI3OTMt
ZWNiODA3MDJhMTE3LzEvanBDOUtIQUZESVJIZWhZZXNKRHdYcmxpQVd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8yOGUxMTMtMzkzMS00ZDNkLWI3OTMtZWNiODA3MDJhMTE3
LzEvanBDOUtIQUZESVJIZWhZZXNKRHdYcmxpQVd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXysaS4ue
vLakmq1Mrx6DN200tE/OW865yiBGdPZ7C+lNKL7JqJdnzZoxGSkPmvbibIhGcpMr
ZURVHlq4aFCunDU9EiZcym1h4WaWxU4f9epQgp5G2HYoj9FsNU9wH/CXr70OAPxF
VqCMVepokL2IY5HGKJ58vAkyvX29tWfMT0DkSKSspQk1gFXcvDCZ3NjxDmivV1OG
ne3vBhANuaV803j2f9HIA2OsdqaAimc7tEaPawHrvgcfg/kDfOBevyScStZCjVmp
FKueVrKS8Zx5lM7CmpxNPbvmJJrji/B7ekIHyUKEmNjJDpCIlqk119VyDR45zWS6
tAqhj2k0ZrFDqA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:59:21 2025 by rpki-client