Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft
File: jvjEceg7FPxsbMfPyWwaw-MIfq4.mft (raw, json)
Hash identifier: 5tMqJFTEkUJN/tOhzD/h2Dr7Nr6XL7SRjZWArAzjnWg=
Subject key identifier: 67:FE:5D:A1:1B:1D:5D:0B:99:37:18:7E:22:E3:92:95:2C:4B:79:24
Authority key identifier: 8E:F8:C4:71:E8:3B:14:FC:6C:6C:C7:CF:C9:6C:1A:C3:E3:08:7E:AE
Certificate issuer: /CN=8ef8c471e83b14fc6c6cc7cfc96c1ac3e3087eae
Certificate serial: 0198D4048C9662619E2036DDA03DA721FF4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvjEceg7FPxsbMfPyWwaw-MIfq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft
Manifest number: 070E
Signing time: Fri 22 Aug 2025 23:02:04 +0000
Manifest this update: Fri 22 Aug 2025 23:02:04 +0000
Manifest next update: Sat 23 Aug 2025 23:02:04 +0000
Files and hashes: 1: 1_Cx0FQtNmEayO6mr3uAPUq_s9E.roa (hash: YcdvazhIm7zqYM8zJdIALjmfMmrTX/mjzf4LOtTALFE=)
2: PeHEDW_rP1JUEqYPKxq3ZE0-zH4.roa (hash: m2+wZp8wzsLpKqeRZNklpBnfCK4breDaWRdrgO3+3ys=)
3: jvjEceg7FPxsbMfPyWwaw-MIfq4.crl (hash: 2PDg18br088/s+KA4QO7mRHJUn7kQTksQPg9WM4bMxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jvjEceg7FPxsbMfPyWwaw-MIfq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:8c:96:62:61:9e:20:36:dd:a0:3d:a7:21:ff:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ef8c471e83b14fc6c6cc7cfc96c1ac3e3087eae
Validity
Not Before: Aug 22 23:02:04 2025 GMT
Not After : Aug 23 23:02:04 2025 GMT
Subject: CN=67fe5da11b1d5d0b9937187e22e392952c4b7924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c3:c9:f7:4f:77:21:16:c1:4c:70:98:d0:04:
b1:84:5a:bc:c9:71:e2:84:fd:63:ef:2f:53:83:23:
45:e0:76:37:be:56:30:3c:ac:da:53:44:57:44:9e:
07:f6:89:14:89:3b:c5:d5:07:f3:3a:fb:87:7f:54:
7d:0a:e9:d2:d9:0b:48:2f:57:a3:d0:31:20:cf:f9:
c7:3c:b1:89:45:a8:11:eb:62:99:59:30:0b:31:af:
1c:0a:16:f9:db:68:ec:56:ba:0f:6b:05:d3:e5:3b:
59:23:d5:4b:80:b0:12:23:4b:41:2f:8e:66:7a:23:
ef:2e:06:d6:95:bb:32:89:69:2e:11:ca:57:95:51:
b4:ba:d1:3f:5c:3f:e5:ef:db:2a:fd:11:ec:74:4a:
d4:a6:d0:0c:ca:34:5a:67:10:e0:cf:01:16:da:6e:
1a:c5:d9:f9:34:0a:72:b5:8f:35:7c:27:65:b3:e1:
16:dc:33:d1:3d:7c:b1:06:5b:3b:03:0f:65:d6:93:
82:61:5b:af:16:ff:b6:85:a5:b6:be:d3:91:3f:b4:
86:02:f0:0b:7c:06:e3:96:4f:e7:e2:21:f9:98:f0:
c4:cd:dc:a8:1f:77:0a:75:fe:c4:ae:65:85:bc:d5:
a2:13:93:36:e2:e0:79:14:2b:34:45:6e:4f:a7:06:
57:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FE:5D:A1:1B:1D:5D:0B:99:37:18:7E:22:E3:92:95:2C:4B:79:24
X509v3 Authority Key Identifier:
keyid:8E:F8:C4:71:E8:3B:14:FC:6C:6C:C7:CF:C9:6C:1A:C3:E3:08:7E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvjEceg7FPxsbMfPyWwaw-MIfq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ea:65:00:96:fd:cf:a8:96:74:64:19:01:a8:01:dc:14:90:
a2:e5:d1:14:b8:72:24:ed:29:b0:f6:2e:06:29:32:82:17:74:
f8:80:6e:4d:52:2d:b4:ee:c5:38:6f:20:04:fd:75:03:85:e1:
51:a4:3b:df:db:7c:6c:df:df:c8:3b:ae:81:93:02:8a:a2:b2:
08:d3:83:52:6b:43:dc:f1:00:87:ab:ee:ea:b5:61:eb:65:94:
87:9b:97:5a:92:85:5a:80:1c:6e:a4:26:22:a7:6e:98:47:da:
d5:ca:91:77:bd:45:88:83:68:fc:ac:78:1a:4b:49:77:b3:2b:
aa:e2:f6:86:bb:b6:8d:e0:8d:86:93:39:a6:dd:9d:5f:b8:fa:
22:8a:77:0c:f9:13:63:f1:05:7c:61:9c:01:74:7b:4e:5d:27:
ce:70:82:68:c7:3b:44:fe:92:30:3e:d5:9b:2f:99:f0:64:45:
3a:ec:cc:27:6b:4e:e1:7e:b5:52:90:44:76:2c:51:a2:d4:8e:
0d:0a:e4:26:0e:23:3d:f2:3e:bc:f5:1c:e7:36:7e:0c:99:8c:
41:3e:69:77:42:ae:b3:a4:37:9d:22:cb:7d:be:92:bd:34:06:
83:a0:8d:e0:48:48:02:fd:bd:95:cc:75:70:3c:e1:30:7d:e6:
8b:5b:1a:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUBIyWYmGeIDbdoD2nIf9NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlZjhjNDcxZTgzYjE0ZmM2YzZjYzdjZmM5NmMxYWMzZTMw
ODdlYWUwHhcNMjUwODIyMjMwMjA0WhcNMjUwODIzMjMwMjA0WjAzMTEwLwYDVQQD
Eyg2N2ZlNWRhMTFiMWQ1ZDBiOTkzNzE4N2UyMmUzOTI5NTJjNGI3OTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsPJ9093IRbBTHCY0ASxhFq8yXHi
hP1j7y9TgyNF4HY3vlYwPKzaU0RXRJ4H9okUiTvF1QfzOvuHf1R9CunS2QtIL1ej
0DEgz/nHPLGJRagR62KZWTALMa8cChb522jsVroPawXT5TtZI9VLgLASI0tBL45m
eiPvLgbWlbsyiWkuEcpXlVG0utE/XD/l79sq/RHsdErUptAMyjRaZxDgzwEW2m4a
xdn5NApytY81fCdls+EW3DPRPXyxBls7Aw9l1pOCYVuvFv+2haW2vtORP7SGAvAL
fAbjlk/n4iH5mPDEzdyoH3cKdf7ErmWFvNWiE5M24uB5FCs0RW5PpwZX6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGf+XaEbHV0LmTcYfiLjkpUsS3kkMB8GA1UdIwQY
MBaAFI74xHHoOxT8bGzHz8lsGsPjCH6uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanZqRWNlZzdGUHhzYk1mUHlXd2F3LU1JZnE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS84ZjJhZDgtNmE0OC00MjNjLWJlNDEt
MTM4YTcxMTdkZTM2LzEvanZqRWNlZzdGUHhzYk1mUHlXd2F3LU1JZnE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS84ZjJhZDgtNmE0OC00MjNjLWJlNDEtMTM4YTcxMTdkZTM2
LzEvanZqRWNlZzdGUHhzYk1mUHlXd2F3LU1JZnE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAeplAJb9
z6iWdGQZAagB3BSQouXRFLhyJO0psPYuBikyghd0+IBuTVIttO7FOG8gBP11A4Xh
UaQ739t8bN/fyDuugZMCiqKyCNODUmtD3PEAh6vu6rVh62WUh5uXWpKFWoAcbqQm
IqdumEfa1cqRd71FiINo/Kx4GktJd7MrquL2hru2jeCNhpM5pt2dX7j6Iop3DPkT
Y/EFfGGcAXR7Tl0nznCCaMc7RP6SMD7Vmy+Z8GRFOuzMJ2tO4X61UpBEdixRotSO
DQrkJg4jPfI+vPUc5zZ+DJmMQT5pd0Kus6Q3nSLLfb6SvTQGg6CN4EhIAv29lcx1
cDzhMH3mi1sa4A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:02 2025 by rpki-client