Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
File: jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft (raw, json)
Hash identifier: nE5EqKqHQPOCBGDJ96kCRTXrDnmZa9wLdn82TwT8fkI=
Subject key identifier: 50:25:12:24:F4:1D:0F:FF:B0:D3:EB:F0:B7:09:05:21:00:B6:1B:98
Authority key identifier: 8F:04:1D:66:9E:A6:C4:11:70:D6:F8:14:09:C0:FF:DC:28:E5:69:07
Certificate issuer: /CN=8f041d669ea6c41170d6f81409c0ffdc28e56907
Certificate serial: 0197B6A04843166F3BCF3BDE1FC01CFFEBD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:00:46 +0000
Manifest this update: Sat 28 Jun 2025 13:00:46 +0000
Manifest next update: Sun 29 Jun 2025 13:00:46 +0000
Files and hashes: 1: grXRQpT1aZeaC-n0N849AfZZ_V4.roa (hash: x7JYnVR7QlEIld9EwbA1Mq0qnt4Qvkq7/cYHdkassRc=)
2: jwQdZp6mxBFw1vgUCcD_3CjlaQc.crl (hash: EECQOqFUscVqDX0LDwG+tGKcVNzxsucJPMeW3IAOKhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:48:43:16:6f:3b:cf:3b:de:1f:c0:1c:ff:eb:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f041d669ea6c41170d6f81409c0ffdc28e56907
Validity
Not Before: Jun 28 13:00:46 2025 GMT
Not After : Jun 29 13:00:46 2025 GMT
Subject: CN=50251224f41d0fffb0d3ebf0b709052100b61b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d2:f3:f4:b3:c1:5b:fa:4a:cb:cf:81:89:83:
6d:f5:67:0c:d2:20:20:8f:ca:40:21:16:ef:c3:f1:
2b:40:66:52:5c:ca:45:d6:41:c7:f1:8e:3b:04:9c:
3f:a9:65:2b:b1:34:22:dc:e6:c3:93:04:9e:73:3f:
b4:22:52:25:c3:8b:6d:98:17:8b:27:de:84:ae:1a:
d3:88:ed:e8:9d:66:40:3b:b1:b8:65:cd:d5:c8:8b:
d2:08:89:a0:42:d6:3a:e9:4b:68:ef:3c:25:a2:1b:
b3:76:03:55:4f:23:9f:4d:fb:b3:2b:32:b5:2f:53:
2a:74:fc:28:e4:5a:5b:e0:a2:d6:3b:d8:88:c8:60:
dc:ee:b9:91:cb:44:b8:b0:75:b9:86:09:0d:d6:68:
ba:4a:35:7f:8c:a2:ae:23:41:19:cb:f6:d8:98:b6:
b0:4a:5c:5e:48:f4:3f:55:9e:e5:95:2a:d8:a2:0c:
97:ab:f7:fb:0d:da:da:8d:86:ef:f6:ae:b5:f3:66:
d4:d1:a8:40:51:fb:86:92:e6:9e:34:5b:38:56:17:
b9:d1:45:5b:42:bc:21:bc:6f:f8:5d:9d:29:04:69:
b9:53:1a:51:89:ee:76:51:35:ca:9d:44:bc:f7:97:
48:ff:5c:48:2a:d1:9b:f4:cb:9b:35:74:85:dd:8c:
c8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:25:12:24:F4:1D:0F:FF:B0:D3:EB:F0:B7:09:05:21:00:B6:1B:98
X509v3 Authority Key Identifier:
keyid:8F:04:1D:66:9E:A6:C4:11:70:D6:F8:14:09:C0:FF:DC:28:E5:69:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e7:bf:09:6d:34:43:4f:e0:66:f5:5f:2b:04:da:6c:0b:f2:
05:18:50:f9:89:00:7e:72:26:ec:59:99:ad:0d:0b:69:0f:c5:
c2:8f:9e:79:2b:4f:de:b4:20:ba:77:04:c1:98:45:4b:7f:9f:
02:39:38:3b:2d:58:88:b2:8c:fd:71:e6:f3:25:9a:b9:66:61:
f2:25:83:38:38:8e:5b:b2:e5:7c:1c:32:30:34:5e:9d:58:3c:
d0:fd:a5:50:38:27:ab:c8:39:58:51:0b:36:15:b5:36:3c:cb:
7f:07:00:15:19:ba:aa:af:54:9b:2b:74:48:3c:23:f7:1a:87:
4e:bd:e3:29:49:6b:8e:e2:47:16:f9:ef:af:68:6d:7b:41:86:
ed:2b:a7:91:fc:68:c9:a9:b8:d8:0d:e6:d1:96:50:1f:26:95:
a1:b3:37:6a:a1:c3:43:61:eb:81:0f:08:97:1c:26:c5:ba:e6:
09:ba:52:62:ba:4c:8f:2b:7d:36:19:f3:26:b7:c9:b0:75:a2:
03:66:03:8d:97:58:6a:a1:2c:d0:f7:20:b3:71:14:68:90:fd:
03:b9:08:2c:95:f2:99:af:2e:11:d9:05:de:91:a8:56:c0:d6:
62:fe:58:15:5e:6d:ec:e1:5b:83:98:49:2a:86:f3:19:f6:7c:
f9:84:59:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oEhDFm87zzveH8Ac/+vSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMDQxZDY2OWVhNmM0MTE3MGQ2ZjgxNDA5YzBmZmRjMjhl
NTY5MDcwHhcNMjUwNjI4MTMwMDQ2WhcNMjUwNjI5MTMwMDQ2WjAzMTEwLwYDVQQD
Eyg1MDI1MTIyNGY0MWQwZmZmYjBkM2ViZjBiNzA5MDUyMTAwYjYxYjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNLz9LPBW/pKy8+BiYNt9WcM0iAg
j8pAIRbvw/ErQGZSXMpF1kHH8Y47BJw/qWUrsTQi3ObDkwSecz+0IlIlw4ttmBeL
J96ErhrTiO3onWZAO7G4Zc3VyIvSCImgQtY66Uto7zwlohuzdgNVTyOfTfuzKzK1
L1MqdPwo5Fpb4KLWO9iIyGDc7rmRy0S4sHW5hgkN1mi6SjV/jKKuI0EZy/bYmLaw
SlxeSPQ/VZ7llSrYogyXq/f7DdrajYbv9q6182bU0ahAUfuGkuaeNFs4Vhe50UVb
QrwhvG/4XZ0pBGm5UxpRie52UTXKnUS895dI/1xIKtGb9MubNXSF3YzItQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFAlEiT0HQ//sNPr8LcJBSEAthuYMB8GA1UdIwQY
MBaAFI8EHWaepsQRcNb4FAnA/9wo5WkHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvandRZFpwNm14QkZ3MXZnVUNjRF8zQ2psYVFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8xYThjYmQtNzJjZi00YTFjLTgzZDIt
YzIzZWFlZDRkMTI1LzEvandRZFpwNm14QkZ3MXZnVUNjRF8zQ2psYVFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8xYThjYmQtNzJjZi00YTFjLTgzZDItYzIzZWFlZDRkMTI1
LzEvandRZFpwNm14QkZ3MXZnVUNjRF8zQ2psYVFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALOe/CW00
Q0/gZvVfKwTabAvyBRhQ+YkAfnIm7FmZrQ0LaQ/Fwo+eeStP3rQguncEwZhFS3+f
Ajk4Oy1YiLKM/XHm8yWauWZh8iWDODiOW7LlfBwyMDRenVg80P2lUDgnq8g5WFEL
NhW1NjzLfwcAFRm6qq9Umyt0SDwj9xqHTr3jKUlrjuJHFvnvr2hte0GG7Sunkfxo
yam42A3m0ZZQHyaVobM3aqHDQ2HrgQ8IlxwmxbrmCbpSYrpMjyt9NhnzJrfJsHWi
A2YDjZdYaqEs0Pcgs3EUaJD9A7kILJXyma8uEdkF3pGoVsDWYv5YFV5t7OFbg5hJ
KobzGfZ8+YRZRg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:43:03 2025 by rpki-client