Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.mft
File: j32Qq83eC8bwvKryHOw6TyrPrk8.mft (raw, json)
Hash identifier: mm57KHCRnRFqk79pDIhUtUXWB0f2WBDvV2eNF1WXKrY=
Subject key identifier: 1E:EC:A9:05:F9:07:75:9B:67:AE:C1:86:6F:87:D7:36:B0:6C:52:7B
Authority key identifier: 8F:7D:90:AB:CD:DE:0B:C6:F0:BC:AA:F2:1C:EC:3A:4F:2A:CF:AE:4F
Certificate issuer: /CN=8f7d90abcdde0bc6f0bcaaf21cec3a4f2acfae4f
Certificate serial: 0197B745288BB931134F255FE7D0B33CB0DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j32Qq83eC8bwvKryHOw6TyrPrk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.mft
Manifest number: 15BD
Signing time: Sat 28 Jun 2025 16:00:52 +0000
Manifest this update: Sat 28 Jun 2025 16:00:52 +0000
Manifest next update: Sun 29 Jun 2025 16:00:52 +0000
Files and hashes: 1: Ha4iqiemRVs4K0apcX26aGgxEQM.roa (hash: Y9w0WT6CR9hlG1wNToGxOj1Wt0I5gYiZH++6mqrNiy0=)
2: j32Qq83eC8bwvKryHOw6TyrPrk8.crl (hash: LuuUK7RAEQXGjhM5PHhd52/v/1k8cg4ha7O673+ptFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/j32Qq83eC8bwvKryHOw6TyrPrk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:28:8b:b9:31:13:4f:25:5f:e7:d0:b3:3c:b0:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7d90abcdde0bc6f0bcaaf21cec3a4f2acfae4f
Validity
Not Before: Jun 28 16:00:52 2025 GMT
Not After : Jun 29 16:00:52 2025 GMT
Subject: CN=1eeca905f907759b67aec1866f87d736b06c527b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bc:9a:eb:26:0a:78:9b:5f:77:14:fe:82:67:
8d:79:37:4d:b8:4b:0d:81:1a:2c:15:cf:fa:fe:bd:
bc:38:bd:5d:80:43:f3:66:2c:19:e4:2e:47:67:5e:
e8:e8:78:68:a3:f6:ab:f5:64:ca:f5:01:ec:4a:7b:
67:cb:2f:32:3f:ef:08:2c:fe:c4:60:7e:64:77:c1:
bf:53:01:79:52:92:90:28:55:5b:28:01:9a:33:2f:
64:c0:55:d8:72:bd:c7:3c:a3:bf:92:28:6b:b9:9f:
20:10:a9:2f:24:fa:30:55:01:d8:e0:01:9c:6d:a6:
3d:ea:ab:c7:bd:d0:7e:06:32:5e:b3:76:22:0c:7b:
f6:f3:48:c1:3e:00:21:f9:09:e3:9d:3c:65:10:10:
4a:33:b6:b6:34:88:b1:f8:6f:10:8c:3f:5f:a1:cd:
4f:40:fb:60:64:74:a5:0c:5a:82:96:53:e3:c4:ca:
2d:da:e1:27:04:bd:5e:20:4f:29:9a:84:02:bd:cb:
d3:a0:bc:31:19:3d:59:4e:07:85:e8:16:b5:61:04:
ca:81:b9:59:17:c4:1c:f5:16:8a:87:ec:9a:0b:c8:
77:ae:fc:84:a2:a7:03:68:f7:d4:9b:7c:32:33:80:
c6:9f:73:b2:f5:2f:2d:d6:fa:29:75:67:e7:9b:c5:
6b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EC:A9:05:F9:07:75:9B:67:AE:C1:86:6F:87:D7:36:B0:6C:52:7B
X509v3 Authority Key Identifier:
keyid:8F:7D:90:AB:CD:DE:0B:C6:F0:BC:AA:F2:1C:EC:3A:4F:2A:CF:AE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j32Qq83eC8bwvKryHOw6TyrPrk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e3:d1:87:89:20:ef:22:c1:38:36:bc:2a:db:7d:8c:26:1b:
88:fc:8f:68:54:73:22:5a:39:2c:46:e6:10:1b:e0:c4:c0:3c:
8c:56:ce:1b:7c:e0:02:de:38:56:03:f9:d3:57:da:3b:94:46:
28:78:fb:3e:f1:68:64:a3:76:4e:c4:92:cd:d6:b0:09:09:ab:
1d:d5:6d:44:e3:5d:ef:64:ca:dc:64:a2:df:5f:4a:b4:9a:65:
67:3e:27:89:88:83:c0:f1:c5:ab:a4:a0:c4:f9:4b:e0:16:46:
7b:c7:a1:fe:d7:a6:75:a7:ea:ca:86:7e:0b:04:2d:e3:17:d3:
e3:7c:0b:3d:2a:ef:ed:98:11:5d:b6:bb:a4:b4:23:e3:6d:4c:
dc:76:2b:e4:5d:a0:b9:76:5e:05:2e:9f:27:e8:f2:d1:f1:04:
12:c8:c7:33:31:ea:33:22:c9:19:60:b1:3b:a8:47:38:cf:a2:
40:23:5b:00:31:33:bc:f7:1e:30:ec:98:22:0e:0f:a9:a0:b1:
48:20:5b:23:46:70:3b:34:c6:23:39:f1:59:f6:19:87:ba:27:
79:b5:dc:5e:5e:1f:e2:e7:29:bb:f8:44:86:54:7d:07:80:ce:
9b:16:c4:7f:16:09:8f:e2:8f:80:b2:c2:7c:ee:68:a2:08:77:
63:d1:0e:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RSiLuTETTyVf59CzPLDdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmN2Q5MGFiY2RkZTBiYzZmMGJjYWFmMjFjZWMzYTRmMmFj
ZmFlNGYwHhcNMjUwNjI4MTYwMDUyWhcNMjUwNjI5MTYwMDUyWjAzMTEwLwYDVQQD
EygxZWVjYTkwNWY5MDc3NTliNjdhZWMxODY2Zjg3ZDczNmIwNmM1MjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7ya6yYKeJtfdxT+gmeNeTdNuEsN
gRosFc/6/r28OL1dgEPzZiwZ5C5HZ17o6Hhoo/ar9WTK9QHsSntnyy8yP+8ILP7E
YH5kd8G/UwF5UpKQKFVbKAGaMy9kwFXYcr3HPKO/kihruZ8gEKkvJPowVQHY4AGc
baY96qvHvdB+BjJes3YiDHv280jBPgAh+QnjnTxlEBBKM7a2NIix+G8QjD9foc1P
QPtgZHSlDFqCllPjxMot2uEnBL1eIE8pmoQCvcvToLwxGT1ZTgeF6Ba1YQTKgblZ
F8Qc9RaKh+yaC8h3rvyEoqcDaPfUm3wyM4DGn3Oy9S8t1vopdWfnm8Vr9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7sqQX5B3WbZ67Bhm+H1zawbFJ7MB8GA1UdIwQY
MBaAFI99kKvN3gvG8Lyq8hzsOk8qz65PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajMyUXE4M2VDOGJ3dktyeUhPdzZUeXJQcms4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8zMGIwYmItODk4Yy00Mjg5LTkxMjQt
MzdlMzJlYWE3NjY3LzEvajMyUXE4M2VDOGJ3dktyeUhPdzZUeXJQcms4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS8zMGIwYmItODk4Yy00Mjg5LTkxMjQtMzdlMzJlYWE3NjY3
LzEvajMyUXE4M2VDOGJ3dktyeUhPdzZUeXJQcms4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFOPRh4kg
7yLBODa8Ktt9jCYbiPyPaFRzIlo5LEbmEBvgxMA8jFbOG3zgAt44VgP501faO5RG
KHj7PvFoZKN2TsSSzdawCQmrHdVtRONd72TK3GSi319KtJplZz4niYiDwPHFq6Sg
xPlL4BZGe8eh/temdafqyoZ+CwQt4xfT43wLPSrv7ZgRXba7pLQj421M3HYr5F2g
uXZeBS6fJ+jy0fEEEsjHMzHqMyLJGWCxO6hHOM+iQCNbADEzvPceMOyYIg4PqaCx
SCBbI0ZwOzTGIznxWfYZh7onebXcXl4f4ucpu/hEhlR9B4DOmxbEfxYJj+KPgLLC
fO5oogh3Y9EO2A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:20:08 2025 by rpki-client