Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
File: jaA-DQIO_JRMHuva7lQn02W3AHY.mft (raw, json)
Hash identifier: zknPh8vn89/u1GbI7JW/50bp3FiYJUlkQBQvKMSFZwk=
Subject key identifier: 09:07:4C:0D:23:3D:21:48:F6:36:70:C4:6B:33:C2:7D:3D:7E:5A:7A
Authority key identifier: 8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
Certificate issuer: /CN=8da03e0d020efc944c1eebdaee5427d365b70076
Certificate serial: 0198D8F25F394715BBEEB22A79CF84468F8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 22:00:19 +0000
Manifest this update: Sat 23 Aug 2025 22:00:19 +0000
Manifest next update: Sun 24 Aug 2025 22:00:19 +0000
Files and hashes: 1: jaA-DQIO_JRMHuva7lQn02W3AHY.crl (hash: YmXUr3bUQCmRuVBrNMfcDLbQMvsaCFz265AskfNSTaU=)
2: z839WIkF-YRPS5QNYpBIYDtN3Cw.roa (hash: zP6mCwiE2/gg1MEmkXLbZLBNeMsMnTOwcbXXhGjusFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:f2:5f:39:47:15:bb:ee:b2:2a:79:cf:84:46:8f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da03e0d020efc944c1eebdaee5427d365b70076
Validity
Not Before: Aug 23 22:00:19 2025 GMT
Not After : Aug 24 22:00:19 2025 GMT
Subject: CN=09074c0d233d2148f63670c46b33c27d3d7e5a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:67:07:64:af:1a:18:79:5b:4d:a5:8b:d5:6c:
fc:a9:1b:f2:e7:23:94:6e:f2:64:3f:54:b4:bc:f1:
37:69:7d:dd:74:fb:8b:0c:2f:9b:48:ed:cc:95:12:
f3:ab:a1:ff:01:a6:d3:50:8e:96:c8:54:e8:77:a7:
a0:3f:e8:aa:cc:5b:1a:94:f8:54:fa:09:8e:43:7b:
07:9a:52:7e:bf:81:93:a1:10:05:88:c7:06:42:3f:
e3:d8:28:8e:9f:4f:62:f3:4f:7f:46:55:ab:db:71:
ba:51:b1:96:d9:db:0d:1a:a5:7e:09:2e:d0:1f:b2:
36:d9:55:da:6a:d4:da:92:54:88:4a:cf:c0:1b:c3:
90:a1:a1:cd:eb:ab:69:41:95:60:c7:24:46:b5:c3:
da:6d:c2:34:01:69:1c:54:98:f9:28:96:d2:a5:86:
ba:c3:16:84:a1:41:e1:a3:71:45:7a:26:ea:71:5d:
9c:47:81:2f:37:6e:fa:e6:20:79:31:94:48:9f:06:
96:22:f1:d0:b4:b3:c8:bb:d5:74:34:11:a0:35:09:
35:8c:40:6a:d6:1b:4e:d0:96:44:ca:4f:cb:75:5a:
c0:fb:29:54:9b:e3:1a:27:35:ea:33:ca:4d:9a:a4:
6a:b5:fa:35:0c:cf:cb:8f:87:8c:58:24:c9:e8:ed:
f3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:07:4C:0D:23:3D:21:48:F6:36:70:C4:6B:33:C2:7D:3D:7E:5A:7A
X509v3 Authority Key Identifier:
keyid:8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:29:01:c3:2c:e8:87:75:d4:cb:9f:aa:3b:d1:df:04:59:f6:
1f:b4:8b:9a:a6:7b:ef:37:01:a9:04:27:99:a4:d2:1f:4e:de:
63:7f:92:74:64:9f:4c:6b:0f:44:af:ec:0d:58:36:d1:36:ab:
c3:68:0f:f9:99:01:a5:8e:91:45:b5:6c:28:86:1b:a5:a7:6f:
c8:98:0a:4f:6f:22:11:ad:50:ff:55:f3:b8:5e:ff:44:d1:4f:
42:4b:57:64:9c:a0:49:26:5a:72:f1:51:33:30:31:61:ce:f7:
36:68:1e:6a:d2:bc:de:ad:2e:f7:64:6e:86:99:0a:ae:7e:5a:
9f:f0:17:4c:82:d8:98:d2:d5:29:2e:d4:d9:5c:d7:cd:d2:fb:
89:76:fe:67:89:af:ec:c3:4c:a2:d3:72:f5:96:92:2a:a0:11:
0c:d9:38:bc:9f:55:eb:a0:c6:eb:e1:34:79:6b:dc:96:b3:80:
e2:f2:4d:e4:77:a0:f8:2a:ee:df:d3:bb:b3:1a:cf:4f:70:bd:
bc:c2:62:20:71:db:4e:dc:92:de:e8:f7:07:f9:1c:ba:48:e4:
12:52:07:87:83:05:6d:66:43:56:92:86:f8:d4:a0:44:c9:b1:
8e:b1:b3:2a:66:52:6f:81:3a:6f:26:8d:d4:d3:53:41:9f:13:
37:46:e5:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjY8l85RxW77rIqec+ERo+LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYTAzZTBkMDIwZWZjOTQ0YzFlZWJkYWVlNTQyN2QzNjVi
NzAwNzYwHhcNMjUwODIzMjIwMDE5WhcNMjUwODI0MjIwMDE5WjAzMTEwLwYDVQQD
EygwOTA3NGMwZDIzM2QyMTQ4ZjYzNjcwYzQ2YjMzYzI3ZDNkN2U1YTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomcHZK8aGHlbTaWL1Wz8qRvy5yOU
bvJkP1S0vPE3aX3ddPuLDC+bSO3MlRLzq6H/AabTUI6WyFTod6egP+iqzFsalPhU
+gmOQ3sHmlJ+v4GToRAFiMcGQj/j2CiOn09i809/RlWr23G6UbGW2dsNGqV+CS7Q
H7I22VXaatTaklSISs/AG8OQoaHN66tpQZVgxyRGtcPabcI0AWkcVJj5KJbSpYa6
wxaEoUHho3FFeibqcV2cR4EvN2765iB5MZRInwaWIvHQtLPIu9V0NBGgNQk1jEBq
1htO0JZEyk/LdVrA+ylUm+MaJzXqM8pNmqRqtfo1DM/Lj4eMWCTJ6O3zJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAkHTA0jPSFI9jZwxGszwn09flp6MB8GA1UdIwQY
MBaAFI2gPg0CDvyUTB7r2u5UJ9NltwB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamFBLURRSU9fSlJNSHV2YTdsUW4wMlczQUhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS81NjIxMTItYWQ0NC00ZDcxLTljYjkt
ZmI3ZDdkY2EzNGE3LzEvamFBLURRSU9fSlJNSHV2YTdsUW4wMlczQUhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS81NjIxMTItYWQ0NC00ZDcxLTljYjktZmI3ZDdkY2EzNGE3
LzEvamFBLURRSU9fSlJNSHV2YTdsUW4wMlczQUhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFSkBwyzo
h3XUy5+qO9HfBFn2H7SLmqZ77zcBqQQnmaTSH07eY3+SdGSfTGsPRK/sDVg20Tar
w2gP+ZkBpY6RRbVsKIYbpadvyJgKT28iEa1Q/1XzuF7/RNFPQktXZJygSSZacvFR
MzAxYc73NmgeatK83q0u92RuhpkKrn5an/AXTILYmNLVKS7U2VzXzdL7iXb+Z4mv
7MNMotNy9ZaSKqARDNk4vJ9V66DG6+E0eWvclrOA4vJN5Heg+Cru39O7sxrPT3C9
vMJiIHHbTtyS3uj3B/kcukjkElIHh4MFbWZDVpKG+NSgRMmxjrGzKmZSb4E6byaN
1NNTQZ8TN0blDA==
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:07:40 2025 by rpki-client