Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft
File: jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft (raw, json)
Hash identifier: ZAVKxUAFU18ZbIs0aYEP0DemsCOD+vsITwv4gib9WsQ=
Subject key identifier: 82:45:30:92:47:48:BB:69:F5:56:CC:12:3D:03:1A:5F:49:3E:8B:6D
Authority key identifier: 8D:3E:59:4B:B2:6E:9C:08:E6:FC:47:36:CA:A5:D3:C2:00:85:4D:EA
Certificate issuer: /CN=8d3e594bb26e9c08e6fc4736caa5d3c200854dea
Certificate serial: 0198D4A81691307099B7BA2F1CF845470079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 02:00:42 +0000
Manifest this update: Sat 23 Aug 2025 02:00:42 +0000
Manifest next update: Sun 24 Aug 2025 02:00:42 +0000
Files and hashes: 1: Zq0wQhBfexCATl78wMgEOyu6_sU.roa (hash: axein+QEEGhV3z0WrLq2ssDzr5D8Ohz6MOaHA780No8=)
2: jT5ZS7JunAjm_Ec2yqXTwgCFTeo.crl (hash: uJ26x18IHtBOKtXQKD4ZWJtWsUibp5bi6xjnVcyO/Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:16:91:30:70:99:b7:ba:2f:1c:f8:45:47:00:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3e594bb26e9c08e6fc4736caa5d3c200854dea
Validity
Not Before: Aug 23 02:00:42 2025 GMT
Not After : Aug 24 02:00:42 2025 GMT
Subject: CN=824530924748bb69f556cc123d031a5f493e8b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:10:d2:c4:d8:a1:db:c1:36:93:36:69:22:f1:
72:88:78:05:33:c3:67:89:61:ce:c8:40:07:73:a2:
1e:35:9b:b7:cb:89:6b:67:27:e1:af:98:93:f3:28:
13:e7:ae:e9:a5:28:7b:e4:e7:7d:24:1c:81:1a:fb:
f4:49:10:be:e7:c7:92:b7:57:fb:be:44:9e:30:d6:
25:df:b9:0c:55:54:be:52:26:18:98:9e:04:84:24:
23:1a:ba:d9:e0:02:35:2d:5e:33:03:28:d0:f5:8c:
84:95:1c:4a:54:cc:55:6b:5c:58:c7:80:3b:92:24:
23:e0:82:69:d9:07:f9:8e:c6:97:44:a4:68:f1:fa:
51:a5:a3:64:76:3d:d4:98:e9:83:2a:e7:29:a0:69:
4e:59:fc:5a:ff:dd:94:c7:fc:e1:88:c7:ef:81:ef:
1d:18:7a:2d:cc:df:86:2a:1c:77:b7:d0:2d:49:eb:
ba:42:bc:1c:32:ed:be:f6:9e:17:20:5c:1e:f0:d7:
7a:3b:2e:21:03:7e:7a:df:13:d9:df:d4:78:d2:37:
2c:b5:08:89:70:6b:bb:b5:06:55:d4:72:dc:7b:b3:
3b:29:85:b2:7a:86:9e:1d:47:f1:76:68:74:9e:b9:
21:db:bf:73:3b:58:5c:3d:aa:05:22:4d:b0:75:b3:
33:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:45:30:92:47:48:BB:69:F5:56:CC:12:3D:03:1A:5F:49:3E:8B:6D
X509v3 Authority Key Identifier:
keyid:8D:3E:59:4B:B2:6E:9C:08:E6:FC:47:36:CA:A5:D3:C2:00:85:4D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a0:f9:cb:73:38:02:e6:2b:ce:5f:a6:c8:9d:a0:a4:9d:45:
9d:9b:88:94:17:1f:c1:5a:8e:19:7b:6f:c0:44:b3:12:e9:49:
5c:12:8d:6f:18:26:dc:9a:ae:7b:30:0b:21:06:a4:a6:f7:0c:
55:a7:5b:1f:79:76:4b:65:20:b2:16:f0:bd:42:cb:8e:94:22:
46:2d:04:fd:ac:7a:47:a3:bf:68:6a:fa:cb:eb:67:9b:8f:25:
6f:15:66:42:22:43:db:2d:45:65:c6:c2:34:35:1a:36:49:92:
93:4f:6a:dc:9d:9f:82:0c:c8:c9:f6:48:d8:85:fa:1a:69:6e:
88:a2:ec:32:0b:05:d2:f6:7c:82:79:3f:26:36:c3:77:67:fd:
a5:f1:07:06:59:e7:e0:7b:bc:90:34:56:40:88:8c:40:76:81:
9b:f3:e3:6f:53:83:20:c9:2d:0a:99:54:ef:cb:bd:ce:49:38:
c9:00:c6:d6:22:dc:1a:1d:c1:d7:bc:dc:68:88:eb:2f:5b:9c:
fe:7f:b1:4d:da:28:d2:9e:9f:26:cb:c5:c3:ed:68:f2:c7:79:
ca:1d:56:95:48:d3:62:30:68:35:30:ff:cc:a6:ec:1f:93:67:
a8:7e:4b:b6:26:07:a6:a8:c2:f0:d4:d3:8f:d4:02:ef:66:26:
4a:ce:87:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqBaRMHCZt7ovHPhFRwB5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkM2U1OTRiYjI2ZTljMDhlNmZjNDczNmNhYTVkM2MyMDA4
NTRkZWEwHhcNMjUwODIzMDIwMDQyWhcNMjUwODI0MDIwMDQyWjAzMTEwLwYDVQQD
Eyg4MjQ1MzA5MjQ3NDhiYjY5ZjU1NmNjMTIzZDAzMWE1ZjQ5M2U4YjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhDSxNih28E2kzZpIvFyiHgFM8Nn
iWHOyEAHc6IeNZu3y4lrZyfhr5iT8ygT567ppSh75Od9JByBGvv0SRC+58eSt1f7
vkSeMNYl37kMVVS+UiYYmJ4EhCQjGrrZ4AI1LV4zAyjQ9YyElRxKVMxVa1xYx4A7
kiQj4IJp2Qf5jsaXRKRo8fpRpaNkdj3UmOmDKucpoGlOWfxa/92Ux/zhiMfvge8d
GHotzN+GKhx3t9AtSeu6QrwcMu2+9p4XIFwe8Nd6Oy4hA3563xPZ39R40jcstQiJ
cGu7tQZV1HLce7M7KYWyeoaeHUfxdmh0nrkh279zO1hcPaoFIk2wdbMzzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJFMJJHSLtp9VbMEj0DGl9JPottMB8GA1UdIwQY
MBaAFI0+WUuybpwI5vxHNsql08IAhU3qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalQ1WlM3SnVuQWptX0VjMnlxWFR3Z0NGVGVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9jNzUzMTctZDVmZC00YTI0LTg3MTQt
ZTdkZWU5YTdjYWQ1LzEvalQ1WlM3SnVuQWptX0VjMnlxWFR3Z0NGVGVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9jNzUzMTctZDVmZC00YTI0LTg3MTQtZTdkZWU5YTdjYWQ1
LzEvalQ1WlM3SnVuQWptX0VjMnlxWFR3Z0NGVGVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABKD5y3M4
AuYrzl+myJ2gpJ1FnZuIlBcfwVqOGXtvwESzEulJXBKNbxgm3JquezALIQakpvcM
VadbH3l2S2UgshbwvULLjpQiRi0E/ax6R6O/aGr6y+tnm48lbxVmQiJD2y1FZcbC
NDUaNkmSk09q3J2fggzIyfZI2IX6GmluiKLsMgsF0vZ8gnk/JjbDd2f9pfEHBlnn
4Hu8kDRWQIiMQHaBm/Pjb1ODIMktCplU78u9zkk4yQDG1iLcGh3B17zcaIjrL1uc
/n+xTdoo0p6fJsvFw+1o8sd5yh1WlUjTYjBoNTD/zKbsH5NnqH5LtiYHpqjC8NTT
j9QC72YmSs6HGQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:52:11 2025 by rpki-client