Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
File: jTN8DIVpRrj72vKF9Syt3POK0Kg.mft (raw, json)
Hash identifier: t6fl3MDZBgxBRxZqoLdlL88Wbu1x3lgGLmmWujuw9bc=
Subject key identifier: 21:54:92:09:86:AC:6C:2E:DC:E1:DA:80:DC:78:86:E5:45:EF:17:AD
Authority key identifier: 8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8
Certificate issuer: /CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8
Certificate serial: 0197B933FC7C9BE9BF32A1B6A751520BFE38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
Manifest number: 146A
Signing time: Sun 29 Jun 2025 01:01:21 +0000
Manifest this update: Sun 29 Jun 2025 01:01:21 +0000
Manifest next update: Mon 30 Jun 2025 01:01:21 +0000
Files and hashes: 1: jTN8DIVpRrj72vKF9Syt3POK0Kg.crl (hash: zqOm7LcgUbLGJ5Gfs9IDc3aA7GNwGNJBPGN7GoBIIkk=)
2: orkmW_eZCcL4kmC7TM2XcG_njxM.roa (hash: WZm+hYZMy+CXUU6Z/uI/WhkL+3h0cGl03UVgN4cUA58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:fc:7c:9b:e9:bf:32:a1:b6:a7:51:52:0b:fe:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8
Validity
Not Before: Jun 29 01:01:21 2025 GMT
Not After : Jun 30 01:01:21 2025 GMT
Subject: CN=2154920986ac6c2edce1da80dc7886e545ef17ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:26:81:6d:82:ad:38:48:28:98:b3:f8:fa:7b:
98:66:70:07:2c:1d:fd:c8:59:8a:5a:d6:35:17:68:
bc:00:d5:d2:2e:a9:2b:fc:12:28:8f:62:4f:83:c4:
cf:6c:3b:de:56:f7:40:08:3c:20:34:b8:e8:6b:a0:
9e:8e:82:31:4f:7a:6b:ab:3c:c0:15:7f:6f:69:e3:
58:bb:ab:94:28:09:70:26:35:53:57:0f:64:65:4f:
dd:ff:62:d8:9e:df:d1:14:d6:8d:20:a0:08:b0:2d:
07:24:60:05:1f:28:e4:7c:81:b1:e5:4e:42:59:76:
97:06:84:c9:03:18:d3:78:28:0c:b3:10:c5:47:46:
1a:38:a4:7e:2a:4b:d8:8c:f2:d3:f4:84:4d:73:b1:
c0:50:0c:a4:36:b1:46:9b:48:2b:fb:29:07:3f:66:
b8:8f:47:1d:d0:9c:8c:3f:19:01:88:02:68:df:a7:
65:b7:71:3c:6f:53:e9:51:a8:fc:6b:ab:49:2d:9d:
ae:23:98:f1:f0:94:33:c6:1f:38:3c:cd:ab:bb:6f:
39:62:1b:5b:cc:b1:9a:15:52:a5:b9:b1:27:90:48:
6d:28:7d:06:83:00:53:03:5c:c7:27:df:52:e7:24:
c9:7b:2e:8e:9d:8a:35:f2:15:fe:9d:9b:ed:7a:6c:
58:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:54:92:09:86:AC:6C:2E:DC:E1:DA:80:DC:78:86:E5:45:EF:17:AD
X509v3 Authority Key Identifier:
keyid:8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:0c:93:8c:38:fe:71:5f:3e:63:27:55:f6:55:b3:d3:4f:8c:
d9:15:95:31:7a:13:69:c6:1a:a8:dd:f3:d3:ed:80:38:a1:1c:
67:73:da:25:d5:3c:a5:e0:48:02:0e:2a:02:93:5b:63:0b:da:
b6:ac:33:0f:5d:d2:39:c5:c1:fe:bd:10:75:6a:04:4e:8b:6a:
3f:31:2f:51:04:89:79:e8:25:08:e5:94:41:7c:b6:68:1d:83:
a1:f5:7a:b2:56:bc:73:4e:44:f1:ee:5e:93:25:a7:d8:60:5a:
75:4c:2d:9b:7b:c8:28:00:d7:eb:39:f6:8c:40:e7:25:b1:5d:
29:be:76:13:b3:7c:e6:d8:65:cc:5d:4e:93:52:9f:f9:ba:97:
49:c4:c7:bf:d5:45:33:f6:e5:35:56:f3:e7:db:91:4a:30:58:
cf:21:5a:0f:ae:3a:c9:49:81:86:41:03:64:a5:61:82:f7:84:
78:5c:a4:14:6c:72:80:95:13:6a:f5:3e:20:0c:72:64:0a:e6:
34:a7:e1:2c:be:d0:e4:62:8f:eb:2c:4c:fd:61:61:eb:09:3e:
7f:6b:01:ed:8e:68:94:20:d4:22:e7:71:10:60:c0:c6:63:73:
3a:0a:0d:25:c4:54:5a:50:eb:e9:d6:39:b5:4f:69:f7:ac:27:
e1:04:d8:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5M/x8m+m/MqG2p1FSC/44MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMzM3YzBjODU2OTQ2YjhmYmRhZjI4NWY1MmNhZGRjZjM4
YWQwYTgwHhcNMjUwNjI5MDEwMTIxWhcNMjUwNjMwMDEwMTIxWjAzMTEwLwYDVQQD
EygyMTU0OTIwOTg2YWM2YzJlZGNlMWRhODBkYzc4ODZlNTQ1ZWYxN2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCaBbYKtOEgomLP4+nuYZnAHLB39
yFmKWtY1F2i8ANXSLqkr/BIoj2JPg8TPbDveVvdACDwgNLjoa6CejoIxT3prqzzA
FX9vaeNYu6uUKAlwJjVTVw9kZU/d/2LYnt/RFNaNIKAIsC0HJGAFHyjkfIGx5U5C
WXaXBoTJAxjTeCgMsxDFR0YaOKR+KkvYjPLT9IRNc7HAUAykNrFGm0gr+ykHP2a4
j0cd0JyMPxkBiAJo36dlt3E8b1PpUaj8a6tJLZ2uI5jx8JQzxh84PM2ru285Yhtb
zLGaFVKlubEnkEhtKH0GgwBTA1zHJ99S5yTJey6OnYo18hX+nZvtemxY1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFUkgmGrGwu3OHagNx4huVF7xetMB8GA1UdIwQY
MBaAFI0zfAyFaUa4+9ryhfUsrdzzitCoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalROOERJVnBScmo3MnZLRjlTeXQzUE9LMEtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni81YzliZDktMDlhZC00ZmFjLWJiYmMt
M2YxNWY4ODM2ZGJiLzEvalROOERJVnBScmo3MnZLRjlTeXQzUE9LMEtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni81YzliZDktMDlhZC00ZmFjLWJiYmMtM2YxNWY4ODM2ZGJi
LzEvalROOERJVnBScmo3MnZLRjlTeXQzUE9LMEtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATQyTjDj+
cV8+YydV9lWz00+M2RWVMXoTacYaqN3z0+2AOKEcZ3PaJdU8peBIAg4qApNbYwva
tqwzD13SOcXB/r0QdWoETotqPzEvUQSJeeglCOWUQXy2aB2DofV6sla8c05E8e5e
kyWn2GBadUwtm3vIKADX6zn2jEDnJbFdKb52E7N85thlzF1Ok1Kf+bqXScTHv9VF
M/blNVbz59uRSjBYzyFaD646yUmBhkEDZKVhgveEeFykFGxygJUTavU+IAxyZArm
NKfhLL7Q5GKP6yxM/WFh6wk+f2sB7Y5olCDUIudxEGDAxmNzOgoNJcRUWlDr6dY5
tU9p96wn4QTYXg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:06:17 2025 by rpki-client