Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
File: j16oN5vKRPT2p_S2mGTNmwKiexI.mft (raw, json)
Hash identifier: /rHh/rzQNRb5OkVihqMC2gduwjFiSWGH0MfrS/s+DN8=
Subject key identifier: 43:8C:27:DF:DD:F7:C3:5C:60:3C:3E:8A:AB:44:5A:BB:5D:76:C8:19
Authority key identifier: 8F:5E:A8:37:9B:CA:44:F4:F6:A7:F4:B6:98:64:CD:9B:02:A2:7B:12
Certificate issuer: /CN=8f5ea8379bca44f4f6a7f4b69864cd9b02a27b12
Certificate serial: 0197D474AA15313D1D6D05D28BA80FA1219D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
Manifest number: 15C5
Signing time: Fri 04 Jul 2025 08:01:44 +0000
Manifest this update: Fri 04 Jul 2025 08:01:44 +0000
Manifest next update: Sat 05 Jul 2025 08:01:44 +0000
Files and hashes: 1: GI5eR-bcyPUXcabh8oF3ym-w-jY.roa (hash: HMe9khM1DXfAv5MN/QlZDROBBZj6X8B6CZKWjkcWcFY=)
2: f1jshjvqQC1or_SUp4VaHxnz0vg.roa (hash: HU3zUMPmn0Fu+40+47r6GzF5dnxd/KAN0UXFve0A1sw=)
3: j16oN5vKRPT2p_S2mGTNmwKiexI.crl (hash: WVCD+g9LyEKAEacDPBnCkn1Ja70zGSYVowhmtT5QLaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d4:74:aa:15:31:3d:1d:6d:05:d2:8b:a8:0f:a1:21:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f5ea8379bca44f4f6a7f4b69864cd9b02a27b12
Validity
Not Before: Jul 4 08:01:44 2025 GMT
Not After : Jul 5 08:01:44 2025 GMT
Subject: CN=438c27dfddf7c35c603c3e8aab445abb5d76c819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4e:15:f6:bc:ab:3f:da:0e:ef:b0:41:96:41:
b8:42:91:ad:8e:91:93:dd:e5:c7:07:ca:01:2d:d8:
1a:ef:ba:43:e6:02:6e:18:22:29:48:69:cd:94:67:
34:14:5a:a2:f8:13:a4:85:59:70:17:fa:c0:dc:a3:
8d:7d:b6:b1:c4:d4:54:e3:d1:6c:85:d3:49:27:c3:
43:35:ab:a5:c1:8d:9b:8b:99:7f:b7:0a:e6:0b:f6:
9e:f7:d9:54:d2:28:14:c8:36:5a:bb:ce:52:14:25:
4f:26:91:bd:3e:7c:d4:74:b6:7f:c6:18:7d:2c:39:
27:a6:c2:64:a3:d6:f6:3f:40:74:51:09:15:06:37:
f1:31:2c:1b:50:77:fc:3b:2c:64:52:f3:77:2b:4f:
7b:ae:9e:78:8e:c6:27:97:e2:4a:d8:83:74:74:bc:
80:fe:e9:b8:a0:d5:2b:39:76:13:fe:1b:9a:98:8f:
0b:cf:bf:b4:b4:cf:3a:8e:87:2f:c8:e9:cc:01:3c:
81:cb:06:a7:ef:60:87:92:d9:fc:8a:02:e3:4f:2d:
87:f5:65:87:bc:14:97:42:95:47:ef:ca:0d:c4:c4:
13:95:01:6f:0f:30:01:ac:b2:8b:f2:cd:80:44:06:
d5:d9:c7:a3:b5:a5:28:06:ef:c3:78:d5:c9:c3:fd:
ed:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8C:27:DF:DD:F7:C3:5C:60:3C:3E:8A:AB:44:5A:BB:5D:76:C8:19
X509v3 Authority Key Identifier:
keyid:8F:5E:A8:37:9B:CA:44:F4:F6:A7:F4:B6:98:64:CD:9B:02:A2:7B:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:fd:b7:e7:b1:2f:b0:11:de:53:74:cf:a5:e3:9a:6d:b6:28:
3e:58:a6:8c:6c:d9:f1:b5:2e:ad:cf:83:1c:ef:21:28:74:8b:
e0:d4:c1:c2:06:6a:e4:45:c9:35:03:9f:1d:51:6b:a0:89:46:
21:d6:b2:4a:e1:12:d3:3b:0d:53:3b:32:c9:13:79:ac:b7:5c:
a9:79:f2:3a:a0:ff:1a:e4:8b:24:af:4b:b0:6c:c6:cd:f7:04:
94:31:95:23:9f:c1:5f:d3:12:d0:df:28:c0:58:3e:1b:68:9b:
1a:a3:76:12:54:28:62:7b:a7:10:b5:ef:e2:0d:37:74:5c:e3:
fc:d1:c9:fb:1b:af:67:5e:57:ea:e8:5c:d5:63:b1:91:00:1e:
22:f3:c3:64:2a:10:00:c9:fa:7b:11:7d:1e:8c:d0:90:bc:5e:
15:1d:d3:69:8c:4a:59:47:fb:ec:a2:6b:dd:85:1a:e3:28:44:
4e:cf:01:a9:6d:6a:17:01:b6:4e:1a:e3:ba:d5:67:89:a6:7a:
d7:1f:bb:0d:4b:ec:1b:9a:15:d9:1e:5a:3d:68:b3:63:61:70:
98:5e:92:e3:3f:62:f3:f7:28:c4:d9:df:d5:d5:26:05:21:e2:
d7:76:7b:14:52:cf:f4:72:96:27:18:ab:88:9f:3b:eb:97:92:
e9:ff:01:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfUdKoVMT0dbQXSi6gPoSGdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmNWVhODM3OWJjYTQ0ZjRmNmE3ZjRiNjk4NjRjZDliMDJh
MjdiMTIwHhcNMjUwNzA0MDgwMTQ0WhcNMjUwNzA1MDgwMTQ0WjAzMTEwLwYDVQQD
Eyg0MzhjMjdkZmRkZjdjMzVjNjAzYzNlOGFhYjQ0NWFiYjVkNzZjODE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU4V9ryrP9oO77BBlkG4QpGtjpGT
3eXHB8oBLdga77pD5gJuGCIpSGnNlGc0FFqi+BOkhVlwF/rA3KONfbaxxNRU49Fs
hdNJJ8NDNaulwY2bi5l/twrmC/ae99lU0igUyDZau85SFCVPJpG9PnzUdLZ/xhh9
LDknpsJko9b2P0B0UQkVBjfxMSwbUHf8OyxkUvN3K097rp54jsYnl+JK2IN0dLyA
/um4oNUrOXYT/huamI8Lz7+0tM86jocvyOnMATyBywan72CHktn8igLjTy2H9WWH
vBSXQpVH78oNxMQTlQFvDzABrLKL8s2ARAbV2cejtaUoBu/DeNXJw/3tuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOMJ9/d98NcYDw+iqtEWrtddsgZMB8GA1UdIwQY
MBaAFI9eqDebykT09qf0tphkzZsConsSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajE2b041dktSUFQycF9TMm1HVE5td0tpZXhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny80MDJkNDMtZTk5Yy00MTEyLWEwMzgt
ZWNiYjk0NDJmNTg5LzEvajE2b041dktSUFQycF9TMm1HVE5td0tpZXhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny80MDJkNDMtZTk5Yy00MTEyLWEwMzgtZWNiYjk0NDJmNTg5
LzEvajE2b041dktSUFQycF9TMm1HVE5td0tpZXhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADf2357Ev
sBHeU3TPpeOabbYoPlimjGzZ8bUurc+DHO8hKHSL4NTBwgZq5EXJNQOfHVFroIlG
IdaySuES0zsNUzsyyRN5rLdcqXnyOqD/GuSLJK9LsGzGzfcElDGVI5/BX9MS0N8o
wFg+G2ibGqN2ElQoYnunELXv4g03dFzj/NHJ+xuvZ15X6uhc1WOxkQAeIvPDZCoQ
AMn6exF9HozQkLxeFR3TaYxKWUf77KJr3YUa4yhETs8BqW1qFwG2ThrjutVniaZ6
1x+7DUvsG5oV2R5aPWizY2FwmF6S4z9i8/coxNnf1dUmBSHi13Z7FFLP9HKWJxir
iJ8765eS6f8Bng==
-----END CERTIFICATE-----
Generated at Fri Jul 4 14:26:32 2025 by rpki-client