Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
File: JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft (raw, json)
Hash identifier: sbWSl8RIOkXBQ7ssvYG5jf0jmu8P6pjjuLa+3Krpi9M=
Subject key identifier: 3D:76:B0:3A:B8:0C:9A:A8:3E:15:A6:84:77:40:09:62:FD:8F:CD:76
Authority key identifier: 24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
Certificate issuer: /CN=24d906b90c1d856673e414f39805be583d230ba7
Certificate serial: 0198D5BBC1B5F6EAB221D8D686A2142E0ED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
Manifest number: 0804
Signing time: Sat 23 Aug 2025 07:01:48 +0000
Manifest this update: Sat 23 Aug 2025 07:01:48 +0000
Manifest next update: Sun 24 Aug 2025 07:01:48 +0000
Files and hashes: 1: JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl (hash: iRF4AHaGg/1C+0cUYjqvrnPWm8gayNqmY8rvn8FA+rg=)
2: tH5X1sIrBGaWrxtJcDhQJ2X9uHg.roa (hash: DV2Ywdf2IF4IJkXNNJ6gs2p5s2GMK9q52zFH8lpr0iI=)
3: wpydopt6VUah6RQMZrzjsU6WoPc.roa (hash: cp20Yibn6t1V4VomO6+maPrzeM92DrtR/BD0ISnTpAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:c1:b5:f6:ea:b2:21:d8:d6:86:a2:14:2e:0e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d906b90c1d856673e414f39805be583d230ba7
Validity
Not Before: Aug 23 07:01:48 2025 GMT
Not After : Aug 24 07:01:48 2025 GMT
Subject: CN=3d76b03ab80c9aa83e15a68477400962fd8fcd76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e8:fb:76:78:a6:41:60:69:a0:1e:00:e3:cc:
27:30:21:3d:03:89:9d:92:fc:b5:05:f7:63:c8:88:
f9:93:b2:2c:8b:89:61:11:89:06:ed:cf:94:da:7d:
fb:47:45:85:42:4d:e5:67:0c:12:f2:c3:24:c3:5b:
06:be:db:3e:d8:71:bc:e8:02:f8:ec:c1:ec:40:ff:
05:47:8e:53:23:21:d6:48:2e:0e:93:61:56:21:46:
3f:79:86:80:ab:32:64:7a:06:7e:9e:c5:f7:08:6e:
ab:5e:c5:63:5c:63:e7:ac:be:bd:27:96:8f:1f:40:
93:43:ce:ee:7f:c7:75:32:a0:65:78:17:2d:c8:78:
2c:2f:c8:5a:fb:d5:44:cb:4e:d7:46:93:b7:d3:8a:
3f:5d:c2:e3:d6:9f:33:d3:3c:c7:ea:d8:cb:50:72:
df:ac:81:a3:24:9a:2c:06:80:17:f7:ea:dc:04:e4:
35:8e:3d:9d:2b:62:43:57:05:2e:95:02:63:3b:20:
45:b3:b3:9f:9b:23:fb:19:c1:2d:87:24:42:65:9f:
d6:ea:3e:3f:b5:3b:29:5b:c4:cb:2c:b6:b7:78:d1:
8f:79:2e:9f:a6:7f:73:b4:fc:82:26:82:2e:e1:94:
6d:4d:e3:98:06:05:d5:ce:9d:f7:38:34:e5:e1:61:
92:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:76:B0:3A:B8:0C:9A:A8:3E:15:A6:84:77:40:09:62:FD:8F:CD:76
X509v3 Authority Key Identifier:
keyid:24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c0:c2:b3:79:b8:38:9d:14:74:c2:5b:28:e8:f6:85:40:b8:
8c:d0:75:e2:75:c2:ec:ed:6c:c4:6c:a7:60:ca:80:0b:48:66:
8c:94:02:dc:02:63:51:c2:99:d8:e0:2b:96:bd:f8:22:79:7d:
68:2c:f3:db:fa:e1:e4:98:51:12:9f:89:cb:71:28:d9:8d:55:
c4:4e:84:f7:b1:d6:d2:2f:20:6b:68:33:d2:1f:e5:a6:fa:4e:
05:5c:df:19:e3:96:4f:4c:7d:1e:ff:2b:43:a6:58:6d:95:da:
29:5f:62:b4:6b:3d:b2:e9:e8:7a:80:ef:75:25:d1:68:8c:78:
76:b9:3e:4d:be:77:c4:e4:77:e9:90:38:ca:c4:63:c1:53:15:
b5:4d:dc:2d:e1:4d:9b:a1:be:74:92:25:26:de:53:e3:b4:9a:
3c:86:11:ee:09:08:50:35:59:03:12:6e:57:0d:56:03:4f:0b:
9c:41:f5:04:50:be:b6:c2:b3:f4:53:6e:4b:47:8b:56:2f:3b:
d7:c5:d0:26:7f:92:cd:12:3c:f7:82:f3:66:a7:3c:95:5f:87:
65:22:56:05:e5:b1:d6:b7:f0:3a:88:37:a5:2d:d5:a4:11:4c:
71:15:15:82:3e:67:55:a8:64:6a:3b:e2:38:d1:d7:64:41:31:
ec:d3:17:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu8G19uqyIdjWhqIULg7VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZDkwNmI5MGMxZDg1NjY3M2U0MTRmMzk4MDViZTU4M2Qy
MzBiYTcwHhcNMjUwODIzMDcwMTQ4WhcNMjUwODI0MDcwMTQ4WjAzMTEwLwYDVQQD
EygzZDc2YjAzYWI4MGM5YWE4M2UxNWE2ODQ3NzQwMDk2MmZkOGZjZDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+j7dnimQWBpoB4A48wnMCE9A4md
kvy1BfdjyIj5k7Isi4lhEYkG7c+U2n37R0WFQk3lZwwS8sMkw1sGvts+2HG86AL4
7MHsQP8FR45TIyHWSC4Ok2FWIUY/eYaAqzJkegZ+nsX3CG6rXsVjXGPnrL69J5aP
H0CTQ87uf8d1MqBleBctyHgsL8ha+9VEy07XRpO304o/XcLj1p8z0zzH6tjLUHLf
rIGjJJosBoAX9+rcBOQ1jj2dK2JDVwUulQJjOyBFs7OfmyP7GcEthyRCZZ/W6j4/
tTspW8TLLLa3eNGPeS6fpn9ztPyCJoIu4ZRtTeOYBgXVzp33ODTl4WGS7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD12sDq4DJqoPhWmhHdACWL9j812MB8GA1UdIwQY
MBaAFCTZBrkMHYVmc+QU85gFvlg9IwunMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk5rR3VRd2RoV1p6NUJUem1BVy1XRDBqQzZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iNTNkYjEtMWUwZS00NGQwLWExMzEt
NGZjMjhlNTA5OGM3LzEvSk5rR3VRd2RoV1p6NUJUem1BVy1XRDBqQzZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9iNTNkYjEtMWUwZS00NGQwLWExMzEtNGZjMjhlNTA5OGM3
LzEvSk5rR3VRd2RoV1p6NUJUem1BVy1XRDBqQzZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF8DCs3m4
OJ0UdMJbKOj2hUC4jNB14nXC7O1sxGynYMqAC0hmjJQC3AJjUcKZ2OArlr34Inl9
aCzz2/rh5JhREp+Jy3Eo2Y1VxE6E97HW0i8ga2gz0h/lpvpOBVzfGeOWT0x9Hv8r
Q6ZYbZXaKV9itGs9sunoeoDvdSXRaIx4drk+Tb53xOR36ZA4ysRjwVMVtU3cLeFN
m6G+dJIlJt5T47SaPIYR7gkIUDVZAxJuVw1WA08LnEH1BFC+tsKz9FNuS0eLVi87
18XQJn+SzRI894LzZqc8lV+HZSJWBeWx1rfwOog3pS3VpBFMcRUVgj5nVahkajvi
ONHXZEEx7NMXnw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:20:34 2025 by rpki-client