Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
File: jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft (raw, json)
Hash identifier: 5XYUsalsia3WBsRmAK4BpdjmpB7zhOINL0R6w/mv5us=
Subject key identifier: 81:32:FC:23:8B:A2:9F:24:67:46:37:1D:7D:27:EC:EF:AA:18:C6:CA
Authority key identifier: 8D:30:81:0E:2D:C2:71:A6:A0:F0:7B:8E:20:9E:2D:C2:23:63:78:39
Certificate issuer: /CN=8d30810e2dc271a6a0f07b8e209e2dc223637839
Certificate serial: 0197B933D04C516E5E149969794552B47D32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
Manifest number: 15BA
Signing time: Sun 29 Jun 2025 01:01:09 +0000
Manifest this update: Sun 29 Jun 2025 01:01:09 +0000
Manifest next update: Mon 30 Jun 2025 01:01:09 +0000
Files and hashes: 1: dHwX8PQaURSRhzT9O267zp2eAAU.roa (hash: pQKJANjM+1Peo4ZdiwJW4yKvtPIT0ly/kwXsgNJ+gjU=)
2: jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl (hash: vaVc7Nyx/3SfUglY2/buP/2+7OAdIbN6himUmb1M+nA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:d0:4c:51:6e:5e:14:99:69:79:45:52:b4:7d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d30810e2dc271a6a0f07b8e209e2dc223637839
Validity
Not Before: Jun 29 01:01:09 2025 GMT
Not After : Jun 30 01:01:09 2025 GMT
Subject: CN=8132fc238ba29f246746371d7d27ecefaa18c6ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e5:a5:9f:2c:ad:7c:79:3c:0f:f4:83:34:28:
80:b9:fb:51:50:7c:aa:21:c9:42:25:be:98:24:e4:
73:4d:9c:87:53:06:ff:79:30:7d:61:61:2c:49:e7:
60:12:a3:4c:01:a7:2e:99:ca:b5:2c:b2:9f:e5:39:
6e:ee:3b:0e:81:9e:56:32:54:1f:e7:c2:6e:77:c0:
a1:b0:80:0f:86:4a:83:57:65:e3:78:7b:3e:e4:65:
64:1c:83:9f:d4:71:cf:8d:c9:60:80:01:d8:a2:b3:
ba:0f:db:a5:5a:54:f9:b4:58:41:ec:ec:5f:7c:a2:
25:16:16:4e:a1:d8:ec:d5:4e:c9:5d:d5:b6:d5:7f:
eb:8a:da:07:22:80:b6:75:07:5c:c5:e4:d2:a8:d7:
25:8c:1d:9e:ba:69:cf:e2:a5:d4:89:4e:0d:e4:bd:
61:8d:bc:a1:cb:2a:8a:76:2c:a6:62:97:dd:77:cd:
d8:0f:b1:24:be:e8:87:42:86:40:8b:5b:8a:ec:d2:
32:85:fb:15:7d:32:37:a8:70:da:88:de:13:0e:01:
27:df:6a:70:bb:01:6d:4b:82:05:ce:75:b1:c8:20:
d4:72:5a:34:cc:5f:9f:a1:3d:1c:ce:99:24:51:bf:
b7:68:ee:5a:76:75:18:f2:5b:c3:bd:ab:99:12:c8:
d2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:32:FC:23:8B:A2:9F:24:67:46:37:1D:7D:27:EC:EF:AA:18:C6:CA
X509v3 Authority Key Identifier:
keyid:8D:30:81:0E:2D:C2:71:A6:A0:F0:7B:8E:20:9E:2D:C2:23:63:78:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:3b:4c:b4:74:9b:28:7a:e9:e3:e3:fe:fd:03:86:b0:8a:b8:
13:8c:b0:a1:ff:d0:98:98:99:58:f7:f8:90:0a:d7:f8:0a:b6:
be:54:6d:c6:64:be:d6:7b:db:bf:0d:ba:ea:d7:e9:e3:7a:44:
4e:49:cb:ef:6e:43:e9:e0:d3:45:75:d7:c1:a4:6c:be:0d:f4:
d4:e5:7f:0c:0c:dd:40:5d:01:bb:c7:0b:29:96:90:f5:fc:0a:
b5:0b:8b:76:14:9f:28:59:f9:c6:6d:4d:ae:3d:14:fd:aa:48:
22:4e:c0:75:c8:a7:13:f9:67:a2:77:f2:36:f5:6e:33:ea:59:
c8:cc:fb:dd:8f:01:f5:cf:91:5b:8c:ea:48:6f:76:ee:3c:39:
bf:89:e2:fb:7c:3e:0f:a3:76:a2:0e:bd:9c:6a:e0:34:52:b3:
96:e0:cc:f4:69:e0:cc:67:c6:0a:44:bd:cb:07:af:a1:cc:be:
9e:83:b2:34:4d:b1:80:f4:88:b3:07:64:5b:62:cc:92:23:9d:
89:c4:26:5d:b0:20:b3:1d:e2:a2:83:7e:c8:fd:bb:99:c8:bf:
10:84:1a:74:cc:b6:25:70:8b:7e:ea:1d:f2:ad:4f:75:79:94:
51:c9:ed:cd:6c:dc:b9:e0:f5:41:71:22:7c:3c:0d:42:70:a9:
92:12:f9:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5M9BMUW5eFJlpeUVStH0yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMzA4MTBlMmRjMjcxYTZhMGYwN2I4ZTIwOWUyZGMyMjM2
Mzc4MzkwHhcNMjUwNjI5MDEwMTA5WhcNMjUwNjMwMDEwMTA5WjAzMTEwLwYDVQQD
Eyg4MTMyZmMyMzhiYTI5ZjI0Njc0NjM3MWQ3ZDI3ZWNlZmFhMThjNmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteWlnyytfHk8D/SDNCiAuftRUHyq
IclCJb6YJORzTZyHUwb/eTB9YWEsSedgEqNMAacumcq1LLKf5Tlu7jsOgZ5WMlQf
58Jud8ChsIAPhkqDV2XjeHs+5GVkHIOf1HHPjclggAHYorO6D9ulWlT5tFhB7Oxf
fKIlFhZOodjs1U7JXdW21X/ritoHIoC2dQdcxeTSqNcljB2eumnP4qXUiU4N5L1h
jbyhyyqKdiymYpfdd83YD7EkvuiHQoZAi1uK7NIyhfsVfTI3qHDaiN4TDgEn32pw
uwFtS4IFznWxyCDUclo0zF+foT0czpkkUb+3aO5adnUY8lvDvauZEsjSGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIEy/COLop8kZ0Y3HX0n7O+qGMbKMB8GA1UdIwQY
MBaAFI0wgQ4twnGmoPB7jiCeLcIjY3g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalRDQkRpM0NjYWFnOEh1T0lKNHR3aU5qZURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9hOWQ5ZGEtZjhhNS00N2JhLWI2NmEt
YmQwYjU3NzRmNjM3LzEvalRDQkRpM0NjYWFnOEh1T0lKNHR3aU5qZURrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9hOWQ5ZGEtZjhhNS00N2JhLWI2NmEtYmQwYjU3NzRmNjM3
LzEvalRDQkRpM0NjYWFnOEh1T0lKNHR3aU5qZURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVztMtHSb
KHrp4+P+/QOGsIq4E4ywof/QmJiZWPf4kArX+Aq2vlRtxmS+1nvbvw266tfp43pE
TknL725D6eDTRXXXwaRsvg301OV/DAzdQF0Bu8cLKZaQ9fwKtQuLdhSfKFn5xm1N
rj0U/apIIk7AdcinE/lnonfyNvVuM+pZyMz73Y8B9c+RW4zqSG927jw5v4ni+3w+
D6N2og69nGrgNFKzluDM9GngzGfGCkS9ywevocy+noOyNE2xgPSIswdkW2LMkiOd
icQmXbAgsx3iooN+yP27mci/EIQadMy2JXCLfuod8q1PdXmUUcntzWzcueD1QXEi
fDwNQnCpkhL53w==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:24:21 2025 by rpki-client