Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
File: jVdqhq46NTLhCcXN9ymtR4wcaX8.mft (raw, json)
Hash identifier: afSMYJ0PsqgdBJE9SQehvdM+oV08eBIUhnC+/1CNoiM=
Subject key identifier: 62:63:53:23:B0:E2:B7:C0:78:7F:11:D6:19:E0:D6:73:16:76:21:16
Authority key identifier: 8D:57:6A:86:AE:3A:35:32:E1:09:C5:CD:F7:29:AD:47:8C:1C:69:7F
Certificate issuer: /CN=8d576a86ae3a3532e109c5cdf729ad478c1c697f
Certificate serial: 0198D69839731500978A31A928E730AB83C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
Manifest number: 1363
Signing time: Sat 23 Aug 2025 11:02:37 +0000
Manifest this update: Sat 23 Aug 2025 11:02:37 +0000
Manifest next update: Sun 24 Aug 2025 11:02:37 +0000
Files and hashes: 1: FHdXx9mFGE91HKwW6NlniVutY68.roa (hash: bCfamFt9mTX4NzIQ8vZRhb/+uNTjpTqVv/iTNAFMwHg=)
2: jVdqhq46NTLhCcXN9ymtR4wcaX8.crl (hash: EtKNsfvnUlJG0Fb5AdhIXiyRiF1XDawMjC3+PYcV+A0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:39:73:15:00:97:8a:31:a9:28:e7:30:ab:83:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d576a86ae3a3532e109c5cdf729ad478c1c697f
Validity
Not Before: Aug 23 11:02:37 2025 GMT
Not After : Aug 24 11:02:37 2025 GMT
Subject: CN=62635323b0e2b7c0787f11d619e0d67316762116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4d:29:d7:c5:43:e9:4c:7a:eb:1b:4c:57:47:
99:dd:31:f9:0e:17:b6:9d:87:87:ac:86:3c:19:d1:
5f:e4:7f:57:a1:2e:b3:be:20:9c:b7:9d:0f:b4:d9:
fc:d4:f4:d3:ec:77:64:ee:e1:08:43:e8:93:e1:c5:
c0:e8:f4:1c:2c:44:ef:18:2a:a1:de:15:5b:d3:6d:
6c:83:b2:08:7c:e4:3f:a2:d1:07:fe:6a:2d:e0:7c:
21:c1:de:f8:32:b5:49:a5:4c:fb:d9:6a:52:74:4a:
f7:6b:19:62:4f:12:0c:d5:43:85:f3:e2:6c:eb:0e:
7f:5e:76:93:29:68:cf:b4:5e:02:48:4a:e4:90:d0:
92:ec:fb:29:04:e9:17:97:1c:eb:0b:52:9b:4d:8f:
28:3f:5e:2d:6a:8f:59:18:92:a9:4c:e7:12:38:bb:
9e:18:73:e6:b8:88:c6:70:0f:30:28:a9:d0:5a:42:
ed:89:b2:6e:71:73:29:33:2f:fa:97:9b:f7:70:69:
ad:52:c6:e3:a8:0a:a5:74:f9:50:67:1e:ed:03:d9:
43:e5:0c:17:0e:d4:a0:39:a7:0f:ba:dd:46:20:ee:
a3:c1:3b:2f:f8:5a:f8:ac:8f:63:99:5e:42:ce:18:
32:1d:29:27:21:7e:7b:c7:bc:e2:04:90:04:b4:cf:
1d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:63:53:23:B0:E2:B7:C0:78:7F:11:D6:19:E0:D6:73:16:76:21:16
X509v3 Authority Key Identifier:
keyid:8D:57:6A:86:AE:3A:35:32:E1:09:C5:CD:F7:29:AD:47:8C:1C:69:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:50:ae:4c:f8:fa:af:76:c3:6c:d9:a3:69:e7:61:47:3b:eb:
e3:53:0a:d6:30:6d:13:4c:76:a7:1d:95:79:42:48:24:ae:37:
8f:b5:a6:94:1d:d1:32:38:3a:ed:49:80:81:67:63:df:d0:88:
91:02:4d:44:05:48:8c:ac:c4:c0:af:a3:c2:8d:2c:73:4b:c2:
1f:4c:b2:2c:19:b2:6e:c4:03:f6:d1:5d:68:b1:57:a7:de:a9:
3b:74:95:ad:03:45:40:8c:a0:67:2d:a3:88:9b:bf:33:26:f8:
c1:f6:7c:c9:b2:1e:6e:8a:21:84:d4:ec:49:d3:a6:40:03:82:
53:69:9a:61:3d:da:56:32:07:9a:b6:60:7b:6e:99:ac:b9:8e:
d5:88:5f:c6:55:56:98:bc:41:46:5b:7e:ba:b8:14:13:c0:bb:
bf:2d:85:98:bb:dd:cc:c7:72:5b:91:c1:3a:29:be:30:f3:73:
7e:59:b6:62:93:b4:6c:e3:40:85:a4:d0:1c:88:2d:9e:80:00:
cf:c3:87:29:68:e9:4f:d9:5a:88:87:00:62:76:49:d2:85:ae:
10:59:90:21:1b:c0:83:e5:c6:f4:9c:15:fa:85:84:1f:76:50:
a2:d8:bb:9a:e4:b4:84:9d:c1:96:2d:22:db:6c:f3:6b:49:b0:
b2:02:4d:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmDlzFQCXijGpKOcwq4PEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNTc2YTg2YWUzYTM1MzJlMTA5YzVjZGY3MjlhZDQ3OGMx
YzY5N2YwHhcNMjUwODIzMTEwMjM3WhcNMjUwODI0MTEwMjM3WjAzMTEwLwYDVQQD
Eyg2MjYzNTMyM2IwZTJiN2MwNzg3ZjExZDYxOWUwZDY3MzE2NzYyMTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApE0p18VD6Ux66xtMV0eZ3TH5Dhe2
nYeHrIY8GdFf5H9XoS6zviCct50PtNn81PTT7Hdk7uEIQ+iT4cXA6PQcLETvGCqh
3hVb021sg7IIfOQ/otEH/mot4Hwhwd74MrVJpUz72WpSdEr3axliTxIM1UOF8+Js
6w5/XnaTKWjPtF4CSErkkNCS7PspBOkXlxzrC1KbTY8oP14tao9ZGJKpTOcSOLue
GHPmuIjGcA8wKKnQWkLtibJucXMpMy/6l5v3cGmtUsbjqAqldPlQZx7tA9lD5QwX
DtSgOacPut1GIO6jwTsv+Fr4rI9jmV5CzhgyHSknIX57x7ziBJAEtM8d0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJjUyOw4rfAeH8R1hng1nMWdiEWMB8GA1UdIwQY
MBaAFI1XaoauOjUy4QnFzfcprUeMHGl/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalZkcWhxNDZOVExoQ2NYTjl5bXRSNHdjYVg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8xYjg2NDgtNWU5Ni00Y2VmLTgwNTUt
NjRlNzI5ZWYzMDJkLzEvalZkcWhxNDZOVExoQ2NYTjl5bXRSNHdjYVg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8xYjg2NDgtNWU5Ni00Y2VmLTgwNTUtNjRlNzI5ZWYzMDJk
LzEvalZkcWhxNDZOVExoQ2NYTjl5bXRSNHdjYVg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAelCuTPj6
r3bDbNmjaedhRzvr41MK1jBtE0x2px2VeUJIJK43j7WmlB3RMjg67UmAgWdj39CI
kQJNRAVIjKzEwK+jwo0sc0vCH0yyLBmybsQD9tFdaLFXp96pO3SVrQNFQIygZy2j
iJu/Myb4wfZ8ybIeboohhNTsSdOmQAOCU2maYT3aVjIHmrZge26ZrLmO1YhfxlVW
mLxBRlt+urgUE8C7vy2FmLvdzMdyW5HBOim+MPNzflm2YpO0bONAhaTQHIgtnoAA
z8OHKWjpT9laiIcAYnZJ0oWuEFmQIRvAg+XG9JwV+oWEH3ZQoti7muS0hJ3Bli0i
22zza0mwsgJNow==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:02:18 2025 by rpki-client