Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
File: jsH30FMGguG2jjv-WodE7lGtM10.mft (raw, json)
Hash identifier: bHYhBTpY/8hg2tVh7cTdA1s63Dcv2khVy8BUuFrMpQ4=
Subject key identifier: DA:C5:B5:3A:DD:5C:6C:4E:77:30:D6:26:10:A3:77:F7:BE:CF:27:81
Authority key identifier: 8E:C1:F7:D0:53:06:82:E1:B6:8E:3B:FE:5A:87:44:EE:51:AD:33:5D
Certificate issuer: /CN=8ec1f7d0530682e1b68e3bfe5a8744ee51ad335d
Certificate serial: 0197B8214E07AEA726082C5484B008FCF9D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 20:01:19 +0000
Manifest this update: Sat 28 Jun 2025 20:01:19 +0000
Manifest next update: Sun 29 Jun 2025 20:01:19 +0000
Files and hashes: 1: WqkjigZnCXf1cGoouiwLBsYhyDg.roa (hash: JS3h2BtVCeMAnMIYV0aIQuTD6sVEzA9KQapJj6DBbJg=)
2: jsH30FMGguG2jjv-WodE7lGtM10.crl (hash: 3B3spqMQrG29NI8kfz3viqt8J35Lhtz4M3VDXNDCfFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:4e:07:ae:a7:26:08:2c:54:84:b0:08:fc:f9:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec1f7d0530682e1b68e3bfe5a8744ee51ad335d
Validity
Not Before: Jun 28 20:01:19 2025 GMT
Not After : Jun 29 20:01:19 2025 GMT
Subject: CN=dac5b53add5c6c4e7730d62610a377f7becf2781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:36:21:66:3e:b8:95:ff:a0:02:fd:eb:1e:99:
5a:25:41:6e:3b:bd:39:6a:57:2c:25:a3:c5:2b:86:
41:b7:62:f0:8f:e0:70:a1:2e:1a:1e:4a:96:0c:a2:
b6:8d:d7:71:57:c9:70:0f:87:fb:5d:bf:c6:eb:7f:
40:dc:60:4e:7d:d5:d8:da:24:86:f1:17:15:8a:9b:
82:1e:bf:58:5e:64:6c:2c:74:b5:69:58:b6:7c:47:
6a:28:36:03:3a:36:ed:7b:2a:1f:18:ce:df:95:73:
c7:79:9e:1b:6c:75:cc:14:90:5d:f1:1b:04:c7:3c:
36:bf:ce:a4:f4:ad:7c:b6:40:f0:46:b7:34:5e:b7:
07:19:9b:d0:ab:f4:9b:7c:4b:58:55:f3:37:e7:9c:
b1:e4:5e:e8:b5:53:36:0e:77:1e:63:da:e5:33:33:
f9:69:5e:b9:00:0c:0a:bf:c7:6b:16:ae:70:82:0a:
d5:ea:1a:78:e8:e5:90:5b:4c:52:2c:96:0b:92:3d:
91:2f:1a:57:35:ba:d8:b1:32:34:a1:47:21:18:06:
27:f6:23:82:1a:20:c7:11:51:5c:89:20:31:b0:64:
80:f5:51:2d:22:f3:76:6d:b8:5f:dc:9e:16:0a:ec:
15:3e:94:f5:53:03:16:38:20:7f:f7:a9:de:94:ea:
2e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C5:B5:3A:DD:5C:6C:4E:77:30:D6:26:10:A3:77:F7:BE:CF:27:81
X509v3 Authority Key Identifier:
keyid:8E:C1:F7:D0:53:06:82:E1:B6:8E:3B:FE:5A:87:44:EE:51:AD:33:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:dc:fe:3c:26:44:21:d4:b4:35:ca:15:88:bf:f1:ca:a8:81:
9d:5c:2d:75:10:88:2b:5f:21:24:83:fd:78:68:cb:38:46:b3:
82:46:59:84:14:c1:8c:c7:86:b0:61:b3:c7:d1:d0:9a:b7:f0:
7b:51:57:50:f4:00:a6:fb:2e:d1:c0:a6:a6:3a:f4:a8:98:1f:
2e:5b:df:95:ea:90:5f:72:1d:42:bb:97:3c:8d:39:c5:50:11:
f1:88:c2:5a:62:a3:af:a3:0c:6e:47:37:05:8c:07:ea:ac:e3:
9b:25:ac:6d:24:5e:ac:6c:53:96:61:f2:9c:f5:b9:7b:75:e6:
97:d5:27:e8:5f:81:3f:fc:28:ef:a9:1b:2e:b4:da:bc:fc:8a:
50:a7:1a:d4:dc:1f:ae:43:18:66:8a:ff:37:04:97:28:7c:8c:
65:a6:60:3e:f1:f4:25:26:db:e7:96:cf:6d:24:75:94:f9:e9:
44:90:37:5a:8c:e0:3a:91:f6:cb:85:d4:78:90:6d:6f:30:bf:
7d:ae:cf:4a:91:11:1f:a1:a9:2e:1e:87:08:7c:98:fe:17:1a:
52:86:99:a8:32:0a:da:f8:be:25:4b:33:c6:fe:e1:9a:ae:46:
12:ad:ab:3c:bc:8b:17:68:e8:8c:48:e9:c4:c8:51:03:e2:d2:
af:74:7d:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IU4HrqcmCCxUhLAI/PnSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYzFmN2QwNTMwNjgyZTFiNjhlM2JmZTVhODc0NGVlNTFh
ZDMzNWQwHhcNMjUwNjI4MjAwMTE5WhcNMjUwNjI5MjAwMTE5WjAzMTEwLwYDVQQD
EyhkYWM1YjUzYWRkNWM2YzRlNzczMGQ2MjYxMGEzNzdmN2JlY2YyNzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDYhZj64lf+gAv3rHplaJUFuO705
alcsJaPFK4ZBt2Lwj+BwoS4aHkqWDKK2jddxV8lwD4f7Xb/G639A3GBOfdXY2iSG
8RcVipuCHr9YXmRsLHS1aVi2fEdqKDYDOjbteyofGM7flXPHeZ4bbHXMFJBd8RsE
xzw2v86k9K18tkDwRrc0XrcHGZvQq/SbfEtYVfM355yx5F7otVM2DnceY9rlMzP5
aV65AAwKv8drFq5wggrV6hp46OWQW0xSLJYLkj2RLxpXNbrYsTI0oUchGAYn9iOC
GiDHEVFciSAxsGSA9VEtIvN2bbhf3J4WCuwVPpT1UwMWOCB/96nelOounwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNrFtTrdXGxOdzDWJhCjd/e+zyeBMB8GA1UdIwQY
MBaAFI7B99BTBoLhto47/lqHRO5RrTNdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanNIMzBGTUdndUcyamp2LVdvZEU3bEd0TTEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS85MThhMzMtNjc2Ni00Nzk1LTg1NzMt
YWVlNjk4YWY2OGI3LzEvanNIMzBGTUdndUcyamp2LVdvZEU3bEd0TTEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS85MThhMzMtNjc2Ni00Nzk1LTg1NzMtYWVlNjk4YWY2OGI3
LzEvanNIMzBGTUdndUcyamp2LVdvZEU3bEd0TTEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyNz+PCZE
IdS0NcoViL/xyqiBnVwtdRCIK18hJIP9eGjLOEazgkZZhBTBjMeGsGGzx9HQmrfw
e1FXUPQApvsu0cCmpjr0qJgfLlvfleqQX3IdQruXPI05xVAR8YjCWmKjr6MMbkc3
BYwH6qzjmyWsbSRerGxTlmHynPW5e3Xml9Un6F+BP/wo76kbLrTavPyKUKca1Nwf
rkMYZor/NwSXKHyMZaZgPvH0JSbb55bPbSR1lPnpRJA3WozgOpH2y4XUeJBtbzC/
fa7PSpERH6GpLh6HCHyY/hcaUoaZqDIK2vi+JUszxv7hmq5GEq2rPLyLF2jojEjp
xMhRA+LSr3R9cg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:47 2025 by rpki-client