
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
File: jhF58KNc8HwWKWcmYoZsoAH3W9M.mft (raw, json)
Hash identifier: UnHteqePBTAP48Zjn4I+TQ9vjmK42484/69nYj2cjd4=
Subject key identifier: 88:66:77:DC:21:6D:D4:AD:A6:69:33:D6:50:21:EC:C7:BC:3F:93:8E
Authority key identifier: 8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3
Certificate issuer: /CN=8e1179f0a35cf07c1629672662866ca001f75bd3
Certificate serial: 0197B7B3082961C07369C985A07026F62BAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
Manifest number: 06CC
Signing time: Sat 28 Jun 2025 18:00:52 +0000
Manifest this update: Sat 28 Jun 2025 18:00:52 +0000
Manifest next update: Sun 29 Jun 2025 18:00:52 +0000
Files and hashes: 1: EmWFQT9EIlKM8K10K5cWz3oRk8c.roa (hash: mVuZgTV0YIvEIlEbhmtrwLHhCh+ETHzlqM+RSaYL3ls=)
2: jhF58KNc8HwWKWcmYoZsoAH3W9M.crl (hash: gzKfyox9oRuBfTI581mQDjPrm76pfRRkyknE9BDUrC4=)
3: vOuw-thqqsBDOxSUXEaJasEA7qM.roa (hash: 5FoG4V28mx1fz8vugdFd18SYEUDw3t0Z7vgkJvX8GgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:08:29:61:c0:73:69:c9:85:a0:70:26:f6:2b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1179f0a35cf07c1629672662866ca001f75bd3
Validity
Not Before: Jun 28 18:00:52 2025 GMT
Not After : Jun 29 18:00:52 2025 GMT
Subject: CN=886677dc216dd4ada66933d65021ecc7bc3f938e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:28:98:f6:74:d4:f4:54:c8:d6:fd:23:a6:2b:
91:3f:7b:b4:72:7a:10:96:9b:b3:ea:29:d2:98:f7:
b9:fe:ac:dc:86:43:e2:85:6f:30:34:aa:d1:7c:81:
f3:ea:7a:63:59:9b:94:98:3b:10:53:27:9c:c1:87:
90:b5:3a:a8:5c:66:bd:1f:cf:ad:95:bb:a5:81:ac:
b2:c5:a2:dd:20:3c:2e:e9:28:8c:e5:b2:8d:7c:85:
df:17:f2:e2:2d:3c:b9:d5:1e:18:26:fc:c6:f6:91:
a8:c9:d5:b4:9a:2c:3b:b6:6d:34:27:11:09:de:f6:
0a:4d:ea:c1:60:0d:2d:ce:76:ad:f5:d5:f4:b1:33:
e3:fe:61:ce:3d:33:92:c5:3a:1f:b3:9b:60:5c:17:
c0:d7:e6:17:b8:5c:05:1e:7b:8c:e9:48:24:60:59:
18:b6:9d:3d:e0:91:a7:9c:d0:da:32:f2:cf:20:a4:
8d:5a:88:bc:f1:27:b8:34:05:fc:80:92:1d:3f:e8:
3c:0e:30:2a:f4:43:a9:9a:fe:83:e5:bf:8e:f1:55:
95:19:f1:4a:53:69:04:f9:ac:ac:b9:b2:2d:04:3f:
42:7e:c9:a9:70:ea:11:e3:6a:05:2a:3f:9d:eb:7c:
37:c0:68:2d:31:d0:d2:87:fb:f9:71:00:3d:a8:ce:
dc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:66:77:DC:21:6D:D4:AD:A6:69:33:D6:50:21:EC:C7:BC:3F:93:8E
X509v3 Authority Key Identifier:
keyid:8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:ca:09:ed:66:bb:8a:00:8f:37:a8:05:22:3a:8d:32:4c:d5:
69:9b:5d:80:70:0a:81:7d:61:4d:2c:b6:7b:41:2a:76:9a:fa:
ec:dd:ff:f7:d5:80:db:7e:74:22:07:04:70:36:f6:63:98:bb:
ac:6a:0e:72:a9:7b:ae:58:3d:0b:ea:7c:1e:d9:89:5e:f4:d6:
6a:63:ec:4b:9d:6d:f2:5d:64:8d:8d:bb:96:1b:6f:0f:34:2f:
5c:8c:d7:c4:c7:a2:68:e7:54:d5:84:54:53:d5:0d:30:61:86:
15:b3:88:6d:7c:ae:d0:17:b9:23:80:3a:34:c4:28:18:c4:0e:
e0:71:85:23:83:48:e3:cf:8a:77:f4:de:6a:15:78:99:c3:26:
ae:a8:35:69:29:da:ca:d9:3e:95:8f:91:a1:d7:42:16:35:3b:
de:17:a2:10:f5:72:cb:0d:e2:21:b8:56:61:7c:c2:6c:17:b4:
b1:0e:ed:61:39:d2:96:fb:d8:45:44:0b:46:3a:59:a1:e0:31:
13:7b:16:83:e2:27:2e:ce:ae:4c:cf:58:67:c1:b4:56:36:21:
5e:a3:c0:4a:9f:f3:54:16:96:98:dd:fa:41:bf:1d:c1:a7:70:
48:c1:ee:40:01:df:f5:e1:5d:03:e1:db:a1:7d:b1:d7:ad:01:
60:a1:1c:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3swgpYcBzacmFoHAm9iurMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMTE3OWYwYTM1Y2YwN2MxNjI5NjcyNjYyODY2Y2EwMDFm
NzViZDMwHhcNMjUwNjI4MTgwMDUyWhcNMjUwNjI5MTgwMDUyWjAzMTEwLwYDVQQD
Eyg4ODY2NzdkYzIxNmRkNGFkYTY2OTMzZDY1MDIxZWNjN2JjM2Y5MzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+SiY9nTU9FTI1v0jpiuRP3u0cnoQ
lpuz6inSmPe5/qzchkPihW8wNKrRfIHz6npjWZuUmDsQUyecwYeQtTqoXGa9H8+t
lbulgayyxaLdIDwu6SiM5bKNfIXfF/LiLTy51R4YJvzG9pGoydW0miw7tm00JxEJ
3vYKTerBYA0tznat9dX0sTPj/mHOPTOSxTofs5tgXBfA1+YXuFwFHnuM6UgkYFkY
tp094JGnnNDaMvLPIKSNWoi88Se4NAX8gJIdP+g8DjAq9EOpmv6D5b+O8VWVGfFK
U2kE+aysubItBD9CfsmpcOoR42oFKj+d63w3wGgtMdDSh/v5cQA9qM7cUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhmd9whbdStpmkz1lAh7Me8P5OOMB8GA1UdIwQY
MBaAFI4RefCjXPB8FilnJmKGbKAB91vTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamhGNThLTmM4SHdXS1djbVlvWnNvQUgzVzlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9lZThmOTAtZWYyYi00M2MwLWIwYzAt
NGNiYzY3MjE5YjRhLzEvamhGNThLTmM4SHdXS1djbVlvWnNvQUgzVzlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9lZThmOTAtZWYyYi00M2MwLWIwYzAtNGNiYzY3MjE5YjRh
LzEvamhGNThLTmM4SHdXS1djbVlvWnNvQUgzVzlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtsoJ7Wa7
igCPN6gFIjqNMkzVaZtdgHAKgX1hTSy2e0Eqdpr67N3/99WA2350IgcEcDb2Y5i7
rGoOcql7rlg9C+p8HtmJXvTWamPsS51t8l1kjY27lhtvDzQvXIzXxMeiaOdU1YRU
U9UNMGGGFbOIbXyu0Be5I4A6NMQoGMQO4HGFI4NI48+Kd/TeahV4mcMmrqg1aSna
ytk+lY+RoddCFjU73heiEPVyyw3iIbhWYXzCbBe0sQ7tYTnSlvvYRUQLRjpZoeAx
E3sWg+InLs6uTM9YZ8G0VjYhXqPASp/zVBaWmN36Qb8dwadwSMHuQAHf9eFdA+Hb
oX2x160BYKEcdQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:27 2025 by rpki-client