Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft
File: jJ3M-eLzfrEHSWp6rxOJTsR243U.mft (raw, json)
Hash identifier: 2zgm/TIqSqghYpTmYIi/5Oq3ZqlEVWfjOhfnPtcqrw0=
Subject key identifier: 41:DC:17:32:AF:71:48:7B:42:59:A4:0F:FA:50:7B:F1:4A:FC:24:A4
Authority key identifier: 8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75
Certificate issuer: /CN=8c9dccf9e2f37eb107496a7aaf13894ec476e375
Certificate serial: 0198D706198D925E617AFB9EE1BD217FF585
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft
Manifest number: 0C73
Signing time: Sat 23 Aug 2025 13:02:37 +0000
Manifest this update: Sat 23 Aug 2025 13:02:37 +0000
Manifest next update: Sun 24 Aug 2025 13:02:37 +0000
Files and hashes: 1: 52ZQ5PtYcXOVHNH-cKfCvXr-NLk.roa (hash: IeCBQ+eKPNR/krpQbJSGOw+keX8AySOWQVyhW1zLVTg=)
2: jJ3M-eLzfrEHSWp6rxOJTsR243U.crl (hash: WOAi0CYhNny166LhryxR45+bSBzL9jZoecUKOtrP46s=)
3: k6vAZPYoHdRCo63AYTmi48skRhw.roa (hash: SzdnDp8HU7dtL+1ssCq3abGfy6JSu5LenwIqWzaID2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft
rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:19:8d:92:5e:61:7a:fb:9e:e1:bd:21:7f:f5:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c9dccf9e2f37eb107496a7aaf13894ec476e375
Validity
Not Before: Aug 23 13:02:37 2025 GMT
Not After : Aug 24 13:02:37 2025 GMT
Subject: CN=41dc1732af71487b4259a40ffa507bf14afc24a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:30:eb:d4:a1:36:b9:ab:c4:bf:6a:d6:2b:1f:
84:d3:da:f8:0b:e2:ac:e3:d1:9e:ad:a3:03:f2:af:
c2:6b:11:f3:25:98:25:e0:c9:a8:2c:88:79:e5:a3:
0d:37:7e:9e:bb:8a:c1:72:35:44:8a:da:3d:f3:d6:
2e:89:f2:02:1b:22:d9:9c:f3:b4:0d:93:c1:0b:df:
69:85:79:2d:61:13:d9:52:45:3d:d9:a4:99:b9:04:
89:5c:b6:0b:36:9b:3b:f7:4a:0a:7c:d7:4d:89:75:
5f:53:cb:8e:3f:d3:49:56:17:16:a4:40:25:38:13:
5e:57:80:3e:f8:49:ce:fe:ad:b2:d6:63:cc:ca:1a:
e2:a6:6b:18:56:c2:a5:4f:7b:0a:ed:1a:2a:8f:6f:
da:46:69:96:49:62:b1:52:b7:d9:c3:d2:a6:dc:a0:
d3:67:ec:51:61:53:22:38:dc:b5:44:ea:80:1b:7c:
5b:a3:0b:6d:12:68:24:1f:89:e0:05:0e:95:30:d1:
c4:37:60:62:30:88:33:8e:c1:a2:6d:9d:30:42:79:
97:3d:1f:ca:6c:08:8e:85:dd:3d:30:c3:b8:ca:c7:
97:d5:ba:10:ec:0a:fe:bc:a1:d9:0d:55:8a:33:6b:
97:20:c6:14:04:c0:28:51:67:13:b9:6d:bf:3c:9c:
9a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DC:17:32:AF:71:48:7B:42:59:A4:0F:FA:50:7B:F1:4A:FC:24:A4
X509v3 Authority Key Identifier:
keyid:8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:5c:33:7f:24:3a:51:84:15:c3:0b:2a:8f:a4:16:93:a5:c6:
49:59:4c:64:77:4d:9a:b6:30:03:6f:24:0d:98:a0:18:29:ec:
16:97:31:ac:25:07:3d:40:ae:7c:67:ef:b0:d5:24:c4:a6:15:
9d:27:55:af:4d:05:53:e0:ac:12:54:2d:54:fa:38:0f:5a:8c:
8d:bc:b6:62:1f:e8:04:25:d4:47:e5:f0:d6:71:df:e2:54:5c:
b5:cc:d8:9a:f6:cb:ed:ba:06:43:38:a7:5a:99:11:fa:c0:b4:
a1:05:87:fc:5e:46:2c:62:77:49:36:93:d2:59:b6:e9:eb:9b:
e7:5a:1d:62:14:22:92:18:b7:6c:71:52:df:39:e7:01:cf:89:
1b:76:ae:7e:b2:0e:e4:86:a7:f9:b2:47:cd:5e:2f:03:8b:0d:
c3:21:98:f1:c2:8a:b1:2c:e2:e4:39:74:50:45:08:3c:34:2d:
4a:03:31:a8:df:72:f8:25:04:92:2e:2a:70:c7:79:67:0c:94:
03:f0:90:1b:57:7e:03:0d:66:18:f6:1b:6c:fd:c1:2c:b5:ca:
7d:3e:3e:da:0c:92:8c:fe:46:06:09:fa:10:0b:62:44:31:47:
d7:04:52:8c:27:62:8d:8a:e9:2c:2d:6a:3f:94:df:8d:bc:10:
0c:75:c4:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXBhmNkl5hevue4b0hf/WFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjOWRjY2Y5ZTJmMzdlYjEwNzQ5NmE3YWFmMTM4OTRlYzQ3
NmUzNzUwHhcNMjUwODIzMTMwMjM3WhcNMjUwODI0MTMwMjM3WjAzMTEwLwYDVQQD
Eyg0MWRjMTczMmFmNzE0ODdiNDI1OWE0MGZmYTUwN2JmMTRhZmMyNGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDDr1KE2uavEv2rWKx+E09r4C+Ks
49GeraMD8q/CaxHzJZgl4MmoLIh55aMNN36eu4rBcjVEito989YuifICGyLZnPO0
DZPBC99phXktYRPZUkU92aSZuQSJXLYLNps790oKfNdNiXVfU8uOP9NJVhcWpEAl
OBNeV4A++EnO/q2y1mPMyhripmsYVsKlT3sK7Roqj2/aRmmWSWKxUrfZw9Km3KDT
Z+xRYVMiONy1ROqAG3xbowttEmgkH4ngBQ6VMNHEN2BiMIgzjsGibZ0wQnmXPR/K
bAiOhd09MMO4yseX1boQ7Ar+vKHZDVWKM2uXIMYUBMAoUWcTuW2/PJyaOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHcFzKvcUh7QlmkD/pQe/FK/CSkMB8GA1UdIwQY
MBaAFIydzPni836xB0lqeq8TiU7EduN1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakozTS1lTHpmckVIU1dwNnJ4T0pUc1IyNDNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iZDU1ZWUtYzdhNi00MWI4LWJiMzEt
NmE4YzNiNjc2YjU3LzEvakozTS1lTHpmckVIU1dwNnJ4T0pUc1IyNDNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9iZDU1ZWUtYzdhNi00MWI4LWJiMzEtNmE4YzNiNjc2YjU3
LzEvakozTS1lTHpmckVIU1dwNnJ4T0pUc1IyNDNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvVwzfyQ6
UYQVwwsqj6QWk6XGSVlMZHdNmrYwA28kDZigGCnsFpcxrCUHPUCufGfvsNUkxKYV
nSdVr00FU+CsElQtVPo4D1qMjby2Yh/oBCXUR+Xw1nHf4lRctczYmvbL7boGQzin
WpkR+sC0oQWH/F5GLGJ3STaT0lm26eub51odYhQikhi3bHFS3znnAc+JG3aufrIO
5Ian+bJHzV4vA4sNwyGY8cKKsSzi5Dl0UEUIPDQtSgMxqN9y+CUEki4qcMd5ZwyU
A/CQG1d+Aw1mGPYbbP3BLLXKfT4+2gySjP5GBgn6EAtiRDFH1wRSjCdijYrpLC1q
P5TfjbwQDHXEuQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:46:42 2025 by rpki-client