Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
File: j3iWOzxPLdGHwgQ33x19nBaMq4E.mft (raw, json)
Hash identifier: DgZ/pPr0IFQa6ye/rmWwsimkhk4FiM0+DsJnCmXq6PU=
Subject key identifier: B5:E9:BF:81:9F:F3:16:F3:07:A6:FF:84:0B:99:7A:56:06:DA:FE:7F
Authority key identifier: 8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81
Certificate issuer: /CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
Certificate serial: 0197B8C5F7DBC5B9517CCCA0D2E639EE676F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
Manifest number: 15C9
Signing time: Sat 28 Jun 2025 23:01:11 +0000
Manifest this update: Sat 28 Jun 2025 23:01:11 +0000
Manifest next update: Sun 29 Jun 2025 23:01:11 +0000
Files and hashes: 1: 1gqy8jv-V_H7oweUasDl-ECUQ1I.roa (hash: w7kEB0Eg8qOWOT1pz0wZhRGBM4Y+whIgLQrg7qaGMxo=)
2: EHlGqb04iAIbXB5rqXIY0OnBfmY.roa (hash: 81m7h3zrGqKLifk2aQp93enuHjOZTif5bviOShjKwd0=)
3: JwRfQe1RRMFqmouHM8GDCbBv0qg.roa (hash: HeOaGIUlAHS+jA2tQ0PvTXar52BfbpysaRlaXP3EMw8=)
4: OrMUAZWeOYOcLPd3g5LwbkMUXk8.roa (hash: gKkiytrZ0hzX5R/Kg8dR7Gdhl0r2rLxr0t9FK+F8kjA=)
5: j3iWOzxPLdGHwgQ33x19nBaMq4E.crl (hash: 6rcLdWppJ7m3wvpZDG5BWStpScDK/l+JC30Y+EGqr7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:f7:db:c5:b9:51:7c:cc:a0:d2:e6:39:ee:67:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
Validity
Not Before: Jun 28 23:01:11 2025 GMT
Not After : Jun 29 23:01:11 2025 GMT
Subject: CN=b5e9bf819ff316f307a6ff840b997a5606dafe7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fd:80:73:70:47:ff:82:1e:cc:50:20:48:d8:
0b:d7:79:da:1d:11:b7:87:42:7d:84:9e:76:cb:2a:
66:94:fb:6f:19:f9:39:0e:07:df:23:02:ce:e0:8f:
96:8e:16:80:1e:d3:b5:02:bc:33:de:1f:0b:0a:51:
82:d7:00:cb:4b:be:75:28:d2:ca:84:6d:f2:91:94:
38:40:d6:80:9e:93:87:72:a3:bf:46:1d:15:dd:eb:
33:3e:63:2a:f4:cc:a2:63:28:cd:5b:a3:a6:b7:55:
8a:b2:41:ab:bb:c1:d3:0f:34:3d:fe:ed:98:dd:7c:
e7:a9:cb:77:fd:c9:38:e2:12:28:8b:b0:0e:18:29:
48:0d:6c:85:65:12:95:96:59:0a:e6:a5:82:1f:b0:
1b:f1:aa:48:80:17:9e:23:6e:1a:f2:7c:8f:20:c0:
8b:6b:27:6d:f1:56:3f:ce:ad:33:55:22:1f:08:d6:
de:2a:f4:bb:aa:0b:69:a4:35:8b:f8:4e:c1:da:03:
db:ac:70:22:64:7a:5b:70:7c:e4:21:62:03:3a:99:
aa:a9:b5:59:20:4e:85:2c:63:5b:0a:3a:6d:d9:b0:
51:59:71:fb:3e:6e:8a:05:b9:78:15:c2:b1:d4:fa:
89:de:6e:6c:aa:ae:c0:1d:74:22:33:76:85:3e:44:
18:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E9:BF:81:9F:F3:16:F3:07:A6:FF:84:0B:99:7A:56:06:DA:FE:7F
X509v3 Authority Key Identifier:
keyid:8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:35:7e:fc:4d:ff:03:49:ba:c2:0d:a9:a1:9f:8c:6a:75:9b:
bf:e7:dc:e7:24:66:6e:92:69:8c:36:86:7f:3e:ef:79:fc:42:
fc:e6:c2:70:bb:56:91:6d:77:2e:f7:b2:cf:66:6f:a9:c3:59:
6b:38:23:65:b1:a0:c9:57:cb:9c:cf:44:9d:21:d1:b6:4a:3f:
be:e1:07:50:42:7e:1d:83:aa:a6:e4:d1:52:47:d7:86:61:52:
67:a3:8e:cf:a6:ac:41:7d:ab:06:a4:68:a8:ed:c3:ff:2b:29:
6e:67:a9:1e:02:5e:45:5c:eb:36:ac:42:a1:0a:87:04:dd:10:
37:09:b0:0a:d8:62:05:c3:65:25:e6:7c:cf:a0:37:b7:fa:60:
4a:f9:ff:9c:9d:98:94:32:5e:c9:71:b9:62:d9:f7:f7:49:30:
cb:c9:3d:fc:e5:fa:e1:42:9f:2d:7a:d7:41:08:84:9f:ab:92:
24:79:6b:cc:be:07:72:e4:ee:17:ec:84:f6:f4:bd:f9:3f:1f:
55:9f:be:97:44:ce:d8:ee:05:42:d9:1c:cc:9f:a9:34:72:7b:
42:9c:7f:2a:e3:3e:a2:85:43:71:56:99:62:0f:05:b3:77:9d:
c8:52:b6:96:20:63:31:a7:ec:80:a0:95:48:b6:6a:56:76:49:
3a:4d:28:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4xffbxblRfMyg0uY57mdvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmNzg5NjNiM2M0ZjJkZDE4N2MyMDQzN2RmMWQ3ZDljMTY4
Y2FiODEwHhcNMjUwNjI4MjMwMTExWhcNMjUwNjI5MjMwMTExWjAzMTEwLwYDVQQD
EyhiNWU5YmY4MTlmZjMxNmYzMDdhNmZmODQwYjk5N2E1NjA2ZGFmZTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyf2Ac3BH/4IezFAgSNgL13naHRG3
h0J9hJ52yypmlPtvGfk5DgffIwLO4I+WjhaAHtO1Arwz3h8LClGC1wDLS751KNLK
hG3ykZQ4QNaAnpOHcqO/Rh0V3eszPmMq9MyiYyjNW6Omt1WKskGru8HTDzQ9/u2Y
3Xznqct3/ck44hIoi7AOGClIDWyFZRKVllkK5qWCH7Ab8apIgBeeI24a8nyPIMCL
aydt8VY/zq0zVSIfCNbeKvS7qgtppDWL+E7B2gPbrHAiZHpbcHzkIWIDOpmqqbVZ
IE6FLGNbCjpt2bBRWXH7Pm6KBbl4FcKx1PqJ3m5sqq7AHXQiM3aFPkQYnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXpv4Gf8xbzB6b/hAuZelYG2v5/MB8GA1UdIwQY
MBaAFI94ljs8Ty3Rh8IEN98dfZwWjKuBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajNpV096eFBMZEdId2dRMzN4MTluQmFNcTRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kYmZjYTEtMmI5NC00ZDBiLTlkZDgt
MWVmOWYyMzE5NTIyLzEvajNpV096eFBMZEdId2dRMzN4MTluQmFNcTRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9kYmZjYTEtMmI5NC00ZDBiLTlkZDgtMWVmOWYyMzE5NTIy
LzEvajNpV096eFBMZEdId2dRMzN4MTluQmFNcTRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArTV+/E3/
A0m6wg2poZ+ManWbv+fc5yRmbpJpjDaGfz7vefxC/ObCcLtWkW13Lveyz2ZvqcNZ
azgjZbGgyVfLnM9EnSHRtko/vuEHUEJ+HYOqpuTRUkfXhmFSZ6OOz6asQX2rBqRo
qO3D/yspbmepHgJeRVzrNqxCoQqHBN0QNwmwCthiBcNlJeZ8z6A3t/pgSvn/nJ2Y
lDJeyXG5Ytn390kwy8k9/OX64UKfLXrXQQiEn6uSJHlrzL4HcuTuF+yE9vS9+T8f
VZ++l0TO2O4FQtkczJ+pNHJ7Qpx/KuM+ooVDcVaZYg8Fs3edyFK2liBjMafsgKCV
SLZqVnZJOk0oUQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:28:18 2025 by rpki-client