Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
File: j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft (raw, json)
Hash identifier: zJKUx33UiLV7cnBQQflSLJYaaXNv8fXFaX+dA4LXK0Q=
Subject key identifier: 03:7F:3D:25:00:FE:44:6B:6D:53:43:A2:12:40:3F:8D:74:4F:4A:44
Authority key identifier: 8F:98:05:F6:48:01:DD:93:59:94:14:A6:25:09:B1:2A:54:02:F8:68
Certificate issuer: /CN=8f9805f64801dd93599414a62509b12a5402f868
Certificate serial: 0198D54DCB49CEBCF465342A12248D9F6935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
Manifest number: 0398
Signing time: Sat 23 Aug 2025 05:01:41 +0000
Manifest this update: Sat 23 Aug 2025 05:01:41 +0000
Manifest next update: Sun 24 Aug 2025 05:01:41 +0000
Files and hashes: 1: NCxg4iDnSPo7sNDZogY6EAQ1qnU.roa (hash: a1KXZCaEoxN1UkOcv0YA7zkHr19aSLSv8QON/lo/20Y=)
2: j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl (hash: pOhS83Q/LHlk7EszJEe4Va1KhGVvBB7aKUMZkJva4vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:cb:49:ce:bc:f4:65:34:2a:12:24:8d:9f:69:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9805f64801dd93599414a62509b12a5402f868
Validity
Not Before: Aug 23 05:01:41 2025 GMT
Not After : Aug 24 05:01:41 2025 GMT
Subject: CN=037f3d2500fe446b6d5343a212403f8d744f4a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7a:71:87:21:ea:eb:f9:86:b6:c5:3f:53:13:
fe:c2:df:1e:c5:f6:23:63:89:6f:2b:59:d3:7e:ed:
1e:58:30:c1:b6:02:ad:2d:9d:45:c4:2d:56:2d:2e:
00:57:10:36:bd:b0:0a:18:84:84:b6:dc:c1:ea:60:
a8:ac:04:9a:16:46:3d:21:d8:56:54:46:b7:40:4d:
26:7e:05:95:0e:88:d1:b7:1a:f1:83:b6:1e:65:66:
dd:e3:c4:6c:52:67:1f:4c:47:5c:40:9a:80:e4:43:
a2:8f:21:11:29:30:fa:e6:ae:da:bd:8b:78:cc:2c:
8d:5e:d8:53:94:d0:18:65:66:06:a7:08:31:52:ca:
6a:76:35:ea:5c:8c:bf:fa:b3:fa:89:27:4b:86:a8:
62:15:09:b0:e1:e0:43:2e:9e:89:e9:98:71:c3:9a:
98:c5:cc:e1:a4:59:ec:61:9b:c0:9e:04:19:2f:e0:
21:1f:bc:21:c0:ce:85:b3:d6:75:5e:74:91:41:f9:
f7:44:c6:84:b8:2b:85:18:82:aa:67:1a:af:45:2a:
93:b0:ee:73:00:5e:c2:82:a5:45:93:e0:e8:9d:81:
77:35:07:ed:38:72:5d:63:28:41:05:08:99:71:bc:
b2:f7:06:4b:b9:bd:46:3f:ec:68:cb:8d:7c:41:ef:
70:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7F:3D:25:00:FE:44:6B:6D:53:43:A2:12:40:3F:8D:74:4F:4A:44
X509v3 Authority Key Identifier:
keyid:8F:98:05:F6:48:01:DD:93:59:94:14:A6:25:09:B1:2A:54:02:F8:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:cc:1b:98:45:fb:43:91:65:46:ac:a5:79:ee:82:b3:53:21:
f5:0c:c3:d2:89:4c:0a:e4:63:a5:d5:2c:ed:49:bc:6c:51:cf:
19:69:77:dd:83:1f:0c:4a:38:81:17:c8:18:61:ad:dd:57:ca:
8c:13:83:f6:f3:2e:fb:4f:5e:10:9d:70:2a:b9:56:14:fa:28:
c7:8d:cd:b5:e5:ec:45:33:8e:7d:4f:f6:39:56:bd:a8:6d:ee:
97:2b:4b:56:81:f8:e3:f0:14:68:af:8e:fd:29:ee:3d:a5:2f:
65:2d:e5:63:ed:c7:91:71:34:00:1f:3f:be:76:a3:3b:db:96:
44:5e:12:d1:5f:15:40:b9:ce:d8:aa:27:09:27:39:31:ad:10:
7a:c9:37:60:2b:b3:83:e1:bc:76:cf:fe:bc:55:90:f5:a0:5b:
1d:d4:0a:3e:72:81:e5:6c:fd:a6:cc:86:8b:f7:c7:69:a7:79:
bf:24:f8:37:f2:a0:c9:95:df:e3:fd:1f:28:e6:f1:85:cc:6d:
14:1a:52:9b:7b:c2:2d:94:ce:b1:a0:96:0e:81:30:81:0d:97:
d0:79:a9:01:f1:ac:9a:36:64:b0:e5:f2:a7:f3:d0:e6:f9:37:
f4:63:9f:f4:56:af:94:ff:01:01:1c:fd:1e:b2:db:ea:fe:6a:
a3:45:91:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTctJzrz0ZTQqEiSNn2k1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmOTgwNWY2NDgwMWRkOTM1OTk0MTRhNjI1MDliMTJhNTQw
MmY4NjgwHhcNMjUwODIzMDUwMTQxWhcNMjUwODI0MDUwMTQxWjAzMTEwLwYDVQQD
EygwMzdmM2QyNTAwZmU0NDZiNmQ1MzQzYTIxMjQwM2Y4ZDc0NGY0YTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXpxhyHq6/mGtsU/UxP+wt8exfYj
Y4lvK1nTfu0eWDDBtgKtLZ1FxC1WLS4AVxA2vbAKGISEttzB6mCorASaFkY9IdhW
VEa3QE0mfgWVDojRtxrxg7YeZWbd48RsUmcfTEdcQJqA5EOijyERKTD65q7avYt4
zCyNXthTlNAYZWYGpwgxUspqdjXqXIy/+rP6iSdLhqhiFQmw4eBDLp6J6Zhxw5qY
xczhpFnsYZvAngQZL+AhH7whwM6Fs9Z1XnSRQfn3RMaEuCuFGIKqZxqvRSqTsO5z
AF7CgqVFk+DonYF3NQftOHJdYyhBBQiZcbyy9wZLub1GP+xoy418Qe9w5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAN/PSUA/kRrbVNDohJAP410T0pEMB8GA1UdIwQY
MBaAFI+YBfZIAd2TWZQUpiUJsSpUAvhoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajVnRjlrZ0IzWk5abEJTbUpRbXhLbFFDLUdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81M2Y5YmQtN2Y1NC00YmQyLWI1YTQt
ZTU4NGNkNWY4ZDExLzEvajVnRjlrZ0IzWk5abEJTbUpRbXhLbFFDLUdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS81M2Y5YmQtN2Y1NC00YmQyLWI1YTQtZTU4NGNkNWY4ZDEx
LzEvajVnRjlrZ0IzWk5abEJTbUpRbXhLbFFDLUdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQMwbmEX7
Q5FlRqylee6Cs1Mh9QzD0olMCuRjpdUs7Um8bFHPGWl33YMfDEo4gRfIGGGt3VfK
jBOD9vMu+09eEJ1wKrlWFPoox43NteXsRTOOfU/2OVa9qG3ulytLVoH44/AUaK+O
/SnuPaUvZS3lY+3HkXE0AB8/vnajO9uWRF4S0V8VQLnO2KonCSc5Ma0Qesk3YCuz
g+G8ds/+vFWQ9aBbHdQKPnKB5Wz9psyGi/fHaad5vyT4N/KgyZXf4/0fKObxhcxt
FBpSm3vCLZTOsaCWDoEwgQ2X0HmpAfGsmjZksOXyp/PQ5vk39GOf9FavlP8BARz9
HrLb6v5qo0WRSA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:19:20 2025 by rpki-client