Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft
File: jcDIIYG5DfbElpFMMZ0x_4sqQII.mft (raw, json)
Hash identifier: 6o5f/owhAiEVfV/6BqRKajO0GLsaMVt21++ti9s2cOI=
Subject key identifier: 6D:B6:88:BD:7D:FD:31:C0:84:CE:2B:8D:BB:1B:5B:84:79:47:BF:9C
Authority key identifier: 8D:C0:C8:21:81:B9:0D:F6:C4:96:91:4C:31:9D:31:FF:8B:2A:40:82
Certificate issuer: /CN=8dc0c82181b90df6c496914c319d31ff8b2a4082
Certificate serial: 0198D6615CEC982CDEE00F6CFFBECD17099C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcDIIYG5DfbElpFMMZ0x_4sqQII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft
Manifest number: 0D1C
Signing time: Sat 23 Aug 2025 10:02:41 +0000
Manifest this update: Sat 23 Aug 2025 10:02:41 +0000
Manifest next update: Sun 24 Aug 2025 10:02:41 +0000
Files and hashes: 1: 2Fh6mDHQ6-BYGlBx3MhV5PW4a_0.roa (hash: grPXzh7UKrKKCIxzSzsbZfXISu0fqMnVM0HgZcxoLTc=)
2: jcDIIYG5DfbElpFMMZ0x_4sqQII.crl (hash: JdjTFFM5uJ5l4RAVKdGvD/5+a9dGZGuxZWba3XarTdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcDIIYG5DfbElpFMMZ0x_4sqQII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:5c:ec:98:2c:de:e0:0f:6c:ff:be:cd:17:09:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc0c82181b90df6c496914c319d31ff8b2a4082
Validity
Not Before: Aug 23 10:02:41 2025 GMT
Not After : Aug 24 10:02:41 2025 GMT
Subject: CN=6db688bd7dfd31c084ce2b8dbb1b5b847947bf9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fa:3d:6e:f1:82:b6:a1:08:c5:87:4d:3f:1c:
63:f6:5b:8d:7d:a9:7c:bc:40:6b:84:bf:98:5c:fa:
5a:50:6c:a0:94:a9:0a:aa:bb:f5:75:a1:a9:d8:d8:
21:3a:bc:85:b9:6a:41:9a:93:e8:95:83:a6:7e:81:
be:13:8e:a0:d1:4e:e1:23:9e:c3:d4:e6:1f:0c:ea:
fc:d2:a9:fe:fc:a9:b9:29:c2:72:c7:7f:a1:03:56:
67:34:8c:34:f2:dd:c1:4f:32:27:da:f5:29:9a:a3:
37:0a:3f:47:7c:5c:3e:2c:f2:e9:6a:28:71:50:bd:
07:ac:7a:c9:1a:55:88:dc:ac:7e:27:d0:3f:a0:e5:
e7:6e:c0:b3:12:71:fb:18:e4:7b:42:89:37:60:40:
9a:2d:25:eb:a9:83:36:e6:7e:d0:93:eb:57:39:d8:
23:5e:46:dd:20:d9:91:e4:39:f7:9f:53:28:b3:9c:
f1:5d:dc:21:5d:33:ec:cb:3c:ad:32:74:a0:e1:29:
c2:df:1d:66:fb:a3:80:ae:52:9e:63:5f:9d:ff:e7:
56:39:32:72:55:44:1b:2f:22:c5:0b:76:92:27:0c:
27:e7:63:7f:94:65:51:0d:41:57:67:0f:0f:a8:15:
e9:f2:c5:bd:ba:8e:7a:74:e3:59:7e:e4:12:a9:3c:
fa:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B6:88:BD:7D:FD:31:C0:84:CE:2B:8D:BB:1B:5B:84:79:47:BF:9C
X509v3 Authority Key Identifier:
keyid:8D:C0:C8:21:81:B9:0D:F6:C4:96:91:4C:31:9D:31:FF:8B:2A:40:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcDIIYG5DfbElpFMMZ0x_4sqQII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e4:d4:14:db:cc:bf:95:01:e2:56:90:27:96:c5:dd:a3:ad:
ec:f5:a4:4d:5c:0b:18:11:21:08:46:58:66:d7:2c:08:1a:f2:
93:d2:5c:56:ad:07:f1:d3:c8:64:ac:1b:35:24:10:0f:4c:e7:
7f:76:cc:e4:68:c8:71:37:d3:cb:52:a7:e2:05:10:92:f2:6b:
c5:41:95:3d:d7:f2:ac:a7:01:43:3c:64:cd:27:0a:b2:73:26:
2d:4e:09:f1:c0:ff:e3:ed:e3:95:b2:18:64:2c:be:65:25:6d:
4c:ae:ff:b0:62:1b:f4:a4:f3:89:75:64:0c:ee:fe:8b:14:37:
57:fd:ef:9c:91:ad:e6:27:68:26:df:7a:b9:ba:bf:26:d4:ab:
a7:38:b1:ba:96:43:82:b9:eb:dc:36:85:25:9f:6e:33:bf:08:
f1:f4:15:68:80:96:bc:94:30:c7:ae:db:54:14:26:fb:3a:cd:
a3:22:e6:cd:42:92:3a:8b:e5:2b:aa:93:98:84:e5:8e:19:9e:
7b:56:5a:a0:9e:46:dd:4d:23:72:4e:ab:7b:e7:8e:9c:f4:7a:
a4:9f:ed:19:0b:95:cf:6e:81:e4:af:fd:da:83:35:a6:11:16:
86:0a:66:24:7f:54:bc:26:ab:8c:28:8f:27:9e:bf:24:b1:ae:
fb:87:64:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYVzsmCze4A9s/77NFwmcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYzBjODIxODFiOTBkZjZjNDk2OTE0YzMxOWQzMWZmOGIy
YTQwODIwHhcNMjUwODIzMTAwMjQxWhcNMjUwODI0MTAwMjQxWjAzMTEwLwYDVQQD
Eyg2ZGI2ODhiZDdkZmQzMWMwODRjZTJiOGRiYjFiNWI4NDc5NDdiZjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/o9bvGCtqEIxYdNPxxj9luNfal8
vEBrhL+YXPpaUGyglKkKqrv1daGp2NghOryFuWpBmpPolYOmfoG+E46g0U7hI57D
1OYfDOr80qn+/Km5KcJyx3+hA1ZnNIw08t3BTzIn2vUpmqM3Cj9HfFw+LPLpaihx
UL0HrHrJGlWI3Kx+J9A/oOXnbsCzEnH7GOR7Qok3YECaLSXrqYM25n7Qk+tXOdgj
XkbdINmR5Dn3n1Mos5zxXdwhXTPsyzytMnSg4SnC3x1m+6OArlKeY1+d/+dWOTJy
VUQbLyLFC3aSJwwn52N/lGVRDUFXZw8PqBXp8sW9uo56dONZfuQSqTz6BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG22iL19/THAhM4rjbsbW4R5R7+cMB8GA1UdIwQY
MBaAFI3AyCGBuQ32xJaRTDGdMf+LKkCCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamNESUlZRzVEZmJFbHBGTU1aMHhfNHNxUUlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yYTBkNzgtNzY1Ni00NTE2LTk4NzUt
ZGMwMWFjMjI4NDUxLzEvamNESUlZRzVEZmJFbHBGTU1aMHhfNHNxUUlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8yYTBkNzgtNzY1Ni00NTE2LTk4NzUtZGMwMWFjMjI4NDUx
LzEvamNESUlZRzVEZmJFbHBGTU1aMHhfNHNxUUlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAceTUFNvM
v5UB4laQJ5bF3aOt7PWkTVwLGBEhCEZYZtcsCBryk9JcVq0H8dPIZKwbNSQQD0zn
f3bM5GjIcTfTy1Kn4gUQkvJrxUGVPdfyrKcBQzxkzScKsnMmLU4J8cD/4+3jlbIY
ZCy+ZSVtTK7/sGIb9KTziXVkDO7+ixQ3V/3vnJGt5idoJt96ubq/JtSrpzixupZD
grnr3DaFJZ9uM78I8fQVaICWvJQwx67bVBQm+zrNoyLmzUKSOovlK6qTmITljhme
e1ZaoJ5G3U0jck6re+eOnPR6pJ/tGQuVz26B5K/92oM1phEWhgpmJH9UvCarjCiP
J56/JLGu+4dkgA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:25:06 2025 by rpki-client