Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
File: jU8_i6fc9YlPL2Edffq1PUpjwKk.mft (raw, json)
Hash identifier: MgHZ3xvq7/ejAFB1SKQE+Z5xYB/pbp7aC+6CsS5Rs1U=
Subject key identifier: 2F:11:7B:AD:F7:35:51:C4:5D:39:FF:21:45:A7:55:1D:C4:E3:70:7E
Authority key identifier: 8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9
Certificate issuer: /CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9
Certificate serial: 0197B7EA19A0FD99B034D944A0A403162693
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
Manifest number: 12F5
Signing time: Sat 28 Jun 2025 19:01:01 +0000
Manifest this update: Sat 28 Jun 2025 19:01:01 +0000
Manifest next update: Sun 29 Jun 2025 19:01:01 +0000
Files and hashes: 1: CGfUbuDeRkllwMZF7DTrKk3yLcE.roa (hash: l5jsvO9CwwUl92v3ODW6ImGh3DZFw7mx9nyyajWFi54=)
2: jU8_i6fc9YlPL2Edffq1PUpjwKk.crl (hash: hAvnSJQG/m6lByDFObfdqAWcc+3zushpS1yGmxaf0yY=)
3: mW-GeUTpPcmN505mq7SBylbmL1k.roa (hash: EwfFRwG/wTzHhkN3Xr0yb1fHBsnFoko8PwS4OTwxOW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:19:a0:fd:99:b0:34:d9:44:a0:a4:03:16:26:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9
Validity
Not Before: Jun 28 19:01:01 2025 GMT
Not After : Jun 29 19:01:01 2025 GMT
Subject: CN=2f117badf73551c45d39ff2145a7551dc4e3707e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:28:54:d4:51:c4:3e:a8:f2:fb:8f:47:83:08:
98:5a:7c:bf:76:dc:57:78:5e:5a:06:96:a4:b2:8c:
c1:7a:c2:cc:39:6e:ec:c8:64:b8:62:b4:24:3e:bd:
da:c6:8b:77:21:af:af:28:af:02:45:a4:ae:99:7d:
49:47:00:49:6b:6a:5b:43:86:4c:5c:50:c1:c6:0e:
6f:20:fe:4b:42:99:ad:a3:b1:54:5b:2b:4f:3e:43:
c4:74:bc:6e:cd:a7:a9:82:a2:a9:e5:a3:0a:0f:da:
05:18:29:7e:62:01:ab:e0:10:b6:18:c0:63:7b:a0:
af:b8:0e:22:e7:84:13:a3:aa:0c:a4:d4:c7:b3:13:
af:5d:97:97:a6:25:dd:92:c0:ea:03:a6:63:5a:9e:
c0:3f:14:8c:f8:b2:ca:8f:45:d7:50:53:b7:0d:c2:
87:7a:f2:54:6e:02:a1:d8:86:e3:22:02:96:75:f6:
de:35:a9:a6:95:3c:f7:85:b6:47:7e:d5:0f:09:bd:
11:f2:4e:7e:9a:f5:c5:18:b1:a5:3f:63:62:c3:a8:
a8:b1:8c:4c:4b:1a:26:0e:15:63:b4:c1:77:50:4a:
df:d3:db:6d:fa:71:7e:9c:30:a2:20:19:64:6e:c5:
c6:7f:57:e1:33:e2:3e:fa:a4:e1:43:28:ca:e9:a5:
71:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:11:7B:AD:F7:35:51:C4:5D:39:FF:21:45:A7:55:1D:C4:E3:70:7E
X509v3 Authority Key Identifier:
keyid:8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:84:9c:1e:dd:37:84:1e:0b:64:94:f5:61:c9:5d:27:36:23:
a5:f2:6d:2f:d3:b7:c6:f6:45:88:1f:6e:9e:7a:9a:d4:f6:43:
df:cf:de:a5:a8:03:cb:86:cc:93:cf:aa:a9:f2:35:da:2d:b2:
a8:b5:34:65:9f:a7:9a:1e:aa:d2:6a:1b:b9:ce:20:3d:28:c6:
fe:53:b0:64:af:6e:ac:a6:44:08:0e:70:3a:b3:7c:ae:b7:7c:
8d:90:d8:3f:a7:39:6b:ff:69:fa:8a:1e:f5:fe:26:f3:0a:d0:
12:18:d7:ac:6a:ec:58:65:b7:df:74:f6:04:e7:69:d1:85:a4:
f5:de:84:67:31:5c:03:0d:18:80:96:5f:65:f9:82:a0:06:21:
c5:25:ba:80:a4:e4:8c:e2:aa:8f:1e:a8:38:a0:ed:d8:b2:47:
ee:09:c7:91:f9:3c:ee:27:d3:1e:30:2b:bc:50:55:18:1c:47:
65:8e:7d:af:d5:a8:28:a3:cc:ef:14:e7:70:2d:93:45:9b:1a:
49:82:c5:cb:ce:10:4f:96:b4:ac:fe:0e:7e:26:c3:8f:bc:54:
6c:45:8a:59:25:0e:64:79:b3:67:09:cf:aa:7a:ea:33:50:c4:
01:c4:e8:4f:5e:a3:99:f7:bb:5e:4c:ec:a6:f0:fe:08:22:e8:
5e:4c:8a:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36hmg/ZmwNNlEoKQDFiaTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNGYzZjhiYTdkY2Y1ODk0ZjJmNjExZDdkZmFiNTNkNGE2
M2MwYTkwHhcNMjUwNjI4MTkwMTAxWhcNMjUwNjI5MTkwMTAxWjAzMTEwLwYDVQQD
EygyZjExN2JhZGY3MzU1MWM0NWQzOWZmMjE0NWE3NTUxZGM0ZTM3MDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqShU1FHEPqjy+49HgwiYWny/dtxX
eF5aBpaksozBesLMOW7syGS4YrQkPr3axot3Ia+vKK8CRaSumX1JRwBJa2pbQ4ZM
XFDBxg5vIP5LQpmto7FUWytPPkPEdLxuzaepgqKp5aMKD9oFGCl+YgGr4BC2GMBj
e6CvuA4i54QTo6oMpNTHsxOvXZeXpiXdksDqA6ZjWp7APxSM+LLKj0XXUFO3DcKH
evJUbgKh2IbjIgKWdfbeNammlTz3hbZHftUPCb0R8k5+mvXFGLGlP2Niw6iosYxM
SxomDhVjtMF3UErf09tt+nF+nDCiIBlkbsXGf1fhM+I++qThQyjK6aVxYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8Re633NVHEXTn/IUWnVR3E43B+MB8GA1UdIwQY
MBaAFI1PP4un3PWJTy9hHX36tT1KY8CpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalU4X2k2ZmM5WWxQTDJFZGZmcTFQVXBqd0trLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy81NTIyOWMtZTI4Mi00YTg1LWI3YTQt
OGFjYmZlYTJlY2ZhLzEvalU4X2k2ZmM5WWxQTDJFZGZmcTFQVXBqd0trLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy81NTIyOWMtZTI4Mi00YTg1LWI3YTQtOGFjYmZlYTJlY2Zh
LzEvalU4X2k2ZmM5WWxQTDJFZGZmcTFQVXBqd0trLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABIScHt03
hB4LZJT1YcldJzYjpfJtL9O3xvZFiB9unnqa1PZD38/epagDy4bMk8+qqfI12i2y
qLU0ZZ+nmh6q0mobuc4gPSjG/lOwZK9urKZECA5wOrN8rrd8jZDYP6c5a/9p+ooe
9f4m8wrQEhjXrGrsWGW333T2BOdp0YWk9d6EZzFcAw0YgJZfZfmCoAYhxSW6gKTk
jOKqjx6oOKDt2LJH7gnHkfk87ifTHjArvFBVGBxHZY59r9WoKKPM7xTncC2TRZsa
SYLFy84QT5a0rP4OfibDj7xUbEWKWSUOZHmzZwnPqnrqM1DEAcToT16jmfe7Xkzs
pvD+CCLoXkyKZA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:43:07 2025 by rpki-client