Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft
File: JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft (raw, json)
Hash identifier: ifMSplpEZCSRYbAF8ITDX3xmER+lR9aWC2lUl0uVTpA=
Subject key identifier: 02:5E:B0:2D:15:FF:B1:0E:7B:F2:69:1A:D1:44:5D:EB:B9:F5:64:13
Authority key identifier: 25:57:FA:95:6F:0F:53:98:0D:79:C3:2C:E1:E6:E9:3E:FD:48:8F:D7
Certificate issuer: /CN=2557fa956f0f53980d79c32ce1e6e93efd488fd7
Certificate serial: 0198D5F1BFCBF9A746B37F15F3AD3C48123C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVf6lW8PU5gNecMs4ebpPv1Ij9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft
Manifest number: 117D
Signing time: Sat 23 Aug 2025 08:00:46 +0000
Manifest this update: Sat 23 Aug 2025 08:00:46 +0000
Manifest next update: Sun 24 Aug 2025 08:00:46 +0000
Files and hashes: 1: BQcLEt_fhF3T8cK9G4llL9qzCF4.roa (hash: HsXDiNZ/6cIaXPnh2ptBxpxCA2P5yT/9b+aknpD6TWU=)
2: JVf6lW8PU5gNecMs4ebpPv1Ij9c.crl (hash: rjXPrUT4TR/jXUijUrRVSTQ0UO9Py4xdSAarCx7hnIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/JVf6lW8PU5gNecMs4ebpPv1Ij9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:bf:cb:f9:a7:46:b3:7f:15:f3:ad:3c:48:12:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2557fa956f0f53980d79c32ce1e6e93efd488fd7
Validity
Not Before: Aug 23 08:00:46 2025 GMT
Not After : Aug 24 08:00:46 2025 GMT
Subject: CN=025eb02d15ffb10e7bf2691ad1445debb9f56413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d9:f7:4a:ed:8a:a4:67:38:b7:04:ef:c0:56:
85:cf:d9:2e:c7:6f:f0:d6:3f:cc:6d:40:f1:c2:36:
20:1f:ef:71:55:3f:5b:ed:11:f8:c8:b4:1b:44:eb:
36:0e:a4:7b:ed:ca:7c:df:53:97:ed:02:14:fd:b5:
2d:b7:3b:0a:a2:41:e0:ad:9d:90:65:88:7d:94:bb:
38:f1:54:3a:d3:38:1f:07:cb:4e:42:e8:bb:f9:06:
94:9e:b2:57:4b:bc:08:21:b4:25:a4:bb:58:05:19:
1c:99:95:15:57:5b:0a:bb:d7:37:dd:a2:75:f6:01:
53:51:d9:f0:f4:2f:a2:29:95:d2:b6:c6:5a:cc:1d:
c1:79:f7:aa:fc:f0:bc:3f:61:0a:7b:4e:25:ae:43:
fc:07:83:40:bf:ad:89:42:9d:62:bb:e4:2d:20:e1:
cf:7b:86:b4:9d:d3:93:90:29:a0:00:0c:10:32:9e:
03:28:bc:ca:e5:10:ff:1f:37:e2:a9:97:3d:03:de:
29:a2:dd:c9:86:e6:c2:6f:d6:ac:7d:94:57:3c:ab:
89:04:d9:83:f4:1d:3d:ec:0e:d8:8d:a7:d2:98:dc:
66:cd:1b:a0:8b:6a:cf:08:67:b1:94:d3:ed:7a:0b:
f4:8b:af:b1:98:76:80:a3:f9:0d:fc:28:e5:2d:71:
ac:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5E:B0:2D:15:FF:B1:0E:7B:F2:69:1A:D1:44:5D:EB:B9:F5:64:13
X509v3 Authority Key Identifier:
keyid:25:57:FA:95:6F:0F:53:98:0D:79:C3:2C:E1:E6:E9:3E:FD:48:8F:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVf6lW8PU5gNecMs4ebpPv1Ij9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:5a:a4:47:19:bb:e2:55:38:eb:ce:f5:60:69:0c:07:29:32:
1f:7f:b8:1d:ac:53:2f:fc:29:40:ab:02:94:22:21:de:42:27:
08:09:b7:e8:d1:27:3b:0c:e6:84:b6:dd:93:9b:dd:32:a6:e6:
3a:2a:21:6b:29:59:e8:da:8a:6d:0e:a0:26:da:de:e3:51:a9:
69:6e:c9:9c:66:fd:91:b2:f0:5f:0d:52:63:71:d5:dc:9e:8e:
25:c1:c4:ff:d0:12:fb:28:5e:c5:94:80:e1:1b:4b:7b:b3:75:
47:dd:24:72:5f:a4:26:25:ac:6e:4f:70:e0:38:67:72:3a:9f:
44:b1:c3:2a:c8:f9:73:79:6c:7a:d6:c7:2d:0c:12:6e:85:07:
ed:63:ee:fd:b4:3f:a9:24:e1:56:40:99:51:0c:14:36:c6:ea:
18:85:c2:40:2a:de:c2:c8:4d:0d:22:cf:55:fa:88:13:8d:a4:
95:a5:df:12:2e:3e:a0:19:f3:a4:50:7d:52:c3:6b:1a:53:66:
5e:17:aa:10:eb:db:29:df:60:cc:9e:27:24:9f:1c:a1:9b:ff:
46:ef:50:c2:6a:ce:be:e7:4f:05:13:e5:e4:b1:f2:f4:71:11:
d8:68:28:eb:31:f9:ba:e2:e0:c2:ef:8c:67:63:c4:c3:b6:a1:
45:4a:d3:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8b/L+adGs38V8608SBI8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NTdmYTk1NmYwZjUzOTgwZDc5YzMyY2UxZTZlOTNlZmQ0
ODhmZDcwHhcNMjUwODIzMDgwMDQ2WhcNMjUwODI0MDgwMDQ2WjAzMTEwLwYDVQQD
EygwMjVlYjAyZDE1ZmZiMTBlN2JmMjY5MWFkMTQ0NWRlYmI5ZjU2NDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptn3Su2KpGc4twTvwFaFz9kux2/w
1j/MbUDxwjYgH+9xVT9b7RH4yLQbROs2DqR77cp831OX7QIU/bUttzsKokHgrZ2Q
ZYh9lLs48VQ60zgfB8tOQui7+QaUnrJXS7wIIbQlpLtYBRkcmZUVV1sKu9c33aJ1
9gFTUdnw9C+iKZXStsZazB3Befeq/PC8P2EKe04lrkP8B4NAv62JQp1iu+QtIOHP
e4a0ndOTkCmgAAwQMp4DKLzK5RD/HzfiqZc9A94pot3JhubCb9asfZRXPKuJBNmD
9B097A7YjafSmNxmzRugi2rPCGexlNPtegv0i6+xmHaAo/kN/CjlLXGsRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJesC0V/7EOe/JpGtFEXeu59WQTMB8GA1UdIwQY
MBaAFCVX+pVvD1OYDXnDLOHm6T79SI/XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlZmNmxXOFBVNWdOZWNNczRlYnBQdjFJajljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy84MjBmZWEtM2M4ZC00OTc3LTgwMDAt
NmQ3MTYzNDQyMjQ0LzEvSlZmNmxXOFBVNWdOZWNNczRlYnBQdjFJajljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy84MjBmZWEtM2M4ZC00OTc3LTgwMDAtNmQ3MTYzNDQyMjQ0
LzEvSlZmNmxXOFBVNWdOZWNNczRlYnBQdjFJajljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACFqkRxm7
4lU46871YGkMBykyH3+4HaxTL/wpQKsClCIh3kInCAm36NEnOwzmhLbdk5vdMqbm
OiohaylZ6NqKbQ6gJtre41GpaW7JnGb9kbLwXw1SY3HV3J6OJcHE/9AS+yhexZSA
4RtLe7N1R90kcl+kJiWsbk9w4DhncjqfRLHDKsj5c3lsetbHLQwSboUH7WPu/bQ/
qSThVkCZUQwUNsbqGIXCQCrewshNDSLPVfqIE42klaXfEi4+oBnzpFB9UsNrGlNm
XheqEOvbKd9gzJ4nJJ8coZv/Ru9QwmrOvudPBRPl5LHy9HER2Ggo6zH5uuLgwu+M
Z2PEw7ahRUrTCg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:53:09 2025 by rpki-client