Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
File: jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft (raw, json)
Hash identifier: wjVYcI5e/dKBvwiPymbtCZi/3d1Qot5I5KD5C1TdSGo=
Subject key identifier: B6:35:C8:09:60:08:68:14:91:53:9E:B5:99:33:EE:3E:41:81:58:12
Authority key identifier: 8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
Certificate issuer: /CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Certificate serial: 0197B70F46E5F405167ED9EE839AAF5A1370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
Manifest number: 14B6
Signing time: Sat 28 Jun 2025 15:02:01 +0000
Manifest this update: Sat 28 Jun 2025 15:02:01 +0000
Manifest next update: Sun 29 Jun 2025 15:02:01 +0000
Files and hashes: 1: LEgJcT1HJwyV1gNb8G6Nv4QQcdA.roa (hash: MrTCL4S0d15bcXIlwlUs8e8j+hHw3EZvbQGkeB92Lzs=)
2: eiuuVdDHw7tCNh7-88E3raSuIfc.roa (hash: 3m5MOXmDNJezPlvUGc+JuyJPY6iXYjUfrVVj0/0iqB0=)
3: jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl (hash: UmFvyuQNpsP9HvGZlcnGXn080Ol0to6goV3hIP6GOlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:46:e5:f4:05:16:7e:d9:ee:83:9a:af:5a:13:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Validity
Not Before: Jun 28 15:02:01 2025 GMT
Not After : Jun 29 15:02:01 2025 GMT
Subject: CN=b635c8096008681491539eb59933ee3e41815812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8e:23:b9:ee:ea:d4:20:40:b3:4c:c7:d5:80:
d3:8a:c8:51:71:c9:4a:cd:f8:4e:32:de:70:4e:dd:
47:0a:7d:0c:30:d3:5a:fa:11:fa:a4:fd:fe:57:c3:
13:40:fd:6a:fb:a0:fc:a7:24:08:cc:a7:2e:55:e8:
d6:e5:84:c0:b7:f7:cd:09:c2:af:85:7a:05:62:9e:
33:6b:34:26:4c:1c:f3:06:90:80:21:05:4f:c2:3a:
74:d6:4b:f3:d5:f0:d9:67:78:c1:8c:ae:d4:2f:c9:
ec:20:05:de:40:10:77:5d:f9:bf:bc:a4:bf:4e:90:
a0:14:04:5c:12:74:76:e8:67:f4:0e:7d:95:7c:2a:
b7:78:66:78:0d:19:e4:31:96:52:95:91:0b:10:5e:
03:0d:78:96:61:26:f2:6f:00:44:e9:53:3e:28:c1:
62:f7:ac:46:22:ad:22:c8:7a:b0:a1:2b:d9:80:87:
b7:8b:a7:09:c9:1c:02:b7:4e:ac:01:ea:6e:bd:0a:
9e:a0:62:df:6a:41:f5:84:cc:d7:1d:a5:c9:ba:2d:
c2:92:0d:5b:c9:d7:71:0a:45:c4:89:bb:9d:4e:ec:
b7:41:76:9f:6a:18:10:ca:c0:ae:2b:7f:81:86:7d:
77:a2:54:ec:98:4d:01:48:0c:71:34:92:af:c8:e7:
23:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:35:C8:09:60:08:68:14:91:53:9E:B5:99:33:EE:3E:41:81:58:12
X509v3 Authority Key Identifier:
keyid:8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:7f:4d:2e:d5:2f:0b:ec:7a:b1:1a:81:9b:c9:e1:b7:8a:af:
ac:6c:f0:9f:41:ef:03:60:58:67:1d:ac:c7:b6:32:91:50:59:
ca:91:5a:b4:f2:91:0d:2a:bf:49:df:49:c7:d9:a2:68:2c:05:
6e:87:ac:19:c4:94:de:85:23:50:25:78:e2:23:7a:55:e2:11:
5a:b1:04:b7:1f:8b:83:89:42:86:04:2f:cd:c8:bf:51:de:da:
ea:c7:36:7d:14:23:6f:37:8b:d6:e8:d0:50:c2:65:05:57:db:
64:44:dc:87:8d:b5:16:5c:2d:fb:95:f3:11:98:ae:eb:d1:bd:
87:33:0c:39:e8:0f:00:15:f1:2a:a6:b0:bd:de:91:49:bb:71:
09:d3:ed:76:4a:09:ff:63:f1:62:5b:21:82:3d:df:78:06:bb:
b2:fe:be:91:db:90:4f:19:06:6b:59:67:b5:9c:c5:9b:f8:5c:
3a:47:6a:b8:b0:e9:97:73:2d:50:ef:85:eb:8c:e3:f9:69:e4:
9b:67:da:56:d8:07:b2:fa:8a:c5:88:0c:91:15:36:7e:4d:0b:
51:f7:51:53:40:95:61:ea:00:8d:db:a1:7b:92:73:21:a5:1f:
97:31:fa:32:41:5b:3f:a6:6d:03:88:06:9b:30:28:5e:38:c8:
4e:a2:72:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3D0bl9AUWftnug5qvWhNwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYTQzYmIzOGQ2ZTBiZThjMjg5MDk0YmE0YWRmMzg3ZDBk
ZTQwYTAwHhcNMjUwNjI4MTUwMjAxWhcNMjUwNjI5MTUwMjAxWjAzMTEwLwYDVQQD
EyhiNjM1YzgwOTYwMDg2ODE0OTE1MzllYjU5OTMzZWUzZTQxODE1ODEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn44jue7q1CBAs0zH1YDTishRcclK
zfhOMt5wTt1HCn0MMNNa+hH6pP3+V8MTQP1q+6D8pyQIzKcuVejW5YTAt/fNCcKv
hXoFYp4zazQmTBzzBpCAIQVPwjp01kvz1fDZZ3jBjK7UL8nsIAXeQBB3Xfm/vKS/
TpCgFARcEnR26Gf0Dn2VfCq3eGZ4DRnkMZZSlZELEF4DDXiWYSbybwBE6VM+KMFi
96xGIq0iyHqwoSvZgIe3i6cJyRwCt06sAepuvQqeoGLfakH1hMzXHaXJui3Ckg1b
yddxCkXEibudTuy3QXafahgQysCuK3+Bhn13olTsmE0BSAxxNJKvyOcjBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLY1yAlgCGgUkVOetZkz7j5BgVgSMB8GA1UdIwQY
MBaAFI6kO7ONbgvowokJS6St84fQ3kCgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanFRN3M0MXVDLWpDaVFsTHBLM3poOURlUUtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82Zjg1YjEtNmEzYy00MDhkLWEzOWIt
MjRmN2Y5NDM2Y2VjLzEvanFRN3M0MXVDLWpDaVFsTHBLM3poOURlUUtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82Zjg1YjEtNmEzYy00MDhkLWEzOWItMjRmN2Y5NDM2Y2Vj
LzEvanFRN3M0MXVDLWpDaVFsTHBLM3poOURlUUtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj39NLtUv
C+x6sRqBm8nht4qvrGzwn0HvA2BYZx2sx7YykVBZypFatPKRDSq/Sd9Jx9miaCwF
boesGcSU3oUjUCV44iN6VeIRWrEEtx+Lg4lChgQvzci/Ud7a6sc2fRQjbzeL1ujQ
UMJlBVfbZETch421Flwt+5XzEZiu69G9hzMMOegPABXxKqawvd6RSbtxCdPtdkoJ
/2PxYlshgj3feAa7sv6+kduQTxkGa1lntZzFm/hcOkdquLDpl3MtUO+F64zj+Wnk
m2faVtgHsvqKxYgMkRU2fk0LUfdRU0CVYeoAjduhe5JzIaUflzH6MkFbP6ZtA4gG
mzAoXjjITqJyUQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:18:37 2025 by rpki-client