Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
File: j2xCTP6ScDEA1QooMiU3RN11ZFI.mft (raw, json)
Hash identifier: FpRmT7ACAyL4rwhsUkSuadP5Y55bmTJNqj3asiNu1+0=
Subject key identifier: EB:C4:6F:A8:F8:9B:89:9A:AC:B8:F4:D7:B2:DE:E4:2F:1D:1D:76:75
Authority key identifier: 8F:6C:42:4C:FE:92:70:31:00:D5:0A:28:32:25:37:44:DD:75:64:52
Certificate issuer: /CN=8f6c424cfe92703100d50a2832253744dd756452
Certificate serial: 0198D47285A7D7AFBB01EBCEAE93F4F84767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
Manifest number: 0F0A
Signing time: Sat 23 Aug 2025 01:02:11 +0000
Manifest this update: Sat 23 Aug 2025 01:02:11 +0000
Manifest next update: Sun 24 Aug 2025 01:02:11 +0000
Files and hashes: 1: GQxkJdIQ2mMnuH7dZw47ZjRqiOY.roa (hash: j81MHjapkMDfvn23UflaNVCyJQMSfhc/nd+jMYFAbFo=)
2: j2xCTP6ScDEA1QooMiU3RN11ZFI.crl (hash: Rl1sqY9Fc0WbA/9M6bmkyHsGwrnU7tMl94e1QbQv+jM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:85:a7:d7:af:bb:01:eb:ce:ae:93:f4:f8:47:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f6c424cfe92703100d50a2832253744dd756452
Validity
Not Before: Aug 23 01:02:11 2025 GMT
Not After : Aug 24 01:02:11 2025 GMT
Subject: CN=ebc46fa8f89b899aacb8f4d7b2dee42f1d1d7675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:69:cd:d3:93:b4:20:f3:53:f8:76:9e:af:52:
ae:3c:9a:1b:6c:c5:47:87:03:50:7e:39:c6:6b:0a:
8e:72:44:d9:0f:d0:95:60:d2:89:32:62:29:55:d0:
e6:5f:6f:25:8a:16:2d:24:91:32:91:9e:98:0b:d3:
e9:20:c1:ce:e3:d0:52:0b:82:7f:f9:90:6c:d8:f1:
c7:12:7a:3f:3c:f1:47:d9:79:22:e9:ab:72:c4:26:
f4:56:0f:2d:18:d1:11:28:2d:91:cb:eb:bc:ec:d2:
fe:41:73:4d:3a:4d:a0:56:db:2c:d2:29:c1:f9:a0:
77:75:ac:66:93:b8:24:61:b4:2d:98:6b:72:bb:a3:
c2:c0:18:8b:d5:93:ba:f3:6c:ea:c0:13:9f:3f:f0:
72:0b:c4:d9:e1:ec:48:5d:d2:71:90:24:2d:67:d6:
ec:29:2a:26:e9:e1:97:9b:e9:99:1d:5f:4c:db:ca:
de:89:85:dc:d1:3b:ce:43:a7:3f:db:8c:66:b7:fd:
3b:30:80:7b:22:49:4d:d3:21:16:c2:62:88:59:ae:
51:0a:5d:50:29:4f:6b:d1:d4:01:dc:a3:2d:a0:a4:
b9:88:6c:3b:78:17:98:1a:dd:91:b1:cb:57:84:4f:
20:52:ab:7a:67:7c:d9:10:9c:19:16:bc:88:fd:22:
3b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C4:6F:A8:F8:9B:89:9A:AC:B8:F4:D7:B2:DE:E4:2F:1D:1D:76:75
X509v3 Authority Key Identifier:
keyid:8F:6C:42:4C:FE:92:70:31:00:D5:0A:28:32:25:37:44:DD:75:64:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:5a:a5:3d:12:6f:f1:08:29:1c:41:48:99:90:19:a4:d0:5f:
c1:94:15:cb:d8:28:a2:a4:b1:32:99:cd:6f:ed:7a:8f:58:fe:
1b:b8:b0:68:c7:20:02:67:8a:1d:c0:73:82:cc:dd:4b:56:2d:
11:23:cc:3b:0b:be:74:7f:fb:18:02:9f:59:30:72:41:7b:a7:
f0:a2:66:ad:41:ac:7c:65:ca:d7:4c:5c:5d:4f:58:e5:a6:e8:
fe:82:52:01:2d:69:76:53:c4:f5:9f:40:2b:d3:8b:cb:c7:bf:
43:79:bc:88:96:8a:85:a3:c9:3c:f3:e5:7b:17:ef:d5:cc:02:
36:70:b4:93:fd:99:c4:53:30:4f:49:f3:13:53:97:2e:09:58:
17:65:29:a2:c5:ae:c4:ad:9a:e0:0b:25:e3:c0:c5:c1:7c:70:
5a:d4:80:50:a4:1d:ea:96:d5:1b:2f:b7:96:6e:10:c6:a7:40:
97:86:08:56:58:65:d5:66:aa:63:4c:2d:98:2d:fd:ee:fe:16:
71:a7:1e:20:48:c9:a4:50:6e:2a:1a:d1:cc:9b:d7:7e:c3:0e:
70:6e:c7:e8:c0:bc:94:1a:9b:21:88:85:d8:91:cf:09:61:ec:
e0:06:73:38:63:7a:b4:1c:62:e9:2d:da:b9:73:85:1b:81:49:
d6:cb:f9:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcoWn16+7AevOrpP0+EdnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmNmM0MjRjZmU5MjcwMzEwMGQ1MGEyODMyMjUzNzQ0ZGQ3
NTY0NTIwHhcNMjUwODIzMDEwMjExWhcNMjUwODI0MDEwMjExWjAzMTEwLwYDVQQD
EyhlYmM0NmZhOGY4OWI4OTlhYWNiOGY0ZDdiMmRlZTQyZjFkMWQ3Njc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimnN05O0IPNT+Haer1KuPJobbMVH
hwNQfjnGawqOckTZD9CVYNKJMmIpVdDmX28lihYtJJEykZ6YC9PpIMHO49BSC4J/
+ZBs2PHHEno/PPFH2Xki6atyxCb0Vg8tGNERKC2Ry+u87NL+QXNNOk2gVtss0inB
+aB3daxmk7gkYbQtmGtyu6PCwBiL1ZO682zqwBOfP/ByC8TZ4exIXdJxkCQtZ9bs
KSom6eGXm+mZHV9M28reiYXc0TvOQ6c/24xmt/07MIB7IklN0yEWwmKIWa5RCl1Q
KU9r0dQB3KMtoKS5iGw7eBeYGt2RsctXhE8gUqt6Z3zZEJwZFryI/SI73QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvEb6j4m4marLj017Le5C8dHXZ1MB8GA1UdIwQY
MBaAFI9sQkz+knAxANUKKDIlN0TddWRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajJ4Q1RQNlNjREVBMVFvb01pVTNSTjExWkZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9hZWI4NGEtN2U3NS00OGY1LWJhMzgt
MGNiMjE4ZTVlNzA3LzEvajJ4Q1RQNlNjREVBMVFvb01pVTNSTjExWkZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9hZWI4NGEtN2U3NS00OGY1LWJhMzgtMGNiMjE4ZTVlNzA3
LzEvajJ4Q1RQNlNjREVBMVFvb01pVTNSTjExWkZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm1qlPRJv
8QgpHEFImZAZpNBfwZQVy9gooqSxMpnNb+16j1j+G7iwaMcgAmeKHcBzgszdS1Yt
ESPMOwu+dH/7GAKfWTByQXun8KJmrUGsfGXK10xcXU9Y5abo/oJSAS1pdlPE9Z9A
K9OLy8e/Q3m8iJaKhaPJPPPlexfv1cwCNnC0k/2ZxFMwT0nzE1OXLglYF2UposWu
xK2a4Asl48DFwXxwWtSAUKQd6pbVGy+3lm4QxqdAl4YIVlhl1WaqY0wtmC397v4W
caceIEjJpFBuKhrRzJvXfsMOcG7H6MC8lBqbIYiF2JHPCWHs4AZzOGN6tBxi6S3a
uXOFG4FJ1sv5lg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:54 2025 by rpki-client