Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
File: jvxhDOe89HllH9lRjCiJTtHrWoQ.mft (raw, json)
Hash identifier: nwKZRToqUvhM4na5rrvKk4NHoI5CvXA1uEREkA9yEw0=
Subject key identifier: A9:7E:B0:49:DC:36:34:7C:E1:7C:19:2E:BB:D9:7B:90:33:34:1B:7E
Authority key identifier: 8E:FC:61:0C:E7:BC:F4:79:65:1F:D9:51:8C:28:89:4E:D1:EB:5A:84
Certificate issuer: /CN=8efc610ce7bcf479651fd9518c28894ed1eb5a84
Certificate serial: 0198D7E11E88EEA3159BC6BD7867D5894FF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
Manifest number: 06A8
Signing time: Sat 23 Aug 2025 17:01:51 +0000
Manifest this update: Sat 23 Aug 2025 17:01:51 +0000
Manifest next update: Sun 24 Aug 2025 17:01:51 +0000
Files and hashes: 1: jvxhDOe89HllH9lRjCiJTtHrWoQ.crl (hash: 3YfoqiPzhKltJRN3YplVvRnDOApsOELMlx/lvozqXfk=)
2: pVboDUVcCgIOSYeEdNLk6uQS4-Y.roa (hash: YNYcfocsMawW3njWrgaZfKy0b3fCRuRw7rODR3Kt6t8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:1e:88:ee:a3:15:9b:c6:bd:78:67:d5:89:4f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8efc610ce7bcf479651fd9518c28894ed1eb5a84
Validity
Not Before: Aug 23 17:01:51 2025 GMT
Not After : Aug 24 17:01:51 2025 GMT
Subject: CN=a97eb049dc36347ce17c192ebbd97b9033341b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ca:6c:66:39:d6:84:6d:75:c7:dc:94:d0:be:
9c:32:e7:51:72:6e:d9:7c:18:3a:bb:bc:75:83:3a:
d9:cd:98:37:24:48:e0:6f:40:ce:2f:a1:4f:dc:d2:
dd:29:39:25:48:e5:fc:9e:b5:93:4c:3d:8d:13:6c:
75:02:9f:ed:2b:33:32:6f:56:43:8d:8d:8a:7a:d5:
2d:ed:24:e7:83:43:eb:6d:bc:a7:cc:3e:e7:15:e9:
67:35:ba:2b:a0:b9:48:e8:02:93:c9:72:2d:f5:1d:
94:39:8e:42:15:25:30:85:8e:92:23:ba:ca:44:0c:
c0:0b:03:7c:8b:db:59:0f:fd:9a:5e:00:6d:63:54:
38:3e:c1:91:53:02:fa:ff:c1:1b:70:b0:63:20:8e:
70:88:f0:f6:20:15:bc:b1:47:05:32:69:6d:ad:bf:
a3:00:f9:34:8d:54:b9:ca:17:05:bf:21:37:c1:f3:
dc:df:4e:4e:5e:5c:b5:d9:e0:8c:ed:01:f6:5c:db:
cb:82:f7:e5:f8:26:7a:0e:79:9d:6e:79:26:0d:46:
9a:56:a0:ad:5b:73:14:22:a8:55:e2:df:d1:a1:e0:
85:68:4e:02:b7:c6:d1:36:da:23:49:de:06:68:dd:
6b:4c:5e:a6:30:c8:12:e2:a2:36:65:d8:59:60:e1:
88:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:7E:B0:49:DC:36:34:7C:E1:7C:19:2E:BB:D9:7B:90:33:34:1B:7E
X509v3 Authority Key Identifier:
keyid:8E:FC:61:0C:E7:BC:F4:79:65:1F:D9:51:8C:28:89:4E:D1:EB:5A:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:fe:f8:a2:ae:25:09:b8:6a:a6:f6:15:3e:9b:24:52:95:44:
2e:29:5f:05:a8:f5:00:31:e6:ec:60:ed:04:36:ed:8f:74:ab:
b9:d9:17:e9:f8:4c:5c:97:df:15:8f:68:32:c6:cf:b5:0c:53:
b7:4a:09:23:35:14:45:0c:92:24:50:81:96:9d:c1:c4:e4:44:
c0:69:62:aa:fe:85:23:1c:0b:ae:02:40:f4:60:fb:9a:7b:34:
7a:58:64:cf:94:68:8b:eb:06:49:26:5a:f9:61:2c:2b:6a:f8:
9d:9d:ef:e3:07:f5:55:11:f0:f5:cb:a4:4f:e1:38:af:3f:39:
84:4a:00:d4:e2:2e:f2:08:03:e3:d9:d9:4e:3c:90:55:21:94:
e6:6b:f6:47:dc:c0:ac:5e:dc:8a:b8:65:f3:5d:64:4c:3c:b0:
71:6e:cf:16:2c:e4:f5:2c:5c:0d:40:44:1a:c2:49:d8:99:ac:
ed:09:eb:c1:8a:99:78:a4:dc:8d:f2:bc:58:f2:d8:d8:bb:27:
ee:71:98:dc:23:6b:62:34:99:6f:04:fc:5a:64:2b:83:56:12:
22:b1:33:86:94:21:b0:01:16:02:a0:83:9c:12:d7:47:85:f5:
9c:a4:6c:54:d3:e2:4c:41:a6:39:63:f9:1f:a2:61:65:31:57:
96:e4:d0:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjX4R6I7qMVm8a9eGfViU/3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlZmM2MTBjZTdiY2Y0Nzk2NTFmZDk1MThjMjg4OTRlZDFl
YjVhODQwHhcNMjUwODIzMTcwMTUxWhcNMjUwODI0MTcwMTUxWjAzMTEwLwYDVQQD
EyhhOTdlYjA0OWRjMzYzNDdjZTE3YzE5MmViYmQ5N2I5MDMzMzQxYjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MpsZjnWhG11x9yU0L6cMudRcm7Z
fBg6u7x1gzrZzZg3JEjgb0DOL6FP3NLdKTklSOX8nrWTTD2NE2x1Ap/tKzMyb1ZD
jY2KetUt7STng0PrbbynzD7nFelnNboroLlI6AKTyXIt9R2UOY5CFSUwhY6SI7rK
RAzACwN8i9tZD/2aXgBtY1Q4PsGRUwL6/8EbcLBjII5wiPD2IBW8sUcFMmltrb+j
APk0jVS5yhcFvyE3wfPc305OXly12eCM7QH2XNvLgvfl+CZ6DnmdbnkmDUaaVqCt
W3MUIqhV4t/RoeCFaE4Ct8bRNtojSd4GaN1rTF6mMMgS4qI2ZdhZYOGI4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKl+sEncNjR84XwZLrvZe5AzNBt+MB8GA1UdIwQY
MBaAFI78YQznvPR5ZR/ZUYwoiU7R61qEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanZ4aERPZTg5SGxsSDlsUmpDaUpUdEhyV29RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8yODk0ZDctMTRlZS00NmFiLTg4MmEt
MjEyNzJiODc3MjhiLzEvanZ4aERPZTg5SGxsSDlsUmpDaUpUdEhyV29RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8yODk0ZDctMTRlZS00NmFiLTg4MmEtMjEyNzJiODc3Mjhi
LzEvanZ4aERPZTg5SGxsSDlsUmpDaUpUdEhyV29RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKv74oq4l
CbhqpvYVPpskUpVELilfBaj1ADHm7GDtBDbtj3SrudkX6fhMXJffFY9oMsbPtQxT
t0oJIzUURQySJFCBlp3BxOREwGliqv6FIxwLrgJA9GD7mns0elhkz5Roi+sGSSZa
+WEsK2r4nZ3v4wf1VRHw9cukT+E4rz85hEoA1OIu8ggD49nZTjyQVSGU5mv2R9zA
rF7cirhl811kTDywcW7PFizk9SxcDUBEGsJJ2Jms7QnrwYqZeKTcjfK8WPLY2Lsn
7nGY3CNrYjSZbwT8WmQrg1YSIrEzhpQhsAEWAqCDnBLXR4X1nKRsVNPiTEGmOWP5
H6JhZTFXluTQTg==
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:47:44 2025 by rpki-client