Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
File: rJ4u_NwhOsWxsIedkioXi4UPRR8.mft (raw, json)
Hash identifier: pb6pbUrFCxFiJM7gtD6ay32yUmcAs7DHmNu6xHNRJQE=
Subject key identifier: 8A:81:7C:7C:9B:10:9C:7E:C2:A0:A8:B6:5A:E2:3B:24:4D:5E:C0:27
Authority key identifier: AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
Certificate issuer: /CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
Certificate serial: 0198D5F15993C76ABBB704D9C62FE72D1D0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
Manifest number: 1407
Signing time: Sat 23 Aug 2025 08:00:20 +0000
Manifest this update: Sat 23 Aug 2025 08:00:20 +0000
Manifest next update: Sun 24 Aug 2025 08:00:20 +0000
Files and hashes: 1: 2U5A9tBCqnUvMT1Z72ylKjdlWos.roa (hash: 6v+qu4r96g6wyDjQr5ZuHMdSm+7rbKbxTfJLRSIKjI8=)
2: TdGZ39TbjdjBBTMxGvQBWdhQRo4.roa (hash: lhJrYNrPIHrE1+fMgjz6bgAULgw1D/KiucF41qw2/QE=)
3: rJ4u_NwhOsWxsIedkioXi4UPRR8.crl (hash: UWAX107EW8i5VgfVHTbfb+2NkuQnGBo66PD+giwY8ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:59:93:c7:6a:bb:b7:04:d9:c6:2f:e7:2d:1d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
Validity
Not Before: Aug 23 08:00:20 2025 GMT
Not After : Aug 24 08:00:20 2025 GMT
Subject: CN=8a817c7c9b109c7ec2a0a8b65ae23b244d5ec027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:58:f0:66:a1:0e:cb:0b:f4:6a:29:a6:d6:76:
a4:ec:3a:d0:34:c0:ba:f5:4c:84:d3:1f:a0:7f:94:
09:6e:ca:5d:70:bd:79:0a:77:a7:35:ae:74:8c:f5:
70:b1:63:54:9f:50:a5:a9:94:41:8f:dd:69:74:37:
9f:fa:f8:5e:bb:46:2d:39:51:28:8f:8e:5c:9c:32:
91:e0:9e:0f:05:ba:28:36:5f:ed:fc:6d:13:54:61:
96:ef:07:76:63:1b:9d:1a:0a:ad:0a:bd:91:4c:5a:
42:c4:64:19:1d:b4:95:ef:02:e4:c9:c5:9e:f7:a2:
eb:3e:b0:36:68:fe:8b:9d:02:eb:20:13:cb:0e:97:
c8:df:59:de:78:cf:11:ac:04:fa:ae:d0:c9:b8:4a:
83:39:5b:f0:7e:eb:f0:66:63:dc:ee:13:d6:b5:a8:
20:75:7d:33:f1:13:66:f3:39:e0:cc:f6:2b:a6:57:
94:15:d5:dd:85:d4:bb:2a:cc:78:54:3c:32:75:25:
38:a8:af:9a:ce:24:0b:52:3c:0f:9f:c0:71:9d:09:
ad:dd:b2:fa:96:40:39:78:55:d5:8d:28:df:9f:79:
ac:5d:1a:46:ff:8b:b7:47:65:5d:2c:48:d0:38:15:
12:a2:23:cd:b1:e3:c8:27:bb:0d:5b:13:cd:3a:2c:
9a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:81:7C:7C:9B:10:9C:7E:C2:A0:A8:B6:5A:E2:3B:24:4D:5E:C0:27
X509v3 Authority Key Identifier:
keyid:AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:76:cd:8b:13:b3:83:84:fe:42:8e:ce:7f:08:dc:48:f9:e6:
83:0b:ef:27:92:17:6b:5a:fc:41:6a:9a:86:6d:7c:64:65:20:
0b:f0:12:c5:ed:71:41:54:c4:76:cd:56:b3:43:34:9a:cb:10:
1d:d4:ca:19:3a:92:0d:33:f6:af:cf:44:35:bb:3a:c4:ed:fd:
d3:a6:bb:9a:00:24:e2:e8:03:a5:9a:90:18:c4:78:c9:55:62:
d6:28:8d:df:02:44:7c:a0:fd:70:1c:d3:1a:e1:e9:4c:1d:92:
f5:60:8f:bd:04:2a:86:20:86:21:7e:15:a6:48:c4:cb:69:ba:
3a:f6:5b:80:cd:fd:cf:21:38:cb:c9:7a:ce:84:1a:bb:4b:80:
a6:c0:49:c3:b5:5c:8b:ff:e1:3d:73:02:46:09:73:da:5f:ae:
60:da:54:24:9c:df:54:dd:29:78:b7:5c:89:b9:12:66:08:6b:
b2:0d:7c:93:ad:75:66:cb:ce:05:31:d3:b5:73:d3:ee:10:4c:
ee:52:be:9e:4c:36:b3:99:9a:86:36:23:f3:e1:9a:18:c2:47:
83:53:bb:75:a2:0f:10:89:69:2b:6a:38:fc:46:01:61:da:49:
cf:c1:df:da:06:0d:06:a7:dd:06:80:9e:cc:7e:5f:f4:77:4a:
47:7c:f8:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8VmTx2q7twTZxi/nLR0NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOWUyZWZjZGMyMTNhYzViMWIwODc5ZDkyMmExNzhiODUw
ZjQ1MWYwHhcNMjUwODIzMDgwMDIwWhcNMjUwODI0MDgwMDIwWjAzMTEwLwYDVQQD
Eyg4YTgxN2M3YzliMTA5YzdlYzJhMGE4YjY1YWUyM2IyNDRkNWVjMDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlljwZqEOywv0aimm1nak7DrQNMC6
9UyE0x+gf5QJbspdcL15CnenNa50jPVwsWNUn1ClqZRBj91pdDef+vheu0YtOVEo
j45cnDKR4J4PBbooNl/t/G0TVGGW7wd2YxudGgqtCr2RTFpCxGQZHbSV7wLkycWe
96LrPrA2aP6LnQLrIBPLDpfI31neeM8RrAT6rtDJuEqDOVvwfuvwZmPc7hPWtagg
dX0z8RNm8zngzPYrpleUFdXdhdS7Ksx4VDwydSU4qK+aziQLUjwPn8BxnQmt3bL6
lkA5eFXVjSjfn3msXRpG/4u3R2VdLEjQOBUSoiPNsePIJ7sNWxPNOiyafQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqBfHybEJx+wqCotlriOyRNXsAnMB8GA1UdIwQY
MBaAFKyeLvzcITrFsbCHnZIqF4uFD0UfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcko0dV9Od2hPc1d4c0llZGtpb1hpNFVQUlI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9kMWZhYTktYjVhMy00ZDQ5LTg2OGEt
N2M3YmYyNzE3NWM1LzEvcko0dV9Od2hPc1d4c0llZGtpb1hpNFVQUlI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9kMWZhYTktYjVhMy00ZDQ5LTg2OGEtN2M3YmYyNzE3NWM1
LzEvcko0dV9Od2hPc1d4c0llZGtpb1hpNFVQUlI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfHbNixOz
g4T+Qo7OfwjcSPnmgwvvJ5IXa1r8QWqahm18ZGUgC/ASxe1xQVTEds1Ws0M0mssQ
HdTKGTqSDTP2r89ENbs6xO3906a7mgAk4ugDpZqQGMR4yVVi1iiN3wJEfKD9cBzT
GuHpTB2S9WCPvQQqhiCGIX4VpkjEy2m6OvZbgM39zyE4y8l6zoQau0uApsBJw7Vc
i//hPXMCRglz2l+uYNpUJJzfVN0peLdcibkSZghrsg18k611ZsvOBTHTtXPT7hBM
7lK+nkw2s5mahjYj8+GaGMJHg1O7daIPEIlpK2o4/EYBYdpJz8Hf2gYNBqfdBoCe
zH5f9HdKR3z4TQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:51:48 2025 by rpki-client