Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft
File: jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft (raw, json)
Hash identifier: tIi8euIVQ9nOe96NftZOgWgt1MbPEct0PVNfOcEgey8=
Subject key identifier: F4:EC:AC:11:8E:EE:AE:87:58:2D:7C:BC:C8:5E:39:15:B3:24:7A:B4
Authority key identifier: 8E:30:88:EE:71:CB:68:15:99:0D:C2:48:67:B4:A0:E3:19:68:00:0F
Certificate issuer: /CN=8e3088ee71cb6815990dc24867b4a0e31968000f
Certificate serial: 0197B6D72AA5BF3F8C19DBA5843F5FDAEF3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft
Manifest number: 1542
Signing time: Sat 28 Jun 2025 14:00:43 +0000
Manifest this update: Sat 28 Jun 2025 14:00:43 +0000
Manifest next update: Sun 29 Jun 2025 14:00:43 +0000
Files and hashes: 1: LgIPOaS3n2sqiXRF04UEQLyEYsM.roa (hash: YqN1B/tx43sTxDsP8Z9eF6NTn7buBeb+1tzSiGZZDN8=)
2: jjCI7nHLaBWZDcJIZ7Sg4xloAA8.crl (hash: 4FEmmqKt0nq8xOLix1waLEO3at76ZQtZCzY4QgbF+Q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:2a:a5:bf:3f:8c:19:db:a5:84:3f:5f:da:ef:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3088ee71cb6815990dc24867b4a0e31968000f
Validity
Not Before: Jun 28 14:00:43 2025 GMT
Not After : Jun 29 14:00:43 2025 GMT
Subject: CN=f4ecac118eeeae87582d7cbcc85e3915b3247ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f0:be:a6:c9:de:e3:60:ae:d5:e0:58:bd:3e:
d1:fa:39:27:04:20:8d:94:9d:84:50:97:4a:84:fc:
27:ce:53:13:b1:a5:51:e5:ba:92:30:bf:23:24:49:
fc:e0:0b:54:9b:c9:7e:54:1e:4e:65:fa:5b:ff:71:
32:6c:fb:1e:72:98:0e:d2:a7:ed:8b:59:ed:c2:7d:
0e:37:18:9a:1a:be:48:67:af:73:3f:47:19:da:6f:
29:3c:fb:6b:60:43:25:7a:4d:d9:a5:72:67:22:20:
d8:86:f0:b7:0e:bb:88:b3:33:4f:64:d0:bd:41:d3:
d1:c7:03:06:85:95:29:d3:f4:8c:20:8f:42:2a:97:
a0:2b:06:ee:01:84:45:a6:36:93:f8:5c:8d:4c:b9:
ce:e0:e1:ce:98:71:36:d1:b9:b4:32:6d:8a:eb:03:
db:46:ac:f5:ff:85:72:bf:1c:f9:7a:b7:1b:dd:82:
98:49:81:86:6e:a1:79:ef:3d:9d:cd:72:d8:2f:0b:
43:4a:c6:db:a2:64:cc:54:b3:47:f8:e4:bf:df:e9:
e2:1a:13:2c:f6:ff:e4:b4:39:61:7a:af:4c:e6:5c:
42:47:98:75:ac:3e:d3:06:33:84:f1:1e:ce:d1:c9:
ae:5f:b8:f1:50:83:42:42:c0:20:20:90:fe:1f:a8:
f5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:EC:AC:11:8E:EE:AE:87:58:2D:7C:BC:C8:5E:39:15:B3:24:7A:B4
X509v3 Authority Key Identifier:
keyid:8E:30:88:EE:71:CB:68:15:99:0D:C2:48:67:B4:A0:E3:19:68:00:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:00:39:6a:8a:49:a0:ec:a4:ea:da:eb:b6:09:31:c8:c0:12:
7f:03:5b:b2:ed:65:3b:df:62:82:5f:fc:22:7e:56:8d:e4:d8:
8e:e1:e5:2b:a9:68:4e:a1:b7:a5:1a:7c:98:6e:ef:2a:4c:d7:
35:e7:dc:5b:d1:55:a2:c3:93:ca:8d:85:e6:65:f9:91:2f:dd:
7e:b3:a4:d3:04:b4:a1:47:3e:36:95:45:9b:fb:2f:61:f3:5d:
6d:8d:a3:2b:4d:82:fe:45:fe:b0:f6:b8:2b:00:6d:4f:e5:04:
aa:54:9e:30:c8:48:94:b9:a6:37:87:53:e0:29:1a:f5:23:88:
da:07:00:04:78:4c:20:e0:b1:8d:02:c2:e4:23:a5:83:35:8d:
3f:54:28:c6:5b:d9:22:83:ec:89:e0:61:1c:6a:fe:b0:26:fd:
fe:2d:e6:bf:84:dd:b0:bf:6b:da:0d:63:ad:a6:51:ba:d3:06:
46:63:6a:b8:61:98:f5:ba:2e:fb:63:b5:d0:89:84:ec:79:b4:
d7:bc:bf:f2:5a:11:c6:c5:ee:25:c1:b2:61:92:dd:f3:cf:19:
de:77:d5:12:7b:31:8f:c8:14:84:4f:e0:e5:21:87:56:2a:fb:
06:7d:39:13:43:0f:4d:2e:61:3e:de:d2:6b:45:60:ca:b7:8c:
09:37:98:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe21yqlvz+MGdulhD9f2u8/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMzA4OGVlNzFjYjY4MTU5OTBkYzI0ODY3YjRhMGUzMTk2
ODAwMGYwHhcNMjUwNjI4MTQwMDQzWhcNMjUwNjI5MTQwMDQzWjAzMTEwLwYDVQQD
EyhmNGVjYWMxMThlZWVhZTg3NTgyZDdjYmNjODVlMzkxNWIzMjQ3YWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPC+psne42Cu1eBYvT7R+jknBCCN
lJ2EUJdKhPwnzlMTsaVR5bqSML8jJEn84AtUm8l+VB5OZfpb/3EybPsecpgO0qft
i1ntwn0ONxiaGr5IZ69zP0cZ2m8pPPtrYEMlek3ZpXJnIiDYhvC3DruIszNPZNC9
QdPRxwMGhZUp0/SMII9CKpegKwbuAYRFpjaT+FyNTLnO4OHOmHE20bm0Mm2K6wPb
Rqz1/4Vyvxz5ercb3YKYSYGGbqF57z2dzXLYLwtDSsbbomTMVLNH+OS/3+niGhMs
9v/ktDlheq9M5lxCR5h1rD7TBjOE8R7O0cmuX7jxUINCQsAgIJD+H6j1XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTsrBGO7q6HWC18vMheORWzJHq0MB8GA1UdIwQY
MBaAFI4wiO5xy2gVmQ3CSGe0oOMZaAAPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvampDSTduSExhQldaRGNKSVo3U2c0eGxvQUE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8xYWRmNDYtZjQ5OC00NzQ4LWE0N2Et
OWVjMmEyYTA5NGQ3LzEvampDSTduSExhQldaRGNKSVo3U2c0eGxvQUE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8xYWRmNDYtZjQ5OC00NzQ4LWE0N2EtOWVjMmEyYTA5NGQ3
LzEvampDSTduSExhQldaRGNKSVo3U2c0eGxvQUE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQAA5aopJ
oOyk6trrtgkxyMASfwNbsu1lO99igl/8In5WjeTYjuHlK6loTqG3pRp8mG7vKkzX
NefcW9FVosOTyo2F5mX5kS/dfrOk0wS0oUc+NpVFm/svYfNdbY2jK02C/kX+sPa4
KwBtT+UEqlSeMMhIlLmmN4dT4Cka9SOI2gcABHhMIOCxjQLC5COlgzWNP1QoxlvZ
IoPsieBhHGr+sCb9/i3mv4TdsL9r2g1jraZRutMGRmNquGGY9bou+2O10ImE7Hm0
17y/8loRxsXuJcGyYZLd888Z3nfVEnsxj8gUhE/g5SGHVir7Bn05E0MPTS5hPt7S
a0VgyreMCTeYkw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:35:25 2025 by rpki-client