Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
File: JUn0XvILUG6o70y2gsLKJwGykLQ.mft (raw, json)
Hash identifier: 2rn2VOaaWNz4nX7TnzySQkogWWWfAyqlv+hsU1bfPtM=
Subject key identifier: AE:9F:A6:27:1A:FF:99:3E:D8:FB:28:5F:89:84:E8:C3:26:29:8C:06
Authority key identifier: 25:49:F4:5E:F2:0B:50:6E:A8:EF:4C:B6:82:C2:CA:27:01:B2:90:B4
Certificate issuer: /CN=2549f45ef20b506ea8ef4cb682c2ca2701b290b4
Certificate serial: 0198D5F13ADE85E8FD51CB452B4203DADE4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 08:00:12 +0000
Manifest this update: Sat 23 Aug 2025 08:00:12 +0000
Manifest next update: Sun 24 Aug 2025 08:00:12 +0000
Files and hashes: 1: IkDVoWMCW8T1OT9ORyQk9bDyazo.roa (hash: ezW06KpxDOFFcxPPKXXfQ4CRQ3FYkfmYYJN8bIHB94g=)
2: JUn0XvILUG6o70y2gsLKJwGykLQ.crl (hash: gUDm4GA0zUyNRXLcgsIOx2AJ27m3m1QxDM0Y3EqxBLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:3a:de:85:e8:fd:51:cb:45:2b:42:03:da:de:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2549f45ef20b506ea8ef4cb682c2ca2701b290b4
Validity
Not Before: Aug 23 08:00:12 2025 GMT
Not After : Aug 24 08:00:12 2025 GMT
Subject: CN=ae9fa6271aff993ed8fb285f8984e8c326298c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:03:d1:74:a5:39:a0:3d:e8:fa:80:f5:71:0d:
8b:c1:07:61:cd:a8:95:33:d1:82:27:66:f9:53:7a:
f1:68:47:32:5b:a8:c3:b8:60:94:ba:69:ff:30:fe:
0f:44:be:f4:29:a6:11:f5:f0:ba:f8:e6:f1:78:2b:
aa:e7:cd:af:97:52:6c:49:a9:5b:2c:40:d1:b1:c9:
f7:c0:45:2b:48:95:9c:63:43:89:f5:33:a3:7f:5f:
8a:1c:2a:e2:a6:5f:48:f9:4a:03:43:92:de:36:0e:
63:5d:45:18:82:a6:58:d9:92:5d:67:91:9c:c5:8f:
a4:3c:85:b2:79:4b:dc:23:df:81:1a:c6:a9:91:29:
eb:d5:8f:fe:d6:90:10:d2:da:67:ac:7b:04:9e:47:
d1:4e:22:c7:c0:ad:aa:0b:f4:77:4b:53:b2:4d:a9:
c2:f1:90:dd:1d:54:23:d4:21:94:ac:7f:e6:cd:c2:
2c:15:fa:2b:20:c0:c4:77:a3:6c:de:d2:6a:42:de:
57:15:1b:8c:6b:99:93:6e:79:14:94:d5:db:1a:22:
e1:2e:e4:bf:7e:29:3b:0e:79:d1:12:85:a6:b7:9c:
9a:05:64:a8:ff:1a:9b:01:ac:27:ff:15:b3:fc:18:
a2:5d:01:4e:d7:d7:c9:13:83:82:2b:48:29:54:19:
24:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9F:A6:27:1A:FF:99:3E:D8:FB:28:5F:89:84:E8:C3:26:29:8C:06
X509v3 Authority Key Identifier:
keyid:25:49:F4:5E:F2:0B:50:6E:A8:EF:4C:B6:82:C2:CA:27:01:B2:90:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d5:2a:65:f1:5e:52:14:f1:bd:53:12:e8:5b:1c:6c:13:4d:
6d:f2:5e:b9:45:68:35:06:8f:ad:43:a1:53:63:03:ed:0c:a6:
c7:24:08:01:43:99:ed:46:93:1b:8c:d9:12:41:bc:d6:9f:84:
c7:7c:f5:78:dd:62:05:32:a9:54:11:3e:18:cf:30:b2:b6:2b:
cc:5b:63:9e:b4:f9:c7:3f:be:ee:de:0e:24:1c:0c:64:f7:1c:
0b:f1:2a:d4:0e:1b:8d:1e:65:ab:7f:33:39:3a:7b:32:82:f7:
2f:4e:65:04:25:b3:ba:63:d8:7b:97:b4:6c:65:6a:d0:4b:1a:
cd:cf:9d:5e:98:ff:f0:80:9a:0b:7f:9f:a1:a8:46:6b:f7:c1:
27:8b:3d:c5:81:b8:29:55:28:08:3d:a4:30:57:75:dc:12:40:
59:6e:a4:96:3a:c2:a1:20:13:24:01:8d:1d:07:23:3e:0f:6c:
33:ac:e9:44:8d:b6:d4:7f:b1:d5:81:32:1c:d2:a4:ad:8b:3d:
09:6d:8b:cb:a7:ac:bb:2b:c6:07:6f:2c:b3:d8:a3:7d:9b:78:
9b:07:36:22:bc:40:fd:f2:c3:89:ed:45:5f:1b:0d:5c:93:fc:
1f:ba:e7:80:52:1c:aa:34:05:39:0e:60:16:b0:da:c9:3b:ff:
30:aa:de:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8Trehej9UctFK0ID2t5MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NDlmNDVlZjIwYjUwNmVhOGVmNGNiNjgyYzJjYTI3MDFi
MjkwYjQwHhcNMjUwODIzMDgwMDEyWhcNMjUwODI0MDgwMDEyWjAzMTEwLwYDVQQD
EyhhZTlmYTYyNzFhZmY5OTNlZDhmYjI4NWY4OTg0ZThjMzI2Mjk4YzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8APRdKU5oD3o+oD1cQ2LwQdhzaiV
M9GCJ2b5U3rxaEcyW6jDuGCUumn/MP4PRL70KaYR9fC6+ObxeCuq582vl1JsSalb
LEDRscn3wEUrSJWcY0OJ9TOjf1+KHCripl9I+UoDQ5LeNg5jXUUYgqZY2ZJdZ5Gc
xY+kPIWyeUvcI9+BGsapkSnr1Y/+1pAQ0tpnrHsEnkfRTiLHwK2qC/R3S1OyTanC
8ZDdHVQj1CGUrH/mzcIsFforIMDEd6Ns3tJqQt5XFRuMa5mTbnkUlNXbGiLhLuS/
fik7DnnREoWmt5yaBWSo/xqbAawn/xWz/BiiXQFO19fJE4OCK0gpVBkkhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6fpica/5k+2PsoX4mE6MMmKYwGMB8GA1UdIwQY
MBaAFCVJ9F7yC1BuqO9MtoLCyicBspC0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlVuMFh2SUxVRzZvNzB5MmdzTEtKd0d5a0xRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9lN2M3ZjItNTc4NC00MjY1LTg0YjMt
YTU0MzFiMDdkMDllLzEvSlVuMFh2SUxVRzZvNzB5MmdzTEtKd0d5a0xRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9lN2M3ZjItNTc4NC00MjY1LTg0YjMtYTU0MzFiMDdkMDll
LzEvSlVuMFh2SUxVRzZvNzB5MmdzTEtKd0d5a0xRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZtUqZfFe
UhTxvVMS6FscbBNNbfJeuUVoNQaPrUOhU2MD7QymxyQIAUOZ7UaTG4zZEkG81p+E
x3z1eN1iBTKpVBE+GM8wsrYrzFtjnrT5xz++7t4OJBwMZPccC/Eq1A4bjR5lq38z
OTp7MoL3L05lBCWzumPYe5e0bGVq0Esazc+dXpj/8ICaC3+foahGa/fBJ4s9xYG4
KVUoCD2kMFd13BJAWW6kljrCoSATJAGNHQcjPg9sM6zpRI221H+x1YEyHNKkrYs9
CW2Ly6esuyvGB28ss9ijfZt4mwc2IrxA/fLDie1FXxsNXJP8H7rngFIcqjQFOQ5g
FrDayTv/MKrepA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:53 2025 by rpki-client