Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
File: JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft (raw, json)
Hash identifier: 8OFTRlCUb17z2LZ5VRCJmFOtbaup/kl34orlXw+Hndc=
Subject key identifier: 7C:0D:9B:F4:E3:D1:6D:C0:C8:AC:C5:ED:E5:95:2E:9A:53:65:17:72
Authority key identifier: 26:42:7A:26:0D:6D:96:CC:11:15:CC:CE:8A:91:4A:FF:B0:E1:D1:6B
Certificate issuer: /CN=26427a260d6d96cc1115ccce8a914affb0e1d16b
Certificate serial: 0197B82138536C7849632C110D57BBFCD2F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
Manifest number: 02DE
Signing time: Sat 28 Jun 2025 20:01:14 +0000
Manifest this update: Sat 28 Jun 2025 20:01:14 +0000
Manifest next update: Sun 29 Jun 2025 20:01:14 +0000
Files and hashes: 1: HRacqG8l3Hf7zAmCVCG0P5KOMS4.roa (hash: POwtAYxNl5+u6y8FOiGiNGLuMGWBIZsQmYKWLa6++Q0=)
2: JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl (hash: 4rwNa+QPdViexLmQ7fDyddn6lkli4R+HWx7dB/vwMZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:38:53:6c:78:49:63:2c:11:0d:57:bb:fc:d2:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26427a260d6d96cc1115ccce8a914affb0e1d16b
Validity
Not Before: Jun 28 20:01:14 2025 GMT
Not After : Jun 29 20:01:14 2025 GMT
Subject: CN=7c0d9bf4e3d16dc0c8acc5ede5952e9a53651772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5c:a5:2a:0f:06:d1:6e:9b:ef:79:2f:3c:c1:
4c:a7:8b:d3:47:0d:ae:68:ae:9c:de:1b:bc:45:0e:
56:02:1a:dc:eb:4a:4b:61:db:a0:50:a0:d3:97:ba:
a2:c6:d0:00:16:ea:50:71:b1:0a:f8:9e:a0:fe:a5:
50:04:63:30:54:f1:86:d5:f8:f5:9f:a9:fe:89:66:
4a:83:93:38:42:42:8d:0c:73:cc:36:8e:53:23:49:
da:4b:1e:1c:40:e1:c2:0b:19:22:83:f4:d0:c5:ae:
c3:91:3d:d8:6a:c6:5f:37:07:30:cc:25:f8:5d:2b:
c9:09:be:1e:29:c9:81:4b:d5:88:6d:93:15:fc:12:
19:bf:04:d5:b3:8e:d5:d5:d5:29:22:d8:a7:bb:6e:
47:fc:a2:58:28:b8:c2:16:b0:08:e8:f9:5a:49:6c:
8e:5f:eb:6f:37:47:c2:3f:fd:fb:58:92:5e:39:b2:
90:6f:b3:04:3b:13:79:f2:b5:41:9c:3b:f0:1b:45:
56:64:be:69:9e:cd:84:92:2f:d7:cc:43:85:88:2d:
b3:a6:2e:3c:43:e1:ca:85:50:29:22:a4:7f:ba:40:
7f:e3:a0:72:29:83:b7:ae:a6:72:da:47:14:4f:2e:
19:87:fa:5e:0f:f9:f4:09:11:e1:ec:c4:4e:15:de:
1e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:0D:9B:F4:E3:D1:6D:C0:C8:AC:C5:ED:E5:95:2E:9A:53:65:17:72
X509v3 Authority Key Identifier:
keyid:26:42:7A:26:0D:6D:96:CC:11:15:CC:CE:8A:91:4A:FF:B0:E1:D1:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:63:9d:41:a2:20:36:0f:30:03:0b:e5:58:e2:ce:b7:f6:82:
3b:aa:91:4f:ec:41:31:22:35:d0:0b:15:32:70:14:04:13:0a:
9e:36:3a:a4:80:ec:b5:4e:d1:00:44:8b:b5:02:1b:4c:03:76:
bf:3f:cc:d6:da:bc:32:14:88:b0:0c:3c:83:31:fe:0f:5f:41:
8f:5e:c0:b0:38:3b:4f:c5:7a:2f:53:8d:bc:9d:57:40:6f:13:
64:43:cd:c7:e1:f8:2a:5b:2f:fc:ec:d3:bb:cb:e9:d8:6d:db:
b9:08:3c:d5:5a:07:dc:80:51:52:13:35:75:1f:94:d4:df:f0:
8b:1c:8f:c7:33:f8:17:da:6b:71:49:e9:a0:4c:0a:06:5f:3c:
fa:f3:5f:6a:09:71:c9:b7:5a:e4:93:76:57:1b:15:00:4c:94:
0b:9f:48:de:cb:f6:1b:82:54:7b:41:5c:96:81:01:7b:3e:5b:
93:df:e1:a2:7f:38:6e:3a:68:f9:18:48:de:69:d7:94:a2:2d:
bc:d8:3c:0f:94:bf:bb:37:71:77:b9:9b:6a:26:30:bb:c0:4c:
85:9b:cc:a2:00:18:00:c5:d1:f8:bb:c8:00:63:60:8d:e6:62:
19:e5:df:9f:e4:1a:e9:77:e4:33:64:6b:8d:34:ab:e3:f1:ce:
e7:75:57:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IThTbHhJYywRDVe7/NLyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NDI3YTI2MGQ2ZDk2Y2MxMTE1Y2NjZThhOTE0YWZmYjBl
MWQxNmIwHhcNMjUwNjI4MjAwMTE0WhcNMjUwNjI5MjAwMTE0WjAzMTEwLwYDVQQD
Eyg3YzBkOWJmNGUzZDE2ZGMwYzhhY2M1ZWRlNTk1MmU5YTUzNjUxNzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVylKg8G0W6b73kvPMFMp4vTRw2u
aK6c3hu8RQ5WAhrc60pLYdugUKDTl7qixtAAFupQcbEK+J6g/qVQBGMwVPGG1fj1
n6n+iWZKg5M4QkKNDHPMNo5TI0naSx4cQOHCCxkig/TQxa7DkT3YasZfNwcwzCX4
XSvJCb4eKcmBS9WIbZMV/BIZvwTVs47V1dUpItinu25H/KJYKLjCFrAI6PlaSWyO
X+tvN0fCP/37WJJeObKQb7MEOxN58rVBnDvwG0VWZL5pns2Eki/XzEOFiC2zpi48
Q+HKhVApIqR/ukB/46ByKYO3rqZy2kcUTy4Zh/peD/n0CRHh7MROFd4ewQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHwNm/Tj0W3AyKzF7eWVLppTZRdyMB8GA1UdIwQY
MBaAFCZCeiYNbZbMERXMzoqRSv+w4dFrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmtKNkpnMXRsc3dSRmN6T2lwRktfN0RoMFdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9mM2ZkZjAtYTFhNS00NWExLTgyNTIt
ODUyOGU1NTMyYzBlLzEvSmtKNkpnMXRsc3dSRmN6T2lwRktfN0RoMFdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9mM2ZkZjAtYTFhNS00NWExLTgyNTItODUyOGU1NTMyYzBl
LzEvSmtKNkpnMXRsc3dSRmN6T2lwRktfN0RoMFdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATWOdQaIg
Ng8wAwvlWOLOt/aCO6qRT+xBMSI10AsVMnAUBBMKnjY6pIDstU7RAESLtQIbTAN2
vz/M1tq8MhSIsAw8gzH+D19Bj17AsDg7T8V6L1ONvJ1XQG8TZEPNx+H4Klsv/OzT
u8vp2G3buQg81VoH3IBRUhM1dR+U1N/wixyPxzP4F9prcUnpoEwKBl88+vNfaglx
ybda5JN2VxsVAEyUC59I3sv2G4JUe0FcloEBez5bk9/hon84bjpo+RhI3mnXlKIt
vNg8D5S/uzdxd7mbaiYwu8BMhZvMogAYAMXR+LvIAGNgjeZiGeXfn+Qa6XfkM2Rr
jTSr4/HO53VXWw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:34:24 2025 by rpki-client