Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
File: JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft (raw, json)
Hash identifier: 3Xw+oAmEkMtj7CDbCkDbC7qieuptYNWiD0gZXi02IZw=
Subject key identifier: 21:A0:B5:6F:56:A8:75:E5:29:4F:9D:7F:45:90:6F:17:C9:53:E9:E3
Authority key identifier: 26:42:7A:26:0D:6D:96:CC:11:15:CC:CE:8A:91:4A:FF:B0:E1:D1:6B
Certificate issuer: /CN=26427a260d6d96cc1115ccce8a914affb0e1d16b
Certificate serial: 0198D5F1BF947D197793F29334C1A492397D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
Manifest number: 0372
Signing time: Sat 23 Aug 2025 08:00:46 +0000
Manifest this update: Sat 23 Aug 2025 08:00:46 +0000
Manifest next update: Sun 24 Aug 2025 08:00:46 +0000
Files and hashes: 1: HRacqG8l3Hf7zAmCVCG0P5KOMS4.roa (hash: POwtAYxNl5+u6y8FOiGiNGLuMGWBIZsQmYKWLa6++Q0=)
2: JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl (hash: xwuZaXD49esi6EiexPyOSfP0EuYJYK7Zvj9THTymGI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:bf:94:7d:19:77:93:f2:93:34:c1:a4:92:39:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26427a260d6d96cc1115ccce8a914affb0e1d16b
Validity
Not Before: Aug 23 08:00:46 2025 GMT
Not After : Aug 24 08:00:46 2025 GMT
Subject: CN=21a0b56f56a875e5294f9d7f45906f17c953e9e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:81:30:79:d0:8f:b2:28:f8:4f:4a:35:3b:25:
91:ab:c0:ea:41:8b:fd:8c:06:91:04:c6:84:6f:da:
44:71:e4:c8:0c:25:5f:05:19:f9:a1:67:d6:4d:8d:
64:1c:73:ff:66:d3:c6:c0:90:a9:03:f5:39:ef:de:
da:be:43:35:99:ce:70:e8:59:f8:c6:70:1b:9a:02:
cc:01:84:43:f5:d8:71:b9:b8:82:b0:c2:bc:37:d6:
8e:8f:e7:24:39:cb:81:eb:37:19:5e:40:aa:fc:bc:
b7:d5:a5:be:1e:12:f6:78:4d:38:66:16:a2:b3:bb:
8b:4e:8d:1b:52:00:c7:5c:93:1c:7b:a0:32:29:28:
58:71:77:a0:ef:d3:e2:83:b4:34:86:41:0e:de:46:
1f:19:2c:d3:6a:39:48:4f:b7:08:bf:ba:92:1a:8e:
81:17:f7:6c:ab:36:67:a7:08:94:b7:3f:e8:dd:60:
2a:4e:f4:5c:0f:bc:de:a4:80:57:c4:7f:3a:e5:83:
29:3d:c7:cf:ad:5a:f3:9b:34:80:9e:01:9a:ae:bf:
41:9e:7b:3f:66:bd:a9:f9:8a:34:11:28:0c:94:f8:
7c:99:bb:74:78:42:83:9b:c4:8f:9e:5e:ab:b0:1a:
1e:e9:51:00:b0:5b:e2:b3:02:b0:d0:59:52:11:62:
89:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A0:B5:6F:56:A8:75:E5:29:4F:9D:7F:45:90:6F:17:C9:53:E9:E3
X509v3 Authority Key Identifier:
keyid:26:42:7A:26:0D:6D:96:CC:11:15:CC:CE:8A:91:4A:FF:B0:E1:D1:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:06:b9:0b:8e:e9:c6:45:fb:ff:3d:07:85:4e:f2:29:50:95:
64:1b:17:47:ee:73:57:75:38:67:80:69:ef:9e:ce:14:a1:f4:
c6:ab:63:6f:09:c8:21:f1:a9:ab:88:2b:1a:d7:cf:8f:0e:b1:
5b:21:40:01:5c:5f:03:d0:0c:6c:57:5a:1f:7b:be:8a:d5:c5:
88:4a:7d:3f:4d:82:31:6b:92:8b:d3:12:b8:fe:8c:09:f2:a3:
25:76:2b:a4:99:44:8c:87:d9:e7:52:52:31:df:31:56:63:ed:
bb:42:ef:6c:7d:94:0a:71:91:b9:74:cb:d6:6c:53:91:bb:d2:
8b:f6:17:f1:20:2b:a4:6a:3a:27:90:b5:78:c7:59:e4:ef:4f:
29:2c:69:ac:fe:cc:1b:e2:b1:65:ad:e9:bb:9c:24:e9:c1:02:
a8:24:f9:1e:df:3d:cf:8e:24:e3:8d:1d:f3:7e:c9:b0:0e:bd:
c8:5a:5d:14:50:95:83:89:b7:6e:c9:11:1a:0d:42:29:f0:08:
81:85:7f:6f:db:58:1d:f6:70:64:52:f2:08:1e:1c:ea:70:0d:
0f:37:bd:11:a3:b2:60:2c:68:e7:a2:32:a7:02:3f:3b:4f:27:
d4:38:74:dc:45:11:4b:b3:54:94:49:63:51:c1:04:a1:70:60:
b4:d5:6f:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8b+UfRl3k/KTNMGkkjl9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NDI3YTI2MGQ2ZDk2Y2MxMTE1Y2NjZThhOTE0YWZmYjBl
MWQxNmIwHhcNMjUwODIzMDgwMDQ2WhcNMjUwODI0MDgwMDQ2WjAzMTEwLwYDVQQD
EygyMWEwYjU2ZjU2YTg3NWU1Mjk0ZjlkN2Y0NTkwNmYxN2M5NTNlOWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoEwedCPsij4T0o1OyWRq8DqQYv9
jAaRBMaEb9pEceTIDCVfBRn5oWfWTY1kHHP/ZtPGwJCpA/U5797avkM1mc5w6Fn4
xnAbmgLMAYRD9dhxubiCsMK8N9aOj+ckOcuB6zcZXkCq/Ly31aW+HhL2eE04Zhai
s7uLTo0bUgDHXJMce6AyKShYcXeg79Pig7Q0hkEO3kYfGSzTajlIT7cIv7qSGo6B
F/dsqzZnpwiUtz/o3WAqTvRcD7zepIBXxH865YMpPcfPrVrzmzSAngGarr9Bnns/
Zr2p+Yo0ESgMlPh8mbt0eEKDm8SPnl6rsBoe6VEAsFviswKw0FlSEWKJfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCGgtW9WqHXlKU+df0WQbxfJU+njMB8GA1UdIwQY
MBaAFCZCeiYNbZbMERXMzoqRSv+w4dFrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmtKNkpnMXRsc3dSRmN6T2lwRktfN0RoMFdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9mM2ZkZjAtYTFhNS00NWExLTgyNTIt
ODUyOGU1NTMyYzBlLzEvSmtKNkpnMXRsc3dSRmN6T2lwRktfN0RoMFdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9mM2ZkZjAtYTFhNS00NWExLTgyNTItODUyOGU1NTMyYzBl
LzEvSmtKNkpnMXRsc3dSRmN6T2lwRktfN0RoMFdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAawa5C47p
xkX7/z0HhU7yKVCVZBsXR+5zV3U4Z4Bp757OFKH0xqtjbwnIIfGpq4grGtfPjw6x
WyFAAVxfA9AMbFdaH3u+itXFiEp9P02CMWuSi9MSuP6MCfKjJXYrpJlEjIfZ51JS
Md8xVmPtu0LvbH2UCnGRuXTL1mxTkbvSi/YX8SArpGo6J5C1eMdZ5O9PKSxprP7M
G+KxZa3pu5wk6cECqCT5Ht89z44k440d837JsA69yFpdFFCVg4m3bskRGg1CKfAI
gYV/b9tYHfZwZFLyCB4c6nANDze9EaOyYCxo56IypwI/O08n1Dh03EURS7NUlElj
UcEEoXBgtNVv7w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:58 2025 by rpki-client