Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
File: jxdSJfOGzpgBGfaYhPm-fGorOzM.mft (raw, json)
Hash identifier: f7k/YGPAwQTq5OjqKTcFd0YcAKoGIbsXFGr2pYY5u0A=
Subject key identifier: D7:4B:E2:01:E0:31:75:28:69:C1:03:A6:9C:DF:46:30:2F:B7:62:49
Authority key identifier: 8F:17:52:25:F3:86:CE:98:01:19:F6:98:84:F9:BE:7C:6A:2B:3B:33
Certificate issuer: /CN=8f175225f386ce980119f69884f9be7c6a2b3b33
Certificate serial: 0197BAB44C90DE5A2DBBC254CBF6B5A9583D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
Manifest number: 15BA
Signing time: Sun 29 Jun 2025 08:01:07 +0000
Manifest this update: Sun 29 Jun 2025 08:01:07 +0000
Manifest next update: Mon 30 Jun 2025 08:01:07 +0000
Files and hashes: 1: 89EQQCo6Tx4ACaGk_JyA4-a5SnA.roa (hash: DER2tNvuAXp0PR1aSNW92ooYvtdX7oI6GzQVCz2YBFM=)
2: jxdSJfOGzpgBGfaYhPm-fGorOzM.crl (hash: hezGe8ycapZuuo8LAjcDy2NgEiB7HVqfybN80i6vcBk=)
3: wqj7UB7atlo4UtptagO8D4QVpv4.roa (hash: ylN4r0wdJFKjI8FqYNMjzdJ19nbuA10o9E8/faFnnKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:b4:4c:90:de:5a:2d:bb:c2:54:cb:f6:b5:a9:58:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f175225f386ce980119f69884f9be7c6a2b3b33
Validity
Not Before: Jun 29 08:01:07 2025 GMT
Not After : Jun 30 08:01:07 2025 GMT
Subject: CN=d74be201e031752869c103a69cdf46302fb76249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:44:8c:02:85:17:eb:df:6c:e8:50:f7:2a:12:
77:6f:8b:16:78:c3:d1:5c:d4:82:e8:ee:81:1e:04:
fe:1f:73:43:4b:0a:c4:8f:19:c0:82:3a:6a:33:45:
b4:d6:16:8a:57:c2:be:2c:21:63:20:fe:06:45:4a:
a8:0c:64:05:87:63:7f:de:49:15:6d:72:86:f1:97:
59:6d:98:78:aa:de:81:68:7a:fe:2e:58:fe:d2:88:
05:1f:99:86:5e:bd:42:4e:e9:cc:92:a5:b5:00:cb:
f8:b6:87:18:a7:51:68:4b:16:64:39:4c:ef:6d:fc:
38:94:4b:32:c3:83:8b:a8:c5:84:a9:e9:a6:f0:35:
7d:37:93:2c:d5:2c:c5:e2:99:ce:d8:6a:58:7d:3a:
23:78:ba:8c:7b:8d:ff:b2:63:ee:1a:cc:34:53:1b:
4f:3b:b7:3f:04:3b:66:64:dd:02:d6:5d:f4:76:22:
11:fe:ee:71:34:37:15:2c:0b:57:d0:e0:ae:34:ca:
29:97:a7:05:bf:73:aa:f2:11:c3:54:b0:b1:98:cc:
0b:a4:9a:ab:8f:2b:a6:13:9e:f8:40:7e:39:6e:35:
ec:33:a0:ca:15:3b:85:5a:bb:3f:93:b0:7e:48:1e:
ae:ff:0e:d7:32:f5:11:7a:eb:c4:9e:c8:1f:92:de:
81:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4B:E2:01:E0:31:75:28:69:C1:03:A6:9C:DF:46:30:2F:B7:62:49
X509v3 Authority Key Identifier:
keyid:8F:17:52:25:F3:86:CE:98:01:19:F6:98:84:F9:BE:7C:6A:2B:3B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:30:59:cf:93:e3:2c:30:12:10:be:54:9b:76:28:d0:0e:8f:
f6:bf:21:4a:da:e4:64:bd:56:f5:d9:73:9a:78:68:ea:cd:46:
eb:76:d0:0c:c6:52:e1:62:1c:b8:5e:b1:48:c9:bf:4c:0a:ba:
56:a5:f8:3e:7d:d8:0c:21:84:13:11:98:59:13:d8:0d:03:46:
72:48:18:c4:28:9b:ed:5d:66:65:84:18:93:56:53:b8:64:62:
d9:08:c8:f7:5d:61:78:57:f9:32:fe:5c:a6:bc:8a:0c:34:0e:
eb:40:5d:b8:43:0a:b0:51:67:b7:15:f1:63:48:e7:47:36:36:
1d:2b:53:84:17:78:17:4e:2c:06:70:e4:d0:8d:8c:9d:27:5c:
31:31:99:c2:d0:9f:ed:49:21:bf:57:6a:8b:2d:dc:a1:4b:e9:
34:13:7e:45:1f:1e:36:04:5c:16:62:e8:2f:e3:a4:a6:77:c2:
f6:36:66:a3:29:7c:ba:fd:1c:54:2f:59:4f:10:88:ff:f8:7a:
12:52:36:ac:bf:a5:32:ae:ed:8a:7e:15:e7:e1:85:af:b4:78:
bc:be:9f:06:2b:61:6d:ef:3e:6d:8e:2c:ed:eb:fe:42:b5:16:
89:58:88:01:c5:41:5c:93:7d:e2:47:13:24:73:41:ff:d0:fe:
a2:fe:58:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe6tEyQ3lotu8JUy/a1qVg9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMTc1MjI1ZjM4NmNlOTgwMTE5ZjY5ODg0ZjliZTdjNmEy
YjNiMzMwHhcNMjUwNjI5MDgwMTA3WhcNMjUwNjMwMDgwMTA3WjAzMTEwLwYDVQQD
EyhkNzRiZTIwMWUwMzE3NTI4NjljMTAzYTY5Y2RmNDYzMDJmYjc2MjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkSMAoUX699s6FD3KhJ3b4sWeMPR
XNSC6O6BHgT+H3NDSwrEjxnAgjpqM0W01haKV8K+LCFjIP4GRUqoDGQFh2N/3kkV
bXKG8ZdZbZh4qt6BaHr+Llj+0ogFH5mGXr1CTunMkqW1AMv4tocYp1FoSxZkOUzv
bfw4lEsyw4OLqMWEqemm8DV9N5Ms1SzF4pnO2GpYfTojeLqMe43/smPuGsw0UxtP
O7c/BDtmZN0C1l30diIR/u5xNDcVLAtX0OCuNMopl6cFv3Oq8hHDVLCxmMwLpJqr
jyumE574QH45bjXsM6DKFTuFWrs/k7B+SB6u/w7XMvUReuvEnsgfkt6BcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdL4gHgMXUoacEDppzfRjAvt2JJMB8GA1UdIwQY
MBaAFI8XUiXzhs6YARn2mIT5vnxqKzszMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanhkU0pmT0d6cGdCR2ZhWWhQbS1mR29yT3pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi81ZWM3Y2EtYTQwMi00YzVkLWExYjct
NjFiNzcyZDc1MWVjLzEvanhkU0pmT0d6cGdCR2ZhWWhQbS1mR29yT3pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi81ZWM3Y2EtYTQwMi00YzVkLWExYjctNjFiNzcyZDc1MWVj
LzEvanhkU0pmT0d6cGdCR2ZhWWhQbS1mR29yT3pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkTBZz5Pj
LDASEL5Um3Yo0A6P9r8hStrkZL1W9dlzmnho6s1G63bQDMZS4WIcuF6xSMm/TAq6
VqX4Pn3YDCGEExGYWRPYDQNGckgYxCib7V1mZYQYk1ZTuGRi2QjI911heFf5Mv5c
pryKDDQO60BduEMKsFFntxXxY0jnRzY2HStThBd4F04sBnDk0I2MnSdcMTGZwtCf
7Ukhv1dqiy3coUvpNBN+RR8eNgRcFmLoL+OkpnfC9jZmoyl8uv0cVC9ZTxCI//h6
ElI2rL+lMq7tin4V5+GFr7R4vL6fBithbe8+bY4s7ev+QrUWiViIAcVBXJN94kcT
JHNB/9D+ov5YRw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 14:34:12 2025 by rpki-client