Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
File: jTrSodmrXJtPu05eAlIe4FK4nV8.mft (raw, json)
Hash identifier: HnCdY2sSS1CXUX3tu88qQse8zIrDrzZPku5re31IEcc=
Subject key identifier: D2:1D:A9:9A:A6:50:E3:CB:CC:7E:B4:53:8A:9A:E6:0E:B0:EB:6D:0C
Authority key identifier: 8D:3A:D2:A1:D9:AB:5C:9B:4F:BB:4E:5E:02:52:1E:E0:52:B8:9D:5F
Certificate issuer: /CN=8d3ad2a1d9ab5c9b4fbb4e5e02521ee052b89d5f
Certificate serial: 0198D51605C83CFAC13F2A3F498D77947B94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 04:00:46 +0000
Manifest this update: Sat 23 Aug 2025 04:00:46 +0000
Manifest next update: Sun 24 Aug 2025 04:00:46 +0000
Files and hashes: 1: gUp9W6gdzA4HeeDeBLYOgieiGro.roa (hash: lrN/LUw9qbgMyjQd+6zHffB/Q9YQH49/9bc6+74QbTo=)
2: jTrSodmrXJtPu05eAlIe4FK4nV8.crl (hash: fXI00QaQZam45oOlNfYUZfTRDBF9+X7KzbYA1X17KXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:05:c8:3c:fa:c1:3f:2a:3f:49:8d:77:94:7b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3ad2a1d9ab5c9b4fbb4e5e02521ee052b89d5f
Validity
Not Before: Aug 23 04:00:46 2025 GMT
Not After : Aug 24 04:00:46 2025 GMT
Subject: CN=d21da99aa650e3cbcc7eb4538a9ae60eb0eb6d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b4:bf:d3:08:35:1a:e4:c1:7c:ed:5f:83:59:
74:cf:a8:2a:79:fe:66:77:fa:92:04:2d:56:65:f0:
c6:52:45:75:30:2d:d1:64:b8:9d:16:36:eb:86:05:
03:41:97:b5:6e:52:fe:0f:07:8f:1d:c1:d6:d6:50:
a2:37:4e:c5:19:59:48:d2:96:77:db:4d:b9:ca:16:
ff:eb:11:db:8c:26:57:04:c9:5b:3e:0f:0f:72:5b:
ea:b8:e2:c3:08:54:45:26:c6:f8:ab:62:0f:9a:c8:
72:c6:60:d4:26:7d:08:d5:51:74:40:b0:4f:6a:77:
4d:8d:37:3a:6f:e5:b3:84:64:dc:71:9e:c1:7a:be:
6a:98:a1:49:aa:29:5d:97:13:7f:a9:4c:d9:4f:4c:
0e:95:34:3a:25:99:ef:c1:58:6d:9c:a5:b7:8c:73:
a3:98:cd:26:f5:95:cb:c1:72:60:17:d2:6a:6a:b9:
c3:72:43:61:2d:5a:ae:0f:8b:59:d4:63:95:41:af:
19:69:1c:4b:75:f8:77:9e:b1:d5:6b:f3:fe:ee:6f:
6f:e8:52:a0:4c:39:ed:b1:ae:fb:f8:fc:07:b5:b2:
ee:2b:db:a5:30:3d:78:5d:b0:63:41:8d:04:cb:63:
24:d5:8a:4f:ba:42:b6:5b:e1:cf:c5:db:71:11:01:
e4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1D:A9:9A:A6:50:E3:CB:CC:7E:B4:53:8A:9A:E6:0E:B0:EB:6D:0C
X509v3 Authority Key Identifier:
keyid:8D:3A:D2:A1:D9:AB:5C:9B:4F:BB:4E:5E:02:52:1E:E0:52:B8:9D:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:05:ce:42:54:c3:77:8c:55:8b:bf:d7:ae:aa:d2:f4:57:0d:
61:03:78:f2:e6:63:8c:cd:5d:24:b2:2d:c7:71:ee:6e:17:50:
74:25:a8:ad:3f:02:46:f9:be:fe:fb:e1:0c:70:e8:32:14:d8:
d0:bd:5a:f8:b9:3a:0a:ba:37:8f:ce:4d:ca:68:62:c4:9d:c4:
b3:e2:e0:80:95:8e:bb:94:37:9e:f9:36:7c:ea:bd:bb:33:87:
b2:30:fb:ea:88:de:9f:73:c9:4a:1f:d9:d3:bc:2d:34:2a:a8:
df:ee:fd:6a:fb:50:7b:43:2d:ef:d1:b1:50:31:c0:02:99:b9:
e1:21:08:ad:1a:ff:c0:e2:5c:8d:71:63:a3:09:10:3b:ac:0b:
2a:73:b4:15:14:d7:35:68:f6:bd:7e:73:cb:39:fb:50:a0:3d:
39:ee:01:1b:54:a6:1b:2c:c9:51:0f:bc:2f:1b:43:34:7e:13:
0b:19:70:e7:e9:68:e8:23:95:6f:5b:7b:f4:fe:86:ea:80:2e:
ab:f4:07:76:67:71:4f:d9:14:a8:c5:d1:51:83:5e:b8:57:71:
50:c6:94:11:fa:b1:89:58:03:76:de:8c:24:84:7e:dc:cd:db:
ec:f7:0f:d7:f1:68:b8:7d:13:98:83:f3:08:05:e3:9d:51:1f:
77:97:01:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFgXIPPrBPyo/SY13lHuUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkM2FkMmExZDlhYjVjOWI0ZmJiNGU1ZTAyNTIxZWUwNTJi
ODlkNWYwHhcNMjUwODIzMDQwMDQ2WhcNMjUwODI0MDQwMDQ2WjAzMTEwLwYDVQQD
EyhkMjFkYTk5YWE2NTBlM2NiY2M3ZWI0NTM4YTlhZTYwZWIwZWI2ZDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbS/0wg1GuTBfO1fg1l0z6gqef5m
d/qSBC1WZfDGUkV1MC3RZLidFjbrhgUDQZe1blL+DwePHcHW1lCiN07FGVlI0pZ3
2025yhb/6xHbjCZXBMlbPg8PclvquOLDCFRFJsb4q2IPmshyxmDUJn0I1VF0QLBP
andNjTc6b+WzhGTccZ7Ber5qmKFJqildlxN/qUzZT0wOlTQ6JZnvwVhtnKW3jHOj
mM0m9ZXLwXJgF9JqarnDckNhLVquD4tZ1GOVQa8ZaRxLdfh3nrHVa/P+7m9v6FKg
TDntsa77+PwHtbLuK9ulMD14XbBjQY0Ey2Mk1YpPukK2W+HPxdtxEQHkNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNIdqZqmUOPLzH60U4qa5g6w620MMB8GA1UdIwQY
MBaAFI060qHZq1ybT7tOXgJSHuBSuJ1fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalRyU29kbXJYSnRQdTA1ZUFsSWU0Rks0blY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hMmJmMzUtNTRhMy00Zjc4LWI3MjAt
NGE5ZTI5NjE1YzA1LzEvalRyU29kbXJYSnRQdTA1ZUFsSWU0Rks0blY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9hMmJmMzUtNTRhMy00Zjc4LWI3MjAtNGE5ZTI5NjE1YzA1
LzEvalRyU29kbXJYSnRQdTA1ZUFsSWU0Rks0blY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgAXOQlTD
d4xVi7/XrqrS9FcNYQN48uZjjM1dJLItx3HubhdQdCWorT8CRvm+/vvhDHDoMhTY
0L1a+Lk6Cro3j85NymhixJ3Es+LggJWOu5Q3nvk2fOq9uzOHsjD76ojen3PJSh/Z
07wtNCqo3+79avtQe0Mt79GxUDHAApm54SEIrRr/wOJcjXFjowkQO6wLKnO0FRTX
NWj2vX5zyzn7UKA9Oe4BG1SmGyzJUQ+8LxtDNH4TCxlw5+lo6COVb1t79P6G6oAu
q/QHdmdxT9kUqMXRUYNeuFdxUMaUEfqxiVgDdt6MJIR+3M3b7PcP1/FouH0TmIPz
CAXjnVEfd5cB0g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:36 2025 by rpki-client