Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft
File: jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft (raw, json)
Hash identifier: MiO2PAKBRixbmyPxscxU5WDjbraGqnGenyn44fv1twE=
Subject key identifier: AC:CA:B1:C4:77:BF:F8:C5:EB:53:00:AE:A0:A2:5F:51:16:E3:E7:5E
Authority key identifier: 8E:6D:75:B4:E4:98:6F:AC:CB:61:4B:33:4E:45:D5:E0:39:35:2A:9C
Certificate issuer: /CN=8e6d75b4e4986faccb614b334e45d5e039352a9c
Certificate serial: 0198D5BBEC0250C1917FC22E7EF05049F2D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jm11tOSYb6zLYUszTkXV4Dk1Kpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft
Manifest number: 1043
Signing time: Sat 23 Aug 2025 07:01:59 +0000
Manifest this update: Sat 23 Aug 2025 07:01:59 +0000
Manifest next update: Sun 24 Aug 2025 07:01:59 +0000
Files and hashes: 1: ekK1eE5a32VySivOIvx2lxJnCKs.roa (hash: R1iwy2ZxPxih68xnTXgeurMmYbkKLoEgJqs5giY8O4U=)
2: jm11tOSYb6zLYUszTkXV4Dk1Kpw.crl (hash: nXehaJIAIcgLzYc/70k4IR4usp/pEx2D8sFsek4hJdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jm11tOSYb6zLYUszTkXV4Dk1Kpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:ec:02:50:c1:91:7f:c2:2e:7e:f0:50:49:f2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e6d75b4e4986faccb614b334e45d5e039352a9c
Validity
Not Before: Aug 23 07:01:59 2025 GMT
Not After : Aug 24 07:01:59 2025 GMT
Subject: CN=accab1c477bff8c5eb5300aea0a25f5116e3e75e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:93:dd:be:b1:05:ce:1c:b1:bf:8a:df:76:70:
2d:39:e6:44:8d:ba:66:fa:6d:fc:40:b6:5c:ce:73:
3c:cd:de:14:11:ae:2e:37:ed:63:ae:d7:9b:0e:de:
53:74:58:3c:17:95:12:2e:3c:69:2b:36:75:42:e6:
00:6b:43:bd:58:a1:81:8f:72:4e:f7:85:60:83:fc:
02:84:fb:e0:45:60:4b:51:68:26:48:e5:f2:60:45:
de:1e:b1:39:6b:2b:86:69:ce:f9:3a:72:ae:46:2a:
a3:0e:1f:51:0e:81:42:14:9b:6c:01:bc:87:3c:d3:
89:53:02:d6:28:dd:db:b3:df:65:4e:58:1a:6a:fd:
7a:b3:09:9c:b7:d7:58:d1:e1:08:8f:1c:8c:d5:d4:
2f:78:6c:1f:3e:b3:27:05:41:35:49:80:ce:65:ff:
43:3c:73:90:4f:53:61:e2:5a:0a:3d:a5:23:19:71:
2f:99:91:db:f6:7b:36:37:7b:89:5d:0f:19:a6:ee:
f2:1e:da:1f:9a:2e:81:c2:7b:b5:f6:c4:e2:1e:bc:
04:72:4d:b4:e2:db:ac:c9:d5:5d:fe:89:d5:ad:74:
8a:e0:cc:67:62:87:4e:e5:fd:56:e1:be:98:0b:f7:
fa:dd:4f:42:f2:76:d7:aa:44:16:b7:dd:a1:e7:21:
87:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CA:B1:C4:77:BF:F8:C5:EB:53:00:AE:A0:A2:5F:51:16:E3:E7:5E
X509v3 Authority Key Identifier:
keyid:8E:6D:75:B4:E4:98:6F:AC:CB:61:4B:33:4E:45:D5:E0:39:35:2A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jm11tOSYb6zLYUszTkXV4Dk1Kpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:c4:80:ef:24:31:85:2e:02:b0:83:22:e2:fd:bb:7f:54:53:
6c:1d:21:6d:7b:7a:03:9c:75:6c:56:98:91:f3:7a:4b:bc:18:
eb:b9:6d:f9:3f:ec:93:04:5c:fa:ad:fb:4d:b2:39:1b:80:6b:
49:00:1c:c1:2c:9c:7f:63:1e:22:29:8c:aa:87:2d:4d:a4:52:
c4:a6:2d:f9:bc:11:80:cf:3d:2c:e1:06:eb:23:24:1f:c1:e0:
d5:af:13:e2:fc:54:0e:61:3f:54:9f:8f:cc:8d:f3:73:31:0a:
dc:a6:8d:18:a5:f3:4f:81:b5:9b:ed:1f:34:19:74:6d:26:20:
9b:81:62:5c:59:5f:89:6f:c8:36:5c:9f:d5:d8:7f:92:26:97:
ff:a7:ba:d1:02:9c:9d:8d:a0:10:7f:78:5f:5d:21:16:e6:6a:
1d:98:57:d4:d8:f1:22:3d:6f:09:ad:6b:fd:a7:4c:0f:06:bf:
43:90:ff:b6:11:2f:36:a4:bf:fa:71:61:fa:24:18:3b:d1:4e:
7a:50:61:a4:5e:cd:50:27:f4:98:e5:b8:c2:cc:35:e0:70:71:
45:4c:7b:99:48:df:d3:4d:5f:52:ff:7f:25:2c:e1:67:41:10:
87:c8:5d:da:ae:39:8f:e7:1b:73:82:5a:07:b9:f9:21:e5:d5:
9b:d9:af:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu+wCUMGRf8IufvBQSfLUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNmQ3NWI0ZTQ5ODZmYWNjYjYxNGIzMzRlNDVkNWUwMzkz
NTJhOWMwHhcNMjUwODIzMDcwMTU5WhcNMjUwODI0MDcwMTU5WjAzMTEwLwYDVQQD
EyhhY2NhYjFjNDc3YmZmOGM1ZWI1MzAwYWVhMGEyNWY1MTE2ZTNlNzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5PdvrEFzhyxv4rfdnAtOeZEjbpm
+m38QLZcznM8zd4UEa4uN+1jrtebDt5TdFg8F5USLjxpKzZ1QuYAa0O9WKGBj3JO
94Vgg/wChPvgRWBLUWgmSOXyYEXeHrE5ayuGac75OnKuRiqjDh9RDoFCFJtsAbyH
PNOJUwLWKN3bs99lTlgaav16swmct9dY0eEIjxyM1dQveGwfPrMnBUE1SYDOZf9D
PHOQT1Nh4loKPaUjGXEvmZHb9ns2N3uJXQ8Zpu7yHtofmi6Bwnu19sTiHrwEck20
4tusydVd/onVrXSK4MxnYodO5f1W4b6YC/f63U9C8nbXqkQWt92h5yGHKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKzKscR3v/jF61MArqCiX1EW4+deMB8GA1UdIwQY
MBaAFI5tdbTkmG+sy2FLM05F1eA5NSqcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam0xMXRPU1liNnpMWVVzelRrWFY0RGsxS3B3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9hY2E5OTQtZjNjMC00NWE0LWE2NDIt
NmQ3NjAyZDI0YzgzLzEvam0xMXRPU1liNnpMWVVzelRrWFY0RGsxS3B3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9hY2E5OTQtZjNjMC00NWE0LWE2NDItNmQ3NjAyZDI0Yzgz
LzEvam0xMXRPU1liNnpMWVVzelRrWFY0RGsxS3B3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAosSA7yQx
hS4CsIMi4v27f1RTbB0hbXt6A5x1bFaYkfN6S7wY67lt+T/skwRc+q37TbI5G4Br
SQAcwSycf2MeIimMqoctTaRSxKYt+bwRgM89LOEG6yMkH8Hg1a8T4vxUDmE/VJ+P
zI3zczEK3KaNGKXzT4G1m+0fNBl0bSYgm4FiXFlfiW/INlyf1dh/kiaX/6e60QKc
nY2gEH94X10hFuZqHZhX1NjxIj1vCa1r/adMDwa/Q5D/thEvNqS/+nFh+iQYO9FO
elBhpF7NUCf0mOW4wsw14HBxRUx7mUjf001fUv9/JSzhZ0EQh8hd2q45j+cbc4Ja
B7n5IeXVm9mvjw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:46 2025 by rpki-client