Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
File: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft (raw, json)
Hash identifier: /JEY4qY5gRp4M2JiJJghSNjN9613ofD4+PGIzKzjmLg=
Subject key identifier: 7D:63:38:8C:2D:A6:83:0E:6C:6E:9F:4E:E0:D4:51:17:68:F3:33:E3
Authority key identifier: 8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
Certificate issuer: /CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Certificate serial: 0197B70EA92E7BDFEDCCD9B5F3723EF2E6CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
Manifest number: 12C4
Signing time: Sat 28 Jun 2025 15:01:20 +0000
Manifest this update: Sat 28 Jun 2025 15:01:20 +0000
Manifest next update: Sun 29 Jun 2025 15:01:20 +0000
Files and hashes: 1: Mb4j7pTwnHdFis5YhC0cWwhGfvs.roa (hash: kej8GZGhXkuRFLiOac4gIMVqJKtq/1UUpjpCTSVbu1g=)
2: hdN3TWiGF-v4lVfB-_MZbJp6BC0.roa (hash: FBzq8JkLasFx9OYifFuQNiKO30TthScuWNWKtgQWVSE=)
3: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl (hash: dcC2ebdA0Am+dJoBeeS4YViIqeMSXQlk7DlQnZJ/Qas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:a9:2e:7b:df:ed:cc:d9:b5:f3:72:3e:f2:e6:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Validity
Not Before: Jun 28 15:01:20 2025 GMT
Not After : Jun 29 15:01:20 2025 GMT
Subject: CN=7d63388c2da6830e6c6e9f4ee0d4511768f333e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:85:00:dc:34:00:d8:6f:0e:14:2f:0d:73:98:
7c:36:ac:43:02:d9:e9:b6:f4:7c:fe:d7:6a:43:00:
2b:b0:fe:a4:1a:5d:19:62:21:ef:b9:48:12:80:72:
42:00:02:17:9f:1c:14:3a:d8:b0:49:02:68:90:f4:
a0:c2:10:05:b3:de:d3:e0:94:0f:d5:50:6b:73:50:
7e:eb:b8:c3:d8:33:e0:63:a8:2c:6a:45:35:b5:95:
48:e8:6d:2b:dd:10:82:46:42:cb:c9:a9:02:25:48:
7f:d5:40:6c:67:57:ce:5a:cd:83:89:f9:50:6b:0b:
64:cd:a3:af:ea:b7:c8:04:65:90:3a:42:a8:97:6d:
81:60:78:aa:69:8a:3c:69:38:b0:ca:cd:fd:f4:a3:
aa:b1:9f:70:95:3d:22:48:e6:e9:c5:aa:a7:64:0b:
f2:59:79:36:27:78:26:ec:b8:b7:f9:0a:be:4d:45:
53:1a:ef:26:f8:da:01:42:28:1b:f5:93:1d:9c:a2:
2a:a8:7e:a8:11:71:7b:32:ec:a9:89:78:4d:be:ef:
8b:ef:63:b2:56:28:ac:f7:30:70:cd:24:ce:33:66:
5b:b4:a7:12:6b:08:28:73:ac:66:d6:ce:41:f3:53:
df:b9:5f:61:a8:43:de:50:21:20:43:7b:23:9c:8a:
ae:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:63:38:8C:2D:A6:83:0E:6C:6E:9F:4E:E0:D4:51:17:68:F3:33:E3
X509v3 Authority Key Identifier:
keyid:8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ec:d7:c3:da:b3:a5:a5:73:a3:24:9b:f2:d3:07:ba:9b:ae:
1f:19:5c:a6:a6:ec:c7:2b:79:57:ab:e5:25:07:57:75:e4:fd:
59:54:2f:bc:27:c4:28:3f:e8:28:fa:f2:09:2a:84:31:f9:c0:
0c:3f:96:00:00:63:4b:b2:bf:03:6f:6f:8e:a3:04:f6:5a:7f:
d3:6f:5a:0d:71:99:a3:0b:b4:c9:38:a5:c1:50:97:13:a2:cd:
52:3a:6e:82:6b:f0:d1:4b:66:e8:9e:95:4f:02:97:f8:13:34:
c3:d8:47:da:62:29:68:60:b8:99:5e:2c:82:1b:c4:e1:ec:2c:
e5:2a:2c:33:e1:7e:fb:4b:23:00:f0:e3:15:01:27:88:9c:2f:
91:92:63:1d:29:5e:cf:5a:38:24:4e:21:bb:6a:27:dc:20:71:
42:10:05:1e:45:1d:d5:ed:b9:2b:c7:ed:0b:80:9f:f3:81:7b:
79:26:fb:ff:7d:61:99:cf:52:c8:ee:b8:38:71:ba:05:eb:21:
14:43:6c:2e:0e:e9:16:44:54:35:f5:3a:3f:f9:81:e0:fc:b3:
a5:10:34:ea:8c:5a:17:b9:d8:b3:07:be:42:dc:d1:bd:94:45:
13:3c:be:0d:a2:c1:5f:6a:8a:2e:7e:79:14:fd:3c:40:6c:5b:
e0:8e:ec:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dqkue9/tzNm183I+8ubKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkZmYxYjBjZTlmNDg2YTY3ZTYzZDNmMGQwZTY4OGEyNGY3
MDBjN2MwHhcNMjUwNjI4MTUwMTIwWhcNMjUwNjI5MTUwMTIwWjAzMTEwLwYDVQQD
Eyg3ZDYzMzg4YzJkYTY4MzBlNmM2ZTlmNGVlMGQ0NTExNzY4ZjMzM2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4UA3DQA2G8OFC8Nc5h8NqxDAtnp
tvR8/tdqQwArsP6kGl0ZYiHvuUgSgHJCAAIXnxwUOtiwSQJokPSgwhAFs97T4JQP
1VBrc1B+67jD2DPgY6gsakU1tZVI6G0r3RCCRkLLyakCJUh/1UBsZ1fOWs2DiflQ
awtkzaOv6rfIBGWQOkKol22BYHiqaYo8aTiwys399KOqsZ9wlT0iSObpxaqnZAvy
WXk2J3gm7Li3+Qq+TUVTGu8m+NoBQigb9ZMdnKIqqH6oEXF7MuypiXhNvu+L72Oy
Viis9zBwzSTOM2ZbtKcSawgoc6xm1s5B81PfuV9hqEPeUCEgQ3sjnIqusQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1jOIwtpoMObG6fTuDUURdo8zPjMB8GA1UdIwQY
MBaAFI3/Gwzp9IamfmPT8NDmiKJPcAx8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamY4YkRPbjBocVotWTlQdzBPYUlvazl3REh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80YWY2NGEtNTdmOC00NjQzLTg3YmEt
ZDg3YjcwMjZhM2ZmLzEvamY4YkRPbjBocVotWTlQdzBPYUlvazl3REh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi80YWY2NGEtNTdmOC00NjQzLTg3YmEtZDg3YjcwMjZhM2Zm
LzEvamY4YkRPbjBocVotWTlQdzBPYUlvazl3REh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAruzXw9qz
paVzoySb8tMHupuuHxlcpqbsxyt5V6vlJQdXdeT9WVQvvCfEKD/oKPryCSqEMfnA
DD+WAABjS7K/A29vjqME9lp/029aDXGZowu0yTilwVCXE6LNUjpugmvw0Utm6J6V
TwKX+BM0w9hH2mIpaGC4mV4sghvE4ews5SosM+F++0sjAPDjFQEniJwvkZJjHSle
z1o4JE4hu2on3CBxQhAFHkUd1e25K8ftC4Cf84F7eSb7/31hmc9SyO64OHG6Besh
FENsLg7pFkRUNfU6P/mB4PyzpRA06oxaF7nYswe+QtzRvZRFEzy+DaLBX2qKLn55
FP08QGxb4I7sjA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:38 2025 by rpki-client