Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
File: jCgv8-x8uBt45iinNRdkjWIpyrc.mft (raw, json)
Hash identifier: nwEoT/s1/qtELwILRl+MqG9efO0ysh9d3qf6WPAduB8=
Subject key identifier: 08:FF:D6:1F:FC:33:81:C6:EC:2F:B2:DE:3C:34:40:29:E5:F7:8D:A7
Authority key identifier: 8C:28:2F:F3:EC:7C:B8:1B:78:E6:28:A7:35:17:64:8D:62:29:CA:B7
Certificate issuer: /CN=8c282ff3ec7cb81b78e628a73517648d6229cab7
Certificate serial: 0197B7456005233B6244F35F1F6DA9BBC125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
Manifest number: 010D
Signing time: Sat 28 Jun 2025 16:01:06 +0000
Manifest this update: Sat 28 Jun 2025 16:01:06 +0000
Manifest next update: Sun 29 Jun 2025 16:01:06 +0000
Files and hashes: 1: 8uYJC_uUQib3K90k6tRQR4c4tec.roa (hash: UqH3qyVznQeucD/ZQnnEVXPDpOPJe9Ni19S/sMmHYVQ=)
2: jCgv8-x8uBt45iinNRdkjWIpyrc.crl (hash: XSY3VLbJgd3AcWwcU1kbltZ2YXCdxdbEdz4//v0h6UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:60:05:23:3b:62:44:f3:5f:1f:6d:a9:bb:c1:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c282ff3ec7cb81b78e628a73517648d6229cab7
Validity
Not Before: Jun 28 16:01:06 2025 GMT
Not After : Jun 29 16:01:06 2025 GMT
Subject: CN=08ffd61ffc3381c6ec2fb2de3c344029e5f78da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:40:a3:8a:94:60:ba:56:7e:78:ac:18:4a:5e:
4b:da:45:80:71:62:86:cd:0c:9b:0d:c1:af:5a:a9:
fb:b0:5e:d4:29:ae:6d:dc:6c:7b:59:4d:62:0e:b0:
95:19:a9:4c:fd:ef:03:41:d6:87:05:d4:10:d3:ea:
58:8e:74:27:5c:71:f0:ad:02:fa:49:32:80:2c:49:
af:4e:9d:ae:95:a9:bc:f9:c9:97:54:43:d8:a0:57:
11:d0:43:e5:f8:0f:9b:43:06:74:09:03:55:1d:e7:
bb:ba:49:b9:26:e6:44:ac:6e:bb:d9:f4:d9:0e:fb:
6a:b0:9b:24:cc:29:c4:e3:2a:8f:b8:ec:99:20:28:
86:32:33:8b:55:a5:2b:f9:6b:9f:0c:5c:af:93:57:
f3:ce:6b:70:06:d9:6e:90:ae:db:01:d1:2f:c8:4d:
11:ba:9e:c0:f5:36:d1:e7:13:bd:65:60:5a:fe:a2:
cd:80:8d:32:ae:5d:7b:78:0b:b0:2b:03:b7:e6:1e:
17:74:53:0d:f3:1c:a1:c7:63:d8:39:f7:98:1b:20:
a6:3f:dc:63:28:4e:95:0d:27:09:11:30:f7:a2:39:
bb:8c:e5:e9:70:63:cd:12:60:03:ae:48:ce:03:67:
8b:60:82:d7:89:dc:03:4f:61:07:ec:65:07:44:77:
b1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:FF:D6:1F:FC:33:81:C6:EC:2F:B2:DE:3C:34:40:29:E5:F7:8D:A7
X509v3 Authority Key Identifier:
keyid:8C:28:2F:F3:EC:7C:B8:1B:78:E6:28:A7:35:17:64:8D:62:29:CA:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b4:f3:d8:39:11:9b:27:db:86:b7:3f:43:73:e5:0d:cd:95:
ed:8c:c1:3c:d7:f1:2a:84:8c:55:4a:27:5d:b9:63:1e:b7:f5:
34:9d:e1:a8:e5:55:f8:84:4e:d9:1d:37:6d:81:3d:dd:d0:1f:
9a:cf:f3:00:8b:94:30:e0:d9:b5:01:89:9d:c8:15:cf:4f:58:
5d:4e:98:48:33:cf:90:fa:23:51:4f:dc:9d:5b:e7:14:69:2b:
cc:01:3e:30:bb:db:15:5c:f8:b4:c0:35:0f:79:60:b4:0a:3e:
f1:3f:42:a6:3e:a6:e5:01:94:58:be:01:f4:36:c8:6d:40:2e:
e2:0e:20:fd:56:30:5e:f7:69:8f:30:a9:0a:e4:b5:29:47:52:
f1:24:55:f5:9d:9d:52:9e:72:45:84:b8:cd:cc:e8:b9:13:b8:
2f:40:39:93:8e:5f:42:07:40:39:3b:85:83:99:73:30:2d:ca:
c9:0b:bc:84:02:ce:89:ca:23:a9:54:67:86:34:51:fd:8b:57:
6f:13:d7:83:c9:a0:8a:8b:ee:d9:c0:3b:f8:2b:be:a4:9d:b0:
0e:a4:34:b9:72:a2:61:bf:31:e8:b1:92:63:af:e5:48:ce:c2:
45:9a:56:68:31:b5:6d:32:04:08:30:3f:13:74:9c:bd:b5:0d:
a5:89:de:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RWAFIztiRPNfH22pu8ElMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMjgyZmYzZWM3Y2I4MWI3OGU2MjhhNzM1MTc2NDhkNjIy
OWNhYjcwHhcNMjUwNjI4MTYwMTA2WhcNMjUwNjI5MTYwMTA2WjAzMTEwLwYDVQQD
EygwOGZmZDYxZmZjMzM4MWM2ZWMyZmIyZGUzYzM0NDAyOWU1Zjc4ZGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0CjipRgulZ+eKwYSl5L2kWAcWKG
zQybDcGvWqn7sF7UKa5t3Gx7WU1iDrCVGalM/e8DQdaHBdQQ0+pYjnQnXHHwrQL6
STKALEmvTp2ulam8+cmXVEPYoFcR0EPl+A+bQwZ0CQNVHee7ukm5JuZErG672fTZ
DvtqsJskzCnE4yqPuOyZICiGMjOLVaUr+WufDFyvk1fzzmtwBtlukK7bAdEvyE0R
up7A9TbR5xO9ZWBa/qLNgI0yrl17eAuwKwO35h4XdFMN8xyhx2PYOfeYGyCmP9xj
KE6VDScJETD3ojm7jOXpcGPNEmADrkjOA2eLYILXidwDT2EH7GUHRHex3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAj/1h/8M4HG7C+y3jw0QCnl942nMB8GA1UdIwQY
MBaAFIwoL/PsfLgbeOYopzUXZI1iKcq3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakNndjgteDh1QnQ0NWlpbk5SZGtqV0lweXJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi85ZjVmMTMtOGY5Ny00MjEwLWFjYWUt
NmNhM2U5ZDNlNzhkLzEvakNndjgteDh1QnQ0NWlpbk5SZGtqV0lweXJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi85ZjVmMTMtOGY5Ny00MjEwLWFjYWUtNmNhM2U5ZDNlNzhk
LzEvakNndjgteDh1QnQ0NWlpbk5SZGtqV0lweXJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb7Tz2DkR
myfbhrc/Q3PlDc2V7YzBPNfxKoSMVUonXbljHrf1NJ3hqOVV+IRO2R03bYE93dAf
ms/zAIuUMODZtQGJncgVz09YXU6YSDPPkPojUU/cnVvnFGkrzAE+MLvbFVz4tMA1
D3lgtAo+8T9Cpj6m5QGUWL4B9DbIbUAu4g4g/VYwXvdpjzCpCuS1KUdS8SRV9Z2d
Up5yRYS4zczouRO4L0A5k45fQgdAOTuFg5lzMC3KyQu8hALOicojqVRnhjRR/YtX
bxPXg8mgiovu2cA7+Cu+pJ2wDqQ0uXKiYb8x6LGSY6/lSM7CRZpWaDG1bTIECDA/
E3ScvbUNpYneVw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:03 2025 by rpki-client