Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
File: jwhPOoC0od9IEWQqq415UWOaLlg.mft (raw, json)
Hash identifier: HOH4z8B1ISsgLkyw2LLRoHI0liJJvngR6gdt2ZqEQ0E=
Subject key identifier: AA:E7:ED:08:4B:5F:C4:3C:6C:6E:65:D1:29:8E:57:87:31:DD:B6:F8
Authority key identifier: 8F:08:4F:3A:80:B4:A1:DF:48:11:64:2A:AB:8D:79:51:63:9A:2E:58
Certificate issuer: /CN=8f084f3a80b4a1df4811642aab8d7951639a2e58
Certificate serial: 0198D4727049A061F4D6CB6E038BBDFD5D52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
Manifest number: 130F
Signing time: Sat 23 Aug 2025 01:02:06 +0000
Manifest this update: Sat 23 Aug 2025 01:02:06 +0000
Manifest next update: Sun 24 Aug 2025 01:02:06 +0000
Files and hashes: 1: gEYhgGeiO3CvO7L61btMp6FMtUk.roa (hash: t7slYmPenDTs/a8GzhHgCqRYrDeOIVUNfoJ1LIoBLf8=)
2: jwhPOoC0od9IEWQqq415UWOaLlg.crl (hash: al5iDWqUO6LSGV5kuYbCDqN67tX8+O18CqQOF4DVVoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:70:49:a0:61:f4:d6:cb:6e:03:8b:bd:fd:5d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f084f3a80b4a1df4811642aab8d7951639a2e58
Validity
Not Before: Aug 23 01:02:06 2025 GMT
Not After : Aug 24 01:02:06 2025 GMT
Subject: CN=aae7ed084b5fc43c6c6e65d1298e578731ddb6f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bc:41:4d:60:f1:ca:13:ca:e3:16:96:eb:67:
f1:62:71:4e:d4:1b:37:c1:9f:ad:5e:8c:e1:66:49:
83:44:f5:f8:32:f6:8b:54:5e:46:95:7c:59:5d:b6:
71:e9:0c:59:88:9c:73:58:61:b1:13:1e:25:5e:26:
c1:58:fe:fc:7d:9f:b7:db:bf:30:30:6a:2e:85:ea:
8d:0a:c0:9b:49:b3:55:13:20:e3:84:cc:af:d3:95:
f0:57:a3:13:eb:07:04:91:85:14:f1:40:85:f5:6e:
ab:e8:3b:73:f0:52:1f:9b:e7:e0:e8:51:6e:75:03:
7e:2e:20:77:75:9f:3d:00:ca:da:39:15:10:53:9b:
c1:c9:ee:48:c9:41:e8:03:79:60:d3:d2:65:48:ee:
79:97:ca:09:4a:1a:17:88:7e:4d:5e:34:98:d5:84:
cc:b1:5f:1a:19:ed:65:72:c6:44:92:bb:de:0a:08:
c1:5d:b9:4c:85:e8:32:43:ad:9b:fd:98:c4:35:ea:
9e:8c:e5:1e:d6:ad:67:61:84:40:11:ec:a3:ed:5c:
7c:e8:32:fd:de:f7:84:8c:79:60:31:24:f0:9f:1f:
a5:56:e6:10:ca:58:b5:f9:74:09:37:04:0b:ca:68:
57:62:88:ec:69:61:72:39:31:4f:d5:c2:ef:19:a9:
2a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E7:ED:08:4B:5F:C4:3C:6C:6E:65:D1:29:8E:57:87:31:DD:B6:F8
X509v3 Authority Key Identifier:
keyid:8F:08:4F:3A:80:B4:A1:DF:48:11:64:2A:AB:8D:79:51:63:9A:2E:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b6:fe:18:13:51:00:b0:8b:c0:1d:df:9f:56:96:00:f6:13:
5c:88:6c:ad:31:1b:c8:ef:80:13:67:d9:eb:36:a3:37:85:6c:
b4:f0:31:f7:c7:b3:ae:b0:35:d7:d5:63:eb:07:a7:c5:8e:a7:
54:96:c1:3e:6f:81:25:06:3b:76:2d:36:70:5e:96:72:e8:2f:
22:97:d4:15:9a:ef:65:27:7c:a3:17:b0:0b:18:bf:eb:28:80:
5b:a4:85:52:ce:d8:ca:82:2c:99:5f:96:f1:ad:7c:23:b2:7e:
7a:c5:15:7a:55:b6:c0:01:04:a5:0f:c2:80:5c:41:3c:88:0a:
19:cd:67:aa:7f:c9:71:2d:4d:df:d1:55:81:b1:a8:dd:5b:33:
e3:9f:91:9e:3b:89:ec:a6:e5:11:7d:27:bc:52:aa:37:05:93:
bc:78:b3:2d:6a:71:69:90:34:ac:26:85:88:b5:ec:03:ed:f6:
4a:87:81:b8:7c:55:68:4c:70:aa:69:d9:99:52:06:a4:fd:12:
49:6e:fa:e6:33:49:45:4e:60:d9:1e:c8:14:07:f0:7d:2d:5f:
5b:12:e5:b9:4f:ba:60:f6:75:3b:2e:26:00:ca:ed:8f:0a:f1:
68:01:1b:84:bb:c8:9c:5b:c5:f6:e3:aa:77:7f:88:5b:62:d5:
6e:1b:00:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcnBJoGH01stuA4u9/V1SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMDg0ZjNhODBiNGExZGY0ODExNjQyYWFiOGQ3OTUxNjM5
YTJlNTgwHhcNMjUwODIzMDEwMjA2WhcNMjUwODI0MDEwMjA2WjAzMTEwLwYDVQQD
EyhhYWU3ZWQwODRiNWZjNDNjNmM2ZTY1ZDEyOThlNTc4NzMxZGRiNmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurxBTWDxyhPK4xaW62fxYnFO1Bs3
wZ+tXozhZkmDRPX4MvaLVF5GlXxZXbZx6QxZiJxzWGGxEx4lXibBWP78fZ+3278w
MGouheqNCsCbSbNVEyDjhMyv05XwV6MT6wcEkYUU8UCF9W6r6Dtz8FIfm+fg6FFu
dQN+LiB3dZ89AMraORUQU5vBye5IyUHoA3lg09JlSO55l8oJShoXiH5NXjSY1YTM
sV8aGe1lcsZEkrveCgjBXblMhegyQ62b/ZjENeqejOUe1q1nYYRAEeyj7Vx86DL9
3veEjHlgMSTwnx+lVuYQyli1+XQJNwQLymhXYojsaWFyOTFP1cLvGakqCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKrn7QhLX8Q8bG5l0SmOV4cx3bb4MB8GA1UdIwQY
MBaAFI8ITzqAtKHfSBFkKquNeVFjmi5YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvandoUE9vQzBvZDlJRVdRcXE0MTVVV09hTGxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS84YzVmNWYtYTFiOC00YTJjLTliM2Mt
YjBmNmNjZDQ2Mzg3LzEvandoUE9vQzBvZDlJRVdRcXE0MTVVV09hTGxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS84YzVmNWYtYTFiOC00YTJjLTliM2MtYjBmNmNjZDQ2Mzg3
LzEvandoUE9vQzBvZDlJRVdRcXE0MTVVV09hTGxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANbb+GBNR
ALCLwB3fn1aWAPYTXIhsrTEbyO+AE2fZ6zajN4VstPAx98ezrrA119Vj6wenxY6n
VJbBPm+BJQY7di02cF6WcugvIpfUFZrvZSd8oxewCxi/6yiAW6SFUs7YyoIsmV+W
8a18I7J+esUVelW2wAEEpQ/CgFxBPIgKGc1nqn/JcS1N39FVgbGo3Vsz45+RnjuJ
7KblEX0nvFKqNwWTvHizLWpxaZA0rCaFiLXsA+32SoeBuHxVaExwqmnZmVIGpP0S
SW765jNJRU5g2R7IFAfwfS1fWxLluU+6YPZ1Oy4mAMrtjwrxaAEbhLvInFvF9uOq
d3+IW2LVbhsAbQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:06:16 2025 by rpki-client