Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
File: jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft (raw, json)
Hash identifier: 6NGa0oaCipI7cvpbX370WYIsg1fRpI9Hd/GaCekZYjs=
Subject key identifier: A2:FB:11:54:A2:26:37:3F:C9:CC:45:37:36:E9:A3:29:46:DE:68:9B
Authority key identifier: 8C:20:75:3D:D5:16:33:AA:2E:17:A9:2C:59:F4:C4:84:5D:87:6C:D3
Certificate issuer: /CN=8c20753dd51633aa2e17a92c59f4c4845d876cd3
Certificate serial: 0198545727E23E083EEED9D927681DE8FC9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
Manifest number: 0AAF
Signing time: Tue 29 Jul 2025 04:00:54 +0000
Manifest this update: Tue 29 Jul 2025 04:00:54 +0000
Manifest next update: Wed 30 Jul 2025 04:00:54 +0000
Files and hashes: 1: SGMdDeiUFAfk2xwIdXVeKa_LLHk.roa (hash: ZKIHPynyXeoLlT2qw3+kEeOK0uvKuoHZvZmp3cJSFCw=)
2: jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl (hash: Adx2E0skIWaYvqqFk+ygztW+tFMa+FLc8sKpUo6wryo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:57:27:e2:3e:08:3e:ee:d9:d9:27:68:1d:e8:fc:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c20753dd51633aa2e17a92c59f4c4845d876cd3
Validity
Not Before: Jul 29 04:00:54 2025 GMT
Not After : Jul 30 04:00:54 2025 GMT
Subject: CN=a2fb1154a226373fc9cc453736e9a32946de689b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:01:43:4e:99:c3:22:f0:e4:c1:9f:fb:24:2d:
f2:09:ff:4e:11:34:67:84:08:22:55:48:a8:69:04:
1e:84:ef:8c:a3:1b:0a:a4:8e:3d:b0:fd:3f:82:76:
56:a7:3c:6a:53:57:5c:69:b3:35:e3:24:8c:a3:04:
c6:fd:e5:ed:d1:02:11:80:80:10:a8:8b:ac:3a:86:
d7:b4:c6:5e:12:4c:77:fc:c0:0d:6c:94:28:cf:e2:
6f:b9:84:75:85:6d:2e:76:fc:81:dd:52:e0:cd:4b:
3c:2e:a9:ef:86:bd:99:55:eb:e5:c0:f4:53:10:c9:
91:e7:32:bf:ae:3b:1e:2a:46:92:9d:5c:54:c4:0d:
c9:a3:73:2a:13:7f:ab:83:9f:4f:ef:c0:51:ae:af:
26:fd:2a:d4:d9:bc:5e:89:f4:c7:e1:16:60:b7:5e:
98:14:b9:18:ed:d2:04:e6:ef:c9:cb:65:64:39:2f:
51:dd:b2:33:a1:66:ab:f6:7f:bc:20:9e:07:d8:66:
fd:cd:c7:98:07:a6:7f:a4:01:35:32:59:d9:b0:2e:
76:f6:b3:eb:e0:6c:5b:b9:46:d9:e1:e1:c5:2e:65:
82:36:cd:2a:af:72:1d:8d:de:e4:09:08:f2:49:c7:
8e:f8:f4:75:67:3e:d0:9b:e0:27:78:28:bb:dc:ad:
36:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FB:11:54:A2:26:37:3F:C9:CC:45:37:36:E9:A3:29:46:DE:68:9B
X509v3 Authority Key Identifier:
keyid:8C:20:75:3D:D5:16:33:AA:2E:17:A9:2C:59:F4:C4:84:5D:87:6C:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:1f:d2:98:86:a2:32:55:a3:e4:57:c6:06:16:7e:eb:5e:be:
d9:bc:af:58:4b:a1:c2:e3:3a:71:cb:2e:b4:b3:16:6c:33:27:
67:cd:48:7f:37:83:4f:66:8f:6c:a0:3e:08:d2:ad:dd:3f:e6:
4e:ba:84:0b:1d:f6:0e:2d:fe:b3:c2:79:8c:6e:ea:6c:68:8f:
9d:17:b6:6e:f5:54:65:31:4e:22:92:6b:78:83:fd:a7:b7:81:
b1:9d:ef:4e:28:74:16:98:94:71:f4:1f:6f:71:9a:5a:53:19:
16:d7:2b:30:a8:8e:3b:1f:70:e8:56:06:63:cd:3d:b7:89:45:
ea:6c:37:12:ae:5d:06:3d:f8:36:4d:9a:f3:ee:71:48:8b:d5:
cd:31:56:82:7c:10:ec:24:89:56:c4:b2:1c:20:e5:eb:52:36:
c8:6f:72:35:b3:46:16:96:9b:bd:13:79:cb:5e:95:f3:14:58:
3e:e4:eb:4f:c9:40:4d:14:ec:16:7f:d0:0d:d8:5e:5f:60:2a:
34:98:54:dc:aa:e4:b4:6d:26:82:06:25:46:78:c0:b2:58:f4:
ac:94:af:0b:3a:17:f1:86:22:de:ef:f3:85:67:91:d9:d9:4c:
26:d5:27:22:5d:ae:27:28:d4:2a:78:6f:1c:72:09:00:a9:06:
de:0e:bb:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhUVyfiPgg+7tnZJ2gd6PyaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMjA3NTNkZDUxNjMzYWEyZTE3YTkyYzU5ZjRjNDg0NWQ4
NzZjZDMwHhcNMjUwNzI5MDQwMDU0WhcNMjUwNzMwMDQwMDU0WjAzMTEwLwYDVQQD
EyhhMmZiMTE1NGEyMjYzNzNmYzljYzQ1MzczNmU5YTMyOTQ2ZGU2ODliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAFDTpnDIvDkwZ/7JC3yCf9OETRn
hAgiVUioaQQehO+MoxsKpI49sP0/gnZWpzxqU1dcabM14ySMowTG/eXt0QIRgIAQ
qIusOobXtMZeEkx3/MANbJQoz+JvuYR1hW0udvyB3VLgzUs8Lqnvhr2ZVevlwPRT
EMmR5zK/rjseKkaSnVxUxA3Jo3MqE3+rg59P78BRrq8m/SrU2bxeifTH4RZgt16Y
FLkY7dIE5u/Jy2VkOS9R3bIzoWar9n+8IJ4H2Gb9zceYB6Z/pAE1MlnZsC529rPr
4GxbuUbZ4eHFLmWCNs0qr3Idjd7kCQjySceO+PR1Zz7Qm+AneCi73K02BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKL7EVSiJjc/ycxFNzbpoylG3mibMB8GA1UdIwQY
MBaAFIwgdT3VFjOqLhepLFn0xIRdh2zTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakNCMVBkVVdNNm91RjZrc1dmVEVoRjJIYk5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS81YzNjZmEtYTM2My00MGE0LWJmYTYt
YzI5YmViMWE0NzM0LzEvakNCMVBkVVdNNm91RjZrc1dmVEVoRjJIYk5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS81YzNjZmEtYTM2My00MGE0LWJmYTYtYzI5YmViMWE0NzM0
LzEvakNCMVBkVVdNNm91RjZrc1dmVEVoRjJIYk5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFh/SmIai
MlWj5FfGBhZ+616+2byvWEuhwuM6ccsutLMWbDMnZ81IfzeDT2aPbKA+CNKt3T/m
TrqECx32Di3+s8J5jG7qbGiPnRe2bvVUZTFOIpJreIP9p7eBsZ3vTih0FpiUcfQf
b3GaWlMZFtcrMKiOOx9w6FYGY809t4lF6mw3Eq5dBj34Nk2a8+5xSIvVzTFWgnwQ
7CSJVsSyHCDl61I2yG9yNbNGFpabvRN5y16V8xRYPuTrT8lATRTsFn/QDdheX2Aq
NJhU3KrktG0mggYlRnjAslj0rJSvCzoX8YYi3u/zhWeR2dlMJtUnIl2uJyjUKnhv
HHIJAKkG3g67LQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 12:06:02 2025 by rpki-client