Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
File: jAx_Lrq3yWERyuaHzt0c0um81Wo.mft (raw, json)
Hash identifier: EPN32iZGixOhFcV57U6d3SfgqmGS0sR4WJE5OiooTU0=
Subject key identifier: E1:A6:20:0F:6A:83:EB:FB:EB:A8:5D:3F:CF:8A:96:C7:4C:08:A3:23
Authority key identifier: 8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
Certificate issuer: /CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Certificate serial: 019847E46A233A2763EA8A3B89D69F3CD7BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 18:00:08 +0000
Manifest this update: Sat 26 Jul 2025 18:00:08 +0000
Manifest next update: Sun 27 Jul 2025 18:00:08 +0000
Files and hashes: 1: CLLXw20tFXDHP2NnWdXuz6OtVIE.roa (hash: fyANJPQO+a+aRIBA049SI7Qf8CVSPhtzXXD8t/DgeGs=)
2: f46_qQD3jnenHxB8isMlElB8Ow8.roa (hash: xiaUuaIqDN3MaDb9piyX8u90zRoK0nA4gMNUAGOcErw=)
3: jAx_Lrq3yWERyuaHzt0c0um81Wo.crl (hash: Cz23lpT0A3T7+3bbnbrUYDwhZs4GFbMXKKbIcli0Y6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:6a:23:3a:27:63:ea:8a:3b:89:d6:9f:3c:d7:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Validity
Not Before: Jul 26 18:00:08 2025 GMT
Not After : Jul 27 18:00:08 2025 GMT
Subject: CN=e1a6200f6a83ebfbeba85d3fcf8a96c74c08a323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:76:1f:2e:05:3f:e8:d2:13:0c:59:75:b7:ab:
29:5a:da:65:89:01:a3:e7:ba:af:df:68:34:27:8f:
e1:05:f3:0f:46:66:52:a7:10:5a:9f:98:31:5b:2d:
38:9d:02:3a:98:94:bf:a1:d3:3b:25:5f:d4:f0:15:
78:0e:a3:40:7c:74:71:59:2a:e7:86:a2:d6:82:e8:
41:01:5e:1e:30:0f:ec:43:2a:5c:a3:bb:83:76:da:
98:13:a3:cc:91:52:21:3f:11:c0:65:f6:23:9f:e0:
91:ab:17:98:fa:e5:01:4f:3b:ec:da:3e:d0:18:05:
e8:8f:49:ce:5f:15:50:a2:9c:2f:b0:9a:3e:ad:44:
54:30:9f:39:75:9e:fe:6c:d5:9d:2c:29:84:64:e5:
bf:46:37:c0:1b:1e:63:82:6b:c5:82:8b:8f:6b:6b:
d3:24:bb:22:d1:57:19:5c:95:5e:d7:7a:e6:5c:e2:
42:17:80:bc:94:b7:60:7e:99:89:ca:2d:00:9a:8b:
9e:51:e2:56:0a:c0:17:c7:57:61:20:47:7a:83:1a:
d3:80:76:88:29:f0:ac:dc:2f:55:2c:44:b4:31:d2:
28:70:e7:0a:ee:21:00:c7:39:41:fd:43:03:9b:b0:
69:ac:84:a9:b6:d7:95:9a:80:98:fe:7f:a5:59:2f:
2e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A6:20:0F:6A:83:EB:FB:EB:A8:5D:3F:CF:8A:96:C7:4C:08:A3:23
X509v3 Authority Key Identifier:
keyid:8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:1e:db:95:86:02:5a:70:8a:00:3b:d2:6e:3e:3d:00:e9:56:
23:1e:10:37:b8:75:57:cb:aa:da:38:b3:34:e5:78:fd:29:8a:
0c:f6:fd:a9:1e:ba:9f:5d:fc:98:f4:50:0d:64:f3:0b:45:e3:
ec:a9:8c:8f:14:7b:e1:af:77:32:cb:af:f6:ba:9b:f1:c4:15:
0c:25:d8:81:23:74:6b:9d:95:5f:d1:d9:58:31:57:0c:8a:b5:
98:98:ab:9a:ec:08:df:4e:fc:70:8c:cc:49:fb:e6:76:0f:1a:
65:b2:bd:45:45:0f:8d:06:b1:f9:51:c7:58:95:1c:45:72:fd:
a8:a4:4c:e8:2e:0d:24:9f:f1:1e:fa:9f:a2:f1:6e:24:74:51:
1a:25:14:4f:b6:08:46:2b:37:9b:9f:ea:7c:91:5b:6f:89:ee:
27:5b:af:db:5f:12:15:98:37:98:03:21:3c:84:c9:7f:31:22:
0e:92:05:17:fa:0d:2f:98:99:a5:d4:8b:69:f4:f6:b7:04:96:
50:fd:94:f0:60:63:eb:ab:b3:c0:1a:28:9f:76:e2:fc:a0:22:
d5:cf:6c:89:7d:59:ca:b8:66:92:23:db:77:6c:b3:20:14:46:
3d:fa:a4:c0:1d:d5:5e:5d:0f:6d:3f:99:61:8b:29:29:50:02:
1b:7f:a0:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhH5GojOidj6oo7idafPNe+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMGM3ZjJlYmFiN2M5NjExMWNhZTY4N2NlZGQxY2QyZTli
Y2Q1NmEwHhcNMjUwNzI2MTgwMDA4WhcNMjUwNzI3MTgwMDA4WjAzMTEwLwYDVQQD
EyhlMWE2MjAwZjZhODNlYmZiZWJhODVkM2ZjZjhhOTZjNzRjMDhhMzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHYfLgU/6NITDFl1t6spWtpliQGj
57qv32g0J4/hBfMPRmZSpxBan5gxWy04nQI6mJS/odM7JV/U8BV4DqNAfHRxWSrn
hqLWguhBAV4eMA/sQypco7uDdtqYE6PMkVIhPxHAZfYjn+CRqxeY+uUBTzvs2j7Q
GAXoj0nOXxVQopwvsJo+rURUMJ85dZ7+bNWdLCmEZOW/RjfAGx5jgmvFgouPa2vT
JLsi0VcZXJVe13rmXOJCF4C8lLdgfpmJyi0AmoueUeJWCsAXx1dhIEd6gxrTgHaI
KfCs3C9VLES0MdIocOcK7iEAxzlB/UMDm7BprISptteVmoCY/n+lWS8uIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOGmIA9qg+v766hdP8+KlsdMCKMjMB8GA1UdIwQY
MBaAFIwMfy66t8lhEcrmh87dHNLpvNVqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakF4X0xycTN5V0VSeXVhSHp0MGMwdW04MVdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9jNzYzODMtNTkxYy00Y2RlLWIyY2Yt
MjUxZDc0ZWQ3NzU0LzEvakF4X0xycTN5V0VSeXVhSHp0MGMwdW04MVdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9jNzYzODMtNTkxYy00Y2RlLWIyY2YtMjUxZDc0ZWQ3NzU0
LzEvakF4X0xycTN5V0VSeXVhSHp0MGMwdW04MVdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUB7blYYC
WnCKADvSbj49AOlWIx4QN7h1V8uq2jizNOV4/SmKDPb9qR66n138mPRQDWTzC0Xj
7KmMjxR74a93Msuv9rqb8cQVDCXYgSN0a52VX9HZWDFXDIq1mJirmuwI3078cIzM
Sfvmdg8aZbK9RUUPjQax+VHHWJUcRXL9qKRM6C4NJJ/xHvqfovFuJHRRGiUUT7YI
Ris3m5/qfJFbb4nuJ1uv218SFZg3mAMhPITJfzEiDpIFF/oNL5iZpdSLafT2twSW
UP2U8GBj66uzwBoon3bi/KAi1c9siX1ZyrhmkiPbd2yzIBRGPfqkwB3VXl0PbT+Z
YYspKVACG3+gwQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:56:44 2025 by rpki-client