Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft
File: jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft (raw, json)
Hash identifier: iEVtfdtIyd3DnXOYLVNLrAZLCjH3Px9FZ0TCSg0wVBw=
Subject key identifier: 0E:27:F5:84:8D:40:25:08:D7:D9:18:72:72:E4:B3:49:4D:C1:90:BA
Authority key identifier: 8D:84:3B:57:D0:AF:CC:11:2F:E3:89:66:8B:F6:75:D8:0D:82:23:DA
Certificate issuer: /CN=8d843b57d0afcc112fe389668bf675d80d8223da
Certificate serial: 01984A41364A4C54B26BC8466F3F2E928596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYQ7V9CvzBEv44lmi_Z12A2CI9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft
Manifest number: 0725
Signing time: Sun 27 Jul 2025 05:00:44 +0000
Manifest this update: Sun 27 Jul 2025 05:00:44 +0000
Manifest next update: Mon 28 Jul 2025 05:00:44 +0000
Files and hashes: 1: iKKb1X29tTU2k_RZJyC1P6S0W1I.roa (hash: JYbd5SDgMPm4EIN7ny/Mr7yif1cItUNdM4vZHpLmqsU=)
2: jYQ7V9CvzBEv44lmi_Z12A2CI9o.crl (hash: BYgzH9mQKGuXnntTS930+MMnHIIujjeFvIXJhgAgA4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYQ7V9CvzBEv44lmi_Z12A2CI9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:36:4a:4c:54:b2:6b:c8:46:6f:3f:2e:92:85:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d843b57d0afcc112fe389668bf675d80d8223da
Validity
Not Before: Jul 27 05:00:44 2025 GMT
Not After : Jul 28 05:00:44 2025 GMT
Subject: CN=0e27f5848d402508d7d9187272e4b3494dc190ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0f:97:93:f1:1d:c5:5a:93:2c:0c:50:9f:6c:
3f:f0:76:dd:cd:f4:e7:7e:5f:94:16:43:a4:a4:93:
c4:43:ae:32:b1:7d:7f:f1:02:fe:f3:59:8f:05:d3:
a6:05:5c:b1:52:80:b2:6f:04:78:1a:45:c9:0d:a0:
8e:6b:c7:70:7f:af:f1:68:28:2d:30:da:28:df:f5:
c6:b0:5d:09:ec:42:7e:66:db:7a:57:1e:7e:8e:fb:
92:4f:8c:e8:75:20:4c:a3:c3:d2:8a:02:e8:69:fc:
b9:0d:0b:f2:05:8b:49:32:93:f1:cd:7b:ab:0d:f6:
22:ec:b6:7b:95:73:a6:34:03:d1:f7:e5:86:fc:a0:
c9:86:9b:52:81:bd:aa:03:b2:40:d8:ad:4e:28:49:
d5:94:2f:ef:5c:4c:45:f6:a9:be:65:33:8b:50:b2:
40:d9:d9:48:af:4e:91:5e:99:bf:4a:38:b3:a2:14:
a2:c2:a1:f7:91:ff:a3:0c:47:98:6d:31:e1:19:f4:
23:8f:6d:b8:bf:da:9c:44:57:02:49:f5:15:c9:6b:
79:05:23:d0:40:42:2e:a7:42:e6:a2:48:63:d7:0d:
f8:8b:6d:11:2a:b0:5a:cb:ca:36:c6:c3:a0:f6:7f:
da:6d:51:1f:eb:53:bd:62:ed:44:f6:91:04:52:91:
95:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:27:F5:84:8D:40:25:08:D7:D9:18:72:72:E4:B3:49:4D:C1:90:BA
X509v3 Authority Key Identifier:
keyid:8D:84:3B:57:D0:AF:CC:11:2F:E3:89:66:8B:F6:75:D8:0D:82:23:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYQ7V9CvzBEv44lmi_Z12A2CI9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:85:30:70:61:d5:0c:74:85:15:be:cf:33:48:fb:8c:0f:2f:
e5:f3:dd:f1:31:13:1b:4a:dc:60:d6:0e:89:7b:fa:ff:b0:cf:
bf:82:82:ec:48:2c:be:3a:76:8a:ed:b2:f6:9c:7d:b2:97:e0:
69:0e:01:f1:40:90:e8:e7:67:6b:93:30:15:cb:df:d7:f0:09:
42:7d:3d:4d:7d:2b:cf:2e:4c:05:90:fe:5d:2b:9f:6d:f7:ac:
b0:b5:2d:ee:a2:2f:7b:16:3c:fc:2f:be:ab:f7:9a:0c:f8:f1:
a4:a7:86:a2:1a:04:32:5a:0d:a5:e3:f2:32:a3:b3:1b:b1:fb:
fe:f7:25:18:21:9a:c1:b5:51:0b:be:4c:c3:c5:48:c7:3b:e3:
ee:5b:b9:75:f6:23:8a:27:ee:d5:2a:54:c1:27:17:22:c4:af:
34:18:3a:05:be:72:ef:7f:b8:57:de:6a:8f:05:ab:75:1a:df:
e5:9c:ac:9c:6c:7f:d6:60:f3:31:f6:35:b3:73:b5:50:79:1d:
b6:f9:57:f1:01:5a:43:a6:11:44:19:2e:0a:23:ec:f4:d1:b3:
77:5e:c4:bd:5c:59:ad:98:2c:d6:ce:3a:70:9b:cd:c1:40:c0:
8e:8c:ad:b6:84:0d:0e:a0:47:18:6d:94:2e:e0:0f:68:05:3f:
52:9e:b2:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQTZKTFSya8hGbz8ukoWWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkODQzYjU3ZDBhZmNjMTEyZmUzODk2NjhiZjY3NWQ4MGQ4
MjIzZGEwHhcNMjUwNzI3MDUwMDQ0WhcNMjUwNzI4MDUwMDQ0WjAzMTEwLwYDVQQD
EygwZTI3ZjU4NDhkNDAyNTA4ZDdkOTE4NzI3MmU0YjM0OTRkYzE5MGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtw+Xk/EdxVqTLAxQn2w/8HbdzfTn
fl+UFkOkpJPEQ64ysX1/8QL+81mPBdOmBVyxUoCybwR4GkXJDaCOa8dwf6/xaCgt
MNoo3/XGsF0J7EJ+Ztt6Vx5+jvuST4zodSBMo8PSigLoafy5DQvyBYtJMpPxzXur
DfYi7LZ7lXOmNAPR9+WG/KDJhptSgb2qA7JA2K1OKEnVlC/vXExF9qm+ZTOLULJA
2dlIr06RXpm/SjizohSiwqH3kf+jDEeYbTHhGfQjj224v9qcRFcCSfUVyWt5BSPQ
QEIup0Lmokhj1w34i20RKrBay8o2xsOg9n/abVEf61O9Yu1E9pEEUpGVhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA4n9YSNQCUI19kYcnLks0lNwZC6MB8GA1UdIwQY
MBaAFI2EO1fQr8wRL+OJZov2ddgNgiPaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvallRN1Y5Q3Z6QkV2NDRsbWlfWjEyQTJDSTlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8xYWMyNzEtNmJlOS00YTE0LTg2MTYt
NDY1YTMzM2FiNDQ0LzEvallRN1Y5Q3Z6QkV2NDRsbWlfWjEyQTJDSTlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8xYWMyNzEtNmJlOS00YTE0LTg2MTYtNDY1YTMzM2FiNDQ0
LzEvallRN1Y5Q3Z6QkV2NDRsbWlfWjEyQTJDSTlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMoUwcGHV
DHSFFb7PM0j7jA8v5fPd8TETG0rcYNYOiXv6/7DPv4KC7Egsvjp2iu2y9px9spfg
aQ4B8UCQ6Odna5MwFcvf1/AJQn09TX0rzy5MBZD+XSufbfessLUt7qIvexY8/C++
q/eaDPjxpKeGohoEMloNpePyMqOzG7H7/vclGCGawbVRC75Mw8VIxzvj7lu5dfYj
iifu1SpUwScXIsSvNBg6Bb5y73+4V95qjwWrdRrf5ZysnGx/1mDzMfY1s3O1UHkd
tvlX8QFaQ6YRRBkuCiPs9NGzd17EvVxZrZgs1s46cJvNwUDAjoyttoQNDqBHGG2U
LuAPaAU/Up6yfg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:33:28 2025 by rpki-client