Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
File: jBPrj9nY20toqWnI_91IRoAqsKs.mft (raw, json)
Hash identifier: HkjKlK3WZEnfjRbcbC0Ixt/CdfodYWdnxsg0HdczUwQ=
Subject key identifier: DF:6E:F0:65:7C:12:2F:7A:3E:2E:D2:43:5F:B1:B1:0E:05:CC:4E:2E
Authority key identifier: 8C:13:EB:8F:D9:D8:DB:4B:68:A9:69:C8:FF:DD:48:46:80:2A:B0:AB
Certificate issuer: /CN=8c13eb8fd9d8db4b68a969c8ffdd4846802ab0ab
Certificate serial: 0198499BF34FEC0153F04A159AB360654B87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
Manifest number: 0984
Signing time: Sun 27 Jul 2025 02:00:13 +0000
Manifest this update: Sun 27 Jul 2025 02:00:13 +0000
Manifest next update: Mon 28 Jul 2025 02:00:13 +0000
Files and hashes: 1: djq23V4eA0hrtL3JjtzZq_jD0sw.roa (hash: u2ZEUIKDADE8gsgv3Z8cy40l1mRaFT3X8dzep8zrVh8=)
2: jBPrj9nY20toqWnI_91IRoAqsKs.crl (hash: 56aoMTSnEgZYm+TM8o4bJEAuat3Ld4R7FNORtCyxaK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9b:f3:4f:ec:01:53:f0:4a:15:9a:b3:60:65:4b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c13eb8fd9d8db4b68a969c8ffdd4846802ab0ab
Validity
Not Before: Jul 27 02:00:13 2025 GMT
Not After : Jul 28 02:00:13 2025 GMT
Subject: CN=df6ef0657c122f7a3e2ed2435fb1b10e05cc4e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e5:95:ae:cb:59:8c:45:19:41:26:cb:e6:8d:
3a:f9:9a:7d:0f:9a:50:6d:d5:31:1b:c0:c6:8d:d7:
c5:81:db:cd:dc:f2:66:c7:6e:90:87:70:41:66:d4:
45:5f:71:3a:95:00:a1:91:7b:32:59:b4:2a:e3:ad:
f1:bd:8b:57:dd:e4:90:95:71:d0:2e:dd:a9:26:51:
c1:54:6a:ec:50:bc:49:ed:fa:ee:08:97:f2:ca:56:
a0:fb:c3:0b:bc:fd:c0:74:21:fe:4a:3f:b7:11:c2:
37:04:1d:9d:1d:3b:85:c9:82:eb:49:b5:bb:86:ae:
67:5b:76:ce:ac:1d:78:cc:c7:db:28:cc:cf:ed:a4:
64:82:b1:0d:ae:32:69:4c:cb:05:93:6a:4b:da:4c:
2a:bb:cb:0a:77:f5:74:ac:0a:55:be:39:e4:0f:c2:
b9:ad:5a:85:5b:e8:3d:d4:1b:05:c5:cc:c7:9c:3a:
5d:05:ef:c5:3e:6f:66:88:a2:58:ee:01:9c:7a:47:
17:89:6e:72:a6:cc:ed:ab:e9:82:c7:c3:00:49:31:
83:d6:25:fd:b5:fa:24:a0:26:b8:9c:42:51:35:17:
38:d4:d0:68:a2:d3:f0:f2:8e:57:f3:86:5d:e3:b8:
3f:73:7f:08:2a:6b:dd:eb:28:bb:b6:c5:2a:dd:29:
fd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:6E:F0:65:7C:12:2F:7A:3E:2E:D2:43:5F:B1:B1:0E:05:CC:4E:2E
X509v3 Authority Key Identifier:
keyid:8C:13:EB:8F:D9:D8:DB:4B:68:A9:69:C8:FF:DD:48:46:80:2A:B0:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:0e:6d:b9:41:54:d7:74:03:2e:b6:54:a0:32:51:9b:35:b9:
42:e8:5f:19:47:5a:aa:94:e1:82:26:1e:f8:e6:a5:43:31:86:
59:9c:66:46:3d:97:12:74:98:ee:85:29:ec:f6:90:af:90:3a:
16:e4:bd:cd:ae:7d:b4:43:f7:55:cd:6c:ff:53:5b:ec:41:ed:
c1:54:fe:57:62:d6:67:61:01:e2:ac:9f:b6:e6:fb:90:3d:83:
d3:cc:9c:82:80:52:6b:ab:f3:db:de:24:27:e1:9e:b7:0a:73:
0f:41:7f:e6:63:17:5b:a4:4f:85:cd:a4:17:6e:04:39:b0:e1:
0f:7e:5c:ad:8d:b4:b9:44:03:ef:bc:65:df:ba:65:ca:3a:cd:
a8:e0:38:5c:be:b5:8f:17:8e:75:9d:f5:04:d1:22:4e:59:be:
9f:69:ca:17:23:b2:b1:fc:c2:fd:e5:61:b9:ce:d0:29:7f:4a:
40:a3:54:7a:55:80:08:46:51:f5:78:e2:35:3d:4a:eb:99:7d:
54:38:5e:49:05:68:b2:07:12:e6:fd:a1:9f:69:f3:e8:a4:56:
95:b1:99:6a:30:05:a0:ca:91:87:63:5b:7e:f8:d2:b5:07:21:
e0:0b:92:47:4e:84:40:55:a5:f2:5a:9a:f9:e9:ef:43:e7:cb:
28:2a:4a:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJm/NP7AFT8EoVmrNgZUuHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMTNlYjhmZDlkOGRiNGI2OGE5NjljOGZmZGQ0ODQ2ODAy
YWIwYWIwHhcNMjUwNzI3MDIwMDEzWhcNMjUwNzI4MDIwMDEzWjAzMTEwLwYDVQQD
EyhkZjZlZjA2NTdjMTIyZjdhM2UyZWQyNDM1ZmIxYjEwZTA1Y2M0ZTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eWVrstZjEUZQSbL5o06+Zp9D5pQ
bdUxG8DGjdfFgdvN3PJmx26Qh3BBZtRFX3E6lQChkXsyWbQq463xvYtX3eSQlXHQ
Lt2pJlHBVGrsULxJ7fruCJfyylag+8MLvP3AdCH+Sj+3EcI3BB2dHTuFyYLrSbW7
hq5nW3bOrB14zMfbKMzP7aRkgrENrjJpTMsFk2pL2kwqu8sKd/V0rApVvjnkD8K5
rVqFW+g91BsFxczHnDpdBe/FPm9miKJY7gGcekcXiW5ypsztq+mCx8MASTGD1iX9
tfokoCa4nEJRNRc41NBootPw8o5X84Zd47g/c38IKmvd6yi7tsUq3Sn9kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9u8GV8Ei96Pi7SQ1+xsQ4FzE4uMB8GA1UdIwQY
MBaAFIwT64/Z2NtLaKlpyP/dSEaAKrCrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakJQcmo5blkyMHRvcVduSV85MUlSb0Fxc0tzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC84YWRmN2UtMmRlZC00MjRkLTg5NTEt
ZTY4MmJjYjlhNjNhLzEvakJQcmo5blkyMHRvcVduSV85MUlSb0Fxc0tzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC84YWRmN2UtMmRlZC00MjRkLTg5NTEtZTY4MmJjYjlhNjNh
LzEvakJQcmo5blkyMHRvcVduSV85MUlSb0Fxc0tzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQ5tuUFU
13QDLrZUoDJRmzW5QuhfGUdaqpThgiYe+OalQzGGWZxmRj2XEnSY7oUp7PaQr5A6
FuS9za59tEP3Vc1s/1Nb7EHtwVT+V2LWZ2EB4qyftub7kD2D08ycgoBSa6vz294k
J+GetwpzD0F/5mMXW6RPhc2kF24EObDhD35crY20uUQD77xl37plyjrNqOA4XL61
jxeOdZ31BNEiTlm+n2nKFyOysfzC/eVhuc7QKX9KQKNUelWACEZR9XjiNT1K65l9
VDheSQVosgcS5v2hn2nz6KRWlbGZajAFoMqRh2NbfvjStQch4AuSR06EQFWl8lqa
+envQ+fLKCpKlw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:46:13 2025 by rpki-client