Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
File: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft (raw, json)
Hash identifier: LAwKoTJAKvz+2YVhk2t6bKDMnMeOwpXfmRwZlmC5nsI=
Subject key identifier: D1:A2:E6:40:67:C0:1C:05:DC:37:53:B9:09:4A:8B:95:79:64:E7:3B
Authority key identifier: 27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
Certificate issuer: /CN=279159ef22f82b936731664ee67c3b6ea96ef443
Certificate serial: 0198469AF667B194EF3337D4D0B41D37FFF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
Manifest number: 1121
Signing time: Sat 26 Jul 2025 12:00:17 +0000
Manifest this update: Sat 26 Jul 2025 12:00:17 +0000
Manifest next update: Sun 27 Jul 2025 12:00:17 +0000
Files and hashes: 1: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl (hash: zk+qsiGdbArh3jWawguahca2vo4hPweYQkHdyDb92A4=)
2: _pQtR1EJpgHMSOkTmSK_Er0tXsE.roa (hash: m5yMM2ApK+4Me2gJxPiOKP0gpYE7to93xl8Fx6CP7v4=)
3: qjMWC-5cgR3_FzvTJ8fV4seYOFk.roa (hash: fwjzyDVkTfLPWzdH9pq6+z0fYQ+pKyYb7cgFc8eFsFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9a:f6:67:b1:94:ef:33:37:d4:d0:b4:1d:37:ff:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279159ef22f82b936731664ee67c3b6ea96ef443
Validity
Not Before: Jul 26 12:00:17 2025 GMT
Not After : Jul 27 12:00:17 2025 GMT
Subject: CN=d1a2e64067c01c05dc3753b9094a8b957964e73b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:09:b4:5b:9d:87:f6:0c:06:0b:21:c2:b3:36:
86:57:69:fd:ab:d2:ec:1f:9e:89:2e:10:af:8b:42:
e0:c5:ce:52:8d:cb:a5:04:13:6e:d7:0b:24:4d:20:
6a:bb:a2:dc:02:c9:8f:07:92:4c:be:21:1d:28:ff:
81:4a:c2:34:db:4c:ad:c6:91:d8:87:bf:a4:f8:c4:
f7:93:e9:00:19:b7:c6:af:05:a9:1d:1a:80:c5:e0:
4e:b8:a8:1f:f2:81:98:08:de:ab:a3:f1:7d:51:91:
e7:d6:89:1c:d4:14:d0:67:83:3c:1a:f5:07:73:5e:
c1:c6:7a:50:68:44:c5:8a:02:e6:5c:b2:e4:17:26:
6c:16:57:ae:2f:d1:58:8e:b0:2d:1c:13:64:11:04:
7c:95:28:d1:9a:d3:bb:a5:45:2b:dc:cf:21:7a:46:
cf:1d:12:94:95:0e:bd:45:4f:36:01:76:33:ee:44:
21:53:f6:80:c1:4f:24:20:4d:96:c7:97:80:78:89:
97:5d:ff:47:13:90:24:86:d7:44:39:6e:89:3c:1f:
14:80:fc:00:6d:13:9c:7b:be:07:37:f2:12:1f:69:
f3:9b:3c:59:60:11:af:2b:28:6d:89:a4:e4:9b:79:
e1:f7:e9:ae:a7:25:a6:1c:2d:2d:6c:d4:04:82:e9:
43:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A2:E6:40:67:C0:1C:05:DC:37:53:B9:09:4A:8B:95:79:64:E7:3B
X509v3 Authority Key Identifier:
keyid:27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:5b:2e:89:57:93:d4:aa:46:4d:61:fe:d7:84:ad:83:b2:a9:
08:d4:da:7c:d9:93:4c:a7:e7:30:7a:ed:ae:23:89:66:fa:20:
eb:d3:30:c9:8d:3d:e2:a1:7d:eb:a1:60:eb:62:d3:7a:1d:3d:
e1:79:eb:98:b5:c5:2b:76:69:22:38:72:e0:04:da:f3:b7:1d:
b9:7b:88:e4:11:2d:1f:c2:f0:bc:64:16:cb:91:c4:f7:d5:0b:
0f:a6:29:e3:91:5e:f9:b6:71:48:0d:d4:88:86:96:7f:77:61:
9d:8a:0c:6c:3a:e5:be:d3:b5:fd:72:82:79:2e:b7:f0:89:77:
c5:6c:fd:08:6a:2b:03:3c:ce:d0:61:fb:63:48:2a:57:cc:fb:
ca:08:69:9b:a0:05:94:2f:d0:2a:02:41:f7:84:f1:f6:79:c1:
7e:f7:cf:16:93:9e:20:15:d9:3a:87:c4:e6:67:15:3a:af:f4:
8b:98:91:d5:dd:ac:43:37:79:e1:e4:4f:f7:94:9d:e1:82:4d:
d7:b6:c1:88:51:f0:5a:4e:8b:08:54:9b:16:bd:fc:96:6e:ab:
39:36:e3:22:68:74:02:07:42:06:e1:7d:2b:17:6b:17:2d:c3:
9c:f7:fb:82:57:bb:49:2b:c9:36:6b:34:0e:a2:e0:09:ea:a6:
0d:97:89:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhGmvZnsZTvMzfU0LQdN//wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OTE1OWVmMjJmODJiOTM2NzMxNjY0ZWU2N2MzYjZlYTk2
ZWY0NDMwHhcNMjUwNzI2MTIwMDE3WhcNMjUwNzI3MTIwMDE3WjAzMTEwLwYDVQQD
EyhkMWEyZTY0MDY3YzAxYzA1ZGMzNzUzYjkwOTRhOGI5NTc5NjRlNzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwm0W52H9gwGCyHCszaGV2n9q9Ls
H56JLhCvi0Lgxc5SjculBBNu1wskTSBqu6LcAsmPB5JMviEdKP+BSsI020ytxpHY
h7+k+MT3k+kAGbfGrwWpHRqAxeBOuKgf8oGYCN6ro/F9UZHn1okc1BTQZ4M8GvUH
c17BxnpQaETFigLmXLLkFyZsFleuL9FYjrAtHBNkEQR8lSjRmtO7pUUr3M8hekbP
HRKUlQ69RU82AXYz7kQhU/aAwU8kIE2Wx5eAeImXXf9HE5AkhtdEOW6JPB8UgPwA
bROce74HN/ISH2nzmzxZYBGvKyhtiaTkm3nh9+mupyWmHC0tbNQEgulDFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNGi5kBnwBwF3DdTuQlKi5V5ZOc7MB8GA1UdIwQY
MBaAFCeRWe8i+CuTZzFmTuZ8O26pbvRDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjVGWjd5TDRLNU5uTVdaTzVudzdicWx1OUVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS81YzE1YmUtYWVmMi00YzMxLWJmYjQt
MzFiYWY2ZWVkZThhLzEvSjVGWjd5TDRLNU5uTVdaTzVudzdicWx1OUVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS81YzE1YmUtYWVmMi00YzMxLWJmYjQtMzFiYWY2ZWVkZThh
LzEvSjVGWjd5TDRLNU5uTVdaTzVudzdicWx1OUVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfVsuiVeT
1KpGTWH+14Stg7KpCNTafNmTTKfnMHrtriOJZvog69MwyY094qF966Fg62LTeh09
4XnrmLXFK3ZpIjhy4ATa87cduXuI5BEtH8LwvGQWy5HE99ULD6Yp45Fe+bZxSA3U
iIaWf3dhnYoMbDrlvtO1/XKCeS638Il3xWz9CGorAzzO0GH7Y0gqV8z7yghpm6AF
lC/QKgJB94Tx9nnBfvfPFpOeIBXZOofE5mcVOq/0i5iR1d2sQzd54eRP95Sd4YJN
17bBiFHwWk6LCFSbFr38lm6rOTbjImh0AgdCBuF9KxdrFy3DnPf7gle7SSvJNms0
DqLgCeqmDZeJgw==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:28:04 2025 by rpki-client