Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
File: JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft (raw, json)
Hash identifier: OByBTIx9x6SPPdH0aZASaP7tN07HGlnJydrl42EqrCA=
Subject key identifier: 50:9A:A4:68:15:F3:87:8A:7E:DC:AE:22:94:3C:86:85:6A:87:F3:55
Authority key identifier: 26:1C:8E:2B:00:A3:D5:95:7D:41:12:DA:F3:5B:66:E4:29:37:55:05
Certificate issuer: /CN=261c8e2b00a3d5957d4112daf35b66e429375505
Certificate serial: 019857214BEA7481DD2AA49707CCFC083186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
Manifest number: 0389
Signing time: Tue 29 Jul 2025 17:00:56 +0000
Manifest this update: Tue 29 Jul 2025 17:00:56 +0000
Manifest next update: Wed 30 Jul 2025 17:00:56 +0000
Files and hashes: 1: JhyOKwCj1ZV9QRLa81tm5Ck3VQU.crl (hash: pmZ/g9wV7D05J2tLSMXFkSu9NX9j3T3CeIvBYoyckfk=)
2: pi3_amo42v-V9gBkLtFw7VXHyt8.roa (hash: ptd1oveMAvBnjDaa3RzGQR3dUT03hcO6XNO/IHbTQeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 14:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:21:4b:ea:74:81:dd:2a:a4:97:07:cc:fc:08:31:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=261c8e2b00a3d5957d4112daf35b66e429375505
Validity
Not Before: Jul 29 17:00:56 2025 GMT
Not After : Jul 30 17:00:56 2025 GMT
Subject: CN=509aa46815f3878a7edcae22943c86856a87f355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e5:80:2f:f2:ee:37:49:e9:43:20:07:8b:4a:
29:ac:bc:15:8a:06:19:11:e2:12:c7:c3:38:4e:fa:
44:10:de:2a:ba:4f:db:00:dd:2d:29:22:a2:7a:6c:
0c:5b:58:0e:f4:27:a0:1c:5e:45:a3:75:89:6f:76:
4d:d2:e7:7e:de:3f:3e:97:44:ba:37:57:4e:ab:7d:
58:ca:48:30:57:7a:87:72:f1:7d:74:2c:f8:a2:d4:
7d:77:4b:3e:f0:45:4f:cf:e2:0a:18:41:fd:f2:47:
48:08:04:89:8e:dd:af:e6:35:d2:78:dd:96:b9:fc:
b6:02:e4:a5:6f:79:8d:84:27:2d:11:ab:0d:d0:10:
68:8b:4b:7c:e3:a8:e5:b6:38:eb:14:a0:36:83:23:
bf:e0:a9:54:21:ba:a8:dd:34:1b:b5:5f:76:ef:62:
a2:ab:8f:72:f4:5f:f2:44:d7:d5:48:ff:39:ff:60:
c8:dc:46:38:4e:4f:46:ce:b0:64:e5:b6:ed:2d:47:
d1:17:d4:3d:56:92:12:60:34:b4:fd:d5:71:28:c0:
0e:33:91:4f:c2:3b:5b:ff:2a:dd:4e:3a:d0:3e:99:
21:07:64:9a:35:16:1c:e6:fc:e8:2e:95:15:9b:56:
b3:40:58:87:ef:26:34:9b:25:ca:56:2a:c3:7e:16:
b6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9A:A4:68:15:F3:87:8A:7E:DC:AE:22:94:3C:86:85:6A:87:F3:55
X509v3 Authority Key Identifier:
keyid:26:1C:8E:2B:00:A3:D5:95:7D:41:12:DA:F3:5B:66:E4:29:37:55:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:8d:a2:96:ff:79:b4:59:33:4b:9b:20:5c:c4:dc:ff:50:81:
30:e6:1d:f1:50:81:46:a6:8f:e1:f4:ce:98:bf:06:e6:32:d5:
7f:43:8e:1e:bd:a7:56:79:d1:90:44:cc:92:6a:af:68:50:fe:
ed:74:b7:1a:d2:97:f1:3e:eb:ff:90:c6:ac:b3:ae:da:7d:ce:
b9:7c:45:e1:eb:e4:56:64:aa:84:b1:cc:64:e2:ce:2e:52:23:
41:6f:d9:97:4c:4a:2d:99:b7:08:ae:ec:68:96:83:99:e5:9d:
26:91:a7:6d:c7:09:d5:3d:e9:71:15:c9:75:2d:12:06:4d:cb:
ee:f9:9a:ab:fd:5d:a4:b2:0b:f7:39:31:7a:ca:66:6f:86:aa:
72:19:35:11:20:d9:a8:20:e5:c0:db:e3:a7:2d:1e:28:66:d1:
38:ba:43:d7:54:d8:72:1c:6e:a8:42:47:75:ba:11:8e:73:fa:
ba:45:76:df:32:47:c8:5b:b4:88:2d:27:9e:ed:09:34:97:5c:
53:bc:37:9f:bd:32:96:ea:34:0f:ae:0c:75:5f:e0:00:ad:4e:
aa:76:3d:b9:96:e9:95:8a:73:4f:4b:21:ed:31:b1:a2:fa:cd:
af:3d:ca:1d:91:df:40:3e:3c:a5:a4:2b:f0:69:34:bb:44:e0:
8e:16:08:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhXIUvqdIHdKqSXB8z8CDGGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MWM4ZTJiMDBhM2Q1OTU3ZDQxMTJkYWYzNWI2NmU0Mjkz
NzU1MDUwHhcNMjUwNzI5MTcwMDU2WhcNMjUwNzMwMTcwMDU2WjAzMTEwLwYDVQQD
Eyg1MDlhYTQ2ODE1ZjM4NzhhN2VkY2FlMjI5NDNjODY4NTZhODdmMzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2eWAL/LuN0npQyAHi0oprLwVigYZ
EeISx8M4TvpEEN4quk/bAN0tKSKiemwMW1gO9CegHF5Fo3WJb3ZN0ud+3j8+l0S6
N1dOq31YykgwV3qHcvF9dCz4otR9d0s+8EVPz+IKGEH98kdICASJjt2v5jXSeN2W
ufy2AuSlb3mNhCctEasN0BBoi0t846jltjjrFKA2gyO/4KlUIbqo3TQbtV9272Ki
q49y9F/yRNfVSP85/2DI3EY4Tk9GzrBk5bbtLUfRF9Q9VpISYDS0/dVxKMAOM5FP
wjtb/yrdTjrQPpkhB2SaNRYc5vzoLpUVm1azQFiH7yY0myXKVirDfha2DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCapGgV84eKftyuIpQ8hoVqh/NVMB8GA1UdIwQY
MBaAFCYcjisAo9WVfUES2vNbZuQpN1UFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmh5T0t3Q2oxWlY5UVJMYTgxdG01Q2szVlFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9hMWM5ZDktZmIxYi00Y2ZhLWE2YzAt
Mjk4ODM4NTU2ZDA5LzEvSmh5T0t3Q2oxWlY5UVJMYTgxdG01Q2szVlFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9hMWM5ZDktZmIxYi00Y2ZhLWE2YzAtMjk4ODM4NTU2ZDA5
LzEvSmh5T0t3Q2oxWlY5UVJMYTgxdG01Q2szVlFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs42ilv95
tFkzS5sgXMTc/1CBMOYd8VCBRqaP4fTOmL8G5jLVf0OOHr2nVnnRkETMkmqvaFD+
7XS3GtKX8T7r/5DGrLOu2n3OuXxF4evkVmSqhLHMZOLOLlIjQW/Zl0xKLZm3CK7s
aJaDmeWdJpGnbccJ1T3pcRXJdS0SBk3L7vmaq/1dpLIL9zkxespmb4aqchk1ESDZ
qCDlwNvjpy0eKGbROLpD11TYchxuqEJHdboRjnP6ukV23zJHyFu0iC0nnu0JNJdc
U7w3n70yluo0D64MdV/gAK1OqnY9uZbplYpzT0sh7TGxovrNrz3KHZHfQD48paQr
8Gk0u0TgjhYIKg==
-----END CERTIFICATE-----
Generated at Tue Jul 29 18:57:37 2025 by rpki-client