Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
File: jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft (raw, json)
Hash identifier: hB7c3I3OKW09bgkdLSJYEL9ScK2QagpT1h7cIp37jUM=
Subject key identifier: 18:AD:A5:7C:D4:E1:BA:DB:57:F7:F6:B9:73:61:0E:6E:D3:32:6D:42
Authority key identifier: 8C:D5:24:39:CA:C2:71:9B:64:E8:5B:26:FF:0E:A8:46:8D:57:96:0E
Certificate issuer: /CN=8cd52439cac2719b64e85b26ff0ea8468d57960e
Certificate serial: 01985757F2CBE6874482A11494ACA130F6BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
Manifest number: 1609
Signing time: Tue 29 Jul 2025 18:00:38 +0000
Manifest this update: Tue 29 Jul 2025 18:00:38 +0000
Manifest next update: Wed 30 Jul 2025 18:00:38 +0000
Files and hashes: 1: 7jEmnnvVVJelmr8qrjn50rWFOcw.roa (hash: EchIPXfoij0iDBazd31BWfFW6DqbRboeZNJcaicEn4E=)
2: aRZdBae0vWh1J6sn44sYIdyVlG8.roa (hash: w9fqOKBIoaM9G2/C9dOdVNyy6b2w4OHx2wQuYWhSANs=)
3: jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl (hash: JlcLFFsJjwNrGHJM94Sk5vJhJsD65aURyJFbWuJpU38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 16:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:57:f2:cb:e6:87:44:82:a1:14:94:ac:a1:30:f6:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd52439cac2719b64e85b26ff0ea8468d57960e
Validity
Not Before: Jul 29 18:00:38 2025 GMT
Not After : Jul 30 18:00:38 2025 GMT
Subject: CN=18ada57cd4e1badb57f7f6b973610e6ed3326d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e3:8c:39:5a:49:34:c0:df:32:48:e1:89:60:
2f:d3:5c:91:14:9c:19:2b:84:67:4a:01:c1:3c:05:
e1:c4:db:1c:4b:cc:bf:62:18:da:61:2f:ca:cc:8b:
3d:6d:33:43:34:d5:60:3d:54:d3:e0:6a:d1:cf:52:
44:60:9b:a6:d3:fb:15:52:b4:6c:c2:0f:47:80:59:
79:71:57:73:73:35:49:68:f0:d3:70:c0:68:35:5e:
aa:b3:ce:1d:a0:55:a7:61:09:2b:d6:12:a6:71:63:
7c:0a:43:dd:00:2d:54:b9:74:c0:02:3a:5c:0c:b2:
5e:c9:8e:bc:43:c6:e4:0a:0f:bf:b3:60:44:68:0b:
90:f8:94:d1:d4:cc:ae:8d:b1:8b:f5:cf:99:74:ad:
74:8e:f3:92:d3:9c:57:eb:bf:38:96:7d:0f:86:77:
19:b0:f7:36:7f:a6:e3:16:f6:38:a3:79:24:09:bb:
71:f5:42:7b:32:30:6e:4b:f9:19:9b:b3:d3:71:6e:
c8:a1:cd:11:76:2d:3b:9c:72:e6:5f:5f:de:60:c2:
b7:0b:34:99:b1:65:dd:b9:60:05:1a:87:b6:dc:0d:
d4:41:f5:1c:67:12:61:38:45:e5:cc:16:cd:59:58:
b6:f9:4c:4f:d7:b6:cf:8d:ac:cb:a1:f3:e6:2c:f3:
ed:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AD:A5:7C:D4:E1:BA:DB:57:F7:F6:B9:73:61:0E:6E:D3:32:6D:42
X509v3 Authority Key Identifier:
keyid:8C:D5:24:39:CA:C2:71:9B:64:E8:5B:26:FF:0E:A8:46:8D:57:96:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:44:01:e8:d4:9a:30:b3:b9:60:89:b6:09:78:ef:37:f3:62:
83:6a:8e:3f:5b:c2:67:cb:fb:61:bd:9e:e9:3a:5e:be:3f:44:
48:42:5d:98:c7:b1:f5:65:5d:24:48:e3:58:48:d7:0a:2a:53:
3a:1c:e7:95:56:c2:38:cc:e3:43:dd:fa:34:c1:18:a8:d0:88:
d3:8f:dc:63:25:e1:d9:1c:03:27:9c:5d:8a:8f:d3:f0:64:16:
6a:be:f9:84:6d:bd:80:aa:77:59:7f:d3:a5:03:07:75:9a:ba:
c4:e8:a1:90:f9:59:11:74:b8:05:90:db:6f:47:65:1a:00:20:
d9:ae:9c:d2:c3:a3:87:71:34:b9:24:f2:dd:f5:fb:1a:89:58:
02:eb:e3:5b:7e:c2:dc:ae:07:32:83:2e:4e:c4:71:b7:59:a8:
9a:ee:3e:5c:ea:36:9f:1e:dd:57:b5:f6:fe:70:c8:33:3d:27:
7a:b2:b1:7f:f9:3d:02:d3:4c:f3:5c:c0:27:03:42:b8:15:3e:
b3:ea:9a:4d:2e:75:fd:f5:35:87:9a:a1:5a:c6:ef:23:45:79:
dd:33:f8:f6:9e:1e:69:74:77:66:69:79:9f:f5:9c:86:a7:c7:
a4:8a:30:37:3f:56:43:25:24:24:4b:4c:5f:ad:13:b5:42:2b:
21:c8:76:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhXV/LL5odEgqEUlKyhMPa9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZDUyNDM5Y2FjMjcxOWI2NGU4NWIyNmZmMGVhODQ2OGQ1
Nzk2MGUwHhcNMjUwNzI5MTgwMDM4WhcNMjUwNzMwMTgwMDM4WjAzMTEwLwYDVQQD
EygxOGFkYTU3Y2Q0ZTFiYWRiNTdmN2Y2Yjk3MzYxMGU2ZWQzMzI2ZDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+OMOVpJNMDfMkjhiWAv01yRFJwZ
K4RnSgHBPAXhxNscS8y/YhjaYS/KzIs9bTNDNNVgPVTT4GrRz1JEYJum0/sVUrRs
wg9HgFl5cVdzczVJaPDTcMBoNV6qs84doFWnYQkr1hKmcWN8CkPdAC1UuXTAAjpc
DLJeyY68Q8bkCg+/s2BEaAuQ+JTR1MyujbGL9c+ZdK10jvOS05xX6784ln0PhncZ
sPc2f6bjFvY4o3kkCbtx9UJ7MjBuS/kZm7PTcW7Ioc0Rdi07nHLmX1/eYMK3CzSZ
sWXduWAFGoe23A3UQfUcZxJhOEXlzBbNWVi2+UxP17bPjazLofPmLPPtTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBitpXzU4brbV/f2uXNhDm7TMm1CMB8GA1UdIwQY
MBaAFIzVJDnKwnGbZOhbJv8OqEaNV5YOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak5Va09jckNjWnRrNkZzbV93Nm9SbzFYbGc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jZDM3MTEtNzA4NC00YjE1LWJjMjUt
M2U0YTAyNmRmMDAwLzEvak5Va09jckNjWnRrNkZzbV93Nm9SbzFYbGc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9jZDM3MTEtNzA4NC00YjE1LWJjMjUtM2U0YTAyNmRmMDAw
LzEvak5Va09jckNjWnRrNkZzbV93Nm9SbzFYbGc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT0QB6NSa
MLO5YIm2CXjvN/Nig2qOP1vCZ8v7Yb2e6Tpevj9ESEJdmMex9WVdJEjjWEjXCipT
OhznlVbCOMzjQ936NMEYqNCI04/cYyXh2RwDJ5xdio/T8GQWar75hG29gKp3WX/T
pQMHdZq6xOihkPlZEXS4BZDbb0dlGgAg2a6c0sOjh3E0uSTy3fX7GolYAuvjW37C
3K4HMoMuTsRxt1momu4+XOo2nx7dV7X2/nDIMz0nerKxf/k9AtNM81zAJwNCuBU+
s+qaTS51/fU1h5qhWsbvI0V53TP49p4eaXR3Zml5n/WchqfHpIowNz9WQyUkJEtM
X60TtUIrIch2uA==
-----END CERTIFICATE-----
Generated at Wed Jul 30 02:17:11 2025 by rpki-client