Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/75025d-061a-4d96-a7d2-f589f8c032ca/1/JOlA2xkLaSzRsNWD7bbYw2ESRWk.mft
File: JOlA2xkLaSzRsNWD7bbYw2ESRWk.mft (raw, json)
Hash identifier: 8jxA0v6IkgtN5NTbFejES8wMQ9aWT1gB+Cxyyz9U1zw=
Subject key identifier: BE:60:EB:65:BC:0F:29:5A:FF:63:E8:AA:5D:D8:9F:45:29:A6:B3:F2
Authority key identifier: 24:E9:40:DB:19:0B:69:2C:D1:B0:D5:83:ED:B6:D8:C3:61:12:45:69
Certificate issuer: /CN=24e940db190b692cd1b0d583edb6d8c361124569
Certificate serial: 019848F792014147E9B2E57E2140EB18116E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOlA2xkLaSzRsNWD7bbYw2ESRWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/75025d-061a-4d96-a7d2-f589f8c032ca/1/JOlA2xkLaSzRsNWD7bbYw2ESRWk.mft
Manifest number: 8F
Signing time: Sat 26 Jul 2025 23:00:40 +0000
Manifest this update: Sat 26 Jul 2025 23:00:40 +0000
Manifest next update: Sun 27 Jul 2025 23:00:40 +0000
Files and hashes: 1: JOlA2xkLaSzRsNWD7bbYw2ESRWk.crl (hash: FAWeQ3v6rFUeTKwPQtLH4YD4JnTCLgXsx1f2lljdH4w=)
2: NDyL4QmyZMdWfVseu9H3PyESraU.roa (hash: 2KgZJolbNaz+51AuiNXbaQEgEsCh7UoocaNukepjnzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/75025d-061a-4d96-a7d2-f589f8c032ca/1/JOlA2xkLaSzRsNWD7bbYw2ESRWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/75025d-061a-4d96-a7d2-f589f8c032ca/1/JOlA2xkLaSzRsNWD7bbYw2ESRWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOlA2xkLaSzRsNWD7bbYw2ESRWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:92:01:41:47:e9:b2:e5:7e:21:40:eb:18:11:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e940db190b692cd1b0d583edb6d8c361124569
Validity
Not Before: Jul 26 23:00:40 2025 GMT
Not After : Jul 27 23:00:40 2025 GMT
Subject: CN=be60eb65bc0f295aff63e8aa5dd89f4529a6b3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:00:cb:42:cb:2d:6e:5a:39:e8:f8:a9:c4:69:
aa:6e:66:8b:92:5a:b3:07:54:61:52:05:5d:09:9f:
ab:ad:b8:56:ce:32:c3:b6:f5:42:d6:6d:0d:87:5e:
33:ff:64:48:e3:48:0b:a0:6a:4e:9a:ab:9d:e6:b5:
67:3d:db:a0:7e:98:70:27:ef:78:dc:08:48:53:a6:
f1:f4:04:8d:3a:50:1f:fd:8e:1d:40:ba:89:f4:f8:
3f:ed:78:3c:92:60:a0:73:b5:d1:f9:42:33:a3:b1:
84:d2:ce:79:0b:ca:5a:44:17:2c:7b:2a:c4:ba:33:
df:76:6b:45:78:49:16:17:39:6f:7b:dc:2b:8a:87:
92:20:e5:ac:f8:ec:bc:79:f5:ce:93:d8:91:23:3c:
ed:19:1d:ca:4e:42:4c:d3:73:40:12:5c:ff:88:3d:
32:5b:93:8f:a1:ad:75:47:00:76:d5:48:3c:7b:32:
7c:1c:e8:e3:83:7a:9c:d0:4b:49:aa:3f:74:59:0e:
b8:24:ef:28:92:d2:95:a3:f8:4b:48:42:0b:dd:23:
24:13:97:52:f0:5f:bd:41:25:b5:37:18:43:27:a6:
f2:0c:4d:23:90:9d:90:0f:07:eb:1c:78:34:b4:f8:
d7:2e:fb:87:f0:46:39:ab:81:cc:2c:4c:31:bc:1e:
70:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:60:EB:65:BC:0F:29:5A:FF:63:E8:AA:5D:D8:9F:45:29:A6:B3:F2
X509v3 Authority Key Identifier:
keyid:24:E9:40:DB:19:0B:69:2C:D1:B0:D5:83:ED:B6:D8:C3:61:12:45:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOlA2xkLaSzRsNWD7bbYw2ESRWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/75025d-061a-4d96-a7d2-f589f8c032ca/1/JOlA2xkLaSzRsNWD7bbYw2ESRWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/75025d-061a-4d96-a7d2-f589f8c032ca/1/JOlA2xkLaSzRsNWD7bbYw2ESRWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:25:f2:70:44:40:55:93:08:97:89:a0:d1:51:2b:a0:fc:94:
7b:77:eb:c5:35:10:ed:3c:69:60:32:2a:d4:df:3d:40:04:f5:
7f:fa:69:e4:5d:ff:34:89:ca:2e:da:d8:bc:0c:e7:6b:55:42:
06:a9:69:fc:d5:47:c1:13:28:11:62:29:83:ed:82:ab:dd:17:
c5:68:a4:08:3f:ea:6e:35:96:3a:7d:ec:bb:3c:c9:a7:52:3e:
44:e3:a8:6e:0a:51:a6:b9:d3:41:37:09:44:16:17:0c:75:6c:
26:34:17:92:00:8f:87:a4:15:b7:9a:64:92:aa:a8:6e:35:9c:
4d:71:a4:8f:67:ae:f6:00:f8:c2:24:ca:d3:46:de:75:61:d4:
f7:b7:3d:6e:30:23:bb:2e:92:dc:77:4f:37:19:ee:47:05:c2:
2d:15:b0:8d:fb:bd:25:be:db:20:18:e6:93:3b:48:f2:75:5b:
bb:91:ca:78:32:c9:f0:b6:d7:18:bd:e4:90:2d:0c:7f:77:fa:
7c:b0:a2:a0:85:5a:77:08:ea:86:ea:a6:76:ac:a4:c7:a7:e9:
26:58:31:67:da:08:1b:ce:e2:ec:54:91:44:be:7c:62:14:40:
24:51:fb:32:76:2c:51:4e:34:47:f0:c5:73:af:2c:a2:f4:c7:
d7:17:10:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhI95IBQUfpsuV+IUDrGBFuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZTk0MGRiMTkwYjY5MmNkMWIwZDU4M2VkYjZkOGMzNjEx
MjQ1NjkwHhcNMjUwNzI2MjMwMDQwWhcNMjUwNzI3MjMwMDQwWjAzMTEwLwYDVQQD
EyhiZTYwZWI2NWJjMGYyOTVhZmY2M2U4YWE1ZGQ4OWY0NTI5YTZiM2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wDLQsstblo56PipxGmqbmaLklqz
B1RhUgVdCZ+rrbhWzjLDtvVC1m0Nh14z/2RI40gLoGpOmqud5rVnPdugfphwJ+94
3AhIU6bx9ASNOlAf/Y4dQLqJ9Pg/7Xg8kmCgc7XR+UIzo7GE0s55C8paRBcseyrE
ujPfdmtFeEkWFzlve9wrioeSIOWs+Oy8efXOk9iRIzztGR3KTkJM03NAElz/iD0y
W5OPoa11RwB21Ug8ezJ8HOjjg3qc0EtJqj90WQ64JO8oktKVo/hLSEIL3SMkE5dS
8F+9QSW1NxhDJ6byDE0jkJ2QDwfrHHg0tPjXLvuH8EY5q4HMLEwxvB5wQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL5g62W8Dyla/2Poql3Yn0UpprPyMB8GA1UdIwQY
MBaAFCTpQNsZC2ks0bDVg+222MNhEkVpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk9sQTJ4a0xhU3pSc05XRDdiYll3MkVTUldrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83NTAyNWQtMDYxYS00ZDk2LWE3ZDIt
ZjU4OWY4YzAzMmNhLzEvSk9sQTJ4a0xhU3pSc05XRDdiYll3MkVTUldrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi83NTAyNWQtMDYxYS00ZDk2LWE3ZDItZjU4OWY4YzAzMmNh
LzEvSk9sQTJ4a0xhU3pSc05XRDdiYll3MkVTUldrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnCXycERA
VZMIl4mg0VEroPyUe3frxTUQ7TxpYDIq1N89QAT1f/pp5F3/NInKLtrYvAzna1VC
Bqlp/NVHwRMoEWIpg+2Cq90XxWikCD/qbjWWOn3suzzJp1I+ROOobgpRprnTQTcJ
RBYXDHVsJjQXkgCPh6QVt5pkkqqobjWcTXGkj2eu9gD4wiTK00bedWHU97c9bjAj
uy6S3HdPNxnuRwXCLRWwjfu9Jb7bIBjmkztI8nVbu5HKeDLJ8LbXGL3kkC0Mf3f6
fLCioIVadwjqhuqmdqykx6fpJlgxZ9oIG87i7FSRRL58YhRAJFH7MnYsUU40R/DF
c68sovTH1xcQBA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:13:09 2025 by rpki-client