Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
File: JNm7BTDf4yKPg7CGE5LihFk0tpg.mft (raw, json)
Hash identifier: WfecwTTETOZzKceN1Df0eu0GJK2b1rBfBERY6iCvqeQ=
Subject key identifier: 8B:B4:A0:DE:F4:ED:E4:B7:41:F0:47:93:D0:33:F4:DE:59:63:2F:4B
Authority key identifier: 24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98
Certificate issuer: /CN=24d9bb0530dfe3228f83b0861392e2845934b698
Certificate serial: 01984B8A48EF9379D3F3F794519D1BDDC745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 11:00:10 +0000
Manifest this update: Sun 27 Jul 2025 11:00:10 +0000
Manifest next update: Mon 28 Jul 2025 11:00:10 +0000
Files and hashes: 1: 1ZxW8u-5P1t4UMze5JFbl0Ooyu4.roa (hash: Nhhuv6DdC39yd8/4en2lPPTqam7XI+LxbkaMlQc4uqc=)
2: JNm7BTDf4yKPg7CGE5LihFk0tpg.crl (hash: KwiO32tfbQmNgSjCJq4zvMMnlawGI6wq0//Ob7lZMP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:48:ef:93:79:d3:f3:f7:94:51:9d:1b:dd:c7:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d9bb0530dfe3228f83b0861392e2845934b698
Validity
Not Before: Jul 27 11:00:10 2025 GMT
Not After : Jul 28 11:00:10 2025 GMT
Subject: CN=8bb4a0def4ede4b741f04793d033f4de59632f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ec:9c:df:04:30:9e:d7:ea:07:6a:49:3a:de:
21:0a:06:82:5b:87:1e:f4:b3:c3:33:0b:ba:96:52:
7c:90:47:4c:85:06:4b:8d:31:74:6e:6b:c8:73:3c:
db:be:cf:7e:3e:8e:73:ed:2e:42:93:f7:04:42:af:
9d:67:36:c6:30:56:60:24:8e:db:b4:95:a3:80:a3:
28:02:a0:11:3d:a9:fb:5f:90:97:f4:ba:e6:77:c7:
fe:84:88:aa:e6:20:f5:ef:bb:2d:31:b7:0a:13:7a:
7d:03:2d:bc:32:89:fd:69:ee:59:02:b7:d0:2e:7c:
80:dc:72:26:e8:ed:e8:be:17:01:b6:e6:47:f1:ca:
2a:24:2b:75:f5:56:74:63:5c:55:5d:b6:00:55:c4:
a2:cf:fd:ff:96:ae:9c:01:c8:50:d1:b3:a1:4b:1e:
9b:f6:f5:23:87:fc:fa:cd:1e:d2:23:f3:8d:0b:78:
b7:16:32:20:9f:c7:3b:2e:79:e3:22:11:c4:c9:08:
8e:12:33:77:ce:3f:a3:d2:d2:9d:92:e5:02:e1:2b:
23:d1:85:95:72:80:9c:06:8c:fd:25:eb:97:e2:27:
30:d5:5c:d7:88:35:88:97:5d:1e:09:dc:d7:d6:35:
1e:8a:e8:a1:ae:35:bb:7a:1e:69:68:b7:6b:46:25:
8e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B4:A0:DE:F4:ED:E4:B7:41:F0:47:93:D0:33:F4:DE:59:63:2F:4B
X509v3 Authority Key Identifier:
keyid:24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:6b:af:86:35:f3:08:52:01:90:17:48:20:a8:eb:d9:d5:ee:
a2:aa:20:cc:b4:ac:f4:45:68:a7:ee:a3:45:8d:8e:2a:8a:d2:
0a:7e:2c:bd:4a:8d:f2:8d:97:c5:97:73:6d:74:dd:89:8c:55:
e1:0e:41:50:99:29:c1:5a:89:90:4b:9e:0e:8b:4d:d7:a0:f5:
af:8c:81:2e:13:b4:1b:a2:a9:7a:b7:6c:47:39:6c:48:cf:29:
10:61:0d:c4:2d:b0:d3:35:22:45:ca:ff:b7:9b:fa:97:95:4e:
97:3a:2f:29:46:b7:69:5e:9f:25:bb:9c:e0:36:5a:3c:4e:b2:
8e:40:eb:1f:44:2d:94:b3:57:27:97:43:03:71:a1:30:7b:79:
af:52:a2:a7:1b:11:5e:ab:e4:e4:97:08:61:e4:b0:0c:d3:e9:
71:35:bf:3e:c5:d9:ec:a3:28:fd:94:2e:38:0f:56:51:1f:f1:
62:d8:38:3a:27:5b:4a:1f:fe:bd:81:5b:ff:cd:f6:99:8f:46:
b9:b4:3d:9d:8e:1b:89:40:87:b6:e0:ac:6f:0c:b3:15:c5:27:
bb:f7:8f:c7:7c:65:cd:ac:c9:d8:df:0b:09:ad:25:36:aa:11:
39:03:7f:38:19:06:84:8c:3d:10:fd:87:02:c0:1f:ea:80:7b:
76:cf:9a:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLikjvk3nT8/eUUZ0b3cdFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZDliYjA1MzBkZmUzMjI4ZjgzYjA4NjEzOTJlMjg0NTkz
NGI2OTgwHhcNMjUwNzI3MTEwMDEwWhcNMjUwNzI4MTEwMDEwWjAzMTEwLwYDVQQD
Eyg4YmI0YTBkZWY0ZWRlNGI3NDFmMDQ3OTNkMDMzZjRkZTU5NjMyZjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeyc3wQwntfqB2pJOt4hCgaCW4ce
9LPDMwu6llJ8kEdMhQZLjTF0bmvIczzbvs9+Po5z7S5Ck/cEQq+dZzbGMFZgJI7b
tJWjgKMoAqARPan7X5CX9Lrmd8f+hIiq5iD177stMbcKE3p9Ay28Mon9ae5ZArfQ
LnyA3HIm6O3ovhcBtuZH8coqJCt19VZ0Y1xVXbYAVcSiz/3/lq6cAchQ0bOhSx6b
9vUjh/z6zR7SI/ONC3i3FjIgn8c7LnnjIhHEyQiOEjN3zj+j0tKdkuUC4Ssj0YWV
coCcBoz9JeuX4icw1VzXiDWIl10eCdzX1jUeiuihrjW7eh5paLdrRiWOMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIu0oN707eS3QfBHk9Az9N5ZYy9LMB8GA1UdIwQY
MBaAFCTZuwUw3+Mij4OwhhOS4oRZNLaYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk5tN0JURGY0eUtQZzdDR0U1TGloRmswdHBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9hOTk3OWMtZDk4OS00NmZmLWI5MWUt
NGVhMzAxMWRhYjZjLzEvSk5tN0JURGY0eUtQZzdDR0U1TGloRmswdHBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9hOTk3OWMtZDk4OS00NmZmLWI5MWUtNGVhMzAxMWRhYjZj
LzEvSk5tN0JURGY0eUtQZzdDR0U1TGloRmswdHBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaGuvhjXz
CFIBkBdIIKjr2dXuoqogzLSs9EVop+6jRY2OKorSCn4svUqN8o2XxZdzbXTdiYxV
4Q5BUJkpwVqJkEueDotN16D1r4yBLhO0G6KperdsRzlsSM8pEGENxC2w0zUiRcr/
t5v6l5VOlzovKUa3aV6fJbuc4DZaPE6yjkDrH0QtlLNXJ5dDA3GhMHt5r1KipxsR
Xqvk5JcIYeSwDNPpcTW/PsXZ7KMo/ZQuOA9WUR/xYtg4OidbSh/+vYFb/832mY9G
ubQ9nY4biUCHtuCsbwyzFcUnu/ePx3xlzazJ2N8LCa0lNqoROQN/OBkGhIw9EP2H
AsAf6oB7ds+aSQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 16:28:22 2025 by rpki-client