Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft
File: Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft (raw, json)
Hash identifier: CiddKK2i/9weLzn6mQsZdKunBFYHF+n3Xx1CD8+vKn0=
Subject key identifier: DA:1F:18:88:5D:29:AF:41:A2:DB:B8:F7:99:CC:7C:FD:B7:33:B5:6A
Authority key identifier: 26:4D:04:C3:96:41:B8:2B:5D:C3:84:4C:F5:FF:55:0F:54:04:46:89
Certificate issuer: /CN=264d04c39641b82b5dc3844cf5ff550f54044689
Certificate serial: 0198439B34046044CE5F6775B4964B1FC806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft
Manifest number: 0E80
Signing time: Fri 25 Jul 2025 22:01:41 +0000
Manifest this update: Fri 25 Jul 2025 22:01:41 +0000
Manifest next update: Sat 26 Jul 2025 22:01:41 +0000
Files and hashes: 1: FAPasEirS5CbUB6PjBrAMteNaOo.roa (hash: HbkkLdFOGhY92Tbv9fOfCuB90ZHdJx6ePREhkoIqvyA=)
2: Jk0Ew5ZBuCtdw4RM9f9VD1QERok.crl (hash: vRjKiDWwKIptxHg4ODpcrETThgq51lB1W772c2EM0JA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:9b:34:04:60:44:ce:5f:67:75:b4:96:4b:1f:c8:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=264d04c39641b82b5dc3844cf5ff550f54044689
Validity
Not Before: Jul 25 22:01:41 2025 GMT
Not After : Jul 26 22:01:41 2025 GMT
Subject: CN=da1f18885d29af41a2dbb8f799cc7cfdb733b56a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:03:99:15:b7:d0:5a:53:d1:c4:3c:8e:6a:05:
36:44:9f:76:8b:1a:98:56:f7:a0:bd:8c:b7:2d:01:
dc:51:21:52:32:6e:d7:10:db:cc:be:00:93:74:4d:
e9:23:ef:06:a9:9b:b2:fa:a6:11:36:b7:1e:01:68:
8b:f5:1d:d8:6f:a3:58:b6:19:99:7c:aa:95:d3:51:
03:33:f6:d0:f4:3b:1d:b8:c1:30:6f:ec:d5:b4:18:
a9:9e:f7:86:ee:41:5e:30:83:0a:40:ee:b9:33:35:
14:20:c3:dd:b9:38:e3:43:8b:ba:56:15:aa:33:4b:
ff:a8:e5:cf:04:8d:3e:ac:2f:f6:ee:e1:64:ab:e7:
ca:47:4a:c6:c4:5d:bf:12:61:74:f1:73:09:4d:69:
ce:73:02:5b:d9:c2:73:84:e4:5c:ec:b8:7a:63:2d:
98:82:6f:6f:77:eb:a3:d0:2e:59:4f:8b:92:4f:47:
85:a0:5a:f1:0b:d5:51:97:fe:43:6e:f5:32:8d:a7:
07:1e:7e:93:31:e8:40:cb:6f:4a:a6:91:ae:6e:8f:
01:ee:9d:12:1f:9a:20:a9:24:6d:12:c1:5a:4d:ef:
41:47:b0:54:bf:88:e8:64:21:e4:eb:47:8d:bb:23:
e6:3b:ef:d5:22:39:50:d0:d1:1d:3e:c8:d1:c0:6b:
88:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1F:18:88:5D:29:AF:41:A2:DB:B8:F7:99:CC:7C:FD:B7:33:B5:6A
X509v3 Authority Key Identifier:
keyid:26:4D:04:C3:96:41:B8:2B:5D:C3:84:4C:F5:FF:55:0F:54:04:46:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ed:87:98:3b:0f:cf:37:d8:48:57:66:64:28:62:1a:62:c1:
81:c5:7e:75:e8:3c:78:6e:97:0f:0c:a3:6a:85:67:05:b1:42:
c9:47:00:5e:e8:42:d8:d8:f7:7b:f7:e4:47:79:7f:8b:6e:b1:
18:bd:4b:92:bd:2e:a9:3e:fb:45:b3:50:a1:67:80:7f:93:62:
2c:81:68:41:a2:e3:23:3b:dc:30:50:0f:87:95:84:92:08:4c:
32:1b:32:3d:93:74:84:76:b2:aa:43:35:97:c8:bd:d1:8d:99:
7d:c9:7a:64:28:e2:ce:28:e5:ed:6d:de:a6:46:da:bb:b3:c7:
df:f3:dd:18:f4:62:ee:db:ef:c2:1f:af:75:30:31:95:6a:0d:
a5:93:7d:4a:12:88:cc:c9:21:af:26:ea:45:fd:bb:ee:2e:a2:
1a:05:be:d8:ae:70:b4:7a:3b:e4:94:06:bf:33:2d:ce:04:44:
73:be:b1:ae:8c:e3:3a:ff:1e:67:d5:b4:eb:5f:12:47:c6:e8:
68:0f:ac:29:25:11:20:55:d0:1a:bc:16:27:a1:4a:77:b7:20:
d9:89:98:36:97:62:22:37:8c:8a:c8:08:64:ab:1d:74:f3:67:
90:54:d5:b5:2d:55:a6:ff:cb:6e:ab:0e:5a:b8:21:fb:77:06:
8f:0c:7e:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhDmzQEYETOX2d1tJZLH8gGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NGQwNGMzOTY0MWI4MmI1ZGMzODQ0Y2Y1ZmY1NTBmNTQw
NDQ2ODkwHhcNMjUwNzI1MjIwMTQxWhcNMjUwNzI2MjIwMTQxWjAzMTEwLwYDVQQD
EyhkYTFmMTg4ODVkMjlhZjQxYTJkYmI4Zjc5OWNjN2NmZGI3MzNiNTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QOZFbfQWlPRxDyOagU2RJ92ixqY
VvegvYy3LQHcUSFSMm7XENvMvgCTdE3pI+8GqZuy+qYRNrceAWiL9R3Yb6NYthmZ
fKqV01EDM/bQ9DsduMEwb+zVtBipnveG7kFeMIMKQO65MzUUIMPduTjjQ4u6VhWq
M0v/qOXPBI0+rC/27uFkq+fKR0rGxF2/EmF08XMJTWnOcwJb2cJzhORc7Lh6Yy2Y
gm9vd+uj0C5ZT4uST0eFoFrxC9VRl/5DbvUyjacHHn6TMehAy29KppGubo8B7p0S
H5ogqSRtEsFaTe9BR7BUv4joZCHk60eNuyPmO+/VIjlQ0NEdPsjRwGuILwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNofGIhdKa9Botu495nMfP23M7VqMB8GA1UdIwQY
MBaAFCZNBMOWQbgrXcOETPX/VQ9UBEaJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmswRXc1WkJ1Q3RkdzRSTTlmOVZEMVFFUm9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hMDA5OWMtZDg2MC00OWE1LWI0NTkt
M2QwMDM2NjAzZWEwLzEvSmswRXc1WkJ1Q3RkdzRSTTlmOVZEMVFFUm9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9hMDA5OWMtZDg2MC00OWE1LWI0NTktM2QwMDM2NjAzZWEw
LzEvSmswRXc1WkJ1Q3RkdzRSTTlmOVZEMVFFUm9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmO2HmDsP
zzfYSFdmZChiGmLBgcV+deg8eG6XDwyjaoVnBbFCyUcAXuhC2Nj3e/fkR3l/i26x
GL1Lkr0uqT77RbNQoWeAf5NiLIFoQaLjIzvcMFAPh5WEkghMMhsyPZN0hHayqkM1
l8i90Y2Zfcl6ZCjizijl7W3epkbau7PH3/PdGPRi7tvvwh+vdTAxlWoNpZN9ShKI
zMkhrybqRf277i6iGgW+2K5wtHo75JQGvzMtzgREc76xrozjOv8eZ9W0618SR8bo
aA+sKSURIFXQGrwWJ6FKd7cg2YmYNpdiIjeMisgIZKsddPNnkFTVtS1Vpv/LbqsO
Wrgh+3cGjwx+5w==
-----END CERTIFICATE-----
Generated at Sat Jul 26 06:12:01 2025 by rpki-client