
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft
File: Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft (raw, json)
Hash identifier: O6orYgjjuiRbEloF/b4W/KM67Ii44z0ps09qCuz9/gk=
Subject key identifier: 69:3A:E4:2B:60:2F:09:34:16:6A:1A:A0:9E:0C:70:90:1A:E6:57:CB
Authority key identifier: 27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
Certificate issuer: /CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Certificate serial: 01984AAEF743E81AF8EFB6BC70E72785C28C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft
Manifest number: 150A
Signing time: Sun 27 Jul 2025 07:00:37 +0000
Manifest this update: Sun 27 Jul 2025 07:00:37 +0000
Manifest next update: Mon 28 Jul 2025 07:00:37 +0000
Files and hashes: 1: 6dw1Aml1bh-S2rgu2FLftIv8mdo.roa (hash: bjVQxAFYHa6cLLC44/QIlf7ibxA9hm/+3ibLRF7oZiU=)
2: GB7clsDZOHQr1LdusJTcl_G1778.roa (hash: qc0Ls2xstb+cEZ6tCvVbKsbdZ77Q8gYB2ZQnMh9vnLQ=)
3: Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl (hash: StRRKbpuB6ApAJQa06RHBJ/TZvMHO9lb/dS3vEv353U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:f7:43:e8:1a:f8:ef:b6:bc:70:e7:27:85:c2:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Validity
Not Before: Jul 27 07:00:37 2025 GMT
Not After : Jul 28 07:00:37 2025 GMT
Subject: CN=693ae42b602f0934166a1aa09e0c70901ae657cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:10:ec:77:65:e6:af:6b:57:1c:6e:b5:8b:5e:
99:7e:31:7a:ce:8c:f9:40:1a:ce:25:01:46:57:ae:
ee:51:df:18:32:c2:f8:6a:9d:2a:a9:d8:7d:cc:69:
30:bd:e0:ff:5a:d2:ce:4e:d4:eb:33:2a:2b:51:44:
3e:87:bd:f5:f6:c6:e1:fb:0a:95:9c:14:b1:77:4b:
b9:eb:69:f9:ac:e1:0f:2e:22:44:54:fe:86:41:40:
66:67:36:5e:23:da:cc:8a:eb:9b:b7:3f:7f:b5:81:
84:af:07:5c:b7:a8:56:ec:20:71:7d:bd:04:81:3b:
f0:c2:be:2b:d7:6a:a4:99:ba:d7:23:fd:28:77:d6:
0a:4f:8f:89:e6:3a:e9:b9:e7:2b:a4:10:8a:5a:0b:
aa:41:36:c7:bd:0c:aa:b6:60:29:f0:6a:29:5b:8a:
34:4c:0c:f6:56:b5:33:8c:84:0f:7e:59:92:37:d3:
24:3b:95:a1:80:4b:be:4a:c1:bd:af:e9:75:b1:ed:
69:76:02:d8:f9:10:de:1a:4c:fb:f3:a4:b8:8d:dc:
10:ab:ee:e9:72:be:18:68:b7:ed:a7:b9:6f:ee:42:
e7:b8:0d:c1:3f:cf:ab:f5:e0:e8:a1:a1:43:e9:ca:
d4:f7:4b:4e:a4:7b:0b:99:93:fc:e9:09:9c:e5:bd:
00:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3A:E4:2B:60:2F:09:34:16:6A:1A:A0:9E:0C:70:90:1A:E6:57:CB
X509v3 Authority Key Identifier:
keyid:27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:75:61:87:b8:94:58:80:8b:6c:e1:3e:74:c9:65:a1:97:89:
f0:c0:30:f2:7c:8b:7c:74:bc:bb:93:b7:08:f8:09:d1:c5:5a:
65:33:b1:32:b6:09:a6:c2:0d:b5:b2:d8:07:83:02:3a:e9:b5:
40:0b:22:9b:cc:cd:c3:89:a0:42:d8:83:d9:da:d1:78:6c:e6:
9e:ad:75:16:d0:d7:6a:e1:91:fc:a9:8f:aa:8c:53:ff:e7:28:
c6:71:f4:a3:de:a4:17:18:5b:bd:25:06:68:9c:8a:1d:c1:aa:
68:b0:e4:34:4e:68:cc:81:76:3f:2f:92:28:16:b1:61:00:b4:
7e:a9:6b:e9:b3:7f:1d:86:d5:68:56:da:82:93:04:31:4f:fb:
81:c0:3e:75:c8:69:f7:9b:2c:28:39:f0:c1:95:73:a0:5f:08:
cc:b5:67:db:bb:a8:ff:c1:3e:b9:af:d4:06:53:dc:4f:76:39:
33:5f:5e:44:08:20:c0:d2:4e:a3:d9:9c:69:09:ee:4e:54:63:
91:03:65:eb:d4:e2:f6:ed:fd:6d:db:22:ea:e8:fa:72:61:9e:
a3:2a:93:5b:71:f4:08:2c:f4:99:0f:0b:b9:60:fa:75:e1:ae:
9a:be:b9:18:0a:79:92:a3:f7:1a:58:26:5b:01:0d:41:22:1f:
2c:c4:e2:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKrvdD6Br477a8cOcnhcKMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MmVkMDkwYWNmN2M4MjlhMjJiYmZiZTJiMGU5OThjZDIw
YWQ4MjYwHhcNMjUwNzI3MDcwMDM3WhcNMjUwNzI4MDcwMDM3WjAzMTEwLwYDVQQD
Eyg2OTNhZTQyYjYwMmYwOTM0MTY2YTFhYTA5ZTBjNzA5MDFhZTY1N2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRDsd2Xmr2tXHG61i16ZfjF6zoz5
QBrOJQFGV67uUd8YMsL4ap0qqdh9zGkwveD/WtLOTtTrMyorUUQ+h7319sbh+wqV
nBSxd0u562n5rOEPLiJEVP6GQUBmZzZeI9rMiuubtz9/tYGErwdct6hW7CBxfb0E
gTvwwr4r12qkmbrXI/0od9YKT4+J5jrpuecrpBCKWguqQTbHvQyqtmAp8GopW4o0
TAz2VrUzjIQPflmSN9MkO5WhgEu+SsG9r+l1se1pdgLY+RDeGkz786S4jdwQq+7p
cr4YaLftp7lv7kLnuA3BP8+r9eDooaFD6crU90tOpHsLmZP86Qmc5b0AnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGk65CtgLwk0FmoaoJ4McJAa5lfLMB8GA1UdIwQY
MBaAFCcu0JCs98gpoiu/visOmYzSCtgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnk3UWtLejN5Q21pSzctLUt3NlpqTklLMkNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9hMTVmOTYtZWMxOC00NjQ0LTg5YjMt
YWNjMjJiYjRkY2VkLzEvSnk3UWtLejN5Q21pSzctLUt3NlpqTklLMkNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9hMTVmOTYtZWMxOC00NjQ0LTg5YjMtYWNjMjJiYjRkY2Vk
LzEvSnk3UWtLejN5Q21pSzctLUt3NlpqTklLMkNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZHVhh7iU
WICLbOE+dMlloZeJ8MAw8nyLfHS8u5O3CPgJ0cVaZTOxMrYJpsINtbLYB4MCOum1
QAsim8zNw4mgQtiD2drReGzmnq11FtDXauGR/KmPqoxT/+coxnH0o96kFxhbvSUG
aJyKHcGqaLDkNE5ozIF2Py+SKBaxYQC0fqlr6bN/HYbVaFbagpMEMU/7gcA+dchp
95ssKDnwwZVzoF8IzLVn27uo/8E+ua/UBlPcT3Y5M19eRAggwNJOo9mcaQnuTlRj
kQNl69Ti9u39bdsi6uj6cmGeoyqTW3H0CCz0mQ8LuWD6deGumr65GAp5kqP3Glgm
WwENQSIfLMTiOA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 15:42:14 2025 by rpki-client