Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft
File: jntpkn3SG7nhRV-ojtiO0kfHGNo.mft (raw, json)
Hash identifier: BVIy6Lw/GLBUW09XkrhOQsQDWx9UvXlEtG7mCZ7hTOE=
Subject key identifier: 5D:23:5E:3F:23:CF:43:93:32:9D:E5:32:01:34:1D:1E:1B:E3:55:F0
Authority key identifier: 8E:7B:69:92:7D:D2:1B:B9:E1:45:5F:A8:8E:D8:8E:D2:47:C7:18:DA
Certificate issuer: /CN=8e7b69927dd21bb9e1455fa88ed88ed247c718da
Certificate serial: 019847AD838C5CA8AED3AACF4DE69AC8AA87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jntpkn3SG7nhRV-ojtiO0kfHGNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft
Manifest number: 136E
Signing time: Sat 26 Jul 2025 17:00:10 +0000
Manifest this update: Sat 26 Jul 2025 17:00:10 +0000
Manifest next update: Sun 27 Jul 2025 17:00:10 +0000
Files and hashes: 1: 9oNER91IB-H_6dQzFG4aTa1cjVM.roa (hash: oK/++MF9suyvds/jQSLAoISxJwhmMBspKaCD4mfLYUA=)
2: jntpkn3SG7nhRV-ojtiO0kfHGNo.crl (hash: /4ZbZrjYmsy3aUrXKJ9Ci1H31pXxEg0ySuG0EjRL6s0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jntpkn3SG7nhRV-ojtiO0kfHGNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:83:8c:5c:a8:ae:d3:aa:cf:4d:e6:9a:c8:aa:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7b69927dd21bb9e1455fa88ed88ed247c718da
Validity
Not Before: Jul 26 17:00:10 2025 GMT
Not After : Jul 27 17:00:10 2025 GMT
Subject: CN=5d235e3f23cf4393329de53201341d1e1be355f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:60:c5:a7:f7:d0:22:87:6e:91:d7:84:c6:8d:
b1:ae:ac:7d:bf:dc:05:8f:cd:6a:c7:00:9a:6a:d8:
48:9b:00:7b:75:c7:8b:ad:9f:c1:89:82:b4:e8:63:
7d:85:04:cc:5f:23:db:6b:de:ab:42:ee:6b:05:1a:
a7:07:00:96:e7:6f:63:be:00:ea:c2:b8:16:4c:33:
97:a4:a4:e8:a4:5f:45:e7:da:9b:c4:59:8d:d6:08:
5b:94:0f:fc:da:97:d7:24:53:d0:d7:9a:7a:20:51:
ac:28:3d:4e:41:46:c2:5c:5f:3d:8e:2d:df:02:8c:
23:20:7f:39:1a:1a:b0:40:e5:fb:d0:79:fc:9c:3d:
01:74:ab:b7:df:45:a0:0c:73:72:36:00:e7:10:a1:
bb:6b:98:bd:4c:45:d7:d9:02:8b:ce:31:22:b3:c8:
b4:a9:56:c9:f4:3f:9c:22:bf:e8:f8:46:77:66:bd:
a7:6f:ff:fe:34:1b:77:11:11:2f:b8:74:37:12:18:
e2:3b:ac:7d:90:15:ed:6f:d2:2a:49:64:51:a7:40:
71:a4:7d:3a:e2:79:53:88:7c:3f:91:43:56:50:e5:
ce:4b:15:69:15:09:91:55:2a:98:82:b8:7b:96:a2:
7c:f8:9c:74:0e:4e:fc:c5:00:3d:c4:67:16:47:a3:
87:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:23:5E:3F:23:CF:43:93:32:9D:E5:32:01:34:1D:1E:1B:E3:55:F0
X509v3 Authority Key Identifier:
keyid:8E:7B:69:92:7D:D2:1B:B9:E1:45:5F:A8:8E:D8:8E:D2:47:C7:18:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jntpkn3SG7nhRV-ojtiO0kfHGNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:be:de:4e:f6:4d:6d:18:eb:35:3e:fa:cf:e7:09:db:f2:bc:
95:68:92:29:04:4c:a0:c8:92:2a:c4:82:12:0f:de:96:6d:92:
b4:c4:85:ce:2b:17:27:26:c6:7c:f5:15:96:b8:83:67:bc:c8:
83:3c:6e:84:c2:c8:05:8e:8c:9c:17:8d:62:c7:92:ce:89:8e:
9d:9a:3c:d4:7a:12:d6:5f:39:3d:ca:79:7a:1e:c0:88:75:a5:
32:f6:35:3f:94:01:19:d7:97:0e:57:37:4f:91:69:93:eb:ef:
0e:15:9e:fc:b3:0d:8d:af:5b:14:36:0d:c1:d6:b1:0f:52:cb:
35:99:0e:68:cc:27:e8:81:a4:5c:9d:b6:2a:6b:64:f8:00:0c:
9e:bf:1f:0d:8a:63:0d:f9:dc:9e:09:50:37:6f:76:48:ce:64:
68:95:94:d8:bc:31:43:de:d8:07:46:bd:79:d3:ec:61:05:13:
4a:e0:ab:7e:0f:a5:4c:cf:8c:68:95:8b:9d:bc:5f:7f:31:88:
60:68:36:c0:0f:f7:8d:bd:22:86:7c:d1:35:85:ad:ce:76:0a:
fa:d3:9a:39:da:74:79:c2:53:35:2e:32:df:83:65:9a:7a:05:
20:92:28:de:ac:91:a0:88:7f:67:1e:69:8a:27:6f:9d:52:54:
5c:25:b0:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHrYOMXKiu06rPTeaayKqHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlN2I2OTkyN2RkMjFiYjllMTQ1NWZhODhlZDg4ZWQyNDdj
NzE4ZGEwHhcNMjUwNzI2MTcwMDEwWhcNMjUwNzI3MTcwMDEwWjAzMTEwLwYDVQQD
Eyg1ZDIzNWUzZjIzY2Y0MzkzMzI5ZGU1MzIwMTM0MWQxZTFiZTM1NWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2DFp/fQIodukdeExo2xrqx9v9wF
j81qxwCaathImwB7dceLrZ/BiYK06GN9hQTMXyPba96rQu5rBRqnBwCW529jvgDq
wrgWTDOXpKTopF9F59qbxFmN1ghblA/82pfXJFPQ15p6IFGsKD1OQUbCXF89ji3f
AowjIH85GhqwQOX70Hn8nD0BdKu330WgDHNyNgDnEKG7a5i9TEXX2QKLzjEis8i0
qVbJ9D+cIr/o+EZ3Zr2nb//+NBt3EREvuHQ3EhjiO6x9kBXtb9IqSWRRp0BxpH06
4nlTiHw/kUNWUOXOSxVpFQmRVSqYgrh7lqJ8+Jx0Dk78xQA9xGcWR6OHNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF0jXj8jz0OTMp3lMgE0HR4b41XwMB8GA1UdIwQY
MBaAFI57aZJ90hu54UVfqI7YjtJHxxjaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam50cGtuM1NHN25oUlYtb2p0aU8wa2ZIR05vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC80NmVkY2ItY2FhZi00ZDY1LTg1YzEt
YzAyOTJmNThiNzJmLzEvam50cGtuM1NHN25oUlYtb2p0aU8wa2ZIR05vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC80NmVkY2ItY2FhZi00ZDY1LTg1YzEtYzAyOTJmNThiNzJm
LzEvam50cGtuM1NHN25oUlYtb2p0aU8wa2ZIR05vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALr7eTvZN
bRjrNT76z+cJ2/K8lWiSKQRMoMiSKsSCEg/elm2StMSFzisXJybGfPUVlriDZ7zI
gzxuhMLIBY6MnBeNYseSzomOnZo81HoS1l85Pcp5eh7AiHWlMvY1P5QBGdeXDlc3
T5Fpk+vvDhWe/LMNja9bFDYNwdaxD1LLNZkOaMwn6IGkXJ22Kmtk+AAMnr8fDYpj
DfncnglQN292SM5kaJWU2LwxQ97YB0a9edPsYQUTSuCrfg+lTM+MaJWLnbxffzGI
YGg2wA/3jb0ihnzRNYWtznYK+tOaOdp0ecJTNS4y34NlmnoFIJIo3qyRoIh/Zx5p
iidvnVJUXCWwBg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 19:04:28 2025 by rpki-client