Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft
File: jY9-tNJUj5zL88s45wKhkMEXQvU.mft (raw, json)
Hash identifier: QdRJG1l3OH0jO+SW3bcvSTJYYn5kilUOGIQo1vv5aYQ=
Subject key identifier: 32:E0:13:14:4B:1E:53:A2:54:0D:91:65:F4:43:74:4E:59:4A:E8:69
Authority key identifier: 8D:8F:7E:B4:D2:54:8F:9C:CB:F3:CB:38:E7:02:A1:90:C1:17:42:F5
Certificate issuer: /CN=8d8f7eb4d2548f9ccbf3cb38e702a190c11742f5
Certificate serial: 01984B547944C7B11CA45B01E7971E95B2F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 10:01:23 +0000
Manifest this update: Sun 27 Jul 2025 10:01:23 +0000
Manifest next update: Mon 28 Jul 2025 10:01:23 +0000
Files and hashes: 1: JoTSZ8E8fkiS501xBbOY7pc3jM8.roa (hash: JoNzI4ZspphrrJoARed2dcoamemKZ5kg0l+d/5sdlcM=)
2: SqfaLa-P64VMRzLu45OzZ7O-myU.roa (hash: 8RixXJbGYWZA//tOAjP6K4ex9vVhr1Y3178psfUi1TM=)
3: jY9-tNJUj5zL88s45wKhkMEXQvU.crl (hash: 7neNXKtlMhz0oM74hj2aSIq6xJEWYGoNLqvy/PqM1BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:79:44:c7:b1:1c:a4:5b:01:e7:97:1e:95:b2:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d8f7eb4d2548f9ccbf3cb38e702a190c11742f5
Validity
Not Before: Jul 27 10:01:23 2025 GMT
Not After : Jul 28 10:01:23 2025 GMT
Subject: CN=32e013144b1e53a2540d9165f443744e594ae869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:17:ff:7d:10:a7:7e:92:7b:7a:aa:65:be:1a:
81:25:61:d6:41:a6:28:89:96:43:2e:be:0f:23:20:
dd:3a:f7:5f:81:8f:c0:a8:17:a4:92:47:38:13:af:
12:c5:ea:cc:0e:c8:52:1c:5f:9c:cb:f7:1d:87:38:
98:de:8a:ce:04:88:f7:8d:e4:f1:9e:0d:92:1f:51:
3b:26:ad:48:d4:09:cc:21:6b:f1:fd:b3:54:58:c0:
c3:8a:a4:c7:c5:19:24:95:8a:6d:ea:b4:c1:20:55:
f9:7a:71:d0:16:15:49:cd:da:9b:5f:68:1d:b1:c4:
f7:8c:db:cd:26:87:68:54:55:30:ad:24:b0:41:9f:
ed:39:97:9f:f0:af:b4:11:15:af:6e:77:05:55:69:
a7:a4:d4:44:1f:c1:12:af:57:ce:2c:1a:67:5b:18:
a6:04:32:81:fb:ed:b1:14:c8:af:e1:af:b6:e1:b6:
6e:11:27:48:fc:3f:af:70:e8:44:9e:8d:5b:16:7e:
84:eb:ea:50:36:af:2b:4d:4a:1c:24:b3:a8:62:17:
6e:87:80:60:d3:5e:90:31:61:38:ea:d3:28:75:be:
b9:4a:c8:8d:8e:d9:b5:03:6e:65:23:13:ce:29:d0:
34:cc:7d:16:12:6f:a4:89:0a:d7:e0:f1:3a:1f:fe:
ce:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E0:13:14:4B:1E:53:A2:54:0D:91:65:F4:43:74:4E:59:4A:E8:69
X509v3 Authority Key Identifier:
keyid:8D:8F:7E:B4:D2:54:8F:9C:CB:F3:CB:38:E7:02:A1:90:C1:17:42:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:f0:93:b2:93:70:62:29:cc:e2:62:5d:de:7b:02:45:b9:fd:
27:c7:b7:6b:fb:ff:78:a5:b1:e7:d5:cf:9c:f5:c5:20:fa:57:
32:6f:a2:c1:bc:39:96:41:97:fd:b1:20:fb:1a:3a:d5:44:58:
87:84:91:5e:70:9d:c5:fb:87:cf:56:86:af:69:8d:a6:70:13:
75:0e:fc:e1:cb:7f:5e:1b:6d:9e:dd:27:d2:df:6a:54:ce:53:
e6:92:80:19:4e:c8:8a:e9:f0:c9:b7:c5:40:e4:42:92:13:fc:
b8:7b:08:02:b9:8a:4e:ac:1f:2b:d0:2a:54:72:9d:0a:6b:6a:
5e:4b:45:88:74:e6:c7:ba:01:49:55:d3:21:41:63:3f:af:4d:
7b:f0:ec:41:9a:8a:e4:ff:13:fd:2a:5c:63:0e:d5:2b:77:1f:
9c:c2:18:91:98:ca:13:05:07:f4:2f:8d:61:6c:07:57:42:24:
51:7c:a6:af:8e:92:26:ed:c3:e7:e7:e5:cf:78:89:18:e6:47:
a1:11:0f:17:33:fc:23:e7:ab:b6:04:f8:f4:e8:ea:04:23:88:
b1:c8:dc:b7:89:11:9c:df:0b:c2:f7:d1:a2:c5:5c:5f:f5:32:
8a:b2:37:53:9d:d2:cd:72:f1:cf:fe:a6:72:7f:3e:5d:52:7b:
6a:e4:d1:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLVHlEx7EcpFsB55celbL2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkOGY3ZWI0ZDI1NDhmOWNjYmYzY2IzOGU3MDJhMTkwYzEx
NzQyZjUwHhcNMjUwNzI3MTAwMTIzWhcNMjUwNzI4MTAwMTIzWjAzMTEwLwYDVQQD
EygzMmUwMTMxNDRiMWU1M2EyNTQwZDkxNjVmNDQzNzQ0ZTU5NGFlODY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxf/fRCnfpJ7eqplvhqBJWHWQaYo
iZZDLr4PIyDdOvdfgY/AqBekkkc4E68SxerMDshSHF+cy/cdhziY3orOBIj3jeTx
ng2SH1E7Jq1I1AnMIWvx/bNUWMDDiqTHxRkklYpt6rTBIFX5enHQFhVJzdqbX2gd
scT3jNvNJodoVFUwrSSwQZ/tOZef8K+0ERWvbncFVWmnpNREH8ESr1fOLBpnWxim
BDKB++2xFMiv4a+24bZuESdI/D+vcOhEno1bFn6E6+pQNq8rTUocJLOoYhduh4Bg
016QMWE46tModb65SsiNjtm1A25lIxPOKdA0zH0WEm+kiQrX4PE6H/7OUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLgExRLHlOiVA2RZfRDdE5ZSuhpMB8GA1UdIwQY
MBaAFI2PfrTSVI+cy/PLOOcCoZDBF0L1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalk5LXROSlVqNXpMODhzNDV3S2hrTUVYUXZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9jMjYxZWItYzdjZC00NTRkLTg0YTYt
YWZkMjcyZGQwZmI1LzEvalk5LXROSlVqNXpMODhzNDV3S2hrTUVYUXZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9jMjYxZWItYzdjZC00NTRkLTg0YTYtYWZkMjcyZGQwZmI1
LzEvalk5LXROSlVqNXpMODhzNDV3S2hrTUVYUXZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFPCTspNw
YinM4mJd3nsCRbn9J8e3a/v/eKWx59XPnPXFIPpXMm+iwbw5lkGX/bEg+xo61URY
h4SRXnCdxfuHz1aGr2mNpnATdQ784ct/Xhttnt0n0t9qVM5T5pKAGU7IiunwybfF
QORCkhP8uHsIArmKTqwfK9AqVHKdCmtqXktFiHTmx7oBSVXTIUFjP69Ne/DsQZqK
5P8T/SpcYw7VK3cfnMIYkZjKEwUH9C+NYWwHV0IkUXymr46SJu3D5+flz3iJGOZH
oREPFzP8I+ertgT49OjqBCOIscjct4kRnN8LwvfRosVcX/UyirI3U53SzXLxz/6m
cn8+XVJ7auTRYA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:09:51 2025 by rpki-client