Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
File: jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft (raw, json)
Hash identifier: tjFmPX3osGvUBDIivqzWT1kCcaFX/6683XDbe2OpjcA=
Subject key identifier: 4D:CE:F4:5B:94:0E:2E:C4:3E:2E:29:51:5B:4A:65:5E:7E:A0:00:EC
Authority key identifier: 8F:04:1D:66:9E:A6:C4:11:70:D6:F8:14:09:C0:FF:DC:28:E5:69:07
Certificate issuer: /CN=8f041d669ea6c41170d6f81409c0ffdc28e56907
Certificate serial: 01984965F7DDF7B32AA6D8D74A36B6E5E259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 01:01:16 +0000
Manifest this update: Sun 27 Jul 2025 01:01:16 +0000
Manifest next update: Mon 28 Jul 2025 01:01:16 +0000
Files and hashes: 1: grXRQpT1aZeaC-n0N849AfZZ_V4.roa (hash: x7JYnVR7QlEIld9EwbA1Mq0qnt4Qvkq7/cYHdkassRc=)
2: jwQdZp6mxBFw1vgUCcD_3CjlaQc.crl (hash: Or2hp4RyEUHr7jWFlw0NyJOdvGUfUydaJ8E252cG7/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:f7:dd:f7:b3:2a:a6:d8:d7:4a:36:b6:e5:e2:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f041d669ea6c41170d6f81409c0ffdc28e56907
Validity
Not Before: Jul 27 01:01:16 2025 GMT
Not After : Jul 28 01:01:16 2025 GMT
Subject: CN=4dcef45b940e2ec43e2e29515b4a655e7ea000ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:58:70:e7:10:d3:ec:e5:e1:4d:0a:2c:16:07:
61:71:dc:0e:7e:ad:54:26:e2:d6:21:77:04:04:b8:
6a:ee:5a:ed:44:69:a6:a7:f2:c3:4b:0c:55:26:ac:
3e:0d:b2:10:b0:6c:eb:4f:8b:1f:1a:24:6d:19:00:
70:5b:97:2d:ee:08:04:b6:6c:a8:0f:75:f4:a7:2d:
f9:09:0c:02:b0:7d:88:9a:4c:17:b9:43:1a:85:20:
ed:af:45:6e:7f:6f:f8:62:8c:0c:2a:57:c1:5c:f9:
94:87:75:77:3d:fb:b4:b1:9d:2e:63:cb:63:90:fe:
d9:2c:eb:07:e2:5d:94:1a:2e:a7:e5:93:2c:a3:5c:
30:f9:10:a4:0a:e1:ac:de:88:43:b0:db:f3:2b:ed:
04:d7:d5:bc:18:80:80:19:0d:9b:6c:f7:91:35:ea:
82:19:9a:3e:99:90:ca:e2:e9:09:77:66:71:53:f6:
c8:5e:74:79:05:03:cd:51:1b:67:1a:9f:1a:31:53:
d1:37:80:95:9e:9d:87:9e:54:86:c5:8f:fe:20:88:
50:9b:ca:d9:05:50:89:21:c7:59:8d:67:f1:d3:c8:
2f:a8:de:09:3f:30:63:19:a8:b4:dd:c5:b6:e4:b4:
5c:8e:fb:9c:92:72:d4:8e:51:58:fe:48:4e:1f:2c:
3b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CE:F4:5B:94:0E:2E:C4:3E:2E:29:51:5B:4A:65:5E:7E:A0:00:EC
X509v3 Authority Key Identifier:
keyid:8F:04:1D:66:9E:A6:C4:11:70:D6:F8:14:09:C0:FF:DC:28:E5:69:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:1d:c0:54:c2:e4:5d:fd:bd:3d:5c:20:d1:a2:82:fb:d8:70:
7e:40:a0:92:38:4c:80:ee:aa:53:7c:87:29:45:b0:df:97:5d:
1f:7a:c7:9d:05:c7:8b:cc:3c:14:d6:a3:94:cf:79:31:e1:46:
00:5c:6d:c6:dd:52:ca:0e:64:79:3f:c0:4b:44:37:ca:86:a0:
f5:76:b1:ae:76:09:d3:22:cd:33:a4:eb:f5:a4:11:13:f5:69:
91:f7:76:3f:0f:28:70:a8:cb:0f:a1:6d:70:0a:21:0c:73:1b:
3c:56:b2:2b:e0:91:67:9e:27:6d:21:2e:5b:38:70:13:5d:25:
11:78:79:b2:fb:96:96:2d:44:86:dc:3c:b8:3e:d3:32:38:d6:
df:1d:59:d8:af:91:7b:d5:31:33:f0:d1:a2:24:b1:0c:51:6c:
b6:5f:f9:90:50:97:db:f4:bc:42:af:c6:0d:c3:10:44:3e:09:
78:7d:bd:65:f2:0b:d1:bf:c3:b2:59:4b:4e:c9:9e:c3:16:c8:
17:b6:a1:f4:4b:18:6f:96:b3:b7:cf:b9:f8:ec:bc:68:c3:e3:
9b:d0:1d:ba:12:c0:b6:42:3d:69:b7:c1:cc:07:f8:ce:fe:d2:
7f:a2:39:d6:bd:73:ba:fd:9c:33:90:51:85:c8:83:56:e7:8e:
1f:77:d6:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZffd97MqptjXSja25eJZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMDQxZDY2OWVhNmM0MTE3MGQ2ZjgxNDA5YzBmZmRjMjhl
NTY5MDcwHhcNMjUwNzI3MDEwMTE2WhcNMjUwNzI4MDEwMTE2WjAzMTEwLwYDVQQD
Eyg0ZGNlZjQ1Yjk0MGUyZWM0M2UyZTI5NTE1YjRhNjU1ZTdlYTAwMGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVhw5xDT7OXhTQosFgdhcdwOfq1U
JuLWIXcEBLhq7lrtRGmmp/LDSwxVJqw+DbIQsGzrT4sfGiRtGQBwW5ct7ggEtmyo
D3X0py35CQwCsH2ImkwXuUMahSDtr0Vuf2/4YowMKlfBXPmUh3V3Pfu0sZ0uY8tj
kP7ZLOsH4l2UGi6n5ZMso1ww+RCkCuGs3ohDsNvzK+0E19W8GICAGQ2bbPeRNeqC
GZo+mZDK4ukJd2ZxU/bIXnR5BQPNURtnGp8aMVPRN4CVnp2HnlSGxY/+IIhQm8rZ
BVCJIcdZjWfx08gvqN4JPzBjGai03cW25LRcjvucknLUjlFY/khOHyw7zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE3O9FuUDi7EPi4pUVtKZV5+oADsMB8GA1UdIwQY
MBaAFI8EHWaepsQRcNb4FAnA/9wo5WkHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvandRZFpwNm14QkZ3MXZnVUNjRF8zQ2psYVFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8xYThjYmQtNzJjZi00YTFjLTgzZDIt
YzIzZWFlZDRkMTI1LzEvandRZFpwNm14QkZ3MXZnVUNjRF8zQ2psYVFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8xYThjYmQtNzJjZi00YTFjLTgzZDItYzIzZWFlZDRkMTI1
LzEvandRZFpwNm14QkZ3MXZnVUNjRF8zQ2psYVFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHB3AVMLk
Xf29PVwg0aKC+9hwfkCgkjhMgO6qU3yHKUWw35ddH3rHnQXHi8w8FNajlM95MeFG
AFxtxt1Syg5keT/AS0Q3yoag9XaxrnYJ0yLNM6Tr9aQRE/Vpkfd2Pw8ocKjLD6Ft
cAohDHMbPFayK+CRZ54nbSEuWzhwE10lEXh5svuWli1Ehtw8uD7TMjjW3x1Z2K+R
e9UxM/DRoiSxDFFstl/5kFCX2/S8Qq/GDcMQRD4JeH29ZfIL0b/DsllLTsmewxbI
F7ah9EsYb5azt8+5+Oy8aMPjm9AduhLAtkI9abfBzAf4zv7Sf6I51r1zuv2cM5BR
hciDVueOH3fWjg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:57:40 2025 by rpki-client