Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.mft
File: j8HWvjunicXa61l6E13l7Myrj5U.mft (raw, json)
Hash identifier: Noqj/5r99Rjzcp58BjdFCNdFHdjgQ4W4Md0JX+Ds3ds=
Subject key identifier: 2C:39:D4:2B:98:87:7C:01:B9:E8:50:FC:BE:DC:2B:44:31:FA:9A:8C
Authority key identifier: 8F:C1:D6:BE:3B:A7:89:C5:DA:EB:59:7A:13:5D:E5:EC:CC:AB:8F:95
Certificate issuer: /CN=8fc1d6be3ba789c5daeb597a135de5ecccab8f95
Certificate serial: 01984A0A20C269B7874586A2AE1C667DA3E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8HWvjunicXa61l6E13l7Myrj5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.mft
Manifest number: 14F1
Signing time: Sun 27 Jul 2025 04:00:34 +0000
Manifest this update: Sun 27 Jul 2025 04:00:34 +0000
Manifest next update: Mon 28 Jul 2025 04:00:34 +0000
Files and hashes: 1: j8HWvjunicXa61l6E13l7Myrj5U.crl (hash: 04wv5vAbtINH3l3tDKZNBuLVyn0vYT0/jhFnxZwNiHs=)
2: ns9Iu925uNPqm9SyfjZghoXo_D0.roa (hash: 5KxIGOmUfDj5TmcmXox7HeyHg9DfY+4gQjDvtCkMxCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8HWvjunicXa61l6E13l7Myrj5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:20:c2:69:b7:87:45:86:a2:ae:1c:66:7d:a3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc1d6be3ba789c5daeb597a135de5ecccab8f95
Validity
Not Before: Jul 27 04:00:34 2025 GMT
Not After : Jul 28 04:00:34 2025 GMT
Subject: CN=2c39d42b98877c01b9e850fcbedc2b4431fa9a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0c:b3:78:8f:8b:a5:13:5b:af:10:ca:88:f8:
65:76:23:3c:72:2a:78:61:c8:61:d9:3d:ad:ec:63:
24:8c:8a:48:ea:b2:21:ff:b0:93:35:a0:9f:9a:75:
55:58:61:08:b0:fd:01:5c:68:f4:e1:21:54:65:8d:
b3:1e:71:41:f2:5c:3b:e4:39:53:06:bf:ed:b5:21:
e0:7f:24:5f:4a:7e:9a:2f:87:ac:9f:3f:4a:70:20:
93:fe:df:e4:c6:50:fe:fa:f9:e9:35:21:72:7e:16:
93:91:cd:1b:88:60:5b:ca:2f:21:28:41:59:6e:ec:
df:04:e2:ac:b9:09:f1:ed:bd:43:f9:64:53:8a:88:
80:e9:36:12:b0:be:27:72:eb:fd:ef:23:a9:9b:32:
b1:35:bc:19:d6:9d:a6:c4:93:dc:03:73:1d:ee:7e:
a4:f2:e3:1e:a3:2a:aa:b2:3b:70:50:10:2a:5b:77:
64:0b:00:ba:bf:d3:59:97:e1:33:0e:8a:34:e5:f7:
5e:d0:d7:ae:bb:cb:bb:e5:bd:b7:03:54:75:17:51:
36:ca:39:b6:9f:9c:00:f9:a6:55:ff:ea:23:72:b0:
79:99:a1:32:c9:36:1c:48:e7:98:29:37:0c:fc:87:
91:9e:bf:38:b5:59:29:f9:06:c6:2a:59:e3:6a:e3:
a4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:39:D4:2B:98:87:7C:01:B9:E8:50:FC:BE:DC:2B:44:31:FA:9A:8C
X509v3 Authority Key Identifier:
keyid:8F:C1:D6:BE:3B:A7:89:C5:DA:EB:59:7A:13:5D:E5:EC:CC:AB:8F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8HWvjunicXa61l6E13l7Myrj5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:0d:54:0d:38:f0:8d:94:fa:64:4a:f5:71:ee:be:b3:0d:01:
55:03:8c:d9:f0:fb:ed:ff:1c:a2:86:b0:70:43:83:db:9e:7c:
1c:b3:c5:ab:92:ee:69:42:90:51:75:63:02:39:f6:0b:ab:3b:
a4:d9:9d:d7:4b:dd:fb:09:04:c9:f3:21:94:85:1f:b4:b2:51:
ae:36:ba:e0:52:80:3f:a1:e3:74:75:77:98:d3:a4:bb:41:d3:
7d:f0:3c:9a:c7:87:dd:49:26:bf:ab:3c:01:65:df:40:32:f7:
7d:d5:45:60:84:1b:63:f1:ce:a1:91:1a:02:54:38:cd:d0:fc:
c1:58:f4:06:0e:74:05:48:11:1d:56:f7:6b:7d:83:49:ed:f4:
58:da:08:da:db:89:06:27:4a:db:e1:2d:43:4c:7e:d2:32:b5:
ba:af:90:36:ab:ff:5b:b1:5d:5b:68:0e:79:6b:f6:67:49:17:
2b:a7:e6:78:59:02:d1:86:ee:50:f6:03:f5:50:e6:53:6c:6f:
6d:6f:56:5b:dd:1b:e4:43:f2:45:ec:48:f3:26:c5:80:cc:2b:
17:8f:fc:3e:67:67:c0:b4:c0:11:f0:ea:fb:b8:3d:2e:26:e6:
43:62:a5:ef:76:7a:72:44:55:fa:50:c6:af:43:1d:95:f5:b4:
3e:0e:8a:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCiDCabeHRYairhxmfaPgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYzFkNmJlM2JhNzg5YzVkYWViNTk3YTEzNWRlNWVjY2Nh
YjhmOTUwHhcNMjUwNzI3MDQwMDM0WhcNMjUwNzI4MDQwMDM0WjAzMTEwLwYDVQQD
EygyYzM5ZDQyYjk4ODc3YzAxYjllODUwZmNiZWRjMmI0NDMxZmE5YThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwyzeI+LpRNbrxDKiPhldiM8cip4
Ychh2T2t7GMkjIpI6rIh/7CTNaCfmnVVWGEIsP0BXGj04SFUZY2zHnFB8lw75DlT
Br/ttSHgfyRfSn6aL4esnz9KcCCT/t/kxlD++vnpNSFyfhaTkc0biGBbyi8hKEFZ
buzfBOKsuQnx7b1D+WRTioiA6TYSsL4ncuv97yOpmzKxNbwZ1p2mxJPcA3Md7n6k
8uMeoyqqsjtwUBAqW3dkCwC6v9NZl+EzDoo05fde0Neuu8u75b23A1R1F1E2yjm2
n5wA+aZV/+ojcrB5maEyyTYcSOeYKTcM/IeRnr84tVkp+QbGKlnjauOkSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCw51CuYh3wBuehQ/L7cK0Qx+pqMMB8GA1UdIwQY
MBaAFI/B1r47p4nF2utZehNd5ezMq4+VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajhIV3ZqdW5pY1hhNjFsNkUxM2w3TXlyajVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi80NGVlOGQtMmFlOC00ODQ0LWE5MzUt
ZDI0YzJjZTIzYWI3LzEvajhIV3ZqdW5pY1hhNjFsNkUxM2w3TXlyajVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi80NGVlOGQtMmFlOC00ODQ0LWE5MzUtZDI0YzJjZTIzYWI3
LzEvajhIV3ZqdW5pY1hhNjFsNkUxM2w3TXlyajVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXg1UDTjw
jZT6ZEr1ce6+sw0BVQOM2fD77f8cooawcEOD2558HLPFq5LuaUKQUXVjAjn2C6s7
pNmd10vd+wkEyfMhlIUftLJRrja64FKAP6HjdHV3mNOku0HTffA8mseH3Ukmv6s8
AWXfQDL3fdVFYIQbY/HOoZEaAlQ4zdD8wVj0Bg50BUgRHVb3a32DSe30WNoI2tuJ
BidK2+EtQ0x+0jK1uq+QNqv/W7FdW2gOeWv2Z0kXK6fmeFkC0YbuUPYD9VDmU2xv
bW9WW90b5EPyRexI8ybFgMwrF4/8PmdnwLTAEfDq+7g9LibmQ2Kl73Z6ckRV+lDG
r0MdlfW0Pg6Kew==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:26:38 2025 by rpki-client