Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
File: j20qybaMMnEffof95SNFhPW89PI.mft (raw, json)
Hash identifier: SOB50e/PBGABA/NQHaHJdE1RjeT9y3KXETjQSqPkmEU=
Subject key identifier: 11:1A:F7:14:77:EC:0C:93:F7:C0:E8:01:8D:A9:12:99:13:5F:86:FC
Authority key identifier: 8F:6D:2A:C9:B6:8C:32:71:1F:7E:87:FD:E5:23:45:84:F5:BC:F4:F2
Certificate issuer: /CN=8f6d2ac9b68c32711f7e87fde5234584f5bcf4f2
Certificate serial: 01984964F3D7171AC9B83C378B4A2EDBACD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j20qybaMMnEffof95SNFhPW89PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
Manifest number: 15FE
Signing time: Sun 27 Jul 2025 01:00:09 +0000
Manifest this update: Sun 27 Jul 2025 01:00:09 +0000
Manifest next update: Mon 28 Jul 2025 01:00:09 +0000
Files and hashes: 1: dTkxMcCeXxHSlbzmXrq1h_yjEwQ.roa (hash: 6lLAKycVqxafwfSe9RpEl78tE7gClRO25WKnwVEGabY=)
2: j20qybaMMnEffof95SNFhPW89PI.crl (hash: NufiOzdbKXrcwi8O/CDsnpFjw3Onzku//v1ClH6JNwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j20qybaMMnEffof95SNFhPW89PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:64:f3:d7:17:1a:c9:b8:3c:37:8b:4a:2e:db:ac:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f6d2ac9b68c32711f7e87fde5234584f5bcf4f2
Validity
Not Before: Jul 27 01:00:09 2025 GMT
Not After : Jul 28 01:00:09 2025 GMT
Subject: CN=111af71477ec0c93f7c0e8018da91299135f86fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d5:a2:52:81:bc:3b:7b:3a:7e:e7:b0:12:f2:
ac:03:58:15:a2:de:b5:c5:d7:1e:70:47:f1:69:08:
00:11:7b:e5:d9:2a:a3:1c:d2:2f:d0:68:99:9c:a6:
b6:8f:07:d1:14:ca:48:10:e8:2d:b7:c6:75:31:8d:
27:a4:ae:9d:f9:0f:9d:1b:83:eb:c4:c9:d0:39:af:
89:6c:f3:74:6f:99:70:f6:66:9b:09:be:84:8a:c3:
7f:ad:cd:35:54:48:31:2c:a9:44:f3:03:1c:f8:2c:
4c:2e:4d:50:14:4d:c1:63:98:73:57:4b:50:c5:36:
24:93:d9:47:07:08:e1:cd:ac:6a:fd:45:bd:48:a1:
b0:f9:3f:57:d3:a6:97:df:4f:e2:50:ce:e5:01:78:
d9:3d:0e:42:49:5f:85:27:55:5e:34:58:be:23:b0:
35:a6:bd:29:c5:9f:ef:ab:a0:74:11:69:9f:fc:49:
cb:e4:06:21:50:1d:fb:13:a6:9e:6c:28:f0:e7:c3:
4e:35:88:bb:bf:53:bd:c0:a6:fd:cd:4a:70:82:2d:
8f:47:65:3e:df:6a:09:e0:b5:ce:47:79:f1:2d:d5:
b8:7a:37:fd:51:8f:ec:b4:5c:d5:7e:ac:ad:e3:e5:
c1:eb:71:aa:1f:29:f4:c0:34:f2:87:9a:1d:04:7b:
89:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1A:F7:14:77:EC:0C:93:F7:C0:E8:01:8D:A9:12:99:13:5F:86:FC
X509v3 Authority Key Identifier:
keyid:8F:6D:2A:C9:B6:8C:32:71:1F:7E:87:FD:E5:23:45:84:F5:BC:F4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j20qybaMMnEffof95SNFhPW89PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ef:fd:2d:83:c4:ff:b9:6f:ae:fa:f9:05:ad:91:20:b4:ec:
01:99:ea:a8:c6:bf:96:b1:17:07:a7:c9:fa:b4:fb:e8:c3:44:
08:ed:72:77:ef:a4:9e:dd:b3:f7:ad:3c:a6:a9:f3:31:13:a1:
77:dc:1c:b5:4c:96:17:fb:f0:e1:2c:80:be:2d:12:d3:e3:bf:
67:ba:9b:47:a8:2a:b1:47:4f:1d:2b:8a:4f:3b:13:74:22:36:
51:82:13:b3:1f:3c:93:f8:3c:8c:d5:dc:b1:2f:0b:af:79:0e:
00:c4:bd:a7:14:71:66:d6:a8:94:70:b4:68:fd:0d:76:cd:0d:
31:8d:b8:3c:13:ff:d0:41:ec:08:3a:fa:57:98:09:5b:3f:86:
65:d5:ba:29:50:4b:ee:9d:0f:a8:97:1c:25:74:ef:ce:d8:d6:
6f:41:ea:72:f4:58:5b:8d:09:7b:b9:f6:6d:18:56:27:df:ab:
48:03:13:9d:40:36:03:c1:1d:7b:f0:70:0a:0e:3b:b3:cc:06:
de:88:34:6c:b8:2e:1b:a1:3d:2a:a7:d2:29:93:66:f3:03:9e:
4f:67:af:c0:11:2c:18:ca:1c:14:f5:15:e3:7b:84:74:50:55:
99:0b:73:08:3e:1f:15:be:c8:42:27:5b:b5:e8:97:43:5e:00:
30:a3:e9:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZPPXFxrJuDw3i0ou26zVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmNmQyYWM5YjY4YzMyNzExZjdlODdmZGU1MjM0NTg0ZjVi
Y2Y0ZjIwHhcNMjUwNzI3MDEwMDA5WhcNMjUwNzI4MDEwMDA5WjAzMTEwLwYDVQQD
EygxMTFhZjcxNDc3ZWMwYzkzZjdjMGU4MDE4ZGE5MTI5OTEzNWY4NmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtWiUoG8O3s6fuewEvKsA1gVot61
xdcecEfxaQgAEXvl2SqjHNIv0GiZnKa2jwfRFMpIEOgtt8Z1MY0npK6d+Q+dG4Pr
xMnQOa+JbPN0b5lw9mabCb6EisN/rc01VEgxLKlE8wMc+CxMLk1QFE3BY5hzV0tQ
xTYkk9lHBwjhzaxq/UW9SKGw+T9X06aX30/iUM7lAXjZPQ5CSV+FJ1VeNFi+I7A1
pr0pxZ/vq6B0EWmf/EnL5AYhUB37E6aebCjw58NONYi7v1O9wKb9zUpwgi2PR2U+
32oJ4LXOR3nxLdW4ejf9UY/stFzVfqyt4+XB63GqHyn0wDTyh5odBHuJpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBEa9xR37AyT98DoAY2pEpkTX4b8MB8GA1UdIwQY
MBaAFI9tKsm2jDJxH36H/eUjRYT1vPTyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajIwcXliYU1NbkVmZm9mOTVTTkZoUFc4OVBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9lNzhlZTEtMGEyYS00NmM5LTk3Njkt
Zjk0ZjA4NGIxZWU3LzEvajIwcXliYU1NbkVmZm9mOTVTTkZoUFc4OVBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9lNzhlZTEtMGEyYS00NmM5LTk3NjktZjk0ZjA4NGIxZWU3
LzEvajIwcXliYU1NbkVmZm9mOTVTTkZoUFc4OVBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOO/9LYPE
/7lvrvr5Ba2RILTsAZnqqMa/lrEXB6fJ+rT76MNECO1yd++knt2z9608pqnzMROh
d9wctUyWF/vw4SyAvi0S0+O/Z7qbR6gqsUdPHSuKTzsTdCI2UYITsx88k/g8jNXc
sS8Lr3kOAMS9pxRxZtaolHC0aP0Nds0NMY24PBP/0EHsCDr6V5gJWz+GZdW6KVBL
7p0PqJccJXTvztjWb0HqcvRYW40Je7n2bRhWJ9+rSAMTnUA2A8Ede/BwCg47s8wG
3og0bLguG6E9KqfSKZNm8wOeT2evwBEsGMocFPUV43uEdFBVmQtzCD4fFb7IQidb
teiXQ14AMKPpUQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:23:26 2025 by rpki-client