Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
File: JEXvDPLil0idGXNw-IXVn4npWqs.mft (raw, json)
Hash identifier: O7bCHLXFhws+UAUR1MnTEaHWT45BIwpnhkiykbdSPpQ=
Subject key identifier: FA:31:32:35:59:C3:3C:29:D4:2F:74:43:D3:B1:01:4F:7D:9B:06:7D
Authority key identifier: 24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB
Certificate issuer: /CN=2445ef0cf2e297489d197370f885d59f89e95aab
Certificate serial: 0198469B32E73162C272F1F293E485C1A6FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
Manifest number: 12D6
Signing time: Sat 26 Jul 2025 12:00:32 +0000
Manifest this update: Sat 26 Jul 2025 12:00:32 +0000
Manifest next update: Sun 27 Jul 2025 12:00:32 +0000
Files and hashes: 1: 7BGirnEkwzmDaMHYb7_OyeObZ-o.roa (hash: Mqe4eHaFftNeUPq4ztkhypVdBvRsFekv3LwUY3g3YP4=)
2: JEXvDPLil0idGXNw-IXVn4npWqs.crl (hash: l86atvv2t3Jr9iH+CDCBGQc+Mcy3F8lCrf3fOvT9sNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:32:e7:31:62:c2:72:f1:f2:93:e4:85:c1:a6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2445ef0cf2e297489d197370f885d59f89e95aab
Validity
Not Before: Jul 26 12:00:32 2025 GMT
Not After : Jul 27 12:00:32 2025 GMT
Subject: CN=fa31323559c33c29d42f7443d3b1014f7d9b067d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:24:cf:c3:4e:31:13:22:de:3e:8d:2a:18:7a:
4e:b5:20:a5:86:be:7f:3a:53:0c:89:47:98:ce:14:
0c:c4:87:69:7c:86:ff:38:c4:75:45:4f:de:c1:2f:
fd:7b:26:c6:47:b0:cd:8b:ff:a0:f3:b3:e2:c3:f2:
e3:fd:23:9c:ab:1b:21:2b:11:4d:b3:b7:a4:30:33:
5b:fa:90:09:cd:23:c1:8e:3e:ff:b0:82:dc:ae:08:
1a:ee:4c:e9:32:73:6e:14:96:de:75:19:a7:84:99:
d4:ef:00:19:1d:77:1e:30:60:99:a8:93:47:9e:fb:
37:70:c1:3d:cb:ed:a1:9d:2c:d2:1f:68:04:67:36:
a0:92:93:cd:4c:26:9f:8c:48:a4:0d:f3:13:34:12:
5b:2e:43:91:d2:65:76:52:42:6e:ba:57:7c:c3:84:
4f:af:e2:09:c5:b6:2c:5c:4a:1e:c1:4e:55:05:f0:
b8:21:b2:a9:5d:7f:4d:e4:69:25:c4:6d:1c:66:29:
98:8e:67:28:51:01:85:a2:33:db:8a:f6:ed:07:fc:
cc:3e:31:d6:c3:a5:92:40:4c:6e:b5:04:7e:c9:53:
99:40:dd:ca:72:b4:df:f1:22:38:e3:86:be:3a:96:
eb:e1:aa:4d:6b:16:35:66:db:da:01:ba:01:b6:89:
30:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:31:32:35:59:C3:3C:29:D4:2F:74:43:D3:B1:01:4F:7D:9B:06:7D
X509v3 Authority Key Identifier:
keyid:24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:27:97:a9:ba:6d:22:f4:82:94:ae:c9:f2:5f:29:13:79:e8:
60:35:c3:2a:a4:dd:99:28:54:e9:f9:ba:f8:82:68:aa:e3:c2:
dd:9b:0e:ea:26:f9:44:ea:8b:41:7a:35:ad:42:41:2f:a8:87:
75:de:78:7a:55:10:4d:17:55:8a:28:28:d9:d4:23:c0:dd:00:
3c:0a:4b:bc:03:d0:2d:77:ca:83:16:d9:16:dd:bb:63:41:cf:
5e:23:e7:5b:f4:7e:92:8d:73:ff:af:3a:3f:3b:72:a5:1e:88:
b0:f2:f7:bb:ab:d3:fb:c1:b6:12:3c:87:87:4c:c9:65:8e:c9:
9f:8d:08:fc:23:bb:9b:1b:05:ed:68:dc:9e:56:f6:54:f6:76:
16:0d:d5:7f:bf:5f:45:7f:5a:e5:d3:c3:79:a0:63:2e:40:38:
29:cc:ba:1b:ed:e2:52:c0:c9:2c:e1:c4:f7:67:69:b5:13:e4:
54:84:79:d3:f9:5d:72:d0:49:2f:05:4c:e2:3d:a0:1c:0b:a7:
7c:30:65:fc:06:16:cb:63:04:b4:74:3f:08:78:aa:91:5d:66:
87:1c:63:ad:4d:1f:a1:6a:81:1c:4f:ae:c4:97:59:c1:4e:94:
77:99:34:ef:9c:da:09:39:56:aa:69:7c:8c:17:9c:cb:c5:f0:
9c:fc:10:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhGmzLnMWLCcvHyk+SFwab+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NDVlZjBjZjJlMjk3NDg5ZDE5NzM3MGY4ODVkNTlmODll
OTVhYWIwHhcNMjUwNzI2MTIwMDMyWhcNMjUwNzI3MTIwMDMyWjAzMTEwLwYDVQQD
EyhmYTMxMzIzNTU5YzMzYzI5ZDQyZjc0NDNkM2IxMDE0ZjdkOWIwNjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCTPw04xEyLePo0qGHpOtSClhr5/
OlMMiUeYzhQMxIdpfIb/OMR1RU/ewS/9eybGR7DNi/+g87Piw/Lj/SOcqxshKxFN
s7ekMDNb+pAJzSPBjj7/sILcrgga7kzpMnNuFJbedRmnhJnU7wAZHXceMGCZqJNH
nvs3cME9y+2hnSzSH2gEZzagkpPNTCafjEikDfMTNBJbLkOR0mV2UkJuuld8w4RP
r+IJxbYsXEoewU5VBfC4IbKpXX9N5GklxG0cZimYjmcoUQGFojPbivbtB/zMPjHW
w6WSQExutQR+yVOZQN3KcrTf8SI444a+Opbr4apNaxY1ZtvaAboBtokwdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPoxMjVZwzwp1C90Q9OxAU99mwZ9MB8GA1UdIwQY
MBaAFCRF7wzy4pdInRlzcPiF1Z+J6VqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkVYdkRQTGlsMGlkR1hOdy1JWFZuNG5wV3FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jMjczMDAtZmI5NS00OWQ0LTg2NTct
MDk5YmY3MzQzZTJjLzEvSkVYdkRQTGlsMGlkR1hOdy1JWFZuNG5wV3FzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9jMjczMDAtZmI5NS00OWQ0LTg2NTctMDk5YmY3MzQzZTJj
LzEvSkVYdkRQTGlsMGlkR1hOdy1JWFZuNG5wV3FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADyeXqbpt
IvSClK7J8l8pE3noYDXDKqTdmShU6fm6+IJoquPC3ZsO6ib5ROqLQXo1rUJBL6iH
dd54elUQTRdViigo2dQjwN0APApLvAPQLXfKgxbZFt27Y0HPXiPnW/R+ko1z/686
PztypR6IsPL3u6vT+8G2EjyHh0zJZY7Jn40I/CO7mxsF7Wjcnlb2VPZ2Fg3Vf79f
RX9a5dPDeaBjLkA4Kcy6G+3iUsDJLOHE92dptRPkVIR50/ldctBJLwVM4j2gHAun
fDBl/AYWy2MEtHQ/CHiqkV1mhxxjrU0foWqBHE+uxJdZwU6Ud5k075zaCTlWqml8
jBecy8XwnPwQdQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:45:55 2025 by rpki-client