Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft
File: _j0jo57TZW-aYGS2CdAqL25KOCc.mft (raw, json)
Hash identifier: xSU/nHxolG9K8VZ3/O+h5gU54jBHM7yZFiqLVeXajns=
Subject key identifier: 58:1E:3F:13:43:77:96:D5:21:8B:81:FF:BD:B0:CC:E9:A6:1D:AE:EF
Authority key identifier: FE:3D:23:A3:9E:D3:65:6F:9A:60:64:B6:09:D0:2A:2F:6E:4A:38:27
Certificate issuer: /CN=fe3d23a39ed3656f9a6064b609d02a2f6e4a3827
Certificate serial: 01984A77FC02342107570946EA914EB6F8C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_j0jo57TZW-aYGS2CdAqL25KOCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft
Manifest number: 04E2
Signing time: Sun 27 Jul 2025 06:00:33 +0000
Manifest this update: Sun 27 Jul 2025 06:00:33 +0000
Manifest next update: Mon 28 Jul 2025 06:00:33 +0000
Files and hashes: 1: CdS0S5h1e306IjdNNYaIbNOac9U.roa (hash: ns5KjwP5PT64eyVqbgP83KTbHXq14r1yzW0yvkof0v8=)
2: _j0jo57TZW-aYGS2CdAqL25KOCc.crl (hash: OxM4Mb5gSkRNK1x3qUrRCDHB8YtjZe9r5r49NyFBZK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_j0jo57TZW-aYGS2CdAqL25KOCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:fc:02:34:21:07:57:09:46:ea:91:4e:b6:f8:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe3d23a39ed3656f9a6064b609d02a2f6e4a3827
Validity
Not Before: Jul 27 06:00:33 2025 GMT
Not After : Jul 28 06:00:33 2025 GMT
Subject: CN=581e3f13437796d5218b81ffbdb0cce9a61daeef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c0:62:44:86:71:af:d2:f0:7e:26:e1:d8:7d:
a7:97:20:a6:bc:22:71:25:e5:85:5f:a9:c0:7d:36:
f6:a5:bb:fb:74:fd:e6:53:01:88:fd:f2:82:26:a0:
6d:3f:bd:e3:b1:e7:fd:48:3d:d9:f6:a8:db:32:b0:
ca:25:aa:ff:63:f2:43:51:e7:c1:5d:60:af:1c:4e:
b2:6d:0e:87:c4:e7:f1:fc:7d:2f:9e:98:7e:bb:d5:
ed:2f:de:2f:0a:79:42:e8:be:4e:3b:9c:dc:b1:c4:
d9:39:d6:88:b2:52:87:ec:b4:9a:d2:9f:14:5e:7b:
d1:84:de:e2:dd:fa:ca:4c:6e:9d:43:10:17:7f:62:
75:67:4d:28:8e:cf:e2:a2:d7:fd:d6:cc:7e:51:1e:
4f:f8:f7:4b:c3:97:d0:12:a4:c2:08:00:ad:cc:23:
da:cf:70:41:1e:df:b3:ff:01:25:97:42:c4:1b:59:
4b:77:b1:02:02:2d:12:89:0b:97:30:33:89:22:ed:
13:44:72:a9:4f:7a:35:6e:f5:74:da:eb:4b:b3:40:
52:70:bd:5e:ca:6b:f3:63:a3:90:ca:26:4e:44:89:
eb:f3:0f:d0:77:3e:d3:7b:9e:52:f5:e5:29:65:68:
c2:29:d2:aa:6a:b4:77:6f:eb:66:a5:0f:a7:53:8f:
58:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1E:3F:13:43:77:96:D5:21:8B:81:FF:BD:B0:CC:E9:A6:1D:AE:EF
X509v3 Authority Key Identifier:
keyid:FE:3D:23:A3:9E:D3:65:6F:9A:60:64:B6:09:D0:2A:2F:6E:4A:38:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_j0jo57TZW-aYGS2CdAqL25KOCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:cd:c7:4c:f1:9c:1b:f1:0e:b8:a5:8f:ea:21:4b:3a:95:5c:
14:e4:ce:0b:23:d4:33:26:4c:ac:45:c2:a0:f5:c3:43:39:ce:
20:4e:2b:e8:db:f6:fc:50:fe:a8:4d:5e:de:8a:3f:72:49:9f:
41:4f:2d:c6:93:b6:ac:ea:4e:c8:84:d9:ed:b3:b0:8f:9e:bf:
1a:13:5a:4e:b2:62:6e:ab:88:ae:bd:0b:b3:12:60:a5:10:9a:
4a:c6:a3:c8:02:c3:e7:0a:18:53:4d:3c:45:d2:53:59:88:c9:
ee:12:65:01:3f:d3:63:84:a3:5c:d6:9c:b4:87:5e:62:53:82:
26:6c:0a:8b:6e:14:bd:08:03:b5:e3:b3:10:b4:c9:d8:0d:64:
12:83:7f:6c:df:e2:5b:84:a1:4e:e9:4a:6d:ed:dc:7b:bb:b1:
c3:ff:5f:43:12:cb:f5:d1:3c:ab:b2:b3:f6:a3:ac:5c:b6:80:
34:aa:d0:b6:2d:b2:d3:14:9e:1a:87:72:9f:5b:66:1e:6e:70:
17:fe:f8:ed:bc:50:4a:3e:59:b6:7d:87:72:16:52:6d:80:bf:
84:a5:fc:90:ff:58:bb:30:4e:4b:b4:7d:0a:27:a3:ed:b7:f5:
aa:89:7d:5c:12:50:93:c0:76:98:e0:30:e4:29:4d:a9:e1:69:
85:b3:d7:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKd/wCNCEHVwlG6pFOtvjJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlM2QyM2EzOWVkMzY1NmY5YTYwNjRiNjA5ZDAyYTJmNmU0
YTM4MjcwHhcNMjUwNzI3MDYwMDMzWhcNMjUwNzI4MDYwMDMzWjAzMTEwLwYDVQQD
Eyg1ODFlM2YxMzQzNzc5NmQ1MjE4YjgxZmZiZGIwY2NlOWE2MWRhZWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48BiRIZxr9Lwfibh2H2nlyCmvCJx
JeWFX6nAfTb2pbv7dP3mUwGI/fKCJqBtP73jsef9SD3Z9qjbMrDKJar/Y/JDUefB
XWCvHE6ybQ6HxOfx/H0vnph+u9XtL94vCnlC6L5OO5zcscTZOdaIslKH7LSa0p8U
XnvRhN7i3frKTG6dQxAXf2J1Z00ojs/iotf91sx+UR5P+PdLw5fQEqTCCACtzCPa
z3BBHt+z/wEll0LEG1lLd7ECAi0SiQuXMDOJIu0TRHKpT3o1bvV02utLs0BScL1e
ymvzY6OQyiZORInr8w/Qdz7Te55S9eUpZWjCKdKqarR3b+tmpQ+nU49YNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFgePxNDd5bVIYuB/72wzOmmHa7vMB8GA1UdIwQY
MBaAFP49I6Oe02VvmmBktgnQKi9uSjgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2owam81N1RaVy1hWUdTMkNkQXFMMjVLT0NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy84ZTYyZTktNDA2ZC00YWIwLThmZGIt
ZDlhODA4ZWMxYWIxLzEvX2owam81N1RaVy1hWUdTMkNkQXFMMjVLT0NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy84ZTYyZTktNDA2ZC00YWIwLThmZGItZDlhODA4ZWMxYWIx
LzEvX2owam81N1RaVy1hWUdTMkNkQXFMMjVLT0NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAls3HTPGc
G/EOuKWP6iFLOpVcFOTOCyPUMyZMrEXCoPXDQznOIE4r6Nv2/FD+qE1e3oo/ckmf
QU8txpO2rOpOyITZ7bOwj56/GhNaTrJibquIrr0LsxJgpRCaSsajyALD5woYU008
RdJTWYjJ7hJlAT/TY4SjXNactIdeYlOCJmwKi24UvQgDteOzELTJ2A1kEoN/bN/i
W4ShTulKbe3ce7uxw/9fQxLL9dE8q7Kz9qOsXLaANKrQti2y0xSeGodyn1tmHm5w
F/747bxQSj5Ztn2HchZSbYC/hKX8kP9YuzBOS7R9Ciej7bf1qol9XBJQk8B2mOAw
5ClNqeFphbPXpw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:56:45 2025 by rpki-client