Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
File: j2xCTP6ScDEA1QooMiU3RN11ZFI.mft (raw, json)
Hash identifier: KE4dWnREVP5hUk64Kuibx1uvbqKVGheZrkWuqJlgwpA=
Subject key identifier: 9B:33:0F:E9:A4:1E:20:33:6D:23:D0:EA:0B:5A:B0:92:01:DF:A0:FD
Authority key identifier: 8F:6C:42:4C:FE:92:70:31:00:D5:0A:28:32:25:37:44:DD:75:64:52
Certificate issuer: /CN=8f6c424cfe92703100d50a2832253744dd756452
Certificate serial: 01984D42B3D0357EDCD25EFE46996882C90A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
Manifest number: 0EC4
Signing time: Sun 27 Jul 2025 19:01:13 +0000
Manifest this update: Sun 27 Jul 2025 19:01:13 +0000
Manifest next update: Mon 28 Jul 2025 19:01:13 +0000
Files and hashes: 1: GQxkJdIQ2mMnuH7dZw47ZjRqiOY.roa (hash: j81MHjapkMDfvn23UflaNVCyJQMSfhc/nd+jMYFAbFo=)
2: j2xCTP6ScDEA1QooMiU3RN11ZFI.crl (hash: kOvMYUWIcyExfBsKgSah/DnRmhi+jaz1Dw6D/ZOb/3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:42:b3:d0:35:7e:dc:d2:5e:fe:46:99:68:82:c9:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f6c424cfe92703100d50a2832253744dd756452
Validity
Not Before: Jul 27 19:01:13 2025 GMT
Not After : Jul 28 19:01:13 2025 GMT
Subject: CN=9b330fe9a41e20336d23d0ea0b5ab09201dfa0fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1c:1a:21:cb:ca:84:e4:07:7d:ac:b4:ba:b4:
5e:7e:09:0d:e5:82:da:4c:9a:34:e0:f0:dd:6c:75:
ea:ef:90:8d:55:7d:ff:b1:e8:92:a6:16:61:d8:d5:
85:31:27:fb:01:d4:30:b3:2a:35:28:71:db:6f:82:
e7:a2:6c:59:91:11:0c:81:50:57:54:56:38:bc:a6:
1a:22:67:af:a7:69:25:b7:ec:12:10:ac:d5:13:48:
46:ef:6c:92:83:b6:d6:a3:59:54:0a:81:97:7a:17:
70:30:64:ce:ad:d2:be:b2:72:d0:aa:d1:c3:08:df:
87:60:a9:f2:10:1b:9f:95:5f:31:93:5f:b1:8f:49:
aa:06:c4:bf:55:7e:cf:56:ce:bd:ea:df:54:dc:61:
c1:92:9b:2e:6b:04:0f:69:56:ae:5b:fa:72:33:b3:
46:bb:32:bf:dd:5d:7c:7c:a7:db:fa:b0:40:65:45:
9e:9c:0a:5f:9b:15:2a:a8:89:af:fe:bd:03:d3:60:
64:d7:2f:20:58:c8:29:f3:7a:c8:ff:70:8d:88:52:
09:6c:c0:ca:0b:29:58:90:e7:52:ca:a8:fc:b8:b3:
c5:e1:71:ec:e0:0c:1b:f0:35:dd:3d:4c:2e:bd:dc:
62:90:57:53:be:84:f2:53:ba:ae:71:70:3f:d5:a2:
91:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:33:0F:E9:A4:1E:20:33:6D:23:D0:EA:0B:5A:B0:92:01:DF:A0:FD
X509v3 Authority Key Identifier:
keyid:8F:6C:42:4C:FE:92:70:31:00:D5:0A:28:32:25:37:44:DD:75:64:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:82:bf:9a:eb:93:0e:2d:2f:ef:0b:74:45:d8:1d:77:70:f5:
53:f9:68:97:2c:10:17:62:44:41:6a:ee:ea:16:1a:ec:8a:01:
14:43:c8:71:94:d5:73:69:7c:bd:1f:91:ce:e1:30:4c:20:df:
8f:29:fa:f7:eb:8b:5c:97:82:a7:b4:31:a5:47:7b:62:1b:b6:
90:8c:c4:79:17:20:f6:53:2c:e6:fb:32:a9:eb:32:8c:21:45:
28:ac:75:a3:05:5d:27:a1:e8:83:00:ce:f1:e9:56:4a:27:d0:
db:db:62:60:04:26:64:95:0c:6a:8b:9a:e0:9c:d6:09:f7:a7:
91:df:8d:9f:34:67:ba:69:61:9d:38:03:46:3a:e8:c0:e2:19:
30:a9:44:c3:4e:a3:71:db:99:8b:c7:1b:85:b7:21:62:f2:76:
60:7d:9c:ae:8b:ca:39:15:27:3f:b7:9c:44:61:78:3d:fc:ba:
af:bc:a4:ed:26:e4:82:7a:3c:0a:16:f6:e3:79:d4:a6:18:0d:
a7:1b:92:f8:49:48:ab:3e:52:10:65:e6:4d:b3:54:2a:9f:a5:
0b:72:e3:ba:59:11:93:42:b3:b8:0c:e5:a0:a9:38:1b:9e:e9:
f3:3d:22:17:83:bf:52:be:6f:81:14:79:2a:b0:61:69:fb:17:
f6:d5:ce:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhNQrPQNX7c0l7+RplogskKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmNmM0MjRjZmU5MjcwMzEwMGQ1MGEyODMyMjUzNzQ0ZGQ3
NTY0NTIwHhcNMjUwNzI3MTkwMTEzWhcNMjUwNzI4MTkwMTEzWjAzMTEwLwYDVQQD
Eyg5YjMzMGZlOWE0MWUyMDMzNmQyM2QwZWEwYjVhYjA5MjAxZGZhMGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hwaIcvKhOQHfay0urRefgkN5YLa
TJo04PDdbHXq75CNVX3/seiSphZh2NWFMSf7AdQwsyo1KHHbb4LnomxZkREMgVBX
VFY4vKYaImevp2klt+wSEKzVE0hG72ySg7bWo1lUCoGXehdwMGTOrdK+snLQqtHD
CN+HYKnyEBuflV8xk1+xj0mqBsS/VX7PVs696t9U3GHBkpsuawQPaVauW/pyM7NG
uzK/3V18fKfb+rBAZUWenApfmxUqqImv/r0D02Bk1y8gWMgp83rI/3CNiFIJbMDK
CylYkOdSyqj8uLPF4XHs4Awb8DXdPUwuvdxikFdTvoTyU7qucXA/1aKRpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJszD+mkHiAzbSPQ6gtasJIB36D9MB8GA1UdIwQY
MBaAFI9sQkz+knAxANUKKDIlN0TddWRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajJ4Q1RQNlNjREVBMVFvb01pVTNSTjExWkZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9hZWI4NGEtN2U3NS00OGY1LWJhMzgt
MGNiMjE4ZTVlNzA3LzEvajJ4Q1RQNlNjREVBMVFvb01pVTNSTjExWkZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9hZWI4NGEtN2U3NS00OGY1LWJhMzgtMGNiMjE4ZTVlNzA3
LzEvajJ4Q1RQNlNjREVBMVFvb01pVTNSTjExWkZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa4K/muuT
Di0v7wt0Rdgdd3D1U/lolywQF2JEQWru6hYa7IoBFEPIcZTVc2l8vR+RzuEwTCDf
jyn69+uLXJeCp7QxpUd7Yhu2kIzEeRcg9lMs5vsyqesyjCFFKKx1owVdJ6HogwDO
8elWSifQ29tiYAQmZJUMaoua4JzWCfenkd+NnzRnumlhnTgDRjrowOIZMKlEw06j
cduZi8cbhbchYvJ2YH2crovKORUnP7ecRGF4Pfy6r7yk7Sbkgno8Chb243nUphgN
pxuS+ElIqz5SEGXmTbNUKp+lC3LjulkRk0KzuAzloKk4G57p8z0iF4O/Ur5vgRR5
KrBhafsX9tXOXA==
-----END CERTIFICATE-----
Generated at Mon Jul 28 01:53:04 2025 by rpki-client