Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
File: JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft (raw, json)
Hash identifier: CH7gwiRmyaEkYTWVfa3VNTwQTqLIbc3HrT8VRLejZeg=
Subject key identifier: 3D:C5:BB:C5:D8:29:89:1E:7A:77:A6:6B:F6:9B:F3:1F:31:AC:52:F4
Authority key identifier: 26:42:7A:26:0D:6D:96:CC:11:15:CC:CE:8A:91:4A:FF:B0:E1:D1:6B
Certificate issuer: /CN=26427a260d6d96cc1115ccce8a914affb0e1d16b
Certificate serial: 01983795CCCAF01631A66D0E4D3F351E1B18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
Manifest number: 0320
Signing time: Wed 23 Jul 2025 14:00:20 +0000
Manifest this update: Wed 23 Jul 2025 14:00:20 +0000
Manifest next update: Thu 24 Jul 2025 14:00:20 +0000
Files and hashes: 1: HRacqG8l3Hf7zAmCVCG0P5KOMS4.roa (hash: POwtAYxNl5+u6y8FOiGiNGLuMGWBIZsQmYKWLa6++Q0=)
2: JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl (hash: e9k87iqW82pF41VsRXv1qQ4i+U40yKIi2wJlEP9LjAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:37:95:cc:ca:f0:16:31:a6:6d:0e:4d:3f:35:1e:1b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26427a260d6d96cc1115ccce8a914affb0e1d16b
Validity
Not Before: Jul 23 14:00:20 2025 GMT
Not After : Jul 24 14:00:20 2025 GMT
Subject: CN=3dc5bbc5d829891e7a77a66bf69bf31f31ac52f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:29:5d:39:d6:c5:ac:fa:9c:ad:a2:37:f0:cd:
11:5a:d0:ac:be:fe:f5:f9:3f:50:db:27:f4:23:3e:
f3:f0:7f:f6:97:be:ee:38:85:83:06:f7:b8:86:7c:
2d:80:cf:c1:be:38:e2:2b:e0:ce:bb:59:36:88:88:
c3:86:be:01:3c:5b:33:c8:d1:cc:68:4e:dc:d6:93:
8c:9f:92:b4:4c:0f:5d:ec:c0:36:82:34:8c:72:23:
f3:b4:70:1c:13:cf:66:c5:e8:d9:2a:ea:bf:e0:58:
cf:30:7d:43:32:6c:ce:c0:0e:ec:b5:69:9e:dc:a2:
af:70:7c:45:1f:5f:64:7c:14:d8:03:e9:bc:85:40:
b8:49:1b:51:0d:33:94:67:f9:36:50:7d:8d:a1:a2:
81:e6:00:2a:76:7c:8e:65:8a:83:33:85:d4:2b:27:
39:e4:84:a9:a7:49:8b:6a:55:04:b5:6b:b0:49:65:
15:f5:fc:93:4d:6e:34:26:c4:2e:7e:e0:dd:1d:56:
a6:0f:ff:60:40:2f:db:d4:53:2e:0e:98:45:1a:33:
b1:03:a7:b0:9d:47:78:46:8c:c4:63:db:49:04:5c:
b1:06:d2:3f:34:05:6d:80:ea:96:70:3b:da:6f:0f:
ec:71:d1:5a:7b:dd:4e:cf:7a:a5:5b:3f:b7:b9:af:
82:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C5:BB:C5:D8:29:89:1E:7A:77:A6:6B:F6:9B:F3:1F:31:AC:52:F4
X509v3 Authority Key Identifier:
keyid:26:42:7A:26:0D:6D:96:CC:11:15:CC:CE:8A:91:4A:FF:B0:E1:D1:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:46:f7:9b:86:cd:87:eb:49:9a:43:56:82:ab:99:18:69:51:
0e:ec:82:ef:07:02:3c:ce:7d:9e:21:ee:d8:ad:21:81:48:34:
62:80:5e:eb:91:57:19:ac:10:81:55:2b:c4:94:92:19:ce:bb:
f3:40:6e:78:e8:7f:bf:81:9d:70:20:21:5c:43:39:2f:52:ba:
70:e2:84:68:e5:78:88:68:a9:dd:4c:1c:c7:3c:ab:19:48:0b:
e5:72:57:44:9d:a5:d5:af:3e:46:b9:ca:83:3e:cd:f5:b0:1e:
b9:08:86:04:5c:80:85:c0:78:7f:ff:05:99:99:1d:d4:82:69:
c2:37:a8:e0:1e:7b:ce:69:34:82:8c:19:49:c6:8a:48:98:3d:
fd:94:19:dd:2f:e2:fd:7a:83:ef:60:ef:52:d3:83:28:d5:99:
bf:4a:c3:5f:2c:3d:b3:12:47:85:35:a1:58:e6:82:c7:ab:19:
9a:d4:cd:01:77:73:38:c2:82:68:28:de:d5:53:cc:36:02:c0:
c8:60:e3:f3:e8:00:7a:d6:6a:5c:c6:e7:82:e9:02:3b:ea:87:
65:dd:fc:03:e3:01:06:ab:37:29:07:57:6d:c9:cd:66:7c:38:
79:ef:ca:6d:ec:c8:9a:0e:4b:bc:f1:d7:e1:14:2d:dd:cd:44:
fc:28:b8:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg3lczK8BYxpm0OTT81HhsYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NDI3YTI2MGQ2ZDk2Y2MxMTE1Y2NjZThhOTE0YWZmYjBl
MWQxNmIwHhcNMjUwNzIzMTQwMDIwWhcNMjUwNzI0MTQwMDIwWjAzMTEwLwYDVQQD
EygzZGM1YmJjNWQ4Mjk4OTFlN2E3N2E2NmJmNjliZjMxZjMxYWM1MmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSldOdbFrPqcraI38M0RWtCsvv71
+T9Q2yf0Iz7z8H/2l77uOIWDBve4hnwtgM/BvjjiK+DOu1k2iIjDhr4BPFszyNHM
aE7c1pOMn5K0TA9d7MA2gjSMciPztHAcE89mxejZKuq/4FjPMH1DMmzOwA7stWme
3KKvcHxFH19kfBTYA+m8hUC4SRtRDTOUZ/k2UH2NoaKB5gAqdnyOZYqDM4XUKyc5
5ISpp0mLalUEtWuwSWUV9fyTTW40JsQufuDdHVamD/9gQC/b1FMuDphFGjOxA6ew
nUd4RozEY9tJBFyxBtI/NAVtgOqWcDvabw/scdFae91Oz3qlWz+3ua+C+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3Fu8XYKYkeenema/ab8x8xrFL0MB8GA1UdIwQY
MBaAFCZCeiYNbZbMERXMzoqRSv+w4dFrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmtKNkpnMXRsc3dSRmN6T2lwRktfN0RoMFdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9mM2ZkZjAtYTFhNS00NWExLTgyNTIt
ODUyOGU1NTMyYzBlLzEvSmtKNkpnMXRsc3dSRmN6T2lwRktfN0RoMFdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9mM2ZkZjAtYTFhNS00NWExLTgyNTItODUyOGU1NTMyYzBl
LzEvSmtKNkpnMXRsc3dSRmN6T2lwRktfN0RoMFdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfUb3m4bN
h+tJmkNWgquZGGlRDuyC7wcCPM59niHu2K0hgUg0YoBe65FXGawQgVUrxJSSGc67
80BueOh/v4GdcCAhXEM5L1K6cOKEaOV4iGip3UwcxzyrGUgL5XJXRJ2l1a8+RrnK
gz7N9bAeuQiGBFyAhcB4f/8FmZkd1IJpwjeo4B57zmk0gowZScaKSJg9/ZQZ3S/i
/XqD72DvUtODKNWZv0rDXyw9sxJHhTWhWOaCx6sZmtTNAXdzOMKCaCje1VPMNgLA
yGDj8+gAetZqXMbngukCO+qHZd38A+MBBqs3KQdXbcnNZnw4ee/KbezImg5LvPHX
4RQt3c1E/Ci4Kw==
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:37:37 2025 by rpki-client