Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
File: j5h_qG-uztjKekRir38AXqsneag.mft (raw, json)
Hash identifier: nvQ0TqqTnMUlkV6y/LR2Q4dyHJlYRe9GwkJ8Xx+daIc=
Subject key identifier: C7:CE:20:09:79:93:5C:CB:B8:E5:4B:FD:BA:25:ED:1D:57:BC:C6:49
Authority key identifier: 8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8
Certificate issuer: /CN=8f987fa86faeced8ca7a4462af7f005eab2779a8
Certificate serial: 01984B8A82E56976096DC04FFB8C0EB56029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
Manifest number: 0CE3
Signing time: Sun 27 Jul 2025 11:00:25 +0000
Manifest this update: Sun 27 Jul 2025 11:00:25 +0000
Manifest next update: Mon 28 Jul 2025 11:00:25 +0000
Files and hashes: 1: TZNlzSisEozO9bUPt3Ymc1srv8E.roa (hash: wa8v9NsgWL1gYj2sgVAPeIrXdGt5FFoRvprZhnIr4yo=)
2: j5h_qG-uztjKekRir38AXqsneag.crl (hash: I5Ce6llNI4s7TscnvFHjoRFeZVDv64e+fsXfOQ988BE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:82:e5:69:76:09:6d:c0:4f:fb:8c:0e:b5:60:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f987fa86faeced8ca7a4462af7f005eab2779a8
Validity
Not Before: Jul 27 11:00:25 2025 GMT
Not After : Jul 28 11:00:25 2025 GMT
Subject: CN=c7ce200979935ccbb8e54bfdba25ed1d57bcc649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a5:7e:39:a5:5e:33:64:3d:95:11:51:73:be:
69:42:54:c6:2f:23:b0:21:2a:04:bf:b7:d7:e8:39:
87:bc:85:f1:95:0c:58:bf:0e:65:f1:7e:c2:7a:82:
d3:92:18:f6:fd:3c:35:d1:bf:05:49:2b:69:f3:61:
c5:8f:bc:f0:88:b0:39:04:0a:5a:6c:1d:6e:18:fa:
b5:61:8f:60:7e:1b:85:1f:36:a8:bc:6a:15:fc:51:
b8:67:5c:2a:71:9b:3d:fd:af:3d:32:0e:3d:b3:39:
54:fb:32:cd:2d:1b:44:7f:de:8a:d3:7d:2f:9d:95:
a4:2c:de:60:c0:3a:80:90:65:89:1e:6a:d4:d0:8a:
8c:5f:1a:40:8f:1c:a7:97:a1:8b:c9:77:98:2b:5f:
7f:69:29:ba:69:83:fe:ba:2b:e0:1b:59:ec:56:35:
b9:21:61:8f:4d:98:22:75:76:18:b6:7c:50:71:fe:
e9:c5:d1:9d:11:f8:9f:6b:c1:cd:3e:45:86:1e:3f:
c1:bb:ce:50:9a:59:ac:2b:df:c3:46:5d:aa:22:42:
69:97:6a:d2:16:94:ec:f2:75:10:a8:fb:9a:f5:68:
55:80:7d:0d:5b:f4:19:e7:19:45:32:a5:15:25:e6:
2b:22:b8:74:7b:30:91:21:8e:89:4d:71:9c:e2:07:
9c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:CE:20:09:79:93:5C:CB:B8:E5:4B:FD:BA:25:ED:1D:57:BC:C6:49
X509v3 Authority Key Identifier:
keyid:8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:58:e9:64:64:b4:44:a3:c0:0b:6e:80:e8:09:f5:10:ec:de:
3c:18:6e:ca:e8:d1:49:d6:a0:33:0a:35:d8:6e:3b:96:db:76:
37:5f:1d:2c:f6:da:a3:1d:33:4a:64:52:ae:b3:0e:d1:47:f7:
29:0e:25:bf:fd:5c:fd:22:97:b5:95:a3:17:96:b8:c3:ef:3f:
f8:da:21:0a:e5:b6:32:74:43:8c:81:a8:c2:35:f9:f7:58:02:
62:f5:76:25:5b:31:4b:b1:6e:50:3f:cc:37:28:cd:5e:db:cd:
73:67:d9:a2:f0:3b:09:5d:f4:aa:a5:17:07:08:71:ab:1b:d3:
66:c4:e1:a8:5f:46:d2:b4:18:d6:23:49:1e:ad:c7:15:54:77:
df:05:30:6b:a2:6f:ad:1b:9a:21:09:d8:6c:64:69:8c:78:98:
40:9a:e9:2a:22:43:09:8f:f2:3c:87:d6:de:37:ce:84:d5:4a:
55:77:84:5b:a4:72:ee:19:0a:7d:30:64:50:4b:77:3f:d9:ff:
b6:d9:5e:80:28:97:bd:dc:36:08:c3:2f:b3:9f:4f:2c:a4:a7:
a0:f6:10:ee:69:3c:78:de:cb:d6:5a:cc:f0:87:ef:5e:be:f1:
a8:e9:95:1e:1c:ac:9a:ec:ed:1f:16:f3:87:2c:9d:5c:49:e3:
a2:9d:ca:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLioLlaXYJbcBP+4wOtWApMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmOTg3ZmE4NmZhZWNlZDhjYTdhNDQ2MmFmN2YwMDVlYWIy
Nzc5YTgwHhcNMjUwNzI3MTEwMDI1WhcNMjUwNzI4MTEwMDI1WjAzMTEwLwYDVQQD
EyhjN2NlMjAwOTc5OTM1Y2NiYjhlNTRiZmRiYTI1ZWQxZDU3YmNjNjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqV+OaVeM2Q9lRFRc75pQlTGLyOw
ISoEv7fX6DmHvIXxlQxYvw5l8X7CeoLTkhj2/Tw10b8FSStp82HFj7zwiLA5BApa
bB1uGPq1YY9gfhuFHzaovGoV/FG4Z1wqcZs9/a89Mg49szlU+zLNLRtEf96K030v
nZWkLN5gwDqAkGWJHmrU0IqMXxpAjxynl6GLyXeYK19/aSm6aYP+uivgG1nsVjW5
IWGPTZgidXYYtnxQcf7pxdGdEfifa8HNPkWGHj/Bu85QmlmsK9/DRl2qIkJpl2rS
FpTs8nUQqPua9WhVgH0NW/QZ5xlFMqUVJeYrIrh0ezCRIY6JTXGc4gecwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMfOIAl5k1zLuOVL/bol7R1XvMZJMB8GA1UdIwQY
MBaAFI+Yf6hvrs7YynpEYq9/AF6rJ3moMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajVoX3FHLXV6dGpLZWtSaXIzOEFYcXNuZWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9mYjRjNjMtYmRiMy00Yjg1LTgyZjAt
NmY2YzZjODIxNzgxLzEvajVoX3FHLXV6dGpLZWtSaXIzOEFYcXNuZWFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9mYjRjNjMtYmRiMy00Yjg1LTgyZjAtNmY2YzZjODIxNzgx
LzEvajVoX3FHLXV6dGpLZWtSaXIzOEFYcXNuZWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlFjpZGS0
RKPAC26A6An1EOzePBhuyujRSdagMwo12G47ltt2N18dLPbaox0zSmRSrrMO0Uf3
KQ4lv/1c/SKXtZWjF5a4w+8/+NohCuW2MnRDjIGowjX591gCYvV2JVsxS7FuUD/M
NyjNXtvNc2fZovA7CV30qqUXBwhxqxvTZsThqF9G0rQY1iNJHq3HFVR33wUwa6Jv
rRuaIQnYbGRpjHiYQJrpKiJDCY/yPIfW3jfOhNVKVXeEW6Ry7hkKfTBkUEt3P9n/
ttlegCiXvdw2CMMvs59PLKSnoPYQ7mk8eN7L1lrM8IfvXr7xqOmVHhysmuztHxbz
hyydXEnjop3KqA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:18:42 2025 by rpki-client