Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
File: 0jR5jgcS8VUpLTIR98RHIjzNSaw.mft (raw, json)
Hash identifier: SZ8R+Huz5Vgb1ndeh9IzMTloDY089uw6IkPRnDm1e5U=
Subject key identifier: BE:96:B3:0B:A2:14:78:BE:DB:91:D7:D9:7E:8E:0B:84:A5:93:DB:E2
Authority key identifier: D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC
Certificate issuer: /CN=d234798e0712f155292d3211f7c447223ccd49ac
Certificate serial: 0198496551DF137D1DBF8EFAB576D544F384
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
Manifest number: 1321
Signing time: Sun 27 Jul 2025 01:00:33 +0000
Manifest this update: Sun 27 Jul 2025 01:00:33 +0000
Manifest next update: Mon 28 Jul 2025 01:00:33 +0000
Files and hashes: 1: 0jR5jgcS8VUpLTIR98RHIjzNSaw.crl (hash: Z5m04RgFOg0vqTBtXKXqSzUddteidmbnljlyQ9PLMOU=)
2: 7i6CkxLW0y4-Eb1zqmEq2DrgTXo.roa (hash: 9coWzyh+KYo6PjWXvZi4r37a7LcyA66ZeCRl9p/oIqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:51:df:13:7d:1d:bf:8e:fa:b5:76:d5:44:f3:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d234798e0712f155292d3211f7c447223ccd49ac
Validity
Not Before: Jul 27 01:00:33 2025 GMT
Not After : Jul 28 01:00:33 2025 GMT
Subject: CN=be96b30ba21478bedb91d7d97e8e0b84a593dbe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:38:84:d6:12:46:3b:19:f5:d1:0b:21:48:09:
3f:79:ea:f9:3c:b1:6e:fa:80:a9:ac:66:6b:f1:72:
7a:50:0a:72:c5:41:4d:b5:09:e5:7b:2b:44:03:74:
c4:d9:f2:dc:62:74:36:07:22:b8:ae:6f:46:e8:b4:
0a:4f:48:06:2c:c6:a3:b7:d3:8b:d4:a1:d5:b1:1b:
2c:c1:4d:c4:6d:71:4b:22:0b:1d:0b:57:87:6a:28:
f6:57:43:84:f6:9f:d0:82:c5:a8:64:e9:ba:ef:58:
8a:fc:22:69:2b:b2:64:f6:91:53:7c:a1:1c:f6:78:
f9:d5:43:22:14:36:c0:30:89:f8:fe:93:9a:a6:51:
48:6c:f3:49:8a:ed:7d:68:cc:71:7f:4e:36:93:b6:
75:1a:cb:d9:41:2f:0c:49:e8:dd:89:d9:3f:87:ff:
dd:45:d8:5e:73:b2:bf:a5:9b:5d:06:59:0f:1b:fa:
94:9e:ff:01:08:e6:97:3c:6a:c7:b6:8c:a2:e1:98:
3b:71:7e:c5:5c:a3:68:01:2b:28:1d:6b:8e:77:b0:
74:46:b5:d9:8d:37:11:d9:fc:4c:49:7d:0d:7b:a6:
b7:a7:22:f5:f2:d9:f3:ad:bf:17:f1:5c:a4:95:de:
68:56:26:8f:5e:2c:fb:e3:c0:b5:95:fe:9e:b5:7d:
d2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:96:B3:0B:A2:14:78:BE:DB:91:D7:D9:7E:8E:0B:84:A5:93:DB:E2
X509v3 Authority Key Identifier:
keyid:D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:f3:71:d5:e5:66:66:ee:d9:8d:25:e2:86:95:f5:ae:c6:27:
eb:ee:8e:f1:42:b1:f3:68:60:d4:56:f7:0b:a7:93:e3:dd:e9:
79:c5:6c:04:25:e2:ba:ea:fc:55:8a:73:5d:64:90:76:7e:48:
8b:1a:8b:e2:ff:e6:f1:a8:66:20:3b:60:95:28:50:cd:b5:d7:
a2:97:51:91:a9:cb:5a:45:4a:39:59:db:38:34:9b:a6:dd:78:
4a:6a:3f:ba:12:2a:ae:7d:04:24:94:55:91:2b:96:d0:47:1d:
85:ab:44:17:ce:bf:15:f8:61:48:85:c0:6c:c0:7b:8e:52:b6:
61:99:7f:4a:1d:54:c9:17:68:c6:12:72:c9:31:54:e5:05:2a:
83:b6:35:16:1d:a7:36:97:6b:7e:70:ae:8d:20:1d:74:d4:4a:
87:0b:4f:df:2b:03:3c:d5:90:f0:9f:9f:d4:45:73:22:d5:e1:
8f:05:36:28:de:0c:21:6b:40:21:a1:14:2a:46:31:29:f7:ef:
fe:6f:e8:40:b1:25:f8:69:2d:63:91:e3:72:dd:5d:b5:1f:f8:
15:a7:50:38:d0:63:b7:be:14:7e:8e:99:f9:e9:1e:a4:39:bc:
68:ff:7c:f9:a5:4c:3b:3f:bc:4f:79:0f:8e:34:bb:59:6b:ed:
2a:c6:0f:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZVHfE30dv476tXbVRPOEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMzQ3OThlMDcxMmYxNTUyOTJkMzIxMWY3YzQ0NzIyM2Nj
ZDQ5YWMwHhcNMjUwNzI3MDEwMDMzWhcNMjUwNzI4MDEwMDMzWjAzMTEwLwYDVQQD
EyhiZTk2YjMwYmEyMTQ3OGJlZGI5MWQ3ZDk3ZThlMGI4NGE1OTNkYmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgziE1hJGOxn10QshSAk/eer5PLFu
+oCprGZr8XJ6UApyxUFNtQnleytEA3TE2fLcYnQ2ByK4rm9G6LQKT0gGLMajt9OL
1KHVsRsswU3EbXFLIgsdC1eHaij2V0OE9p/QgsWoZOm671iK/CJpK7Jk9pFTfKEc
9nj51UMiFDbAMIn4/pOaplFIbPNJiu19aMxxf042k7Z1GsvZQS8MSejdidk/h//d
Rdhec7K/pZtdBlkPG/qUnv8BCOaXPGrHtoyi4Zg7cX7FXKNoASsoHWuOd7B0RrXZ
jTcR2fxMSX0Ne6a3pyL18tnzrb8X8Vykld5oViaPXiz748C1lf6etX3SOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6WswuiFHi+25HX2X6OC4Slk9viMB8GA1UdIwQY
MBaAFNI0eY4HEvFVKS0yEffERyI8zUmsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGpSNWpnY1M4VlVwTFRJUjk4UkhJanpOU2F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wYzlkZGMtMzE5MS00NGIzLTg4YmEt
ODJmN2I5OWM1NDY3LzEvMGpSNWpnY1M4VlVwTFRJUjk4UkhJanpOU2F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8wYzlkZGMtMzE5MS00NGIzLTg4YmEtODJmN2I5OWM1NDY3
LzEvMGpSNWpnY1M4VlVwTFRJUjk4UkhJanpOU2F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq/Nx1eVm
Zu7ZjSXihpX1rsYn6+6O8UKx82hg1Fb3C6eT493pecVsBCXiuur8VYpzXWSQdn5I
ixqL4v/m8ahmIDtglShQzbXXopdRkanLWkVKOVnbODSbpt14Smo/uhIqrn0EJJRV
kSuW0EcdhatEF86/FfhhSIXAbMB7jlK2YZl/Sh1UyRdoxhJyyTFU5QUqg7Y1Fh2n
NpdrfnCujSAddNRKhwtP3ysDPNWQ8J+f1EVzItXhjwU2KN4MIWtAIaEUKkYxKffv
/m/oQLEl+GktY5Hjct1dtR/4FadQONBjt74Ufo6Z+ekepDm8aP98+aVMOz+8T3kP
jjS7WWvtKsYPRQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:47:50 2025 by rpki-client