Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
File: JWBlthZq75b8_zoupW_f_TkPMWY.mft (raw, json)
Hash identifier: HSmDToK4dst5IVZznqfghQML/TKRLLxYjq9BgMTCNX0=
Subject key identifier: 0A:1F:1B:C5:83:AA:CE:A7:D8:09:EB:2F:CD:E6:C7:41:7B:2D:B2:56
Authority key identifier: 25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66
Certificate issuer: /CN=256065b6166aef96fcff3a2ea56fdffd390f3166
Certificate serial: 0199263261704D85EA1985581DBAEF2316D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
Manifest number: 023E
Signing time: Sun 07 Sep 2025 22:00:59 +0000
Manifest this update: Sun 07 Sep 2025 22:00:59 +0000
Manifest next update: Mon 08 Sep 2025 22:00:59 +0000
Files and hashes: 1: 7Neyj-EgqtHn8yPIzyvgflhPyEk.roa (hash: RiX60C1lYHQe9i54rwed/ld2R6Zxx+sj83TfysW1UZM=)
2: JWBlthZq75b8_zoupW_f_TkPMWY.crl (hash: SsYhAh3tbC1Rho7nOltCDxqm2Gr2bwVQjSmerwm5NsU=)
3: LtRuJcDQFgXrBJSxyY1nA0HvnuU.roa (hash: Fm9L8uM5OQuU38BmCU77e5/o3WHCT2yCoE5kiEsmZuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:26:32:61:70:4d:85:ea:19:85:58:1d:ba:ef:23:16:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=256065b6166aef96fcff3a2ea56fdffd390f3166
Validity
Not Before: Sep 7 22:00:59 2025 GMT
Not After : Sep 8 22:00:59 2025 GMT
Subject: CN=0a1f1bc583aacea7d809eb2fcde6c7417b2db256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:60:0b:13:c4:2c:81:51:a6:c2:24:31:40:8c:
2d:a4:4d:b7:eb:09:ad:9d:95:80:dd:bb:ab:24:da:
36:e6:2f:0f:9a:1b:1e:01:8e:a6:90:5c:f2:a7:34:
30:88:0a:ea:c4:46:24:1b:0f:24:b3:2a:a2:0b:e3:
10:9c:09:34:c5:92:13:68:a0:fe:95:e8:33:06:05:
29:bb:68:1f:c0:86:80:1f:20:32:85:3d:71:6c:2e:
96:01:56:09:01:97:25:18:4a:d0:95:0f:11:d7:71:
77:ea:81:14:63:a2:8c:79:6e:f5:9f:87:b6:27:4b:
62:20:d7:84:c8:ec:32:ae:db:0d:9b:88:df:ba:c4:
de:e8:98:79:15:27:2f:d3:21:56:1a:3a:05:bd:24:
fe:aa:8b:30:59:8e:5e:89:ea:95:57:91:7d:1d:15:
aa:76:23:12:3f:ba:94:97:0f:e5:cd:0c:45:f0:0d:
83:69:32:4e:d3:52:5f:9a:7e:c5:19:ce:dc:a0:7d:
cb:f2:a0:ba:60:2f:16:e9:2b:9c:7e:12:a0:22:1b:
25:8c:af:36:e1:ef:e0:86:54:d7:46:84:eb:40:d3:
a0:18:da:2d:88:72:b3:a0:d6:aa:fe:1c:bb:26:23:
11:eb:e0:69:4f:f8:2b:18:7d:a0:5b:2a:c4:89:00:
0a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1F:1B:C5:83:AA:CE:A7:D8:09:EB:2F:CD:E6:C7:41:7B:2D:B2:56
X509v3 Authority Key Identifier:
keyid:25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:0e:b2:7e:58:8d:94:a6:d0:1c:19:ba:1c:63:d1:11:1c:38:
b9:a1:9f:bd:95:fc:04:95:9c:37:48:19:37:9f:9d:58:3a:1e:
e3:ce:40:01:4c:e9:49:10:f7:f1:5b:06:13:6b:dc:4c:05:a0:
e9:31:1c:b2:16:32:c5:07:53:9c:99:c6:37:87:9a:cf:e4:0c:
f5:67:c9:7f:5f:cc:56:87:21:3f:be:80:45:4d:a7:c6:a9:25:
37:50:b7:29:88:91:28:db:72:3b:62:0c:61:79:bc:e0:a6:a3:
e9:c1:c3:0a:31:dc:25:56:7f:e7:f5:e7:f9:5d:9b:bc:9c:cc:
59:7c:23:9c:22:1c:f7:92:c0:e4:e5:eb:cd:1b:30:31:0b:cd:
c3:7e:97:32:3e:b5:78:b6:b1:6d:7a:5a:5f:75:6a:b9:24:4d:
46:9a:3d:2b:54:1f:83:7d:6c:79:91:ac:77:6f:18:21:ae:a6:
4a:f9:09:dc:04:01:eb:b4:ed:61:da:90:6b:99:f1:c2:f8:a8:
af:4d:03:ec:76:f7:e9:0d:52:75:fb:88:95:4c:09:33:5e:e8:
b7:d4:ff:a7:f5:0d:2a:56:50:b8:4b:96:f7:27:be:a2:d8:d5:
cc:fe:c8:3c:ba:cb:9e:78:44:41:ca:bf:59:8a:7d:86:69:06:
84:12:ca:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkmMmFwTYXqGYVYHbrvIxbRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NjA2NWI2MTY2YWVmOTZmY2ZmM2EyZWE1NmZkZmZkMzkw
ZjMxNjYwHhcNMjUwOTA3MjIwMDU5WhcNMjUwOTA4MjIwMDU5WjAzMTEwLwYDVQQD
EygwYTFmMWJjNTgzYWFjZWE3ZDgwOWViMmZjZGU2Yzc0MTdiMmRiMjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2ALE8QsgVGmwiQxQIwtpE236wmt
nZWA3burJNo25i8PmhseAY6mkFzypzQwiArqxEYkGw8ksyqiC+MQnAk0xZITaKD+
legzBgUpu2gfwIaAHyAyhT1xbC6WAVYJAZclGErQlQ8R13F36oEUY6KMeW71n4e2
J0tiINeEyOwyrtsNm4jfusTe6Jh5FScv0yFWGjoFvST+qoswWY5eieqVV5F9HRWq
diMSP7qUlw/lzQxF8A2DaTJO01Jfmn7FGc7coH3L8qC6YC8W6SucfhKgIhsljK82
4e/ghlTXRoTrQNOgGNotiHKzoNaq/hy7JiMR6+BpT/grGH2gWyrEiQAK5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAofG8WDqs6n2AnrL83mx0F7LbJWMB8GA1UdIwQY
MBaAFCVgZbYWau+W/P86LqVv3/05DzFmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSldCbHRoWnE3NWI4X3pvdXBXX2ZfVGtQTVdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi84Y2RjNDgtMjgyMi00NTk5LWJiNjkt
OGM0NTZhZjZiNmJiLzEvSldCbHRoWnE3NWI4X3pvdXBXX2ZfVGtQTVdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi84Y2RjNDgtMjgyMi00NTk5LWJiNjktOGM0NTZhZjZiNmJi
LzEvSldCbHRoWnE3NWI4X3pvdXBXX2ZfVGtQTVdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoA6yfliN
lKbQHBm6HGPRERw4uaGfvZX8BJWcN0gZN5+dWDoe485AAUzpSRD38VsGE2vcTAWg
6TEcshYyxQdTnJnGN4eaz+QM9WfJf1/MVochP76ARU2nxqklN1C3KYiRKNtyO2IM
YXm84Kaj6cHDCjHcJVZ/5/Xn+V2bvJzMWXwjnCIc95LA5OXrzRswMQvNw36XMj61
eLaxbXpaX3VquSRNRpo9K1Qfg31seZGsd28YIa6mSvkJ3AQB67TtYdqQa5nxwvio
r00D7Hb36Q1SdfuIlUwJM17ot9T/p/UNKlZQuEuW9ye+otjVzP7IPLrLnnhEQcq/
WYp9hmkGhBLKrw==
-----END CERTIFICATE-----
Generated at Mon Sep 8 08:43:35 2025 by rpki-client