Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
File: sJ__jo_9j459mntm0cxz3DkoHvY.mft (raw, json)
Hash identifier: Z6b9ukzET4j7UrjQb0ucdzUg1M1iHWBr/ChccRG067E=
Subject key identifier: 03:08:DF:F2:6E:2D:F1:77:97:F5:88:2F:4E:FD:43:A8:B3:EF:BF:CA
Authority key identifier: B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6
Certificate issuer: /CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6
Certificate serial: 01974A43CCB29585AB6EC18BEEE6996B4A9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
Manifest number: 1587
Signing time: Sat 07 Jun 2025 12:00:46 +0000
Manifest this update: Sat 07 Jun 2025 12:00:46 +0000
Manifest next update: Sun 08 Jun 2025 12:00:46 +0000
Files and hashes: 1: K_3LG8OaW8IFtRNbLO4GRdIs5Vc.roa (hash: xg+Bjx4DC/FY08PaKoFJJvP5HHj4DB2L0enoWEQOn+Y=)
2: qrvgnkiRlc7rMBlueEGY6GFR5f4.roa (hash: GRgjXdvuR0BuPnuResU3wvkGs+6BXCcEgxlm6k2P5XA=)
3: sJ__jo_9j459mntm0cxz3DkoHvY.crl (hash: Zb5t/BA/TgsSolD9K1x+xrXPlesvd1dJ/XSmjtPhcTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:cc:b2:95:85:ab:6e:c1:8b:ee:e6:99:6b:4a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6
Validity
Not Before: Jun 7 12:00:46 2025 GMT
Not After : Jun 8 12:00:46 2025 GMT
Subject: CN=0308dff26e2df17797f5882f4efd43a8b3efbfca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:10:97:2c:c7:75:6f:d3:66:48:ea:da:41:a2:
a2:70:36:74:7a:79:34:3d:ac:4b:6d:ae:83:b1:98:
0e:7d:73:fb:f5:8d:42:5d:29:41:e9:31:8a:59:ac:
65:98:f0:cb:52:d3:16:70:c6:5e:b0:dc:b3:04:c8:
b0:38:7f:43:bd:04:48:ea:08:57:84:e3:e6:fa:e1:
95:50:b5:56:8f:57:7c:90:6c:e3:0c:c6:5c:7c:63:
03:67:e5:ae:c2:1d:d4:c4:7c:76:57:73:61:c1:7a:
f7:c1:75:5c:6b:c8:ad:ac:5e:34:61:ad:52:ab:eb:
d2:60:0f:d3:47:6b:b1:d3:34:fe:e2:3c:47:db:7e:
86:f5:02:dc:ea:58:01:bb:77:22:07:a3:94:cf:00:
41:ec:e8:eb:2c:2a:43:63:bc:42:b3:89:38:ec:7d:
7b:54:5a:5a:f0:6f:b1:2b:fd:a6:78:49:15:79:47:
5e:83:ba:c9:06:bc:c2:97:94:a1:6d:3c:a0:a4:1c:
31:6d:3b:3d:5e:cc:fa:d7:87:df:7d:0b:6b:33:cd:
53:87:29:e4:30:a7:d2:06:65:bf:e9:78:29:39:20:
9f:51:1c:f9:82:7c:e0:37:c5:9b:70:9e:15:e7:70:
bf:f6:c4:61:fd:1b:17:1c:b9:02:a4:73:72:80:a9:
cb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:08:DF:F2:6E:2D:F1:77:97:F5:88:2F:4E:FD:43:A8:B3:EF:BF:CA
X509v3 Authority Key Identifier:
keyid:B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b7:cf:a1:55:03:c7:ce:b8:ec:2e:3f:4a:0f:01:ce:aa:8d:
b3:e5:8d:8e:44:3b:3b:24:f8:c0:42:2d:20:dd:9a:c9:60:d4:
94:fa:15:0c:75:8b:70:1b:cd:32:62:44:bb:6c:fe:cd:52:5b:
55:04:0f:dd:ce:ba:e6:c0:95:28:8a:68:f2:c3:0d:bb:e3:2c:
c7:bb:86:93:cf:13:9d:a4:55:68:a5:2b:99:55:31:1a:b2:7e:
ea:ef:e3:25:f1:cb:a1:22:ff:66:f1:0d:99:b5:45:1d:0a:a4:
63:66:7b:23:46:73:09:70:21:54:a1:70:d2:7b:1c:17:04:04:
f9:ab:ee:f8:85:83:7b:2c:b9:38:b2:31:e5:d9:55:12:8d:6f:
92:7d:ad:e1:d3:cf:5f:3c:87:39:21:42:30:ad:02:85:e3:2b:
27:cd:94:57:d7:03:f7:c9:af:72:42:15:02:0c:dc:ea:d5:7e:
e2:79:2b:20:44:70:44:f8:0d:a4:31:ea:df:46:6e:9d:e0:26:
c9:8d:3d:71:2a:73:6f:75:75:e5:8b:40:6a:a6:7b:1d:3b:61:
8c:55:3c:4f:0e:0f:d0:05:8a:94:e9:e4:e9:a2:4d:dd:8c:b1:
b5:61:ac:d4:ee:f7:05:8f:f6:88:d1:f9:a9:f9:22:ff:03:42:
3d:ce:8f:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKQ8yylYWrbsGL7uaZa0qdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwOWZmZjhlOGZmZDhmOGU3ZDlhN2I2NmQxY2M3M2RjMzky
ODFlZjYwHhcNMjUwNjA3MTIwMDQ2WhcNMjUwNjA4MTIwMDQ2WjAzMTEwLwYDVQQD
EygwMzA4ZGZmMjZlMmRmMTc3OTdmNTg4MmY0ZWZkNDNhOGIzZWZiZmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRCXLMd1b9NmSOraQaKicDZ0enk0
PaxLba6DsZgOfXP79Y1CXSlB6TGKWaxlmPDLUtMWcMZesNyzBMiwOH9DvQRI6ghX
hOPm+uGVULVWj1d8kGzjDMZcfGMDZ+Wuwh3UxHx2V3NhwXr3wXVca8itrF40Ya1S
q+vSYA/TR2ux0zT+4jxH236G9QLc6lgBu3ciB6OUzwBB7OjrLCpDY7xCs4k47H17
VFpa8G+xK/2meEkVeUdeg7rJBrzCl5ShbTygpBwxbTs9Xsz614fffQtrM81Thynk
MKfSBmW/6XgpOSCfURz5gnzgN8WbcJ4V53C/9sRh/RsXHLkCpHNygKnL3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAMI3/JuLfF3l/WIL079Q6iz77/KMB8GA1UdIwQY
MBaAFLCf/46P/Y+OfZp7ZtHMc9w5KB72MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0pfX2pvXzlqNDU5bW50bTBjeHozRGtvSHZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy84ZmJjN2UtMWY0Ny00ODdjLTgyOTIt
ZTVhNzdmN2E3YWEyLzEvc0pfX2pvXzlqNDU5bW50bTBjeHozRGtvSHZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy84ZmJjN2UtMWY0Ny00ODdjLTgyOTItZTVhNzdmN2E3YWEy
LzEvc0pfX2pvXzlqNDU5bW50bTBjeHozRGtvSHZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAILfPoVUD
x8647C4/Sg8BzqqNs+WNjkQ7OyT4wEItIN2ayWDUlPoVDHWLcBvNMmJEu2z+zVJb
VQQP3c665sCVKIpo8sMNu+Msx7uGk88TnaRVaKUrmVUxGrJ+6u/jJfHLoSL/ZvEN
mbVFHQqkY2Z7I0ZzCXAhVKFw0nscFwQE+avu+IWDeyy5OLIx5dlVEo1vkn2t4dPP
XzyHOSFCMK0CheMrJ82UV9cD98mvckIVAgzc6tV+4nkrIERwRPgNpDHq30ZuneAm
yY09cSpzb3V15YtAaqZ7HTthjFU8Tw4P0AWKlOnk6aJN3YyxtWGs1O73BY/2iNH5
qfki/wNCPc6P9Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:57:13 2025 by rpki-client