Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
File: jBPrj9nY20toqWnI_91IRoAqsKs.mft (raw, json)
Hash identifier: gfF8a0elIEQ4eAneJ7DAraGnoDkfdsDPOZLssuCqAXM=
Subject key identifier: 95:B8:90:20:DB:4A:29:9D:F1:CD:08:2C:B3:1A:C9:FE:28:4E:8D:BD
Authority key identifier: 8C:13:EB:8F:D9:D8:DB:4B:68:A9:69:C8:FF:DD:48:46:80:2A:B0:AB
Certificate issuer: /CN=8c13eb8fd9d8db4b68a969c8ffdd4846802ab0ab
Certificate serial: 01993B024F3E58544FA21107638E58896CCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
Manifest number: 0A01
Signing time: Thu 11 Sep 2025 23:00:31 +0000
Manifest this update: Thu 11 Sep 2025 23:00:31 +0000
Manifest next update: Fri 12 Sep 2025 23:00:31 +0000
Files and hashes: 1: djq23V4eA0hrtL3JjtzZq_jD0sw.roa (hash: u2ZEUIKDADE8gsgv3Z8cy40l1mRaFT3X8dzep8zrVh8=)
2: jBPrj9nY20toqWnI_91IRoAqsKs.crl (hash: YTJ7txj70YpcuVrhp2/LRqtGvEqaANSqNZNK4KYeHZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 21:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3b:02:4f:3e:58:54:4f:a2:11:07:63:8e:58:89:6c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c13eb8fd9d8db4b68a969c8ffdd4846802ab0ab
Validity
Not Before: Sep 11 23:00:31 2025 GMT
Not After : Sep 12 23:00:31 2025 GMT
Subject: CN=95b89020db4a299df1cd082cb31ac9fe284e8dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:6c:a0:97:da:0d:ce:84:d5:b2:9b:2a:7b:21:
7e:39:2f:57:94:65:1a:88:eb:76:28:79:21:d5:90:
1c:2e:a0:d3:9d:34:76:80:c8:c4:5c:66:33:7c:b4:
4b:ac:0c:d8:b9:4b:ee:e6:0b:fb:23:ae:bb:69:2c:
f8:a3:a3:9c:bd:e3:a9:c5:07:d5:18:3a:c5:b1:4d:
9d:87:ce:3d:1d:e2:8e:03:d8:55:24:e1:e0:b7:2d:
67:92:c0:80:86:32:75:6e:0b:d1:84:f4:6f:fc:f6:
22:55:02:38:15:b2:a9:65:0b:9e:26:8f:3f:44:4d:
89:ac:1b:76:0f:e7:e6:90:68:e7:0e:cf:39:fd:3c:
98:49:54:f3:49:0f:a2:01:e4:76:dc:5c:c5:67:38:
d9:5c:c9:13:9c:b1:8f:a7:fe:3e:c0:6f:ec:42:97:
dc:fe:20:00:81:cf:3b:a5:99:0c:c6:9d:5e:07:86:
49:3e:59:0a:0e:e4:af:f1:69:b4:c6:a0:f7:69:b8:
74:17:f8:00:13:58:bf:79:3b:97:1a:38:4b:73:6a:
04:d7:8e:5b:0c:61:26:8c:15:c8:4a:dd:cd:ef:f7:
27:45:82:50:32:7e:3a:5d:f6:31:0a:e0:b1:1b:71:
f7:96:f8:08:ba:cb:db:29:70:12:f3:f7:f0:f5:7b:
0e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B8:90:20:DB:4A:29:9D:F1:CD:08:2C:B3:1A:C9:FE:28:4E:8D:BD
X509v3 Authority Key Identifier:
keyid:8C:13:EB:8F:D9:D8:DB:4B:68:A9:69:C8:FF:DD:48:46:80:2A:B0:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:f4:77:13:70:68:7a:23:5b:da:09:e8:65:84:ec:e9:77:bb:
4f:88:40:45:2c:1a:93:c2:55:07:34:12:6a:88:3f:58:97:fb:
8e:a9:e6:f5:b1:ae:b3:4c:a4:9f:98:3a:58:6d:43:9b:f2:d1:
89:b4:0f:2e:4b:7b:6a:3b:97:a1:b5:37:1c:4c:3a:f2:ca:79:
ca:d5:0e:35:f3:4b:45:60:cc:bd:f7:79:4e:c5:bf:27:42:54:
71:c1:13:76:3c:2b:6b:4d:5d:78:cd:dc:21:ec:f9:d4:c4:3c:
c1:dd:fc:3c:69:89:d6:26:ef:16:8d:b7:dd:64:ca:cd:05:32:
f2:cc:72:b8:7b:7c:e0:07:60:e6:57:72:25:4a:fa:d3:c2:50:
5b:d4:12:3c:32:1e:67:fc:31:cd:7b:65:b5:aa:ef:f5:56:13:
b1:d0:ee:a6:03:e4:fe:5f:8f:6f:1c:b2:14:6b:c2:7b:33:09:
1f:06:b2:3e:78:48:92:d0:3f:f4:15:08:da:3a:00:11:e9:be:
49:44:ef:2f:13:ce:01:f2:45:c2:9e:03:aa:79:da:6f:ae:a6:
79:c4:b6:c7:68:3d:02:22:0c:93:3f:36:95:6d:2b:b9:5a:e7:
4b:dc:89:d7:e8:cc:54:14:49:89:a2:38:20:a3:80:d4:ff:f6:
ba:f3:d0:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk7Ak8+WFRPohEHY45YiWzNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMTNlYjhmZDlkOGRiNGI2OGE5NjljOGZmZGQ0ODQ2ODAy
YWIwYWIwHhcNMjUwOTExMjMwMDMxWhcNMjUwOTEyMjMwMDMxWjAzMTEwLwYDVQQD
Eyg5NWI4OTAyMGRiNGEyOTlkZjFjZDA4MmNiMzFhYzlmZTI4NGU4ZGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA72ygl9oNzoTVspsqeyF+OS9XlGUa
iOt2KHkh1ZAcLqDTnTR2gMjEXGYzfLRLrAzYuUvu5gv7I667aSz4o6OcveOpxQfV
GDrFsU2dh849HeKOA9hVJOHgty1nksCAhjJ1bgvRhPRv/PYiVQI4FbKpZQueJo8/
RE2JrBt2D+fmkGjnDs85/TyYSVTzSQ+iAeR23FzFZzjZXMkTnLGPp/4+wG/sQpfc
/iAAgc87pZkMxp1eB4ZJPlkKDuSv8Wm0xqD3abh0F/gAE1i/eTuXGjhLc2oE145b
DGEmjBXISt3N7/cnRYJQMn46XfYxCuCxG3H3lvgIusvbKXAS8/fw9XsOAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJW4kCDbSimd8c0ILLMayf4oTo29MB8GA1UdIwQY
MBaAFIwT64/Z2NtLaKlpyP/dSEaAKrCrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakJQcmo5blkyMHRvcVduSV85MUlSb0Fxc0tzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC84YWRmN2UtMmRlZC00MjRkLTg5NTEt
ZTY4MmJjYjlhNjNhLzEvakJQcmo5blkyMHRvcVduSV85MUlSb0Fxc0tzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC84YWRmN2UtMmRlZC00MjRkLTg5NTEtZTY4MmJjYjlhNjNh
LzEvakJQcmo5blkyMHRvcVduSV85MUlSb0Fxc0tzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVvR3E3Bo
eiNb2gnoZYTs6Xe7T4hARSwak8JVBzQSaog/WJf7jqnm9bGus0ykn5g6WG1Dm/LR
ibQPLkt7ajuXobU3HEw68sp5ytUONfNLRWDMvfd5TsW/J0JUccETdjwra01deM3c
Iez51MQ8wd38PGmJ1ibvFo233WTKzQUy8sxyuHt84Adg5ldyJUr608JQW9QSPDIe
Z/wxzXtltarv9VYTsdDupgPk/l+PbxyyFGvCezMJHwayPnhIktA/9BUI2joAEem+
SUTvLxPOAfJFwp4Dqnnab66mecS2x2g9AiIMkz82lW0ruVrnS9yJ1+jMVBRJiaI4
IKOA1P/2uvPQeg==
-----END CERTIFICATE-----
Generated at Fri Sep 12 03:08:56 2025 by rpki-client