Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
File: jjA8wq-Dh4llJ3HDReB98-gNVE8.mft (raw, json)
Hash identifier: pYmWvABhbAxsI8iOy8xRo6pxaD96dAJX0K26H83PTdU=
Subject key identifier: 35:D7:7E:DE:F1:F1:72:3A:09:D7:18:A3:D0:33:48:24:9B:31:BB:57
Authority key identifier: 8E:30:3C:C2:AF:83:87:89:65:27:71:C3:45:E0:7D:F3:E8:0D:54:4F
Certificate issuer: /CN=8e303cc2af838789652771c345e07df3e80d544f
Certificate serial: 019933121E0EA64FFFC232A495C6C79EC9E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
Manifest number: 167B
Signing time: Wed 10 Sep 2025 10:00:49 +0000
Manifest this update: Wed 10 Sep 2025 10:00:49 +0000
Manifest next update: Thu 11 Sep 2025 10:00:49 +0000
Files and hashes: 1: 7Ih44HEchM76fosssYsDhPW80DM.roa (hash: fUnotk/PUA4nwBmKa2OkgoRu1RIyYVBHFgrPwz0Fmwc=)
2: jjA8wq-Dh4llJ3HDReB98-gNVE8.crl (hash: BuFmmgLjZFE1lTlcAZdsqcvvmREe3lLwLyfnShpC/sM=)
3: tnLXZpAcdsupjiIll_iKlzExQoQ.roa (hash: mDoarqNRra8hpVT2LOO1TVGYi/0LvJxSxAQ/O0wAR7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:12:1e:0e:a6:4f:ff:c2:32:a4:95:c6:c7:9e:c9:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e303cc2af838789652771c345e07df3e80d544f
Validity
Not Before: Sep 10 10:00:49 2025 GMT
Not After : Sep 11 10:00:49 2025 GMT
Subject: CN=35d77edef1f1723a09d718a3d03348249b31bb57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:82:d7:d0:49:4b:e5:89:1e:f6:9a:1e:1c:e3:
c0:c6:99:5a:1a:15:e3:c5:b4:dd:e6:4a:47:c5:77:
5c:4d:7a:75:5e:2c:5c:b3:9d:6f:de:41:28:e6:57:
dc:34:c4:25:7c:c0:f3:3c:31:b7:de:0e:5c:03:bc:
47:db:d5:e6:9d:ac:8b:3d:c3:e5:5c:85:e6:39:e1:
9e:21:40:e4:88:12:a9:64:2c:4f:3c:1b:4a:2f:01:
1b:f1:f4:e0:af:57:fa:74:13:32:9f:a2:ff:cf:5b:
bb:c8:ec:31:b1:f3:d2:f0:d5:d4:75:ec:c4:59:73:
ed:c8:be:31:ec:d5:03:c9:f8:28:00:b0:03:0b:f6:
e6:c5:8b:27:b2:bc:0b:59:ad:b1:20:ee:4b:64:28:
02:80:8f:4f:d0:f2:1c:22:32:2a:44:b7:b1:71:ce:
54:d0:81:84:01:a4:c4:4d:18:3b:aa:9d:6d:57:97:
70:dc:57:90:15:6f:bd:bb:8e:8c:1b:6f:3d:a8:50:
bb:e1:8f:ad:07:9e:90:aa:db:a1:58:48:b8:d7:91:
d5:6d:95:ef:fa:84:41:63:90:ac:4c:25:6c:d2:5a:
d2:7a:5e:7b:d9:bb:43:79:75:c8:ee:62:5b:65:d9:
d8:ab:fe:43:05:44:d7:6a:40:d4:4b:72:9e:e9:d8:
c5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D7:7E:DE:F1:F1:72:3A:09:D7:18:A3:D0:33:48:24:9B:31:BB:57
X509v3 Authority Key Identifier:
keyid:8E:30:3C:C2:AF:83:87:89:65:27:71:C3:45:E0:7D:F3:E8:0D:54:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:67:b7:f4:b2:51:39:b3:89:48:37:d2:f4:9d:c7:da:b9:da:
a2:e7:88:ff:c7:57:a4:bc:66:fa:a5:c7:4e:4b:65:3f:66:41:
54:aa:14:5b:67:a9:13:02:65:f5:07:e0:3d:54:6c:17:00:a4:
ca:9d:ec:43:ed:32:b7:88:0f:df:eb:ed:4a:86:b2:56:dd:3c:
33:38:81:06:68:e6:6d:97:71:01:71:70:69:17:0b:f6:0e:a3:
ea:d1:5e:b3:19:aa:15:9f:c2:67:88:07:ba:f9:1d:ed:82:1e:
a3:4c:04:88:7d:47:f9:95:3b:14:76:49:2a:27:0e:a8:e9:ad:
78:28:7c:f5:15:c0:44:a0:78:a3:9f:1a:19:ec:8d:c8:2d:74:
0d:53:02:a4:81:73:df:d7:a9:f7:ba:18:9b:1b:e4:8d:57:85:
db:79:d2:95:07:9b:b8:a7:c6:dc:ec:da:36:9f:84:be:21:cd:
df:4f:b4:03:b8:19:94:d1:d7:e1:c1:d1:28:6f:9a:5c:82:a0:
3d:9e:b4:4b:92:84:02:af:df:26:0c:f3:9e:43:56:ac:fb:5d:
be:f9:db:b4:97:57:ad:0c:54:da:13:cf:89:c7:a0:de:7e:d7:
e2:c8:d9:4e:44:d6:2a:2d:70:26:0a:7f:13:bd:71:3c:d2:01:
93:f5:e7:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkzEh4Opk//wjKklcbHnsnlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMzAzY2MyYWY4Mzg3ODk2NTI3NzFjMzQ1ZTA3ZGYzZTgw
ZDU0NGYwHhcNMjUwOTEwMTAwMDQ5WhcNMjUwOTExMTAwMDQ5WjAzMTEwLwYDVQQD
EygzNWQ3N2VkZWYxZjE3MjNhMDlkNzE4YTNkMDMzNDgyNDliMzFiYjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4LX0ElL5Yke9poeHOPAxplaGhXj
xbTd5kpHxXdcTXp1Xixcs51v3kEo5lfcNMQlfMDzPDG33g5cA7xH29XmnayLPcPl
XIXmOeGeIUDkiBKpZCxPPBtKLwEb8fTgr1f6dBMyn6L/z1u7yOwxsfPS8NXUdezE
WXPtyL4x7NUDyfgoALADC/bmxYsnsrwLWa2xIO5LZCgCgI9P0PIcIjIqRLexcc5U
0IGEAaTETRg7qp1tV5dw3FeQFW+9u46MG289qFC74Y+tB56QqtuhWEi415HVbZXv
+oRBY5CsTCVs0lrSel572btDeXXI7mJbZdnYq/5DBUTXakDUS3Ke6djF2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXXft7x8XI6CdcYo9AzSCSbMbtXMB8GA1UdIwQY
MBaAFI4wPMKvg4eJZSdxw0XgffPoDVRPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvampBOHdxLURoNGxsSjNIRFJlQjk4LWdOVkU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy85ZDFhNGItNTA5YS00OTEzLWI5Mzct
ZDBhZGIxMWRlZDM0LzEvampBOHdxLURoNGxsSjNIRFJlQjk4LWdOVkU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy85ZDFhNGItNTA5YS00OTEzLWI5MzctZDBhZGIxMWRlZDM0
LzEvampBOHdxLURoNGxsSjNIRFJlQjk4LWdOVkU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeme39LJR
ObOJSDfS9J3H2rnaoueI/8dXpLxm+qXHTktlP2ZBVKoUW2epEwJl9QfgPVRsFwCk
yp3sQ+0yt4gP3+vtSoayVt08MziBBmjmbZdxAXFwaRcL9g6j6tFesxmqFZ/CZ4gH
uvkd7YIeo0wEiH1H+ZU7FHZJKicOqOmteCh89RXARKB4o58aGeyNyC10DVMCpIFz
39ep97oYmxvkjVeF23nSlQebuKfG3OzaNp+EviHN30+0A7gZlNHX4cHRKG+aXIKg
PZ60S5KEAq/fJgzznkNWrPtdvvnbtJdXrQxU2hPPiceg3n7X4sjZTkTWKi1wJgp/
E71xPNIBk/Xn8A==
-----END CERTIFICATE-----
Generated at Wed Sep 10 20:26:26 2025 by rpki-client