Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
File: J-D3u75AMaJO8bnbGWqrBkLoSgY.mft (raw, json)
Hash identifier: RnSbkcKzlg2EexoNE6+14CwTqPpcox59lfgbjpqojvU=
Subject key identifier: 33:D2:1E:23:94:8A:80:52:0D:47:86:45:4E:44:8F:4B:C6:30:93:D6
Authority key identifier: 27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06
Certificate issuer: /CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
Certificate serial: 0199394BAFD7C5B0F6BB8133C1D943C2CF99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
Manifest number: 167E
Signing time: Thu 11 Sep 2025 15:01:25 +0000
Manifest this update: Thu 11 Sep 2025 15:01:25 +0000
Manifest next update: Fri 12 Sep 2025 15:01:25 +0000
Files and hashes: 1: IjluqbVdM5zm7wvPSgQZOmXQjag.roa (hash: QKwqMUOeWOJatNvuP/XT/XSpsSd9RiOppxhqX3P9KPo=)
2: J-D3u75AMaJO8bnbGWqrBkLoSgY.crl (hash: NoWGCSDv1ZKS3U5/yXaEWINZhlNwE49qG9uu5hCxgko=)
3: YY-hoyGXDDo8SiePezL_ZO2nNOw.roa (hash: A3j7uoljgavovkzwgqN6nFVhnXRD4UmTm39D3QvLFO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 14:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:4b:af:d7:c5:b0:f6:bb:81:33:c1:d9:43:c2:cf:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
Validity
Not Before: Sep 11 15:01:25 2025 GMT
Not After : Sep 12 15:01:25 2025 GMT
Subject: CN=33d21e23948a80520d4786454e448f4bc63093d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:41:26:d5:92:06:3d:8c:9b:cd:4f:ab:7e:28:
83:33:ae:15:22:71:95:db:87:22:bc:e3:7f:84:92:
8a:8d:32:a5:65:be:1d:0c:6d:ac:be:c6:73:f7:32:
73:0a:e9:8e:6c:c1:7a:9e:08:14:05:fd:a3:b3:1b:
28:6f:64:ee:1a:b6:9c:8f:79:12:9b:db:e4:1f:f3:
9b:a7:bc:40:23:d0:69:8e:54:85:09:17:e1:45:db:
d4:fd:07:0f:ae:96:cb:7f:db:71:24:da:62:16:46:
b7:80:5f:47:e4:08:e5:fe:0d:e8:b6:1f:88:79:70:
e2:be:da:e3:79:2b:98:16:21:6a:0f:17:6c:3f:c5:
dd:4e:e2:64:2c:ca:ea:33:80:79:ad:37:f4:03:3d:
ed:3b:6d:d5:ee:66:03:9f:fa:9a:57:e2:c3:07:15:
19:78:e9:8c:26:ae:bc:2f:52:b3:0f:51:4d:13:a1:
93:71:2e:d2:25:00:bb:43:b5:3c:d0:15:c1:37:37:
79:94:fc:6e:45:ec:9a:9f:c2:99:0f:35:8b:88:00:
c3:75:35:a6:e3:0c:43:2f:31:f1:07:3a:d3:39:fe:
77:8d:49:b9:84:ca:93:2b:d5:47:f4:6a:62:d9:e3:
f1:19:56:f6:a3:88:1b:de:36:9e:21:01:d8:4b:35:
e6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D2:1E:23:94:8A:80:52:0D:47:86:45:4E:44:8F:4B:C6:30:93:D6
X509v3 Authority Key Identifier:
keyid:27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:6b:4e:b9:79:f1:a9:c3:a8:3b:67:dd:e0:cb:5a:4e:0a:42:
8c:70:13:cb:73:ec:df:92:21:02:33:b5:49:51:41:98:a3:5a:
07:26:b9:e8:06:4a:7d:37:10:d1:62:2e:58:3b:a5:85:ed:5c:
64:19:c5:71:6f:b2:ca:5a:06:dd:a6:e4:0b:cc:58:cb:1b:30:
78:e3:a3:8e:b5:ce:f0:f9:bb:0f:5e:84:d9:f0:8e:6e:c9:13:
ce:66:dd:a9:ea:ed:19:35:10:ed:7b:8e:d4:fc:5d:f0:9b:30:
18:81:31:06:05:25:90:5e:5b:66:8c:66:8c:fe:4a:b2:16:3c:
ea:ef:d3:88:58:09:ed:22:4c:38:ed:2f:b1:a9:83:ce:48:14:
66:7b:f7:d7:57:f3:39:64:2d:f7:e3:38:46:8b:55:cd:b4:f6:
5f:7a:e7:73:7f:32:70:98:f2:71:db:39:e9:a6:23:3d:91:fc:
73:95:81:ea:1f:94:95:a9:0f:b7:84:d2:5e:db:2d:6a:d7:8b:
93:9d:05:1b:38:4a:0c:f6:27:98:2e:27:a3:e5:37:7a:89:9a:
89:66:c5:82:c5:b4:ac:06:5f:10:d1:3c:a3:ad:39:24:c8:62:
5d:e7:8e:3e:27:0c:a7:8a:37:85:c5:b5:51:2d:30:28:17:b9:
ef:03:4e:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk5S6/XxbD2u4EzwdlDws+ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZTBmN2JiYmU0MDMxYTI0ZWYxYjlkYjE5NmFhYjA2NDJl
ODRhMDYwHhcNMjUwOTExMTUwMTI1WhcNMjUwOTEyMTUwMTI1WjAzMTEwLwYDVQQD
EygzM2QyMWUyMzk0OGE4MDUyMGQ0Nzg2NDU0ZTQ0OGY0YmM2MzA5M2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukEm1ZIGPYybzU+rfiiDM64VInGV
24civON/hJKKjTKlZb4dDG2svsZz9zJzCumObMF6nggUBf2jsxsob2TuGracj3kS
m9vkH/Obp7xAI9BpjlSFCRfhRdvU/QcPrpbLf9txJNpiFka3gF9H5Ajl/g3oth+I
eXDivtrjeSuYFiFqDxdsP8XdTuJkLMrqM4B5rTf0Az3tO23V7mYDn/qaV+LDBxUZ
eOmMJq68L1KzD1FNE6GTcS7SJQC7Q7U80BXBNzd5lPxuReyan8KZDzWLiADDdTWm
4wxDLzHxBzrTOf53jUm5hMqTK9VH9Gpi2ePxGVb2o4gb3jaeIQHYSzXm1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPSHiOUioBSDUeGRU5Ej0vGMJPWMB8GA1UdIwQY
MBaAFCfg97u+QDGiTvG52xlqqwZC6EoGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSi1EM3U3NUFNYUpPOGJuYkdXcXJCa0xvU2dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC84YWJhNzEtM2JhOC00YjhkLThlYjYt
MzQ2YTNlYzE4NjhjLzEvSi1EM3U3NUFNYUpPOGJuYkdXcXJCa0xvU2dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC84YWJhNzEtM2JhOC00YjhkLThlYjYtMzQ2YTNlYzE4Njhj
LzEvSi1EM3U3NUFNYUpPOGJuYkdXcXJCa0xvU2dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoWtOuXnx
qcOoO2fd4MtaTgpCjHATy3Ps35IhAjO1SVFBmKNaBya56AZKfTcQ0WIuWDulhe1c
ZBnFcW+yyloG3abkC8xYyxsweOOjjrXO8Pm7D16E2fCObskTzmbdqertGTUQ7XuO
1Pxd8JswGIExBgUlkF5bZoxmjP5KshY86u/TiFgJ7SJMOO0vsamDzkgUZnv311fz
OWQt9+M4RotVzbT2X3rnc38ycJjycds56aYjPZH8c5WB6h+UlakPt4TSXtstateL
k50FGzhKDPYnmC4no+U3eomaiWbFgsW0rAZfENE8o605JMhiXeeOPicMp4o3hcW1
US0wKBe57wNOBQ==
-----END CERTIFICATE-----
Generated at Thu Sep 11 17:21:28 2025 by rpki-client