Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
File: jsM7jhNW_M_INGbu2KhlUSp9APE.mft (raw, json)
Hash identifier: BTMMEAFUbVfb1qwXFUYDVsl7Dm2dtz++1SFKFphTlbI=
Subject key identifier: C4:81:E2:60:6E:8D:2B:06:1C:43:3D:FF:37:9D:04:D8:E7:1F:DA:D6
Authority key identifier: 8E:C3:3B:8E:13:56:FC:CF:C8:34:66:EE:D8:A8:65:51:2A:7D:00:F1
Certificate issuer: /CN=8ec33b8e1356fccfc83466eed8a865512a7d00f1
Certificate serial: 0199239FEB3993D941A1D9F4207C73B2C7C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 10:01:46 +0000
Manifest this update: Sun 07 Sep 2025 10:01:46 +0000
Manifest next update: Mon 08 Sep 2025 10:01:46 +0000
Files and hashes: 1: jsM7jhNW_M_INGbu2KhlUSp9APE.crl (hash: eds+whIECfWgoBmZyNP5Z8F1nuCfV46h0nG5GgVWGwI=)
2: qwVGjqL0m5G9ustOpPZ5FS2RFbA.roa (hash: QQptDB1uT/9FFhotqk1bN1Jx0M0NJncKcjU5av3+7no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:eb:39:93:d9:41:a1:d9:f4:20:7c:73:b2:c7:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec33b8e1356fccfc83466eed8a865512a7d00f1
Validity
Not Before: Sep 7 10:01:46 2025 GMT
Not After : Sep 8 10:01:46 2025 GMT
Subject: CN=c481e2606e8d2b061c433dff379d04d8e71fdad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b9:bb:42:f8:70:91:48:17:56:7d:21:fc:48:
dc:4d:a8:56:11:8d:f8:55:08:54:1a:b9:ea:29:40:
51:f1:ba:77:81:a3:25:78:56:d3:28:4b:81:23:5a:
f3:81:d3:09:17:7c:2e:71:ef:13:5d:bc:c8:47:1a:
de:9a:f3:2b:d6:94:5a:a4:be:22:8e:9a:29:9b:e6:
87:bd:e4:c4:59:30:f6:24:59:ee:b4:07:57:cc:36:
d7:13:62:49:39:5b:c2:90:1c:04:b7:ba:8a:ae:b2:
bf:24:7e:19:c2:78:3f:2b:c9:a5:d3:3a:5f:1d:66:
ca:11:de:53:d3:ab:20:1c:be:aa:9a:18:ef:f6:cd:
39:5d:d5:29:e8:6e:0f:b2:a5:99:32:f7:a4:a4:14:
14:6d:d8:c3:64:b7:db:88:dc:57:f8:e8:44:6f:f5:
dc:87:2f:95:64:e0:10:1c:ac:fa:e9:14:8f:61:b6:
dc:fd:80:6c:6e:2e:17:a9:5a:a0:c8:13:a9:20:3b:
38:98:fd:cd:8a:c5:ef:89:37:04:cd:3d:e8:b9:61:
20:1e:45:bb:5c:c8:67:9f:fd:6e:49:2b:7c:54:7a:
f4:27:45:a1:64:c1:c0:8a:95:01:c0:56:1b:1e:a9:
28:1c:a9:46:21:b0:2f:3a:24:de:94:69:4c:32:66:
9b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:81:E2:60:6E:8D:2B:06:1C:43:3D:FF:37:9D:04:D8:E7:1F:DA:D6
X509v3 Authority Key Identifier:
keyid:8E:C3:3B:8E:13:56:FC:CF:C8:34:66:EE:D8:A8:65:51:2A:7D:00:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:67:d9:6e:2c:32:5c:eb:87:91:d2:d9:53:f7:2d:ef:25:1d:
90:9e:19:1a:e4:93:d6:e3:25:48:c7:cf:20:4e:27:3c:fc:09:
ef:d7:57:42:72:54:26:f2:f2:70:a8:eb:72:96:b6:f3:17:7c:
4f:49:a4:77:b0:7b:34:70:9e:b6:de:49:68:04:ee:1c:67:3c:
e1:78:95:2e:04:32:f2:68:27:5c:64:18:f6:9c:69:91:7c:26:
25:99:cd:d5:8e:eb:7c:ca:81:9f:cc:53:56:18:b2:22:89:19:
2d:47:53:50:1c:f4:36:2b:00:90:70:32:3a:63:61:3c:b1:4b:
72:01:c4:69:d2:df:89:8d:0e:0d:74:91:13:e0:13:ca:80:44:
09:c4:34:be:71:bf:23:9f:cd:ae:8f:63:7f:90:f7:e8:be:a3:
aa:11:6f:fa:84:8a:18:18:a4:2d:84:47:8f:22:1f:9f:e2:4c:
b2:cf:5c:0f:19:61:ab:dd:bf:20:73:64:dd:27:64:85:23:f5:
83:81:4d:ba:8e:21:58:57:9f:c9:f9:a1:47:2c:6a:9f:3d:c5:
d8:6f:18:a2:fe:89:51:5e:f3:f5:e7:b8:7c:00:d1:34:8d:29:
f2:b0:f2:4b:d3:c3:d5:56:25:6f:d0:ed:ab:41:42:a0:11:94:
14:ea:8f:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjn+s5k9lBodn0IHxzssfEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYzMzYjhlMTM1NmZjY2ZjODM0NjZlZWQ4YTg2NTUxMmE3
ZDAwZjEwHhcNMjUwOTA3MTAwMTQ2WhcNMjUwOTA4MTAwMTQ2WjAzMTEwLwYDVQQD
EyhjNDgxZTI2MDZlOGQyYjA2MWM0MzNkZmYzNzlkMDRkOGU3MWZkYWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbm7QvhwkUgXVn0h/EjcTahWEY34
VQhUGrnqKUBR8bp3gaMleFbTKEuBI1rzgdMJF3wuce8TXbzIRxremvMr1pRapL4i
jpopm+aHveTEWTD2JFnutAdXzDbXE2JJOVvCkBwEt7qKrrK/JH4Zwng/K8ml0zpf
HWbKEd5T06sgHL6qmhjv9s05XdUp6G4PsqWZMvekpBQUbdjDZLfbiNxX+OhEb/Xc
hy+VZOAQHKz66RSPYbbc/YBsbi4XqVqgyBOpIDs4mP3NisXviTcEzT3ouWEgHkW7
XMhnn/1uSSt8VHr0J0WhZMHAipUBwFYbHqkoHKlGIbAvOiTelGlMMmabEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMSB4mBujSsGHEM9/zedBNjnH9rWMB8GA1UdIwQY
MBaAFI7DO44TVvzPyDRm7tioZVEqfQDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanNNN2poTldfTV9JTkdidTJLaGxVU3A5QVBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9iNzI4MDYtNDllOC00MTEyLWEyMzUt
MWMxZTg1MzJkNWIwLzEvanNNN2poTldfTV9JTkdidTJLaGxVU3A5QVBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9iNzI4MDYtNDllOC00MTEyLWEyMzUtMWMxZTg1MzJkNWIw
LzEvanNNN2poTldfTV9JTkdidTJLaGxVU3A5QVBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaWfZbiwy
XOuHkdLZU/ct7yUdkJ4ZGuST1uMlSMfPIE4nPPwJ79dXQnJUJvLycKjrcpa28xd8
T0mkd7B7NHCett5JaATuHGc84XiVLgQy8mgnXGQY9pxpkXwmJZnN1Y7rfMqBn8xT
VhiyIokZLUdTUBz0NisAkHAyOmNhPLFLcgHEadLfiY0ODXSRE+ATyoBECcQ0vnG/
I5/Nro9jf5D36L6jqhFv+oSKGBikLYRHjyIfn+JMss9cDxlhq92/IHNk3SdkhSP1
g4FNuo4hWFefyfmhRyxqnz3F2G8Yov6JUV7z9ee4fADRNI0p8rDyS9PD1VYlb9Dt
q0FCoBGUFOqP+w==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:12 2025 by rpki-client