Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
File: ju56OtFSu4clp9ubt1IIBLbxFV8.mft (raw, json)
Hash identifier: Vc/1NM93WlB8D4r3cVPIoIS1ANR9hIwRpYdNAypvxOU=
Subject key identifier: 83:8D:45:56:71:4B:D4:2C:7A:32:C6:2E:71:C6:FE:CA:BA:E8:02:71
Authority key identifier: 8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
Certificate issuer: /CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Certificate serial: 019931C85EF49AB4ED19334F3C3148649A5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
Manifest number: 1682
Signing time: Wed 10 Sep 2025 04:00:38 +0000
Manifest this update: Wed 10 Sep 2025 04:00:38 +0000
Manifest next update: Thu 11 Sep 2025 04:00:38 +0000
Files and hashes: 1: JXdwz8Kh5s8D4fZUiI7MP0vHa-g.roa (hash: aGy7W4wvxfuA3DMrWGQip2XzAfgBaKwU1Q707mDCSqY=)
2: W1sV2SXycnhhhyOvaUwWx8t1ifs.roa (hash: HcxcuKRHaI2x0IIJ12wkt3W53ioexeV4UAL0OsdORr4=)
3: ju56OtFSu4clp9ubt1IIBLbxFV8.crl (hash: FuMB2vBar8OGk6GtZLmq8s3da+sHnHN/e0zVTUEa0JQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:c8:5e:f4:9a:b4:ed:19:33:4f:3c:31:48:64:9a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Validity
Not Before: Sep 10 04:00:38 2025 GMT
Not After : Sep 11 04:00:38 2025 GMT
Subject: CN=838d4556714bd42c7a32c62e71c6fecabae80271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1a:7d:ed:68:89:2b:b4:d4:7f:28:75:63:68:
89:1a:cf:38:ae:90:30:21:35:e3:e8:bf:ad:7e:a7:
83:73:cb:f5:56:94:e6:ed:31:59:eb:bc:25:b4:dc:
27:a3:ef:9a:44:5b:ab:69:3f:02:9d:64:2c:38:29:
f7:34:6d:96:da:46:b5:7a:eb:cc:1b:f2:02:09:86:
0b:47:cb:5d:86:28:94:d9:f6:c7:d8:6d:62:e4:dd:
77:79:6c:96:cc:e9:8b:a7:3d:8c:de:f5:3c:f5:53:
ea:08:1c:77:38:11:30:91:df:5e:02:74:d0:8c:9c:
36:38:2b:f8:85:c3:11:ae:5e:85:ab:5f:89:71:fd:
cc:fa:14:86:36:bc:43:94:18:b3:18:d6:98:2f:3c:
ff:4d:fc:cf:1b:c6:38:1a:3c:40:ed:3a:33:b5:6b:
e1:a4:40:21:f4:48:e3:31:c8:bd:fc:fa:73:b4:e6:
98:07:23:41:a1:f5:ce:d0:ff:78:e9:7f:cb:ee:44:
56:9f:cb:53:25:3f:69:ca:2e:2c:c3:1b:fc:4d:da:
a9:f0:8b:be:52:8e:da:a6:79:35:a3:0d:dc:c1:d0:
1c:26:ea:07:4c:57:8c:c6:01:59:da:34:a7:30:2c:
88:89:2f:b6:c6:65:6f:d5:0a:21:38:35:eb:20:03:
bf:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8D:45:56:71:4B:D4:2C:7A:32:C6:2E:71:C6:FE:CA:BA:E8:02:71
X509v3 Authority Key Identifier:
keyid:8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e9:38:7b:4b:25:21:cb:bd:30:6d:d6:e2:b9:53:12:da:3d:
ce:8b:2c:34:2a:13:8f:66:cd:19:ca:22:b2:59:ec:c9:c1:7a:
ba:86:18:76:5e:96:0d:77:aa:45:98:c3:38:67:66:4d:3f:49:
06:de:10:0f:06:46:3d:a3:73:51:de:40:72:87:e1:6f:6d:9a:
cc:cb:a4:29:ea:63:96:5b:b4:e3:25:c6:c4:55:46:73:b3:45:
b5:d3:a0:61:9e:2e:c4:de:99:2c:b6:f3:07:da:98:c0:17:ca:
18:c2:7d:e2:7a:2f:d6:fb:d8:c5:e4:22:f9:1d:db:b6:5f:19:
f7:d7:ac:26:a5:d3:76:6a:16:a0:79:02:5a:84:0c:4c:50:22:
9e:fa:4e:2a:03:c7:21:4f:bd:bb:74:6e:76:1d:29:eb:15:18:
82:2d:04:e6:5a:69:ca:60:b6:e0:41:00:e3:22:5e:40:0b:f1:
b5:c2:94:e6:a5:d4:49:e3:ca:c6:b0:d4:cb:5d:8c:62:64:00:
c7:aa:ce:ed:db:86:ab:4d:a3:ea:fa:ed:f3:e7:d4:e7:b2:da:
a5:3e:79:b1:66:51:b7:03:94:0e:2a:e0:a6:41:91:33:61:cd:
16:e8:97:dc:2e:5b:f4:62:0a:e4:91:2e:fb:52:ce:a4:9f:b6:
a1:cf:ab:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkxyF70mrTtGTNPPDFIZJpdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlZWU3YTNhZDE1MmJiODcyNWE3ZGI5YmI3NTIwODA0YjZm
MTE1NWYwHhcNMjUwOTEwMDQwMDM4WhcNMjUwOTExMDQwMDM4WjAzMTEwLwYDVQQD
Eyg4MzhkNDU1NjcxNGJkNDJjN2EzMmM2MmU3MWM2ZmVjYWJhZTgwMjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Bp97WiJK7TUfyh1Y2iJGs84rpAw
ITXj6L+tfqeDc8v1VpTm7TFZ67wltNwno++aRFuraT8CnWQsOCn3NG2W2ka1euvM
G/ICCYYLR8tdhiiU2fbH2G1i5N13eWyWzOmLpz2M3vU89VPqCBx3OBEwkd9eAnTQ
jJw2OCv4hcMRrl6Fq1+Jcf3M+hSGNrxDlBizGNaYLzz/TfzPG8Y4GjxA7ToztWvh
pEAh9EjjMci9/PpztOaYByNBofXO0P946X/L7kRWn8tTJT9pyi4swxv8Tdqp8Iu+
Uo7apnk1ow3cwdAcJuoHTFeMxgFZ2jSnMCyIiS+2xmVv1QohODXrIAO/HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIONRVZxS9QsejLGLnHG/sq66AJxMB8GA1UdIwQY
MBaAFI7uejrRUruHJafbm7dSCAS28RVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanU1Nk90RlN1NGNscDl1YnQxSUlCTGJ4RlY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83OTc5YjItYzNkOS00ZjMzLWEwOWYt
NDk1OTFhZmUxN2YwLzEvanU1Nk90RlN1NGNscDl1YnQxSUlCTGJ4RlY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS83OTc5YjItYzNkOS00ZjMzLWEwOWYtNDk1OTFhZmUxN2Yw
LzEvanU1Nk90RlN1NGNscDl1YnQxSUlCTGJ4RlY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc+k4e0sl
Icu9MG3W4rlTEto9zossNCoTj2bNGcoislnsycF6uoYYdl6WDXeqRZjDOGdmTT9J
Bt4QDwZGPaNzUd5Acofhb22azMukKepjllu04yXGxFVGc7NFtdOgYZ4uxN6ZLLbz
B9qYwBfKGMJ94nov1vvYxeQi+R3btl8Z99esJqXTdmoWoHkCWoQMTFAinvpOKgPH
IU+9u3Rudh0p6xUYgi0E5lppymC24EEA4yJeQAvxtcKU5qXUSePKxrDUy12MYmQA
x6rO7duGq02j6vrt8+fU57LapT55sWZRtwOUDirgpkGRM2HNFuiX3C5b9GIK5JEu
+1LOpJ+2oc+rOQ==
-----END CERTIFICATE-----
Generated at Wed Sep 10 12:00:07 2025 by rpki-client