
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.mft
File: jZCoyIbumsQjhhb5JjHruLx243E.mft (raw, json)
Hash identifier: LPk9OozRVtSJE19vIFpiqgastUH5GePJbpBMWDpidK8=
Subject key identifier: B0:33:B7:70:76:2F:3E:81:3E:6A:37:B2:24:4E:AE:94:61:2B:13:34
Authority key identifier: 8D:90:A8:C8:86:EE:9A:C4:23:86:16:F9:26:31:EB:B8:BC:76:E3:71
Certificate issuer: /CN=8d90a8c886ee9ac4238616f92631ebb8bc76e371
Certificate serial: 0199228CD40EC775D3CD3C0827EDB31A0CEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZCoyIbumsQjhhb5JjHruLx243E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.mft
Manifest number: 2F
Signing time: Sun 07 Sep 2025 05:01:18 +0000
Manifest this update: Sun 07 Sep 2025 05:01:18 +0000
Manifest next update: Mon 08 Sep 2025 05:01:18 +0000
Files and hashes: 1: jZCoyIbumsQjhhb5JjHruLx243E.crl (hash: pordkfm1mFJZ0Aa5xNRs9EK721nj/yxVLjpHbQOVOUg=)
2: usm9wn0ranV8cJoAdmlA0D2Pk2s.roa (hash: lnjChVLXxICPBgsN6v1LDI5Ki8JFy1bjGXMD/7hIN1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZCoyIbumsQjhhb5JjHruLx243E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:d4:0e:c7:75:d3:cd:3c:08:27:ed:b3:1a:0c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d90a8c886ee9ac4238616f92631ebb8bc76e371
Validity
Not Before: Sep 7 05:01:18 2025 GMT
Not After : Sep 8 05:01:18 2025 GMT
Subject: CN=b033b770762f3e813e6a37b2244eae94612b1334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:88:85:44:54:5a:56:1f:dc:27:de:77:c6:dd:
10:00:37:a3:c2:aa:38:b6:68:3c:6f:2a:66:6e:8f:
2c:85:20:52:19:cd:f5:d7:bf:76:70:fc:df:4a:2b:
46:4a:3e:f5:ea:72:e3:e4:9f:86:e3:6e:f8:b1:55:
84:b7:a7:e6:56:6a:77:06:92:20:78:f2:c1:3c:8d:
ad:e8:c5:9b:aa:a8:b2:47:02:5a:15:8d:2f:24:eb:
25:35:96:8a:c7:fe:d9:72:34:64:57:5e:2c:b8:13:
80:12:d3:64:6b:53:4b:21:ec:12:58:82:7f:d6:54:
1e:6b:0f:c5:06:0d:2a:5b:4d:d1:55:04:57:cc:36:
dc:8e:f2:37:bb:0d:65:f3:59:0e:eb:2a:0c:56:90:
73:83:74:69:38:d8:b1:9c:55:44:00:e8:75:e7:24:
98:6e:1e:14:a3:87:b6:d6:01:46:6a:3b:61:0c:22:
b8:8b:b1:45:57:7b:0f:85:8f:37:bd:c5:34:2a:e3:
03:e9:ff:e3:0a:7b:2f:28:52:4b:d4:5f:4b:f6:d1:
f2:2b:ce:11:af:f6:98:4b:1e:e7:72:af:31:b1:b7:
28:27:e7:4e:28:d8:3a:47:22:bc:68:d2:07:68:bd:
e3:eb:df:05:4a:27:00:ad:d8:da:16:92:5d:82:c8:
fa:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:33:B7:70:76:2F:3E:81:3E:6A:37:B2:24:4E:AE:94:61:2B:13:34
X509v3 Authority Key Identifier:
keyid:8D:90:A8:C8:86:EE:9A:C4:23:86:16:F9:26:31:EB:B8:BC:76:E3:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZCoyIbumsQjhhb5JjHruLx243E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:8a:41:90:4c:1b:ef:a1:e3:8e:38:b3:a5:ad:00:63:75:23:
81:eb:73:4c:ce:22:ab:83:dd:ec:16:cf:87:45:76:b0:31:06:
6c:72:7b:20:ba:f3:a5:8a:05:32:4e:5d:95:83:df:ee:6e:45:
08:35:0f:86:79:1c:7f:c8:40:2f:7d:5a:60:af:03:b9:d8:08:
b8:b9:d8:1c:4a:64:03:6d:df:b1:a5:d1:6a:10:40:0d:6c:77:
a2:a9:6a:4a:ac:a6:cf:89:8d:37:b4:f9:68:8e:f0:cd:59:fd:
26:30:d5:d9:f3:0e:37:13:9a:ac:f8:89:f4:fa:95:85:45:fa:
7e:b9:e4:d5:cb:d2:8f:09:72:7b:0e:62:4a:50:97:98:00:92:
dd:85:c5:c0:e2:77:a4:cf:22:2c:dc:d5:fb:93:db:0e:dc:d7:
ab:e6:99:d1:12:e9:b5:39:59:5b:82:78:a5:5a:43:fd:17:3b:
a6:60:18:21:46:6e:55:67:c1:b3:6a:10:bf:b7:49:f2:ac:46:
bc:55:36:e4:31:65:4e:d6:fa:78:e0:de:e9:b2:40:17:6f:93:
25:3d:30:fd:10:51:b4:52:d8:07:fb:97:4a:75:97:54:da:00:
fe:38:83:e9:09:69:ba:e5:a3:22:3f:35:67:12:98:f4:73:86:
e0:4b:47:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijNQOx3XTzTwIJ+2zGgzqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkOTBhOGM4ODZlZTlhYzQyMzg2MTZmOTI2MzFlYmI4YmM3
NmUzNzEwHhcNMjUwOTA3MDUwMTE4WhcNMjUwOTA4MDUwMTE4WjAzMTEwLwYDVQQD
EyhiMDMzYjc3MDc2MmYzZTgxM2U2YTM3YjIyNDRlYWU5NDYxMmIxMzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIiFRFRaVh/cJ953xt0QADejwqo4
tmg8bypmbo8shSBSGc311792cPzfSitGSj716nLj5J+G4274sVWEt6fmVmp3BpIg
ePLBPI2t6MWbqqiyRwJaFY0vJOslNZaKx/7ZcjRkV14suBOAEtNka1NLIewSWIJ/
1lQeaw/FBg0qW03RVQRXzDbcjvI3uw1l81kO6yoMVpBzg3RpONixnFVEAOh15ySY
bh4Uo4e21gFGajthDCK4i7FFV3sPhY83vcU0KuMD6f/jCnsvKFJL1F9L9tHyK84R
r/aYSx7ncq8xsbcoJ+dOKNg6RyK8aNIHaL3j698FSicArdjaFpJdgsj6BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLAzt3B2Lz6BPmo3siROrpRhKxM0MB8GA1UdIwQY
MBaAFI2QqMiG7prEI4YW+SYx67i8duNxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalpDb3lJYnVtc1FqaGhiNUpqSHJ1THgyNDNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC85YjBlZDctOWZkNi00Y2E2LWE1NzUt
MzZhYTkxMDY5Y2JkLzEvalpDb3lJYnVtc1FqaGhiNUpqSHJ1THgyNDNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC85YjBlZDctOWZkNi00Y2E2LWE1NzUtMzZhYTkxMDY5Y2Jk
LzEvalpDb3lJYnVtc1FqaGhiNUpqSHJ1THgyNDNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh4pBkEwb
76Hjjjizpa0AY3UjgetzTM4iq4Pd7BbPh0V2sDEGbHJ7ILrzpYoFMk5dlYPf7m5F
CDUPhnkcf8hAL31aYK8DudgIuLnYHEpkA23fsaXRahBADWx3oqlqSqymz4mNN7T5
aI7wzVn9JjDV2fMONxOarPiJ9PqVhUX6frnk1cvSjwlyew5iSlCXmACS3YXFwOJ3
pM8iLNzV+5PbDtzXq+aZ0RLptTlZW4J4pVpD/Rc7pmAYIUZuVWfBs2oQv7dJ8qxG
vFU25DFlTtb6eODe6bJAF2+TJT0w/RBRtFLYB/uXSnWXVNoA/jiD6QlpuuWjIj81
ZxKY9HOG4EtHZA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:26:11 2025 by rpki-client