Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
File: sjDI_QIF7PDva1bgN9Vimxeyde4.mft (raw, json)
Hash identifier: pyRZN7FL1LhQ322d7IA+FoRjXJEQSv5teN1MBBg5FEI=
Subject key identifier: CC:26:F6:F7:6A:8E:EB:57:31:B4:1D:02:3B:C4:54:64:41:DC:2B:53
Authority key identifier: B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
Certificate issuer: /CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Certificate serial: 01993047F15CA1AC72FCD1F7615B25F7DD8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
Manifest number: 0FB1
Signing time: Tue 09 Sep 2025 21:00:45 +0000
Manifest this update: Tue 09 Sep 2025 21:00:45 +0000
Manifest next update: Wed 10 Sep 2025 21:00:45 +0000
Files and hashes: 1: 5YyqSxLIcXFPIwOdvY9Rh4uGVOc.roa (hash: uGepzmi4cPy4AsJc18Ia0pOn0QIzzcEx4qW4Atgsedw=)
2: JxS9B3-r4nmDK2LpLdZXebZoH3Q.roa (hash: eJeAJPYc498r5QOnOd4btYkoPZFePTawCT/M44uVMH4=)
3: sjDI_QIF7PDva1bgN9Vimxeyde4.crl (hash: Ogw5uTxJfN27NpmMJwe+ZnfJcouTYpFuy8O5AKLwCW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:47:f1:5c:a1:ac:72:fc:d1:f7:61:5b:25:f7:dd:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Validity
Not Before: Sep 9 21:00:45 2025 GMT
Not After : Sep 10 21:00:45 2025 GMT
Subject: CN=cc26f6f76a8eeb5731b41d023bc4546441dc2b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:80:24:0a:0f:97:70:a6:ba:66:4d:5d:b9:14:
09:b2:0e:43:2f:65:b6:2f:72:84:ad:3b:35:6c:9c:
40:55:bf:95:a7:0a:30:08:c3:0f:9b:a6:73:f0:2a:
44:92:20:73:78:18:5c:ba:1c:8f:aa:8e:71:26:27:
f7:39:56:c1:3d:19:b2:fc:d0:ef:0d:b8:34:4c:2b:
c8:eb:f7:df:82:e3:32:79:d8:05:82:3d:99:ed:17:
2f:8f:3e:75:77:5c:4c:68:ae:6c:8d:29:dd:c1:8a:
39:cf:2a:ec:3b:ac:99:01:bb:0c:f4:de:17:48:4a:
cf:04:c5:1b:9b:af:00:21:d9:43:20:88:68:b2:cf:
e2:88:de:0a:aa:c2:55:1e:ef:e0:a7:aa:65:0f:d0:
ce:8e:dd:12:f2:66:92:a9:52:a0:1b:5a:9f:ed:8b:
e0:40:b4:29:74:c4:13:cb:bc:37:4e:ed:2e:de:03:
ce:a3:c1:3a:9d:3a:52:28:1f:07:76:a6:8f:4c:eb:
da:45:82:87:a1:ec:7d:21:d6:73:82:a5:79:03:0a:
c5:42:2e:e0:82:0a:e1:7d:12:fd:be:b8:36:5b:8b:
86:49:8a:f4:d0:1b:0d:39:7e:47:31:22:c6:9b:11:
a8:99:0c:7f:fd:85:e3:e8:43:94:8f:6c:98:1d:3e:
90:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:26:F6:F7:6A:8E:EB:57:31:B4:1D:02:3B:C4:54:64:41:DC:2B:53
X509v3 Authority Key Identifier:
keyid:B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e0:6c:2a:2e:5e:a9:52:b7:70:e0:58:3d:00:fb:97:d8:19:
db:1c:ff:aa:eb:6c:71:8c:12:63:41:a0:23:24:c1:a9:9b:28:
e2:c8:db:2b:92:c0:8c:84:8a:e6:7e:fd:2a:86:5f:cb:8b:a1:
82:7f:75:60:d3:35:bb:ae:e5:ed:e0:11:2c:e4:bc:de:d5:bb:
73:7f:4e:e8:76:8b:b7:d3:88:ec:eb:c9:f9:69:e9:71:8f:59:
7c:d4:a0:b7:77:40:94:3f:18:82:6b:1b:33:03:de:26:85:43:
36:4e:27:9e:fa:07:0c:8c:34:55:5c:da:98:f9:dd:03:ff:98:
a6:e8:46:bd:75:1c:5f:97:2e:69:f4:65:3d:24:79:df:a1:ee:
84:16:7a:69:eb:f5:aa:97:14:55:77:f1:5f:13:bc:4e:82:14:
9d:6c:76:ca:15:e8:3d:d6:dc:30:6d:78:cf:1f:ee:ba:64:ef:
98:3f:cb:93:cb:46:9d:33:90:30:76:01:9b:a8:00:89:54:ab:
a0:69:0e:fb:59:f0:6e:09:fc:a6:59:4f:ca:75:64:c7:97:62:
60:63:e2:70:dd:1d:85:e7:c5:ae:e7:0e:26:7e:ba:88:30:e1:
61:a1:4f:82:b2:0f:c8:3d:a8:06:8c:2b:fb:0e:6c:71:ca:f1:
71:5d:d2:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkwR/Fcoaxy/NH3YVsl992LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMzBjOGZkMDIwNWVjZjBlZjZiNTZlMDM3ZDU2MjliMTdi
Mjc1ZWUwHhcNMjUwOTA5MjEwMDQ1WhcNMjUwOTEwMjEwMDQ1WjAzMTEwLwYDVQQD
EyhjYzI2ZjZmNzZhOGVlYjU3MzFiNDFkMDIzYmM0NTQ2NDQxZGMyYjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oAkCg+XcKa6Zk1duRQJsg5DL2W2
L3KErTs1bJxAVb+VpwowCMMPm6Zz8CpEkiBzeBhcuhyPqo5xJif3OVbBPRmy/NDv
Dbg0TCvI6/ffguMyedgFgj2Z7Rcvjz51d1xMaK5sjSndwYo5zyrsO6yZAbsM9N4X
SErPBMUbm68AIdlDIIhoss/iiN4KqsJVHu/gp6plD9DOjt0S8maSqVKgG1qf7Yvg
QLQpdMQTy7w3Tu0u3gPOo8E6nTpSKB8HdqaPTOvaRYKHoex9IdZzgqV5AwrFQi7g
ggrhfRL9vrg2W4uGSYr00BsNOX5HMSLGmxGomQx//YXj6EOUj2yYHT6QcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwm9vdqjutXMbQdAjvEVGRB3CtTMB8GA1UdIwQY
MBaAFLIwyP0CBezw72tW4DfVYpsXsnXuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2pESV9RSUY3UER2YTFiZ045VmlteGV5ZGU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9jYTE3OTctNjE2Zi00OTczLWI3NDAt
YzhiNWRmYzVhMTNmLzEvc2pESV9RSUY3UER2YTFiZ045VmlteGV5ZGU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9jYTE3OTctNjE2Zi00OTczLWI3NDAtYzhiNWRmYzVhMTNm
LzEvc2pESV9RSUY3UER2YTFiZ045VmlteGV5ZGU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZOBsKi5e
qVK3cOBYPQD7l9gZ2xz/qutscYwSY0GgIyTBqZso4sjbK5LAjISK5n79KoZfy4uh
gn91YNM1u67l7eARLOS83tW7c39O6HaLt9OI7OvJ+WnpcY9ZfNSgt3dAlD8Ygmsb
MwPeJoVDNk4nnvoHDIw0VVzamPndA/+YpuhGvXUcX5cuafRlPSR536HuhBZ6aev1
qpcUVXfxXxO8ToIUnWx2yhXoPdbcMG14zx/uumTvmD/Lk8tGnTOQMHYBm6gAiVSr
oGkO+1nwbgn8pllPynVkx5diYGPicN0dhefFrucOJn66iDDhYaFPgrIPyD2oBowr
+w5sccrxcV3Saw==
-----END CERTIFICATE-----
Generated at Wed Sep 10 03:09:59 2025 by rpki-client