Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
File: JNm7BTDf4yKPg7CGE5LihFk0tpg.mft (raw, json)
Hash identifier: EtpFTAf1y6UEK85Lq3eXNADNMNL1FnqSa7EiXmJj/r4=
Subject key identifier: 19:9A:0B:CD:6C:BA:60:EF:71:E4:B8:8E:71:B1:6F:B9:74:13:BA:11
Authority key identifier: 24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98
Certificate issuer: /CN=24d9bb0530dfe3228f83b0861392e2845934b698
Certificate serial: 0199391539EC6FBE93851ACCF55B6048FBFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
Manifest number: 167B
Signing time: Thu 11 Sep 2025 14:01:56 +0000
Manifest this update: Thu 11 Sep 2025 14:01:56 +0000
Manifest next update: Fri 12 Sep 2025 14:01:56 +0000
Files and hashes: 1: 1ZxW8u-5P1t4UMze5JFbl0Ooyu4.roa (hash: Nhhuv6DdC39yd8/4en2lPPTqam7XI+LxbkaMlQc4uqc=)
2: JNm7BTDf4yKPg7CGE5LihFk0tpg.crl (hash: mvoU3opN8UetUrnLlsIcP499fyzvtwxssncC/VhSjvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 14:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:15:39:ec:6f:be:93:85:1a:cc:f5:5b:60:48:fb:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d9bb0530dfe3228f83b0861392e2845934b698
Validity
Not Before: Sep 11 14:01:56 2025 GMT
Not After : Sep 12 14:01:56 2025 GMT
Subject: CN=199a0bcd6cba60ef71e4b88e71b16fb97413ba11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:06:72:d5:05:b2:9d:d3:ac:b5:c2:64:c5:9b:
bf:f3:44:65:08:5a:12:a0:c1:41:ca:d1:29:3f:a6:
04:e5:98:e4:e9:05:28:8a:ac:af:7e:4d:65:f9:0d:
2a:bc:29:80:04:6a:18:3e:10:a9:1f:fa:61:c8:93:
77:cc:d1:75:aa:40:31:dd:df:9a:11:15:17:d8:74:
3f:49:87:d3:88:3e:79:b0:b9:c4:43:6e:7c:6e:a9:
9b:32:58:a7:c0:5a:83:05:20:44:c9:fd:5c:66:f6:
55:8f:05:20:4a:80:9b:d3:8c:a1:46:4f:68:11:08:
f4:85:20:47:ba:fd:27:76:59:53:b9:be:f2:3a:46:
26:95:64:ac:96:a7:b4:3d:0d:ba:e4:bf:4e:dd:1e:
ea:cf:39:54:3a:1c:ba:7f:1e:ae:fe:2a:2c:06:43:
e8:da:f8:5b:92:d3:f6:39:f7:97:f4:64:bf:90:74:
97:da:0c:98:12:03:44:93:bb:4f:bb:c4:4a:a7:0a:
41:4a:a6:ae:d8:cb:eb:93:44:26:74:b3:cf:cb:2c:
52:9f:68:2c:4b:8f:f9:35:db:e6:91:c5:c2:0b:c6:
59:1e:09:87:41:7c:de:ab:7e:7d:80:63:72:d6:0e:
0c:91:ce:0c:ca:a5:25:0c:57:6f:9e:05:16:dc:bd:
0f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9A:0B:CD:6C:BA:60:EF:71:E4:B8:8E:71:B1:6F:B9:74:13:BA:11
X509v3 Authority Key Identifier:
keyid:24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d3:44:3d:17:df:75:b6:32:95:98:6a:a0:d1:c7:34:c3:25:
b8:36:09:7d:4a:a4:6a:d0:e7:35:2e:1e:fd:31:f8:64:9d:2b:
a4:31:4c:ce:8b:60:d3:df:63:74:25:e2:e9:51:f9:df:3b:2a:
2c:68:c7:fd:ab:39:fe:a5:fe:84:a9:ae:c3:cf:d8:f1:68:0d:
8d:0c:1b:bc:f7:c4:53:70:dc:68:c8:8f:13:60:cc:33:34:3e:
fc:8b:90:73:3c:fa:c5:dd:c2:c2:01:a1:1a:98:c4:6a:09:a5:
36:cc:97:11:40:03:ce:40:8c:12:6b:0e:5a:4d:2f:fa:4a:80:
c9:84:b9:60:94:f1:de:31:5c:8d:2b:a8:f0:1c:eb:d7:12:11:
fd:de:55:79:c9:23:42:87:cf:7f:8b:4e:9c:ba:6e:95:92:be:
7e:7e:c1:8a:6d:48:b8:c8:4c:21:2a:3a:dc:7a:26:da:e1:81:
47:22:f7:dd:a7:01:25:6b:ba:57:8e:52:9a:04:ab:c3:59:5c:
f0:22:63:f0:9d:8f:81:80:03:92:d7:ad:ec:46:6d:8b:fe:69:
ad:96:72:f9:0f:05:60:b2:35:57:9c:35:e5:09:c8:75:00:fc:
37:24:ea:55:b3:23:16:4a:6b:09:92:73:9c:ec:b7:9e:4b:9e:
be:8e:c9:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk5FTnsb76ThRrM9VtgSPv9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZDliYjA1MzBkZmUzMjI4ZjgzYjA4NjEzOTJlMjg0NTkz
NGI2OTgwHhcNMjUwOTExMTQwMTU2WhcNMjUwOTEyMTQwMTU2WjAzMTEwLwYDVQQD
EygxOTlhMGJjZDZjYmE2MGVmNzFlNGI4OGU3MWIxNmZiOTc0MTNiYTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wZy1QWyndOstcJkxZu/80RlCFoS
oMFBytEpP6YE5Zjk6QUoiqyvfk1l+Q0qvCmABGoYPhCpH/phyJN3zNF1qkAx3d+a
ERUX2HQ/SYfTiD55sLnEQ258bqmbMlinwFqDBSBEyf1cZvZVjwUgSoCb04yhRk9o
EQj0hSBHuv0ndllTub7yOkYmlWSslqe0PQ265L9O3R7qzzlUOhy6fx6u/iosBkPo
2vhbktP2OfeX9GS/kHSX2gyYEgNEk7tPu8RKpwpBSqau2Mvrk0QmdLPPyyxSn2gs
S4/5NdvmkcXCC8ZZHgmHQXzeq359gGNy1g4Mkc4MyqUlDFdvngUW3L0PawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBmaC81sumDvceS4jnGxb7l0E7oRMB8GA1UdIwQY
MBaAFCTZuwUw3+Mij4OwhhOS4oRZNLaYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk5tN0JURGY0eUtQZzdDR0U1TGloRmswdHBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9hOTk3OWMtZDk4OS00NmZmLWI5MWUt
NGVhMzAxMWRhYjZjLzEvSk5tN0JURGY0eUtQZzdDR0U1TGloRmswdHBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9hOTk3OWMtZDk4OS00NmZmLWI5MWUtNGVhMzAxMWRhYjZj
LzEvSk5tN0JURGY0eUtQZzdDR0U1TGloRmswdHBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAftNEPRff
dbYylZhqoNHHNMMluDYJfUqkatDnNS4e/TH4ZJ0rpDFMzotg099jdCXi6VH53zsq
LGjH/as5/qX+hKmuw8/Y8WgNjQwbvPfEU3DcaMiPE2DMMzQ+/IuQczz6xd3CwgGh
GpjEagmlNsyXEUADzkCMEmsOWk0v+kqAyYS5YJTx3jFcjSuo8Bzr1xIR/d5Veckj
QofPf4tOnLpulZK+fn7Bim1IuMhMISo63Hom2uGBRyL33acBJWu6V45SmgSrw1lc
8CJj8J2PgYADktet7EZti/5prZZy+Q8FYLI1V5w15QnIdQD8NyTqVbMjFkprCZJz
nOy3nkuevo7Jxw==
-----END CERTIFICATE-----
Generated at Thu Sep 11 16:34:37 2025 by rpki-client