Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
File: JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft (raw, json)
Hash identifier: dB7xVw9tEgQESSNPnsbGZpjKFM0rUKgob3OD1SdQHZs=
Subject key identifier: 7D:78:E3:3E:78:A5:FC:E6:E0:87:8C:43:63:94:25:7E:74:5A:73:89
Authority key identifier: 25:56:33:18:2D:DD:55:8B:41:BA:16:C5:19:EE:46:14:50:DD:DD:D9
Certificate issuer: /CN=255633182ddd558b41ba16c519ee461450ddddd9
Certificate serial: 0199221F2E997E12B468D0C0703F4A91FCA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
Manifest number: 9C
Signing time: Sun 07 Sep 2025 03:01:32 +0000
Manifest this update: Sun 07 Sep 2025 03:01:32 +0000
Manifest next update: Mon 08 Sep 2025 03:01:32 +0000
Files and hashes: 1: JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl (hash: sVIAi4PIXF9xj9H4y9lGXNNZvcOH3Jb8sEvDW1l1lz0=)
2: rsJr37lWx4RTfR8Cvpu056B6Wz4.roa (hash: /l5appIPEWouSbZYMspTa7m6sRTfOtnp/hleC+S0sOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:2e:99:7e:12:b4:68:d0:c0:70:3f:4a:91:fc:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=255633182ddd558b41ba16c519ee461450ddddd9
Validity
Not Before: Sep 7 03:01:32 2025 GMT
Not After : Sep 8 03:01:32 2025 GMT
Subject: CN=7d78e33e78a5fce6e0878c436394257e745a7389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:46:6a:5e:3d:56:9f:eb:d1:34:17:11:61:67:
df:48:70:e5:f8:6e:3a:84:ed:dd:48:1c:ea:99:69:
98:43:b4:f6:28:f8:d6:9d:7f:d2:f4:51:cc:3f:d1:
71:4a:85:02:55:5f:30:51:51:63:0c:b8:48:aa:55:
09:62:59:01:0f:3c:cb:fe:fc:af:68:d0:85:b1:00:
70:7b:6d:d8:2a:e6:16:9b:c1:f0:34:b2:30:00:d6:
6e:c8:4b:84:ee:67:e3:13:28:ac:e8:a9:bf:c5:2c:
73:8e:33:0e:9f:40:9f:56:01:86:81:0c:87:dc:58:
73:5f:b7:02:65:5d:86:8c:6c:e5:11:bc:8d:e9:1b:
ce:05:cf:cd:7e:1c:35:21:a5:65:6a:43:b3:e4:9b:
ec:dd:c7:63:d2:c3:7b:3b:26:0f:75:6f:c7:58:4a:
6e:1b:ff:f0:b9:d5:6d:31:47:97:4d:89:03:de:b9:
7a:1c:9a:77:e5:7c:c6:bf:89:c6:08:fa:c2:d2:a8:
f7:e4:bc:a1:b6:b7:66:e3:8f:e1:85:c4:ce:a7:3c:
80:7e:ca:b5:05:60:9f:ac:2c:fe:d8:0a:eb:af:52:
aa:94:1f:86:f3:fe:de:68:9d:32:26:23:4d:b8:4d:
37:34:f5:b9:13:66:11:13:cf:f7:ff:e7:ab:a4:65:
25:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:78:E3:3E:78:A5:FC:E6:E0:87:8C:43:63:94:25:7E:74:5A:73:89
X509v3 Authority Key Identifier:
keyid:25:56:33:18:2D:DD:55:8B:41:BA:16:C5:19:EE:46:14:50:DD:DD:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:cf:72:0f:63:b3:c1:8b:03:49:ae:f5:00:cf:3c:42:de:2d:
29:b5:ae:9f:e5:94:76:1a:44:bc:0f:53:af:88:c0:72:a3:a8:
95:6f:33:96:59:22:4e:f7:c1:8d:ba:e6:cf:17:98:f0:d8:09:
77:14:4a:b2:85:d7:21:a9:e7:c6:29:60:5c:32:39:31:22:50:
9e:c7:0c:03:f9:37:c2:47:da:c4:55:b1:6b:af:f9:a9:61:9c:
0c:62:4d:ee:7f:f8:55:95:6f:56:88:ab:f7:3b:cb:09:63:93:
f2:bc:3b:36:75:01:bb:2c:11:11:2e:b4:d4:7d:39:b4:a1:b1:
a9:44:98:0b:e4:1e:58:9d:f6:af:a0:12:b0:57:5f:6e:e4:1e:
dd:8b:d9:84:ea:bb:37:49:d0:02:55:49:b4:e8:29:c6:ce:c0:
36:db:52:e4:be:12:46:4c:fa:2d:c3:8d:35:aa:98:ed:75:c3:
21:bd:ab:e0:83:3f:a9:68:9f:25:85:bf:cc:ff:26:e7:e5:1c:
70:cd:5b:a1:ba:a5:4f:85:7f:a2:45:5e:1d:7f:11:e4:2c:c7:
2f:9f:18:be:ac:75:d9:5c:d1:58:59:6e:5d:23:22:8a:6f:eb:
50:f2:ac:04:03:ef:21:11:be:53:b5:1c:f4:34:0b:de:d1:7b:
40:9e:8f:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHy6ZfhK0aNDAcD9KkfynMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NTYzMzE4MmRkZDU1OGI0MWJhMTZjNTE5ZWU0NjE0NTBk
ZGRkZDkwHhcNMjUwOTA3MDMwMTMyWhcNMjUwOTA4MDMwMTMyWjAzMTEwLwYDVQQD
Eyg3ZDc4ZTMzZTc4YTVmY2U2ZTA4NzhjNDM2Mzk0MjU3ZTc0NWE3Mzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0ZqXj1Wn+vRNBcRYWffSHDl+G46
hO3dSBzqmWmYQ7T2KPjWnX/S9FHMP9FxSoUCVV8wUVFjDLhIqlUJYlkBDzzL/vyv
aNCFsQBwe23YKuYWm8HwNLIwANZuyEuE7mfjEyis6Km/xSxzjjMOn0CfVgGGgQyH
3FhzX7cCZV2GjGzlEbyN6RvOBc/Nfhw1IaVlakOz5Jvs3cdj0sN7OyYPdW/HWEpu
G//wudVtMUeXTYkD3rl6HJp35XzGv4nGCPrC0qj35Lyhtrdm44/hhcTOpzyAfsq1
BWCfrCz+2Arrr1KqlB+G8/7eaJ0yJiNNuE03NPW5E2YRE8/3/+erpGUlYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH144z54pfzm4IeMQ2OUJX50WnOJMB8GA1UdIwQY
MBaAFCVWMxgt3VWLQboWxRnuRhRQ3d3ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlZZekdDM2RWWXRCdWhiRkdlNUdGRkRkM2RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lZmViMWEtMjliNS00NGE2LTkyZWEt
NWI1NDFmMzQ3MzJlLzEvSlZZekdDM2RWWXRCdWhiRkdlNUdGRkRkM2RrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9lZmViMWEtMjliNS00NGE2LTkyZWEtNWI1NDFmMzQ3MzJl
LzEvSlZZekdDM2RWWXRCdWhiRkdlNUdGRkRkM2RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADs9yD2Oz
wYsDSa71AM88Qt4tKbWun+WUdhpEvA9Tr4jAcqOolW8zllkiTvfBjbrmzxeY8NgJ
dxRKsoXXIannxilgXDI5MSJQnscMA/k3wkfaxFWxa6/5qWGcDGJN7n/4VZVvVoir
9zvLCWOT8rw7NnUBuywRES601H05tKGxqUSYC+QeWJ32r6ASsFdfbuQe3YvZhOq7
N0nQAlVJtOgpxs7ANttS5L4SRkz6LcONNaqY7XXDIb2r4IM/qWifJYW/zP8m5+Uc
cM1bobqlT4V/okVeHX8R5CzHL58Yvqx12VzRWFluXSMiim/rUPKsBAPvIRG+U7Uc
9DQL3tF7QJ6PUA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:12 2025 by rpki-client