Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
File: J90kebrctAokpDax7cw2HD-mKvs.mft (raw, json)
Hash identifier: ckleVHsDbrgQ/B6l9dNN0UEzliExJH4TuWhdj/kdtJ4=
Subject key identifier: B0:00:59:2E:D7:B5:5C:F8:13:A4:19:28:ED:11:67:56:0A:72:19:74
Authority key identifier: 27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB
Certificate issuer: /CN=27dd2479badcb40a24a436b1edcc361c3fa62afb
Certificate serial: 019957FBB2573F1CE9F293A4FCFF8E806DD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
Manifest number: 168E
Signing time: Wed 17 Sep 2025 14:02:16 +0000
Manifest this update: Wed 17 Sep 2025 14:02:16 +0000
Manifest next update: Thu 18 Sep 2025 14:02:16 +0000
Files and hashes: 1: J90kebrctAokpDax7cw2HD-mKvs.crl (hash: e5D0Y1tFB28fvF+d0hUsH1NhZr8OEcJyY3gc7T1qjkk=)
2: UimTjYOP0EzrCaiSFBeZrUyW0Nc.roa (hash: ICMmUQQ3EZmWfRi2Atl6bpgSoSc4L6nW+n1fJyzn1Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 14:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:57:fb:b2:57:3f:1c:e9:f2:93:a4:fc:ff:8e:80:6d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27dd2479badcb40a24a436b1edcc361c3fa62afb
Validity
Not Before: Sep 17 14:02:16 2025 GMT
Not After : Sep 18 14:02:16 2025 GMT
Subject: CN=b000592ed7b55cf813a41928ed1167560a721974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:fd:a3:e0:cd:60:07:a3:e3:02:d2:19:52:c6:
10:6a:88:86:4e:38:8d:8d:e5:5e:14:c8:a3:6b:61:
21:9b:80:34:34:cc:6e:2b:79:60:17:63:a6:6f:55:
52:13:a3:65:cc:25:55:d0:07:ef:d4:d0:61:56:1f:
22:1b:10:b1:d3:30:8e:ed:95:f4:19:32:60:5e:58:
20:20:81:82:3b:1e:34:c5:9b:aa:56:86:08:61:9c:
72:f4:83:c4:0e:e0:f3:ae:4a:9d:17:fe:34:f6:ac:
10:0c:11:57:b1:b9:30:23:82:82:e6:e3:f7:08:9d:
fd:c0:19:ff:bb:65:d9:ba:be:81:3b:6d:fb:fd:82:
f6:f5:bc:57:3d:76:7f:d4:b9:1e:2f:52:c2:65:89:
e2:8a:e2:8d:1f:91:d0:c4:44:c5:4f:b6:22:b1:e3:
72:9a:f2:f5:c7:88:56:3f:ac:ba:98:31:fc:e3:d2:
e1:61:0b:02:73:ff:5e:36:79:fa:7b:51:29:03:54:
fa:25:68:45:b7:39:7a:72:b6:63:64:5e:ee:e1:14:
d5:74:af:b5:3b:06:40:03:5b:7e:a8:53:cb:3c:37:
cd:da:60:12:30:41:70:fa:19:15:b9:65:bd:e3:a7:
21:5b:f9:9b:fe:3a:89:43:98:f7:f3:16:93:b9:ef:
aa:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:00:59:2E:D7:B5:5C:F8:13:A4:19:28:ED:11:67:56:0A:72:19:74
X509v3 Authority Key Identifier:
keyid:27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:f8:d6:27:7a:57:44:59:cb:72:2b:72:32:18:0b:7a:ae:37:
39:7b:9a:88:03:c7:af:ca:37:78:ab:d5:9d:3b:d9:85:a6:72:
e8:60:bb:ea:9c:f9:c3:aa:74:ad:56:24:2a:c7:3b:52:cf:62:
90:4b:28:01:77:72:5e:71:89:2b:9b:7b:82:a3:39:a1:c5:5c:
ce:33:09:28:88:47:23:b5:de:58:ba:46:e9:40:2b:9e:d4:ee:
fd:44:93:12:53:bb:f5:57:28:1b:54:16:6d:a1:6b:5a:d6:e2:
0a:5e:85:d3:33:be:9d:e1:45:04:3a:e3:56:a8:83:32:d4:91:
b2:c9:f7:28:bc:6e:fb:55:59:a1:da:cd:7f:c4:4d:73:9c:8b:
36:9f:21:dd:66:06:98:84:1b:fb:65:7e:6c:5a:e7:87:24:7a:
a5:56:4c:8f:f5:ab:7a:15:04:b7:b2:e2:28:98:71:00:0c:55:
32:77:33:27:f8:79:31:eb:88:07:fe:6a:dd:8e:1b:be:c0:d3:
07:57:9c:f5:7b:ae:4b:1d:1b:d3:37:d6:a0:c5:83:4b:83:b0:
fd:79:4d:ba:53:d0:87:e3:ad:43:ac:f5:03:da:5d:bd:eb:49:
b2:fe:49:89:85:81:5d:0f:52:b7:3b:63:35:86:30:8a:a0:da:
d6:74:54:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlX+7JXPxzp8pOk/P+OgG3TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZGQyNDc5YmFkY2I0MGEyNGE0MzZiMWVkY2MzNjFjM2Zh
NjJhZmIwHhcNMjUwOTE3MTQwMjE2WhcNMjUwOTE4MTQwMjE2WjAzMTEwLwYDVQQD
EyhiMDAwNTkyZWQ3YjU1Y2Y4MTNhNDE5MjhlZDExNjc1NjBhNzIxOTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+/2j4M1gB6PjAtIZUsYQaoiGTjiN
jeVeFMija2Ehm4A0NMxuK3lgF2Omb1VSE6NlzCVV0Afv1NBhVh8iGxCx0zCO7ZX0
GTJgXlggIIGCOx40xZuqVoYIYZxy9IPEDuDzrkqdF/409qwQDBFXsbkwI4KC5uP3
CJ39wBn/u2XZur6BO237/YL29bxXPXZ/1LkeL1LCZYniiuKNH5HQxETFT7YiseNy
mvL1x4hWP6y6mDH849LhYQsCc/9eNnn6e1EpA1T6JWhFtzl6crZjZF7u4RTVdK+1
OwZAA1t+qFPLPDfN2mASMEFw+hkVuWW946chW/mb/jqJQ5j38xaTue+qnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLAAWS7XtVz4E6QZKO0RZ1YKchl0MB8GA1UdIwQY
MBaAFCfdJHm63LQKJKQ2se3MNhw/pir7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjkwa2VicmN0QW9rcERheDdjdzJIRC1tS3ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy83OTRkZTMtMzllNi00ZjJjLTg2ZjEt
YmMyYzQ1M2MwZWM4LzEvSjkwa2VicmN0QW9rcERheDdjdzJIRC1tS3ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy83OTRkZTMtMzllNi00ZjJjLTg2ZjEtYmMyYzQ1M2MwZWM4
LzEvSjkwa2VicmN0QW9rcERheDdjdzJIRC1tS3ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAfjWJ3pX
RFnLcityMhgLeq43OXuaiAPHr8o3eKvVnTvZhaZy6GC76pz5w6p0rVYkKsc7Us9i
kEsoAXdyXnGJK5t7gqM5ocVczjMJKIhHI7XeWLpG6UArntTu/USTElO79VcoG1QW
baFrWtbiCl6F0zO+neFFBDrjVqiDMtSRssn3KLxu+1VZodrNf8RNc5yLNp8h3WYG
mIQb+2V+bFrnhyR6pVZMj/WrehUEt7LiKJhxAAxVMnczJ/h5MeuIB/5q3Y4bvsDT
B1ec9XuuSx0b0zfWoMWDS4Ow/XlNulPQh+OtQ6z1A9pdvetJsv5JiYWBXQ9Stztj
NYYwiqDa1nRUOQ==
-----END CERTIFICATE-----
Generated at Wed Sep 17 16:52:23 2025 by rpki-client