Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
File: jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft (raw, json)
Hash identifier: eHMFt5Wxy1HULZR9zbu7M9svT981Hzw+YHz/KFX1m00=
Subject key identifier: 39:B5:C9:1D:C6:AD:42:71:23:5B:51:F2:13:E1:5B:FE:3F:20:E5:60
Authority key identifier: 8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74
Certificate issuer: /CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774
Certificate serial: 0199240D7C23A8169F14C9A8D045C657FB7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 12:01:27 +0000
Manifest this update: Sun 07 Sep 2025 12:01:27 +0000
Manifest next update: Mon 08 Sep 2025 12:01:27 +0000
Files and hashes: 1: MeStYchfIIM21gIjTEqDbpySbzo.roa (hash: HjyEWI+y6IoPKwCyj+P1YglxdC4kh2ZH6Sa5Jx7lTg0=)
2: ifGa29cDfCtmHluYzDCGArXBHSE.roa (hash: SagmwRWK2BwuwUrS3xLYWQnMEp8bHt5W3ObsAvGOP+A=)
3: jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl (hash: agktxsLv7Yep/aYGLTyy9Su8XtTNbNkdptLOp6CKKJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:7c:23:a8:16:9f:14:c9:a8:d0:45:c6:57:fb:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774
Validity
Not Before: Sep 7 12:01:27 2025 GMT
Not After : Sep 8 12:01:27 2025 GMT
Subject: CN=39b5c91dc6ad4271235b51f213e15bfe3f20e560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:51:58:1e:f0:08:a7:30:ce:b2:23:9f:5d:0d:
08:b8:6e:90:e6:da:b1:f3:f3:fd:fc:83:9a:73:14:
e9:90:6e:57:08:00:64:59:cc:51:d5:3c:d3:1e:60:
6b:8b:20:ad:a2:14:b9:15:b1:d3:f6:31:51:e6:a7:
09:a4:9e:7e:78:48:43:8f:87:e9:cb:9a:3c:f7:4e:
c1:34:ba:51:12:15:41:9a:3f:9f:fd:49:be:50:80:
96:82:45:bc:ab:46:f5:c7:f3:df:58:b7:da:57:1d:
87:83:e4:99:af:11:0c:2f:a8:a4:18:3c:6b:b8:9e:
bb:de:02:1e:05:0f:8a:76:4a:b1:9b:70:5c:1e:df:
16:3f:d3:1f:bf:39:15:88:32:b5:7d:6b:63:a4:20:
cd:2a:67:40:6a:66:8e:89:5b:a2:db:c3:82:ec:4a:
21:08:04:2c:2b:ec:96:af:2c:ba:08:f1:19:b8:69:
41:7c:02:8e:ee:ed:5b:e6:89:9a:aa:ca:98:a1:a8:
48:50:9b:cb:1d:93:08:22:29:03:24:38:7e:54:03:
67:ac:ea:4e:3e:50:43:6e:58:e3:1c:ac:21:f6:d3:
79:e4:3b:8d:35:3b:36:42:83:32:e8:ef:bc:b5:52:
fb:7f:12:e6:c4:a3:c5:c8:27:f9:15:d0:31:a8:ad:
f4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B5:C9:1D:C6:AD:42:71:23:5B:51:F2:13:E1:5B:FE:3F:20:E5:60
X509v3 Authority Key Identifier:
keyid:8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:2d:88:05:e1:a1:62:4e:e8:3c:4e:22:07:ed:a3:24:8f:90:
0c:4d:d8:0e:f3:bd:b1:b8:6f:66:a2:54:1c:91:58:2c:60:6f:
6c:11:f2:67:bf:e0:33:d9:2c:fb:8e:92:5b:b7:81:36:71:f5:
db:66:a3:74:48:ed:12:47:0c:c0:8d:77:cb:0e:36:8b:ab:96:
e8:b4:64:98:69:ae:20:9d:c7:53:65:02:ba:b2:35:cf:0f:10:
05:f0:7c:2d:7f:d2:86:9d:5e:55:85:ce:1d:7e:98:b4:58:42:
41:77:ec:92:56:3b:05:6c:64:b9:a1:02:fb:a0:9b:55:41:2a:
e4:cc:41:49:9f:51:ce:73:0e:90:6b:a2:36:fb:b2:d2:45:e4:
74:cc:89:19:c1:c8:ac:5e:91:e6:f6:1f:23:54:a7:bf:ad:36:
f0:e1:37:f1:04:15:de:0a:ba:de:9a:31:a8:7c:bc:ba:1e:6e:
fd:3c:c3:6f:7a:17:4c:77:8b:6d:c0:3d:e0:e2:59:f6:7c:37:
34:a4:ff:73:83:45:4e:31:e5:47:ba:48:9f:d9:c1:02:9e:45:
87:02:d7:a3:2d:8c:06:c1:ba:a2:b0:c7:5a:d7:15:f9:89:7e:
91:39:9b:30:97:ae:6c:19:2b:94:1b:e5:d7:4c:32:83:28:71:
99:e3:cb:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkkDXwjqBafFMmo0EXGV/t8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNjIyYTM0YzU1ZTM5YjhmYTE1YTM3YmE5ZTM3MGVhYWZk
OTk3NzQwHhcNMjUwOTA3MTIwMTI3WhcNMjUwOTA4MTIwMTI3WjAzMTEwLwYDVQQD
EygzOWI1YzkxZGM2YWQ0MjcxMjM1YjUxZjIxM2UxNWJmZTNmMjBlNTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1FYHvAIpzDOsiOfXQ0IuG6Q5tqx
8/P9/IOacxTpkG5XCABkWcxR1TzTHmBriyCtohS5FbHT9jFR5qcJpJ5+eEhDj4fp
y5o8907BNLpREhVBmj+f/Um+UICWgkW8q0b1x/PfWLfaVx2Hg+SZrxEML6ikGDxr
uJ673gIeBQ+Kdkqxm3BcHt8WP9MfvzkViDK1fWtjpCDNKmdAamaOiVui28OC7Eoh
CAQsK+yWryy6CPEZuGlBfAKO7u1b5omaqsqYoahIUJvLHZMIIikDJDh+VANnrOpO
PlBDbljjHKwh9tN55DuNNTs2QoMy6O+8tVL7fxLmxKPFyCf5FdAxqK30pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDm1yR3GrUJxI1tR8hPhW/4/IOVgMB8GA1UdIwQY
MBaAFI5iKjTFXjm4+hWje6njcOqv2Zd0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam1JcU5NVmVPYmo2RmFON3FlTnc2cV9abDNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84MmNiM2UtODE5OS00OTE3LWExNzYt
ZTUwZTFlOWJiNGIzLzEvam1JcU5NVmVPYmo2RmFON3FlTnc2cV9abDNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC84MmNiM2UtODE5OS00OTE3LWExNzYtZTUwZTFlOWJiNGIz
LzEvam1JcU5NVmVPYmo2RmFON3FlTnc2cV9abDNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAby2IBeGh
Yk7oPE4iB+2jJI+QDE3YDvO9sbhvZqJUHJFYLGBvbBHyZ7/gM9ks+46SW7eBNnH1
22ajdEjtEkcMwI13yw42i6uW6LRkmGmuIJ3HU2UCurI1zw8QBfB8LX/Shp1eVYXO
HX6YtFhCQXfsklY7BWxkuaEC+6CbVUEq5MxBSZ9RznMOkGuiNvuy0kXkdMyJGcHI
rF6R5vYfI1Snv6028OE38QQV3gq63poxqHy8uh5u/TzDb3oXTHeLbcA94OJZ9nw3
NKT/c4NFTjHlR7pIn9nBAp5FhwLXoy2MBsG6orDHWtcV+Yl+kTmbMJeubBkrlBvl
10wygyhxmePL1w==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:07 2025 by rpki-client