Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
File: jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft (raw, json)
Hash identifier: GOFU+BR/7iibEegz+qoj9H5rN/44/FpT4piX7tYyq8c=
Subject key identifier: C1:FD:98:AD:03:38:2A:DA:F6:57:1C:8B:53:6D:65:38:43:85:7D:8B
Authority key identifier: 8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74
Certificate issuer: /CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774
Certificate serial: 019767E0D8DEBDBE2DF41A773F5043E309DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 06:01:18 +0000
Manifest this update: Fri 13 Jun 2025 06:01:18 +0000
Manifest next update: Sat 14 Jun 2025 06:01:18 +0000
Files and hashes: 1: MeStYchfIIM21gIjTEqDbpySbzo.roa (hash: HjyEWI+y6IoPKwCyj+P1YglxdC4kh2ZH6Sa5Jx7lTg0=)
2: ifGa29cDfCtmHluYzDCGArXBHSE.roa (hash: SagmwRWK2BwuwUrS3xLYWQnMEp8bHt5W3ObsAvGOP+A=)
3: jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl (hash: H0zw/LJpF94GvEQKqVy7OG3l+FfmYEYjpVH7YPl1T+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 06:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:e0:d8:de:bd:be:2d:f4:1a:77:3f:50:43:e3:09:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774
Validity
Not Before: Jun 13 06:01:18 2025 GMT
Not After : Jun 14 06:01:18 2025 GMT
Subject: CN=c1fd98ad03382adaf6571c8b536d653843857d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:21:50:74:5a:d4:f0:11:85:ec:d2:15:38:3b:
4c:49:fb:22:0b:f5:04:76:0a:79:16:b3:d5:11:a3:
0b:08:96:0d:9e:d4:e9:44:91:dc:ba:d9:ca:c1:ba:
a7:d3:3a:f0:f9:7c:b9:67:8b:4f:a3:cf:ee:15:19:
37:b5:4b:82:e8:13:6b:02:a3:84:b6:c5:40:f9:93:
11:19:bd:15:a7:cb:79:e2:90:e8:f1:1d:23:44:0e:
39:c6:96:80:93:26:21:26:5f:ed:04:f1:f7:41:0f:
d0:66:1d:3c:7a:e0:e2:b3:bb:7f:bb:c3:6a:11:1f:
67:9b:1c:56:f8:2b:10:c4:65:bd:71:ec:f6:7f:00:
46:5e:01:0f:78:5c:d2:e1:d8:0b:0d:6a:d6:c3:13:
a5:c8:84:4c:dd:b1:ed:ca:f5:c1:da:a7:53:8c:e5:
ca:69:1d:80:23:b4:5c:ca:4c:f0:25:88:e4:a0:f4:
34:08:4d:2f:3d:51:16:69:90:86:95:36:c3:f0:1c:
cb:1a:34:69:7f:a6:eb:36:59:88:94:a6:64:90:b6:
a7:b4:42:2c:e4:5a:a7:85:05:ff:18:61:45:e9:92:
58:e9:09:50:bd:c1:78:2d:f0:a2:f0:29:6d:ba:5e:
a9:75:d8:0d:22:66:26:e8:19:46:0e:f1:21:8e:60:
1e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FD:98:AD:03:38:2A:DA:F6:57:1C:8B:53:6D:65:38:43:85:7D:8B
X509v3 Authority Key Identifier:
keyid:8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:46:aa:ca:cf:16:fd:4e:c6:eb:7d:29:9b:ac:eb:ae:55:2d:
13:b7:32:09:7d:95:fc:43:cc:c1:af:16:6e:38:28:a1:c9:6b:
5e:6f:bc:39:b8:95:27:7d:92:aa:3f:89:2c:49:9a:40:96:2f:
f4:16:32:bb:1e:69:0b:03:36:56:cc:de:ea:95:88:dd:bf:38:
58:17:85:72:94:dc:74:d9:20:ed:49:cd:ce:72:d6:8a:e2:12:
a6:75:e4:f1:63:a6:48:4e:b4:79:dc:e0:60:37:8f:29:7a:77:
a3:f4:17:e3:6d:33:31:ac:ca:0b:02:3b:a6:98:fb:49:7b:69:
fe:0b:f9:fb:5d:1c:b6:b2:df:9c:40:0c:8f:9c:4d:5b:ef:ce:
0a:e6:2c:9c:ec:14:89:74:f2:95:65:f5:66:4b:3c:f9:9a:78:
e1:c7:5b:d8:00:85:8d:61:b5:3a:fb:24:3d:a0:cf:e3:60:59:
e4:bb:ff:50:9a:78:6a:49:6c:ea:cb:ae:d6:cf:8a:5b:a3:51:
e1:6a:60:4f:a7:e4:b4:f0:32:09:59:28:5f:d8:a2:de:8d:a3:
db:01:1d:24:a3:26:f3:47:c8:8f:ea:19:0e:f6:1c:b5:e7:de:
50:8a:98:1f:1c:51:34:dc:92:ca:3f:e2:f9:0c:62:25:48:c1:
e9:cc:40:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdn4Njevb4t9Bp3P1BD4wnbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNjIyYTM0YzU1ZTM5YjhmYTE1YTM3YmE5ZTM3MGVhYWZk
OTk3NzQwHhcNMjUwNjEzMDYwMTE4WhcNMjUwNjE0MDYwMTE4WjAzMTEwLwYDVQQD
EyhjMWZkOThhZDAzMzgyYWRhZjY1NzFjOGI1MzZkNjUzODQzODU3ZDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriFQdFrU8BGF7NIVODtMSfsiC/UE
dgp5FrPVEaMLCJYNntTpRJHcutnKwbqn0zrw+Xy5Z4tPo8/uFRk3tUuC6BNrAqOE
tsVA+ZMRGb0Vp8t54pDo8R0jRA45xpaAkyYhJl/tBPH3QQ/QZh08euDis7t/u8Nq
ER9nmxxW+CsQxGW9cez2fwBGXgEPeFzS4dgLDWrWwxOlyIRM3bHtyvXB2qdTjOXK
aR2AI7RcykzwJYjkoPQ0CE0vPVEWaZCGlTbD8BzLGjRpf6brNlmIlKZkkLantEIs
5FqnhQX/GGFF6ZJY6QlQvcF4LfCi8Cltul6pddgNImYm6BlGDvEhjmAe9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMH9mK0DOCra9lcci1NtZThDhX2LMB8GA1UdIwQY
MBaAFI5iKjTFXjm4+hWje6njcOqv2Zd0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam1JcU5NVmVPYmo2RmFON3FlTnc2cV9abDNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84MmNiM2UtODE5OS00OTE3LWExNzYt
ZTUwZTFlOWJiNGIzLzEvam1JcU5NVmVPYmo2RmFON3FlTnc2cV9abDNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC84MmNiM2UtODE5OS00OTE3LWExNzYtZTUwZTFlOWJiNGIz
LzEvam1JcU5NVmVPYmo2RmFON3FlTnc2cV9abDNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD0aqys8W
/U7G630pm6zrrlUtE7cyCX2V/EPMwa8WbjgooclrXm+8ObiVJ32Sqj+JLEmaQJYv
9BYyux5pCwM2Vsze6pWI3b84WBeFcpTcdNkg7UnNznLWiuISpnXk8WOmSE60edzg
YDePKXp3o/QX420zMazKCwI7ppj7SXtp/gv5+10ctrLfnEAMj5xNW+/OCuYsnOwU
iXTylWX1Zks8+Zp44cdb2ACFjWG1OvskPaDP42BZ5Lv/UJp4akls6suu1s+KW6NR
4WpgT6fktPAyCVkoX9ii3o2j2wEdJKMm80fIj+oZDvYctefeUIqYHxxRNNySyj/i
+QxiJUjB6cxAcA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 14:25:22 2025 by rpki-client