Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft
File: JJkvMtdIbftKMsLngQhUrGpmjjQ.mft (raw, json)
Hash identifier: AphAGQaq+OiBOq7o8I0qr44BOVmaEsiPzAWgDr4hXlg=
Subject key identifier: D5:93:BF:14:B7:BF:1E:62:4F:22:19:CF:7C:32:81:25:0A:A5:F0:4C
Authority key identifier: 24:99:2F:32:D7:48:6D:FB:4A:32:C2:E7:81:08:54:AC:6A:66:8E:34
Certificate issuer: /CN=24992f32d7486dfb4a32c2e7810854ac6a668e34
Certificate serial: 019922FABF33499AC6D63C53E017F9352DAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JJkvMtdIbftKMsLngQhUrGpmjjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft
Manifest number: 0967
Signing time: Sun 07 Sep 2025 07:01:22 +0000
Manifest this update: Sun 07 Sep 2025 07:01:22 +0000
Manifest next update: Mon 08 Sep 2025 07:01:22 +0000
Files and hashes: 1: JJkvMtdIbftKMsLngQhUrGpmjjQ.crl (hash: YPSWAles7mZ6yvtsvFBzljT3xEq38bm8jNP/TYSQJC0=)
2: SvgtOmag1Ed_NFITsp_g8SM3OYs.roa (hash: CvglQLYhu3pHLDYJxUoGcvgzwDqOLBBqoRW5UuJHkAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JJkvMtdIbftKMsLngQhUrGpmjjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:bf:33:49:9a:c6:d6:3c:53:e0:17:f9:35:2d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24992f32d7486dfb4a32c2e7810854ac6a668e34
Validity
Not Before: Sep 7 07:01:22 2025 GMT
Not After : Sep 8 07:01:22 2025 GMT
Subject: CN=d593bf14b7bf1e624f2219cf7c3281250aa5f04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1b:ad:66:c0:c7:c0:cc:82:56:3f:8a:3c:b9:
04:76:2d:93:d0:f8:b9:48:36:be:2a:ee:1c:da:88:
77:af:c1:1a:fb:b3:62:83:17:8b:6b:a6:29:bb:02:
cf:03:c6:82:6c:39:dc:65:da:94:b5:c9:c4:22:9e:
90:ed:67:ea:2b:b7:eb:9e:36:ad:dd:ef:ad:a2:5c:
3d:3e:15:a4:f5:cf:08:76:f8:6f:bb:2d:0b:0c:df:
11:61:6a:1a:cb:29:f6:ba:e9:ca:3a:76:ea:79:7a:
69:a2:32:af:c2:1d:e2:cf:4a:f4:02:5f:14:01:7c:
4b:12:80:35:7c:fb:39:1f:f3:ed:12:36:90:3a:fc:
f8:fc:1e:56:7c:8e:83:9e:3e:28:e3:2e:5e:27:b0:
98:3c:c2:bd:b4:7b:12:03:0e:54:2a:63:ae:e7:4e:
e1:f4:dc:64:87:83:d3:62:92:4b:79:b6:b5:cb:f1:
51:1c:2b:20:1b:86:5b:6d:9e:de:9b:36:20:8b:f9:
83:66:5d:d3:d5:e2:e4:f1:51:a4:a2:8d:6a:44:c4:
02:f5:91:18:74:aa:5b:a6:a1:fd:74:cc:15:1a:c3:
b1:e8:cc:4f:91:89:0a:2a:33:c9:36:d5:d2:0e:5b:
00:f8:98:20:d6:31:f6:97:96:71:f3:90:80:f1:c8:
b8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:93:BF:14:B7:BF:1E:62:4F:22:19:CF:7C:32:81:25:0A:A5:F0:4C
X509v3 Authority Key Identifier:
keyid:24:99:2F:32:D7:48:6D:FB:4A:32:C2:E7:81:08:54:AC:6A:66:8E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJkvMtdIbftKMsLngQhUrGpmjjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:63:9f:2c:14:b1:73:ce:a0:2f:7d:00:03:fb:5b:31:11:68:
df:93:d3:88:fe:2d:bc:f1:6e:70:a2:c6:1b:44:d9:c3:8d:a4:
ea:73:4b:45:78:88:95:7d:37:dc:27:f4:74:ec:60:2e:8f:79:
61:ea:65:4e:62:02:5b:98:10:a2:da:d5:b8:d1:a7:23:c2:66:
2e:31:a2:bb:44:8d:b1:5a:a7:61:e4:c3:8f:e7:87:4f:ad:bd:
b7:ea:4d:63:23:4c:b3:4e:23:b8:84:ec:69:d7:11:78:85:c9:
1f:0d:9d:2c:ff:96:8e:5a:7b:aa:95:63:78:d7:45:07:79:ad:
ae:67:69:28:71:2f:a0:5d:59:71:f7:5a:78:22:4c:df:33:64:
40:15:5b:f9:cc:22:da:63:9f:62:39:4f:f8:26:e7:27:45:a8:
0b:07:b1:49:53:36:9c:b4:60:aa:c2:d1:ec:b6:15:cf:5b:2c:
01:1b:fa:af:8e:ff:bc:a0:0d:72:af:f4:1b:12:13:c6:7d:c1:
9d:c1:e4:9c:e1:e8:fe:31:30:1c:ce:d3:0a:58:cd:74:fe:40:
19:dd:9e:2e:28:bc:9d:06:2b:1e:8e:60:51:48:4f:27:25:e2:
81:20:21:97:d8:c1:a7:81:8c:c3:3a:6e:a8:a0:ac:86:c8:10:
6c:46:00:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+r8zSZrG1jxT4Bf5NS2sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0OTkyZjMyZDc0ODZkZmI0YTMyYzJlNzgxMDg1NGFjNmE2
NjhlMzQwHhcNMjUwOTA3MDcwMTIyWhcNMjUwOTA4MDcwMTIyWjAzMTEwLwYDVQQD
EyhkNTkzYmYxNGI3YmYxZTYyNGYyMjE5Y2Y3YzMyODEyNTBhYTVmMDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRutZsDHwMyCVj+KPLkEdi2T0Pi5
SDa+Ku4c2oh3r8Ea+7NigxeLa6YpuwLPA8aCbDncZdqUtcnEIp6Q7WfqK7frnjat
3e+tolw9PhWk9c8Idvhvuy0LDN8RYWoayyn2uunKOnbqeXppojKvwh3iz0r0Al8U
AXxLEoA1fPs5H/PtEjaQOvz4/B5WfI6Dnj4o4y5eJ7CYPMK9tHsSAw5UKmOu507h
9Nxkh4PTYpJLeba1y/FRHCsgG4ZbbZ7emzYgi/mDZl3T1eLk8VGkoo1qRMQC9ZEY
dKpbpqH9dMwVGsOx6MxPkYkKKjPJNtXSDlsA+Jgg1jH2l5Zx85CA8ci4ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWTvxS3vx5iTyIZz3wygSUKpfBMMB8GA1UdIwQY
MBaAFCSZLzLXSG37SjLC54EIVKxqZo40MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkprdk10ZEliZnRLTXNMbmdRaFVyR3BtampRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yMTk1OTItNGE0NC00Mjk4LWJkOGUt
NGIyZTY4MGM3NDkxLzEvSkprdk10ZEliZnRLTXNMbmdRaFVyR3BtampRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yMTk1OTItNGE0NC00Mjk4LWJkOGUtNGIyZTY4MGM3NDkx
LzEvSkprdk10ZEliZnRLTXNMbmdRaFVyR3BtampRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATGOfLBSx
c86gL30AA/tbMRFo35PTiP4tvPFucKLGG0TZw42k6nNLRXiIlX033Cf0dOxgLo95
YeplTmICW5gQotrVuNGnI8JmLjGiu0SNsVqnYeTDj+eHT629t+pNYyNMs04juITs
adcReIXJHw2dLP+Wjlp7qpVjeNdFB3mtrmdpKHEvoF1ZcfdaeCJM3zNkQBVb+cwi
2mOfYjlP+CbnJ0WoCwexSVM2nLRgqsLR7LYVz1ssARv6r47/vKANcq/0GxITxn3B
ncHknOHo/jEwHM7TCljNdP5AGd2eLii8nQYrHo5gUUhPJyXigSAhl9jBp4GMwzpu
qKCshsgQbEYAzA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:23:15 2025 by rpki-client