Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft
File: jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft (raw, json)
Hash identifier: CX95Skij3pSBVnpOAlFlNKwebK3aFKs+3y5uRUw4pdk=
Subject key identifier: 11:64:E9:08:D2:44:CB:56:E2:BD:C9:53:DF:89:D4:EE:D3:DB:30:11
Authority key identifier: 8D:68:F7:92:8C:10:FC:2B:54:B5:B5:89:44:8F:E7:7D:40:42:18:CA
Certificate issuer: /CN=8d68f7928c10fc2b54b5b589448fe77d404218ca
Certificate serial: 0199247B27A24F61DEA966AF3F819EB1C9B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft
Manifest number: 11CD
Signing time: Sun 07 Sep 2025 14:01:14 +0000
Manifest this update: Sun 07 Sep 2025 14:01:14 +0000
Manifest next update: Mon 08 Sep 2025 14:01:14 +0000
Files and hashes: 1: FveeOj9l7FxxmRsSwt1HgCwwQeA.roa (hash: M4dtF8jy0wzwUCk1jVRckWxwU5GEJHMwlYsYHLu5Fdo=)
2: jWj3kowQ_CtUtbWJRI_nfUBCGMo.crl (hash: OeW3zUtCOFUBK3/WQ2gck1oT6bJ0jc55Bmae5nDEXtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:7b:27:a2:4f:61:de:a9:66:af:3f:81:9e:b1:c9:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d68f7928c10fc2b54b5b589448fe77d404218ca
Validity
Not Before: Sep 7 14:01:14 2025 GMT
Not After : Sep 8 14:01:14 2025 GMT
Subject: CN=1164e908d244cb56e2bdc953df89d4eed3db3011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:aa:30:8b:f3:b1:69:5b:99:e4:13:bc:2c:45:
71:e7:8d:24:2c:53:33:4b:17:3c:3b:19:21:0e:e7:
dc:bf:14:e8:f1:1c:24:80:a7:ca:76:94:ff:c3:e2:
ac:eb:e4:88:68:7d:af:4f:78:ad:ef:b4:00:88:4f:
66:be:3f:15:e7:e8:6c:6f:37:29:59:09:80:1c:cf:
8a:58:c9:6a:73:4f:91:70:85:c6:c9:35:25:d5:db:
40:f0:00:36:d7:81:52:5f:1e:0d:2c:55:9a:0c:22:
17:99:15:ce:56:9b:b9:9d:01:4c:ca:4d:d4:77:38:
f5:25:d6:ba:b6:1a:94:b6:73:63:9e:fb:7c:c3:80:
e4:49:a0:7a:3b:be:42:f2:e2:c0:e9:4c:03:e0:fe:
03:3e:d9:3d:32:9d:4f:d2:f7:23:0b:82:32:7a:03:
2a:3d:a8:5c:86:d0:c1:40:f8:ab:a8:80:d2:67:e0:
aa:0d:e3:2d:7e:c6:02:8e:e2:be:46:3a:cd:6f:60:
05:50:f8:01:44:5e:f1:df:66:96:c2:8c:bf:e8:bd:
46:8f:47:46:fe:b0:43:f5:89:eb:ff:1e:5a:37:3a:
50:ad:38:f4:52:6c:a8:4a:f1:26:19:9e:36:b3:d5:
1f:11:52:dc:74:d5:4c:83:1e:74:cb:79:f5:4d:40:
80:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:64:E9:08:D2:44:CB:56:E2:BD:C9:53:DF:89:D4:EE:D3:DB:30:11
X509v3 Authority Key Identifier:
keyid:8D:68:F7:92:8C:10:FC:2B:54:B5:B5:89:44:8F:E7:7D:40:42:18:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:68:cc:d8:e4:59:8b:0b:90:c2:88:98:77:8e:23:a5:41:e9:
57:2a:cc:f1:5a:53:5b:31:26:44:04:01:de:0c:4d:7b:cb:6f:
0e:b6:e8:d0:1c:0b:a0:20:88:17:e3:aa:87:ed:ed:68:08:c6:
f7:59:38:3a:53:4b:8c:20:f5:73:8c:a8:eb:12:7c:4b:9a:54:
44:ef:c8:82:cd:23:5c:3a:89:6c:15:86:92:a7:ff:c7:5b:33:
90:b0:2b:3a:e8:af:a9:93:e8:e6:a0:5d:4f:95:29:46:82:cc:
7c:47:98:7b:d3:8d:35:88:53:cb:d6:3f:41:9d:e2:4f:df:0b:
56:bc:f7:26:b8:81:94:1f:a4:b6:43:72:e0:db:97:35:4d:58:
17:8e:aa:04:70:ef:15:a9:83:42:0b:c5:d3:70:ea:61:69:fc:
a6:86:e1:46:85:fa:15:3c:4a:0f:6a:62:f7:e0:25:43:88:09:
d2:a5:09:b7:06:af:0a:13:2c:07:2c:c7:a9:8f:48:b1:f3:b4:
ab:eb:b5:95:7c:4a:0b:fe:65:9b:39:5a:c1:d5:8a:f0:2b:5d:
c5:9c:3d:9d:e9:be:df:d6:59:83:b0:b3:ab:0a:38:d1:b9:f4:
0a:ee:2c:5e:df:ab:60:83:03:97:11:37:04:3e:b5:3a:eb:dd:
d6:e1:0e:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkkeyeiT2HeqWavP4GescmwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNjhmNzkyOGMxMGZjMmI1NGI1YjU4OTQ0OGZlNzdkNDA0
MjE4Y2EwHhcNMjUwOTA3MTQwMTE0WhcNMjUwOTA4MTQwMTE0WjAzMTEwLwYDVQQD
EygxMTY0ZTkwOGQyNDRjYjU2ZTJiZGM5NTNkZjg5ZDRlZWQzZGIzMDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6owi/OxaVuZ5BO8LEVx540kLFMz
Sxc8OxkhDufcvxTo8RwkgKfKdpT/w+Ks6+SIaH2vT3it77QAiE9mvj8V5+hsbzcp
WQmAHM+KWMlqc0+RcIXGyTUl1dtA8AA214FSXx4NLFWaDCIXmRXOVpu5nQFMyk3U
dzj1Jda6thqUtnNjnvt8w4DkSaB6O75C8uLA6UwD4P4DPtk9Mp1P0vcjC4IyegMq
PahchtDBQPirqIDSZ+CqDeMtfsYCjuK+RjrNb2AFUPgBRF7x32aWwoy/6L1Gj0dG
/rBD9Ynr/x5aNzpQrTj0UmyoSvEmGZ42s9UfEVLcdNVMgx50y3n1TUCAYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBFk6QjSRMtW4r3JU9+J1O7T2zARMB8GA1UdIwQY
MBaAFI1o95KMEPwrVLW1iUSP531AQhjKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaldqM2tvd1FfQ3RVdGJXSlJJX25mVUJDR01vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hZWM4NjEtODExMi00ZDhhLWIyMTYt
ZDAxMTE1MDg5NDYzLzEvaldqM2tvd1FfQ3RVdGJXSlJJX25mVUJDR01vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9hZWM4NjEtODExMi00ZDhhLWIyMTYtZDAxMTE1MDg5NDYz
LzEvaldqM2tvd1FfQ3RVdGJXSlJJX25mVUJDR01vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZWjM2ORZ
iwuQwoiYd44jpUHpVyrM8VpTWzEmRAQB3gxNe8tvDrbo0BwLoCCIF+Oqh+3taAjG
91k4OlNLjCD1c4yo6xJ8S5pURO/Igs0jXDqJbBWGkqf/x1szkLArOuivqZPo5qBd
T5UpRoLMfEeYe9ONNYhTy9Y/QZ3iT98LVrz3JriBlB+ktkNy4NuXNU1YF46qBHDv
FamDQgvF03DqYWn8pobhRoX6FTxKD2pi9+AlQ4gJ0qUJtwavChMsByzHqY9IsfO0
q+u1lXxKC/5lmzlawdWK8CtdxZw9nem+39ZZg7Czqwo40bn0Cu4sXt+rYIMDlxE3
BD61Ouvd1uEOnQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:53:34 2025 by rpki-client