Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
File: jDath5xkWu6YrEqJ_IALmpdOlB8.mft (raw, json)
Hash identifier: KsEBJX1rjwfmslJkn6j7okAMc9ffEsqZzONtwW6sNzE=
Subject key identifier: AD:FA:2B:10:DC:5B:06:C0:64:A5:50:F7:73:C8:C4:5B:D5:CB:EA:FD
Authority key identifier: 8C:36:AD:87:9C:64:5A:EE:98:AC:4A:89:FC:80:0B:9A:97:4E:94:1F
Certificate issuer: /CN=8c36ad879c645aee98ac4a89fc800b9a974e941f
Certificate serial: 0199221E374BD3DE451B07B14D7EB558616A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 03:00:29 +0000
Manifest this update: Sun 07 Sep 2025 03:00:29 +0000
Manifest next update: Mon 08 Sep 2025 03:00:29 +0000
Files and hashes: 1: Zwk791BjXFiWW_GWZuipoheVevk.roa (hash: 98bTEWSKCgsr9ScLAh15mZ7s1p9cPoDYzZZ0PPizWyo=)
2: ebKQop9j6C8Jd62F7ue25JuDgWs.roa (hash: FqOT4Eu6V5AfcUcuw2gXk+K+VJY6kHg+9mF4TAN1HTA=)
3: jDath5xkWu6YrEqJ_IALmpdOlB8.crl (hash: WNFbQmvoMceZKaJAeB5Tjm/AEygoQQmZGRJX8knLB6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:37:4b:d3:de:45:1b:07:b1:4d:7e:b5:58:61:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c36ad879c645aee98ac4a89fc800b9a974e941f
Validity
Not Before: Sep 7 03:00:29 2025 GMT
Not After : Sep 8 03:00:29 2025 GMT
Subject: CN=adfa2b10dc5b06c064a550f773c8c45bd5cbeafd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:66:7d:e9:aa:c4:d2:b2:21:b7:12:e2:69:df:
cf:1e:c9:61:f7:fb:12:e3:df:85:f6:a8:a4:e0:0a:
72:45:66:72:80:28:65:05:44:af:f6:18:3f:e0:c2:
6b:97:71:8f:c3:99:6d:1e:28:ed:db:34:27:fd:a9:
d0:6a:64:5a:81:27:85:aa:b7:7c:10:59:d7:c8:cc:
b4:41:28:fb:dd:30:fe:22:be:3b:2c:c0:8c:96:63:
76:01:51:2f:0e:94:8b:31:37:30:b1:b7:8c:b6:a9:
7b:07:f6:63:68:60:ef:8e:27:3e:45:ea:21:30:37:
47:38:08:0b:6a:59:2b:d1:9a:14:f3:8b:5d:e3:cc:
16:70:7e:e6:16:78:2d:e2:65:a9:e6:bd:2f:c6:48:
26:3c:cd:3a:5d:a0:6b:3e:83:f3:3e:41:1d:8a:a5:
a7:59:6c:e8:80:e2:14:be:91:aa:c0:3e:d9:de:12:
3d:ac:93:64:da:68:d9:a2:0e:b1:63:a7:f9:0a:9a:
79:22:3d:39:8d:86:2a:6f:aa:29:17:89:8f:6e:6e:
dd:89:b4:81:8f:8a:25:e2:f6:ab:32:b9:75:89:b6:
c8:f5:bc:c7:7c:f5:48:ed:af:65:72:29:e4:65:6a:
21:ee:a8:cf:7f:04:43:a8:ec:21:33:4c:50:95:18:
af:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:FA:2B:10:DC:5B:06:C0:64:A5:50:F7:73:C8:C4:5B:D5:CB:EA:FD
X509v3 Authority Key Identifier:
keyid:8C:36:AD:87:9C:64:5A:EE:98:AC:4A:89:FC:80:0B:9A:97:4E:94:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:98:c7:07:01:5b:52:e7:a2:40:d2:96:9a:6b:54:b3:24:ce:
a4:03:b1:b1:45:79:82:c2:a1:25:cb:ca:8e:96:1b:a1:88:49:
fb:ae:39:ce:11:e6:b7:20:6a:1b:2e:c0:15:a1:7b:62:dc:ef:
3f:f6:5a:b6:a3:6c:9f:e2:3d:1b:26:b5:ce:c7:be:40:d7:63:
47:e1:94:b4:6f:76:b1:57:3b:97:ef:7e:bd:aa:b5:48:00:e8:
a5:5c:fa:8c:9b:e0:70:e6:66:d8:d6:33:0f:dd:67:11:d8:6d:
4c:48:9a:54:22:ef:2f:15:e8:e6:fc:c4:e1:cb:dd:49:db:f8:
f1:28:86:b3:59:2d:97:0d:93:06:b9:1b:fa:84:dc:59:34:af:
a7:ae:ff:90:7b:12:23:2f:e9:9e:30:df:12:c5:8c:b7:cf:45:
e4:b6:aa:b1:56:c7:02:2a:74:1a:31:61:bd:80:06:ad:a2:d8:
49:03:eb:e8:68:a3:72:c9:b3:56:42:42:b9:b0:db:fe:e6:c6:
ab:7f:11:81:db:83:97:15:fd:07:f4:a2:fc:59:b3:20:12:fa:
19:62:52:20:49:91:2c:da:8f:47:a3:bc:03:8e:7a:6c:57:7a:
02:fd:64:66:43:40:6e:02:92:1f:8f:1e:9d:33:ec:fc:3d:38:
20:9f:7b:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHjdL095FGwexTX61WGFqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMzZhZDg3OWM2NDVhZWU5OGFjNGE4OWZjODAwYjlhOTc0
ZTk0MWYwHhcNMjUwOTA3MDMwMDI5WhcNMjUwOTA4MDMwMDI5WjAzMTEwLwYDVQQD
EyhhZGZhMmIxMGRjNWIwNmMwNjRhNTUwZjc3M2M4YzQ1YmQ1Y2JlYWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2Z96arE0rIhtxLiad/PHslh9/sS
49+F9qik4ApyRWZygChlBUSv9hg/4MJrl3GPw5ltHijt2zQn/anQamRagSeFqrd8
EFnXyMy0QSj73TD+Ir47LMCMlmN2AVEvDpSLMTcwsbeMtql7B/ZjaGDvjic+Reoh
MDdHOAgLalkr0ZoU84td48wWcH7mFngt4mWp5r0vxkgmPM06XaBrPoPzPkEdiqWn
WWzogOIUvpGqwD7Z3hI9rJNk2mjZog6xY6f5Cpp5Ij05jYYqb6opF4mPbm7dibSB
j4ol4varMrl1ibbI9bzHfPVI7a9lcinkZWoh7qjPfwRDqOwhM0xQlRiv2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK36KxDcWwbAZKVQ93PIxFvVy+r9MB8GA1UdIwQY
MBaAFIw2rYecZFrumKxKifyAC5qXTpQfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakRhdGg1eGtXdTZZckVxSl9JQUxtcGRPbEI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9mNjYzYTMtNjg0ZS00Nzc5LTg4Yjkt
MTRlNmVjMDIwYmZhLzEvakRhdGg1eGtXdTZZckVxSl9JQUxtcGRPbEI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9mNjYzYTMtNjg0ZS00Nzc5LTg4YjktMTRlNmVjMDIwYmZh
LzEvakRhdGg1eGtXdTZZckVxSl9JQUxtcGRPbEI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEZjHBwFb
UueiQNKWmmtUsyTOpAOxsUV5gsKhJcvKjpYboYhJ+645zhHmtyBqGy7AFaF7Ytzv
P/ZatqNsn+I9Gya1zse+QNdjR+GUtG92sVc7l+9+vaq1SADopVz6jJvgcOZm2NYz
D91nEdhtTEiaVCLvLxXo5vzE4cvdSdv48SiGs1ktlw2TBrkb+oTcWTSvp67/kHsS
Iy/pnjDfEsWMt89F5LaqsVbHAip0GjFhvYAGraLYSQPr6GijcsmzVkJCubDb/ubG
q38RgduDlxX9B/Si/FmzIBL6GWJSIEmRLNqPR6O8A456bFd6Av1kZkNAbgKSH48e
nTPs/D04IJ971A==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:49:47 2025 by rpki-client