Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.mft
File: J-lCeLPhkBhjrdYde98tJzzxNAw.mft (raw, json)
Hash identifier: ze5lN7i0OHBTQ8CR9+EnozyHX7WQVxxl6yEPoFzNFoI=
Subject key identifier: 09:EE:53:17:7C:69:93:14:8D:43:C5:DD:BA:5B:EF:F2:B6:CC:2B:AF
Authority key identifier: 27:E9:42:78:B3:E1:90:18:63:AD:D6:1D:7B:DF:2D:27:3C:F1:34:0C
Certificate issuer: /CN=27e94278b3e1901863add61d7bdf2d273cf1340c
Certificate serial: 019923A00243734F77B2C5E91E016D78FE41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-lCeLPhkBhjrdYde98tJzzxNAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 10:01:52 +0000
Manifest this update: Sun 07 Sep 2025 10:01:52 +0000
Manifest next update: Mon 08 Sep 2025 10:01:52 +0000
Files and hashes: 1: 7oIgDgDNpX6XAW4lQ5qq69olmro.roa (hash: 3Y/w0AZ9JHVMQciRUgte6R4EVpLThqmwyOoyqP/qwcw=)
2: J-lCeLPhkBhjrdYde98tJzzxNAw.crl (hash: zSCek6UFoNAUNVPB913xHdoNuUam+/So/RMm5Q90FZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-lCeLPhkBhjrdYde98tJzzxNAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:02:43:73:4f:77:b2:c5:e9:1e:01:6d:78:fe:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e94278b3e1901863add61d7bdf2d273cf1340c
Validity
Not Before: Sep 7 10:01:52 2025 GMT
Not After : Sep 8 10:01:52 2025 GMT
Subject: CN=09ee53177c6993148d43c5ddba5beff2b6cc2baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5c:4d:c0:a6:f9:cd:ec:5c:52:cb:f6:1d:07:
6c:03:2c:b3:dc:95:97:d2:09:a2:6d:ef:74:81:0e:
7e:7c:a5:a7:54:4f:8f:29:27:9a:d7:63:ab:08:bf:
59:d2:b4:7c:26:83:27:18:0b:10:4f:a8:45:93:8d:
04:a7:2b:0a:9c:69:34:71:83:2c:19:0c:c4:bd:c4:
48:05:19:95:8c:5e:51:13:9c:f7:47:b5:d8:c8:d9:
df:cb:dc:6d:7e:86:af:ef:17:79:72:c9:43:09:94:
66:19:ea:4b:05:5f:43:41:33:70:9e:54:a4:e6:82:
57:5b:73:25:07:9d:ff:b4:86:59:60:03:1e:da:48:
a6:53:8c:fc:ac:2a:96:d6:1d:53:54:ba:e3:8b:c4:
a6:f2:20:6a:f0:31:53:d4:c4:2b:81:c0:b8:f1:3d:
7e:a4:82:86:7f:ff:90:92:0d:3d:90:50:f1:ea:8f:
fa:e4:86:ae:f4:ad:d1:cf:51:62:82:31:5f:af:8d:
22:f4:40:65:7a:46:41:23:a7:0d:be:74:6e:9a:04:
c8:53:c9:64:5d:63:e7:9b:2a:57:00:57:d4:2c:a6:
ae:3b:8c:e8:36:63:b3:79:6f:1d:70:04:76:27:0c:
49:e1:51:21:a8:33:e9:c2:84:28:dd:b0:c0:9e:dc:
65:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EE:53:17:7C:69:93:14:8D:43:C5:DD:BA:5B:EF:F2:B6:CC:2B:AF
X509v3 Authority Key Identifier:
keyid:27:E9:42:78:B3:E1:90:18:63:AD:D6:1D:7B:DF:2D:27:3C:F1:34:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-lCeLPhkBhjrdYde98tJzzxNAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:2a:74:c4:d4:ad:05:16:c5:f0:2c:f6:e1:1c:cb:97:47:7d:
f4:21:15:bf:0e:98:30:69:93:e9:0d:06:22:3b:1e:7f:23:4f:
d6:73:dd:8a:5b:be:46:a8:cd:a0:22:54:51:3d:61:d1:f1:bd:
2e:0f:c8:b2:68:a2:37:e2:23:d8:62:d3:e9:bc:a4:d8:8e:ff:
d2:05:a4:ee:6a:cb:03:f9:b2:7b:03:e3:e5:f8:0c:25:ea:5b:
d8:b8:a2:f3:22:02:08:5d:fe:9e:97:f2:93:7f:42:1f:89:9f:
3f:cc:d5:b1:38:02:fb:c4:77:dd:e0:d1:03:30:6d:3f:47:8c:
ce:bb:5a:eb:56:d2:2a:b6:c9:7b:61:1e:1a:67:fc:30:89:4d:
5a:34:40:ad:f6:a5:74:1c:42:e8:89:be:26:92:45:7f:75:5e:
70:9e:e9:c8:72:29:0a:aa:bc:00:91:5a:69:0b:91:57:9c:c6:
af:b5:19:48:ce:82:d6:1e:00:16:4d:0f:35:e0:40:9f:d7:48:
a7:aa:4e:15:4d:b9:b5:fd:ba:b5:97:b0:b2:53:70:26:17:3d:
bb:a8:19:d5:20:f1:67:0c:50:b3:cf:db:50:b1:42:71:64:f2:
0d:9d:cf:37:10:5a:33:b1:9b:0b:36:67:39:33:da:41:2b:e3:
5a:60:74:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoAJDc093ssXpHgFteP5BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZTk0Mjc4YjNlMTkwMTg2M2FkZDYxZDdiZGYyZDI3M2Nm
MTM0MGMwHhcNMjUwOTA3MTAwMTUyWhcNMjUwOTA4MTAwMTUyWjAzMTEwLwYDVQQD
EygwOWVlNTMxNzdjNjk5MzE0OGQ0M2M1ZGRiYTViZWZmMmI2Y2MyYmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVxNwKb5zexcUsv2HQdsAyyz3JWX
0gmibe90gQ5+fKWnVE+PKSea12OrCL9Z0rR8JoMnGAsQT6hFk40EpysKnGk0cYMs
GQzEvcRIBRmVjF5RE5z3R7XYyNnfy9xtfoav7xd5cslDCZRmGepLBV9DQTNwnlSk
5oJXW3MlB53/tIZZYAMe2kimU4z8rCqW1h1TVLrji8Sm8iBq8DFT1MQrgcC48T1+
pIKGf/+Qkg09kFDx6o/65Iau9K3Rz1FigjFfr40i9EBlekZBI6cNvnRumgTIU8lk
XWPnmypXAFfULKauO4zoNmOzeW8dcAR2JwxJ4VEhqDPpwoQo3bDAntxl+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnuUxd8aZMUjUPF3bpb7/K2zCuvMB8GA1UdIwQY
MBaAFCfpQniz4ZAYY63WHXvfLSc88TQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSi1sQ2VMUGhrQmhqcmRZZGU5OHRKenp4TkF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iZjQxYjQtMWRiOS00YWEyLWFkNzQt
YjdjOTlkZGFjNzAzLzEvSi1sQ2VMUGhrQmhqcmRZZGU5OHRKenp4TkF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9iZjQxYjQtMWRiOS00YWEyLWFkNzQtYjdjOTlkZGFjNzAz
LzEvSi1sQ2VMUGhrQmhqcmRZZGU5OHRKenp4TkF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQSp0xNSt
BRbF8Cz24RzLl0d99CEVvw6YMGmT6Q0GIjsefyNP1nPdilu+RqjNoCJUUT1h0fG9
Lg/IsmiiN+Ij2GLT6byk2I7/0gWk7mrLA/myewPj5fgMJepb2Lii8yICCF3+npfy
k39CH4mfP8zVsTgC+8R33eDRAzBtP0eMzrta61bSKrbJe2EeGmf8MIlNWjRArfal
dBxC6Im+JpJFf3VecJ7pyHIpCqq8AJFaaQuRV5zGr7UZSM6C1h4AFk0PNeBAn9dI
p6pOFU25tf26tZewslNwJhc9u6gZ1SDxZwxQs8/bULFCcWTyDZ3PNxBaM7GbCzZn
OTPaQSvjWmB0yA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:20 2025 by rpki-client