Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.mft
File: j7YgpIOO9uIbzCatNRJi11ZusnU.mft (raw, json)
Hash identifier: l08ljMzF+zzCM/1YoFFou9iSjfjxH0+Y0UsxBxQIgDI=
Subject key identifier: 2E:41:45:D3:CD:93:3E:EF:23:AD:CD:67:20:19:EE:28:DA:1A:2A:9C
Authority key identifier: 8F:B6:20:A4:83:8E:F6:E2:1B:CC:26:AD:35:12:62:D7:56:6E:B2:75
Certificate issuer: /CN=8fb620a4838ef6e21bcc26ad351262d7566eb275
Certificate serial: 0199364A8D88891E452F1119C0868E98E37C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7YgpIOO9uIbzCatNRJi11ZusnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.mft
Manifest number: 167E
Signing time: Thu 11 Sep 2025 01:01:19 +0000
Manifest this update: Thu 11 Sep 2025 01:01:19 +0000
Manifest next update: Fri 12 Sep 2025 01:01:19 +0000
Files and hashes: 1: eHCPsFGmisg7lRclzimiGG_V3JA.roa (hash: //Um4LhSOzAoBsOI7xMkiMxwqQTwKL5Npb082+X9U6M=)
2: j7YgpIOO9uIbzCatNRJi11ZusnU.crl (hash: 899HJ4RBdGm7Nnd8pQaZCsWtgtj4oQunlu3cZcS4RDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7YgpIOO9uIbzCatNRJi11ZusnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 01:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:4a:8d:88:89:1e:45:2f:11:19:c0:86:8e:98:e3:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fb620a4838ef6e21bcc26ad351262d7566eb275
Validity
Not Before: Sep 11 01:01:19 2025 GMT
Not After : Sep 12 01:01:19 2025 GMT
Subject: CN=2e4145d3cd933eef23adcd672019ee28da1a2a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:59:a1:60:f6:fb:bd:4d:f5:4f:5a:e3:69:7e:
ed:a9:0c:db:e2:98:7c:44:d1:7d:ce:84:48:57:40:
37:8e:b4:ff:5c:55:40:eb:96:30:84:fc:e2:01:92:
69:1a:db:f7:87:4d:3b:b6:4d:d8:8b:92:b5:c7:7b:
91:c7:87:03:90:44:a3:29:e5:6e:5b:2f:53:7b:46:
78:eb:e2:0f:03:d0:81:b8:60:e6:f9:f8:e0:8a:1d:
6f:76:a7:3a:4a:fc:67:7c:9e:91:d8:7b:bf:64:b9:
14:23:53:54:10:94:fd:63:77:cb:08:ca:d5:bf:7a:
93:c7:c9:cc:04:cb:22:d6:ca:80:65:70:34:46:96:
22:7e:63:81:e0:7b:ba:bd:30:b4:6f:2b:a7:fa:f9:
71:be:a6:e7:a6:7c:3a:28:93:78:23:cb:a3:35:3e:
7f:15:a6:dc:d3:36:0a:0b:1a:26:5b:34:18:27:23:
2a:d7:f2:d5:a2:74:75:d1:ab:78:5e:9c:6b:ba:96:
86:c2:30:8b:19:18:d2:35:6e:49:d0:4c:59:99:0f:
67:f4:64:c7:9f:08:76:9b:91:b2:76:8c:a6:13:93:
e7:d5:5a:f2:19:42:6e:7a:da:cc:a5:b3:f1:50:11:
d7:af:9a:a9:8d:d1:08:bc:a4:f8:10:77:21:a5:fc:
8c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:41:45:D3:CD:93:3E:EF:23:AD:CD:67:20:19:EE:28:DA:1A:2A:9C
X509v3 Authority Key Identifier:
keyid:8F:B6:20:A4:83:8E:F6:E2:1B:CC:26:AD:35:12:62:D7:56:6E:B2:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7YgpIOO9uIbzCatNRJi11ZusnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:11:c8:7a:58:e8:0d:3c:59:31:a7:7b:35:bd:4a:51:3e:28:
c3:c6:b8:2d:ee:03:34:55:6c:39:0f:ea:98:66:d6:95:d9:a6:
1c:15:0f:8e:27:34:15:a6:5b:bd:63:1f:09:89:b5:0d:92:98:
52:e0:ce:f2:b1:42:5e:7d:60:d8:e6:e0:bb:35:65:5d:90:28:
ab:a5:98:af:7f:f7:e2:48:1c:4b:48:f0:b8:39:d6:c3:4d:6a:
85:25:b5:8b:93:43:07:98:c9:00:d8:92:60:f9:49:6a:15:97:
30:50:9a:60:6f:1e:44:01:49:a0:36:77:66:06:df:f1:5d:4d:
2e:72:f9:91:c4:fe:44:79:63:f1:e2:b8:b1:3b:b1:d8:00:01:
29:cf:a1:2b:76:4b:e7:dd:3d:42:20:cc:fd:d4:9b:7a:de:33:
cf:e9:67:bc:4f:11:2b:ba:fb:d2:16:d0:e6:64:c4:ad:36:32:
72:6c:3a:f4:5a:32:be:c6:59:95:e6:c3:22:12:a4:fd:e7:a5:
1e:5d:cc:47:9a:4c:fa:ab:a9:98:11:aa:34:82:a5:0b:a1:69:
74:8e:8e:47:b6:72:02:94:fc:96:6c:65:b0:1f:d8:1f:c6:00:
62:50:de:69:d7:17:a9:4f:f3:d3:8a:81:ba:b9:1d:02:85:5c:
0d:be:4c:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk2So2IiR5FLxEZwIaOmON8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYjYyMGE0ODM4ZWY2ZTIxYmNjMjZhZDM1MTI2MmQ3NTY2
ZWIyNzUwHhcNMjUwOTExMDEwMTE5WhcNMjUwOTEyMDEwMTE5WjAzMTEwLwYDVQQD
EygyZTQxNDVkM2NkOTMzZWVmMjNhZGNkNjcyMDE5ZWUyOGRhMWEyYTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1mhYPb7vU31T1rjaX7tqQzb4ph8
RNF9zoRIV0A3jrT/XFVA65YwhPziAZJpGtv3h007tk3Yi5K1x3uRx4cDkESjKeVu
Wy9Te0Z46+IPA9CBuGDm+fjgih1vdqc6SvxnfJ6R2Hu/ZLkUI1NUEJT9Y3fLCMrV
v3qTx8nMBMsi1sqAZXA0RpYifmOB4Hu6vTC0byun+vlxvqbnpnw6KJN4I8ujNT5/
Fabc0zYKCxomWzQYJyMq1/LVonR10at4XpxrupaGwjCLGRjSNW5J0ExZmQ9n9GTH
nwh2m5GydoymE5Pn1VryGUJuetrMpbPxUBHXr5qpjdEIvKT4EHchpfyMgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC5BRdPNkz7vI63NZyAZ7ijaGiqcMB8GA1UdIwQY
MBaAFI+2IKSDjvbiG8wmrTUSYtdWbrJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajdZZ3BJT085dUliekNhdE5SSmkxMVp1c25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9lYzM1MTItNzFiYS00NDFlLWJmZTEt
ZGE3ZDQ1YjczMmZhLzEvajdZZ3BJT085dUliekNhdE5SSmkxMVp1c25VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9lYzM1MTItNzFiYS00NDFlLWJmZTEtZGE3ZDQ1YjczMmZh
LzEvajdZZ3BJT085dUliekNhdE5SSmkxMVp1c25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2BHIeljo
DTxZMad7Nb1KUT4ow8a4Le4DNFVsOQ/qmGbWldmmHBUPjic0FaZbvWMfCYm1DZKY
UuDO8rFCXn1g2ObguzVlXZAoq6WYr3/34kgcS0jwuDnWw01qhSW1i5NDB5jJANiS
YPlJahWXMFCaYG8eRAFJoDZ3Zgbf8V1NLnL5kcT+RHlj8eK4sTux2AABKc+hK3ZL
5909QiDM/dSbet4zz+lnvE8RK7r70hbQ5mTErTYycmw69FoyvsZZlebDIhKk/eel
Hl3MR5pM+qupmBGqNIKlC6FpdI6OR7ZyApT8lmxlsB/YH8YAYlDeadcXqU/z04qB
urkdAoVcDb5Mzg==
-----END CERTIFICATE-----
Generated at Thu Sep 11 09:22:18 2025 by rpki-client