Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft
File: jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft (raw, json)
Hash identifier: 4ZKmbXWPPJNEjlOioqx3NWm69KLSjzGtYjF7F+mgn0U=
Subject key identifier: 3B:22:FA:94:73:42:42:34:22:54:08:7A:BF:20:8D:A6:18:94:B8:D4
Authority key identifier: 8C:D9:D6:1F:83:E0:D7:E8:30:8A:6C:DE:4D:D3:15:DD:75:75:6C:03
Certificate issuer: /CN=8cd9d61f83e0d7e8308a6cde4dd315dd75756c03
Certificate serial: 019922FAC5FBF16D3AB64F270BF005136E00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 07:01:23 +0000
Manifest this update: Sun 07 Sep 2025 07:01:23 +0000
Manifest next update: Mon 08 Sep 2025 07:01:23 +0000
Files and hashes: 1: jNnWH4Pg1-gwimzeTdMV3XV1bAM.crl (hash: WoAzfLV8UaJ1JTEcfU6KRPSzAFjnYDW7VfKbWaGI4KA=)
2: sAUuTa0NxQDQaogfsBE0spI7wLY.roa (hash: LqhsGf+sCdkce6YV0v+cako7Xiw7Niu7YnjSoKkIukg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:c5:fb:f1:6d:3a:b6:4f:27:0b:f0:05:13:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd9d61f83e0d7e8308a6cde4dd315dd75756c03
Validity
Not Before: Sep 7 07:01:23 2025 GMT
Not After : Sep 8 07:01:23 2025 GMT
Subject: CN=3b22fa94734242342254087abf208da61894b8d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a4:31:bd:78:38:d5:18:fc:2b:b8:7b:e1:e0:
e8:8b:7c:97:3b:b8:32:43:95:e7:6b:ad:b5:53:df:
e5:a3:f0:92:c5:52:2a:9f:15:db:ea:ee:e2:7f:91:
61:8f:84:4d:20:ca:b6:6b:a1:e1:2e:39:2a:6f:1b:
af:a3:39:9f:bf:8e:2e:98:f7:ef:4d:ac:2e:2d:6e:
5d:58:ad:ef:4e:ba:35:9e:06:45:96:56:70:14:4f:
a6:aa:b4:ec:13:16:25:2d:df:94:aa:99:3d:b2:52:
0e:4b:6d:b8:82:40:67:8e:45:cb:95:1d:58:ed:51:
d5:d4:3c:4b:a8:d8:bb:86:e0:27:16:39:ba:41:c5:
27:1b:01:a2:3c:69:d7:c1:3f:3d:e1:62:02:ee:7e:
2e:12:5f:1d:1c:d9:c2:49:49:76:20:15:4f:06:d0:
ff:50:37:b3:b0:27:65:de:67:dc:a5:f8:97:97:78:
47:62:8b:1e:f2:07:c1:8c:30:bf:d2:c8:2c:a6:b5:
bf:98:fc:ce:8e:ff:09:8f:6b:c4:c1:45:54:cd:99:
40:dc:2c:e8:a5:97:ae:e1:02:de:e5:e0:cc:a4:d0:
0f:62:27:6f:7d:d2:3b:e8:54:cd:21:ba:52:7b:f6:
28:04:0b:50:38:36:b4:7d:34:26:e8:d9:76:2d:1c:
02:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:22:FA:94:73:42:42:34:22:54:08:7A:BF:20:8D:A6:18:94:B8:D4
X509v3 Authority Key Identifier:
keyid:8C:D9:D6:1F:83:E0:D7:E8:30:8A:6C:DE:4D:D3:15:DD:75:75:6C:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e1:be:82:cf:30:74:4c:44:5b:c2:30:1a:cd:a4:3b:6f:df:
e1:44:f2:4a:20:8a:d7:92:29:33:0e:25:39:cd:ee:54:4a:46:
81:51:5d:78:b3:f3:f9:4e:4d:d6:15:c4:68:dd:08:e1:70:36:
14:26:65:b2:13:70:32:fb:bb:42:a1:f0:45:0b:03:4b:65:cd:
96:17:4b:79:2a:f2:00:b2:f6:74:47:3d:78:bd:f2:9f:68:f6:
ce:29:b7:5b:80:62:6d:5b:ef:46:e7:8a:ed:5d:d4:fb:dc:d0:
ed:f7:80:76:ac:90:20:0b:5a:df:79:06:41:2e:a2:55:8d:34:
cf:07:ec:ae:d7:1f:38:d0:cd:62:35:f1:eb:12:23:db:ed:8e:
1b:05:68:c6:9d:54:22:90:5d:82:8f:da:9a:5d:24:f7:c5:85:
a1:c8:a6:07:ed:ba:5e:ff:11:8d:36:75:30:c0:b1:b7:a3:4d:
bc:6b:9b:a6:3d:49:57:5e:a6:c0:63:2c:ac:33:13:0e:e8:f0:
cb:8a:af:ea:1d:c7:47:33:49:0d:b1:0e:52:1c:53:76:00:70:
a7:5d:bc:dc:6f:37:e3:ba:23:0f:4e:ab:e9:75:8d:87:c4:04:
d8:26:ff:ca:40:e2:07:93:c5:1d:fb:d6:38:26:fd:c4:65:8b:
99:97:ea:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+sX78W06tk8nC/AFE24AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZDlkNjFmODNlMGQ3ZTgzMDhhNmNkZTRkZDMxNWRkNzU3
NTZjMDMwHhcNMjUwOTA3MDcwMTIzWhcNMjUwOTA4MDcwMTIzWjAzMTEwLwYDVQQD
EygzYjIyZmE5NDczNDI0MjM0MjI1NDA4N2FiZjIwOGRhNjE4OTRiOGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqQxvXg41Rj8K7h74eDoi3yXO7gy
Q5Xna621U9/lo/CSxVIqnxXb6u7if5Fhj4RNIMq2a6HhLjkqbxuvozmfv44umPfv
TawuLW5dWK3vTro1ngZFllZwFE+mqrTsExYlLd+Uqpk9slIOS224gkBnjkXLlR1Y
7VHV1DxLqNi7huAnFjm6QcUnGwGiPGnXwT894WIC7n4uEl8dHNnCSUl2IBVPBtD/
UDezsCdl3mfcpfiXl3hHYose8gfBjDC/0sgsprW/mPzOjv8Jj2vEwUVUzZlA3Czo
pZeu4QLe5eDMpNAPYidvfdI76FTNIbpSe/YoBAtQODa0fTQm6Nl2LRwCtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDsi+pRzQkI0IlQIer8gjaYYlLjUMB8GA1UdIwQY
MBaAFIzZ1h+D4NfoMIps3k3TFd11dWwDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak5uV0g0UGcxLWd3aW16ZVRkTVYzWFYxYkFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS84NmM5NDYtMTRjYi00OTM1LTg4ZTMt
ZDJkNTc4NDNhMjdkLzEvak5uV0g0UGcxLWd3aW16ZVRkTVYzWFYxYkFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS84NmM5NDYtMTRjYi00OTM1LTg4ZTMtZDJkNTc4NDNhMjdk
LzEvak5uV0g0UGcxLWd3aW16ZVRkTVYzWFYxYkFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdeG+gs8w
dExEW8IwGs2kO2/f4UTySiCK15IpMw4lOc3uVEpGgVFdeLPz+U5N1hXEaN0I4XA2
FCZlshNwMvu7QqHwRQsDS2XNlhdLeSryALL2dEc9eL3yn2j2zim3W4BibVvvRueK
7V3U+9zQ7feAdqyQIAta33kGQS6iVY00zwfsrtcfONDNYjXx6xIj2+2OGwVoxp1U
IpBdgo/aml0k98WFocimB+26Xv8RjTZ1MMCxt6NNvGubpj1JV16mwGMsrDMTDujw
y4qv6h3HRzNJDbEOUhxTdgBwp1283G8347ojD06r6XWNh8QE2Cb/ykDiB5PFHfvW
OCb9xGWLmZfqlA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:20 2025 by rpki-client