Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
File: jlVrUrjk5wn6Vpta43LG4oJm8jI.mft (raw, json)
Hash identifier: F33ptTF6hRyYHFlZoTrnMGs44sEtHgB7CNIxEyzvJuI=
Subject key identifier: F5:C4:F9:3E:68:E7:C9:C4:A2:69:90:AA:DF:4F:8A:94:70:41:7C:FA
Authority key identifier: 8E:55:6B:52:B8:E4:E7:09:FA:56:9B:5A:E3:72:C6:E2:82:66:F2:32
Certificate issuer: /CN=8e556b52b8e4e709fa569b5ae372c6e28266f232
Certificate serial: 01974B5658648A965329881CD0FA1FE94554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
Manifest number: 0809
Signing time: Sat 07 Jun 2025 17:00:39 +0000
Manifest this update: Sat 07 Jun 2025 17:00:39 +0000
Manifest next update: Sun 08 Jun 2025 17:00:39 +0000
Files and hashes: 1: OL1d446I3yxzCjYzKmvnNJ7y4OM.roa (hash: JsE4VCK3qUktBFupzIAgFOT4HayiXvdUAIXOsvhciFE=)
2: jlVrUrjk5wn6Vpta43LG4oJm8jI.crl (hash: lokjRfk0/8tdaVKHcnAcuMH6eG3dijnM3HLccvTVYkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:58:64:8a:96:53:29:88:1c:d0:fa:1f:e9:45:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e556b52b8e4e709fa569b5ae372c6e28266f232
Validity
Not Before: Jun 7 17:00:39 2025 GMT
Not After : Jun 8 17:00:39 2025 GMT
Subject: CN=f5c4f93e68e7c9c4a26990aadf4f8a9470417cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fe:c7:bc:84:d3:98:fa:8e:8a:e7:24:f3:7e:
78:00:64:3f:ba:49:51:b8:f0:38:48:ab:95:75:12:
f1:68:2f:f3:56:04:53:46:53:82:17:e3:f6:0b:9b:
24:55:8e:9f:86:21:7a:e4:4f:4e:02:21:23:9e:65:
7b:4c:ac:08:3c:8c:5a:b4:63:dd:aa:9a:1c:56:f5:
5f:65:bd:b9:f0:33:4e:de:2d:4c:9f:db:4c:05:5b:
1f:ed:06:f1:21:c9:a8:1c:f2:6d:86:a0:e4:aa:11:
ff:5e:fb:c4:62:27:22:b3:ad:8a:b6:17:2d:09:8b:
7f:55:92:42:9f:07:f6:4b:a4:32:e0:0f:3f:62:3b:
07:95:36:21:09:b5:73:bb:c7:9e:05:9b:df:8f:4b:
07:f9:4d:92:24:95:1b:8f:de:6c:62:bd:57:e1:ea:
a2:ca:21:4b:ec:ad:61:83:71:61:d6:c9:20:1f:4f:
11:0f:89:ee:06:9c:cd:16:5f:3e:42:a8:a2:24:7e:
39:44:af:ef:5c:71:f9:de:95:21:0a:76:b9:bf:db:
05:5b:c6:b5:a9:a8:32:72:9a:c6:fa:54:73:d4:ca:
f4:2d:36:af:35:18:22:cc:9b:60:07:52:d0:8d:21:
67:e1:1d:d1:cf:bb:0f:90:2a:ef:c7:c0:6a:92:f4:
1c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C4:F9:3E:68:E7:C9:C4:A2:69:90:AA:DF:4F:8A:94:70:41:7C:FA
X509v3 Authority Key Identifier:
keyid:8E:55:6B:52:B8:E4:E7:09:FA:56:9B:5A:E3:72:C6:E2:82:66:F2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:c9:cc:13:ad:4b:71:13:1b:c4:67:ff:d2:c4:9d:c0:7d:0a:
8d:04:04:a4:cc:f0:a7:df:8f:66:d6:79:56:54:94:47:4a:b0:
37:ae:d3:47:9c:ca:60:e8:1e:53:2e:2d:27:4d:fa:23:42:1a:
4f:96:67:3f:bb:98:1a:04:fe:7d:b8:14:12:c2:31:7e:89:7c:
c4:b4:7f:43:b6:f0:51:82:ea:4a:18:94:c9:21:c6:8f:f6:93:
4f:b8:b8:f9:a4:d4:f7:b6:1d:56:40:2f:0e:5e:0b:cf:d7:93:
ba:f0:bc:00:92:be:c1:ed:4d:ba:cb:68:e8:2e:b4:be:a8:a5:
96:cd:30:20:5f:b5:59:aa:f4:e0:fb:eb:77:62:02:04:df:69:
fd:4f:4a:b2:f7:78:26:f1:0a:ad:44:66:d6:6a:94:f2:44:ae:
8a:01:a9:aa:fa:3b:59:4c:d3:0c:e6:58:44:ce:09:14:a4:a3:
73:84:9d:6e:bc:ab:c2:5b:1e:f6:15:a4:86:29:26:4d:01:2e:
84:0c:c1:de:3f:7a:bd:01:dc:b5:26:0f:2d:cc:0e:53:d4:17:
70:08:5d:97:b1:aa:2c:b2:8d:19:e8:5f:c4:15:9b:bd:c0:c0:
db:ab:ab:ca:50:4c:1a:bb:c7:53:37:8e:a3:7c:0c:66:f4:de:
5c:54:68:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLVlhkipZTKYgc0Pof6UVUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNTU2YjUyYjhlNGU3MDlmYTU2OWI1YWUzNzJjNmUyODI2
NmYyMzIwHhcNMjUwNjA3MTcwMDM5WhcNMjUwNjA4MTcwMDM5WjAzMTEwLwYDVQQD
EyhmNWM0ZjkzZTY4ZTdjOWM0YTI2OTkwYWFkZjRmOGE5NDcwNDE3Y2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlP7HvITTmPqOiuck8354AGQ/uklR
uPA4SKuVdRLxaC/zVgRTRlOCF+P2C5skVY6fhiF65E9OAiEjnmV7TKwIPIxatGPd
qpocVvVfZb258DNO3i1Mn9tMBVsf7QbxIcmoHPJthqDkqhH/XvvEYicis62Kthct
CYt/VZJCnwf2S6Qy4A8/YjsHlTYhCbVzu8eeBZvfj0sH+U2SJJUbj95sYr1X4eqi
yiFL7K1hg3Fh1skgH08RD4nuBpzNFl8+QqiiJH45RK/vXHH53pUhCna5v9sFW8a1
qagycprG+lRz1Mr0LTavNRgizJtgB1LQjSFn4R3Rz7sPkCrvx8BqkvQccwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPXE+T5o58nEommQqt9PipRwQXz6MB8GA1UdIwQY
MBaAFI5Va1K45OcJ+labWuNyxuKCZvIyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamxWclVyams1d242VnB0YTQzTEc0b0ptOGpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84OGYyYTUtMjdlOC00NjcxLWE4ZDMt
Y2RlNzAyYzBlYzhiLzEvamxWclVyams1d242VnB0YTQzTEc0b0ptOGpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84OGYyYTUtMjdlOC00NjcxLWE4ZDMtY2RlNzAyYzBlYzhi
LzEvamxWclVyams1d242VnB0YTQzTEc0b0ptOGpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAysnME61L
cRMbxGf/0sSdwH0KjQQEpMzwp9+PZtZ5VlSUR0qwN67TR5zKYOgeUy4tJ036I0Ia
T5ZnP7uYGgT+fbgUEsIxfol8xLR/Q7bwUYLqShiUySHGj/aTT7i4+aTU97YdVkAv
Dl4Lz9eTuvC8AJK+we1Nusto6C60vqills0wIF+1War04Pvrd2ICBN9p/U9Ksvd4
JvEKrURm1mqU8kSuigGpqvo7WUzTDOZYRM4JFKSjc4Sdbryrwlse9hWkhikmTQEu
hAzB3j96vQHctSYPLcwOU9QXcAhdl7GqLLKNGehfxBWbvcDA26urylBMGrvHUzeO
o3wMZvTeXFRo1Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:20:45 2025 by rpki-client