Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft
File: jb7S38YJhwkqB6Dty0arFMv3QxI.mft (raw, json)
Hash identifier: mmu3W4UUV9viS9PhgQVfVrtQ6zNUxrlg83WB5cBn46E=
Subject key identifier: 9E:EB:06:3C:6E:87:EA:77:A0:C3:D1:C2:97:D6:21:C2:CF:B1:6C:8D
Authority key identifier: 8D:BE:D2:DF:C6:09:87:09:2A:07:A0:ED:CB:46:AB:14:CB:F7:43:12
Certificate issuer: /CN=8dbed2dfc60987092a07a0edcb46ab14cbf74312
Certificate serial: 019935A57CC632D78A70BCCB9CC12CCAC04A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft
Manifest number: 11D6
Signing time: Wed 10 Sep 2025 22:01:01 +0000
Manifest this update: Wed 10 Sep 2025 22:01:01 +0000
Manifest next update: Thu 11 Sep 2025 22:01:01 +0000
Files and hashes: 1: TJNsPm3cbta4SQWCq5-FtGHmun4.roa (hash: /493UDv5vGkPWe3z6b3+uF0MkKOjrmJEUEa2xUPVozs=)
2: ZZHa3B2vDiatqWBi2tEDKV0gImw.roa (hash: umPrB29FpLkve01nKipglkcLKOaJtGMVXwoyXB3BjP4=)
3: jb7S38YJhwkqB6Dty0arFMv3QxI.crl (hash: 8h5VL3t/WfEzY4D7hko2qEXTIxBSkYETEmoczbIDiZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:a5:7c:c6:32:d7:8a:70:bc:cb:9c:c1:2c:ca:c0:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dbed2dfc60987092a07a0edcb46ab14cbf74312
Validity
Not Before: Sep 10 22:01:01 2025 GMT
Not After : Sep 11 22:01:01 2025 GMT
Subject: CN=9eeb063c6e87ea77a0c3d1c297d621c2cfb16c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b4:35:2e:23:5a:02:10:f6:85:5a:17:5d:c1:
ee:20:f5:3c:0f:4c:23:33:dd:8a:00:ee:de:04:91:
df:45:f7:e3:85:9b:c5:91:38:06:d4:00:c0:40:9a:
0e:f5:65:71:cd:db:b2:77:d8:d4:66:3d:72:2b:16:
ca:da:29:4e:29:6d:fc:11:8e:5d:3c:e5:0e:d2:3d:
b0:5e:68:b5:18:45:61:ae:98:55:f6:1a:49:73:92:
ac:af:20:da:c4:a6:c7:d3:78:e0:10:13:ec:c4:76:
a7:e9:66:31:13:4e:1a:60:d4:7a:bc:48:91:ff:fa:
95:11:0f:5d:c1:fa:fd:cd:27:93:9d:70:20:97:35:
c1:57:e4:d2:55:79:a4:c5:14:dd:17:38:54:55:b2:
4d:2e:9c:f2:d5:34:54:e6:9c:02:1d:bb:60:78:29:
72:ba:9d:8e:48:2e:8d:08:0d:fb:ed:c4:cc:8d:62:
44:36:2a:e5:eb:07:b5:e1:34:cf:b9:80:e4:99:44:
cc:9e:68:90:f6:88:66:d6:38:f0:9b:5a:8c:16:28:
36:12:cf:43:bb:64:d1:f3:66:1b:b2:9d:ae:23:29:
ae:5b:76:c0:2e:77:e8:82:82:ed:8c:a7:65:27:a5:
47:72:89:a0:ae:6d:86:69:9b:65:43:fc:18:55:60:
de:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:EB:06:3C:6E:87:EA:77:A0:C3:D1:C2:97:D6:21:C2:CF:B1:6C:8D
X509v3 Authority Key Identifier:
keyid:8D:BE:D2:DF:C6:09:87:09:2A:07:A0:ED:CB:46:AB:14:CB:F7:43:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:0c:1b:ae:89:31:d6:f1:bf:6f:3d:48:21:55:8c:70:b9:a6:
01:27:7d:f6:7b:bb:1e:dc:84:e4:54:90:0e:93:b2:10:7e:47:
8d:17:b4:61:2f:0c:71:44:02:ce:b5:38:8c:42:08:e8:78:2a:
93:a7:ce:32:e4:7d:0f:cb:e9:75:15:71:1f:ef:07:2c:db:b9:
8b:47:45:82:0d:a5:cf:38:da:f5:90:16:0d:c1:2d:f7:00:74:
88:85:19:39:99:4c:84:6c:1c:70:45:3a:6e:d5:e4:46:0c:37:
4f:9e:1a:de:0b:4f:d7:84:5c:47:f2:75:c2:4d:52:20:86:9b:
bd:17:12:5f:20:5e:50:ae:c6:34:69:fd:b1:86:ca:aa:21:4d:
a3:49:ae:a3:f7:83:0b:77:c6:14:82:b0:09:9d:88:16:ff:a3:
47:85:56:05:32:1e:29:2b:0a:58:75:01:a8:32:be:51:54:2f:
dc:48:58:a0:f6:bc:35:d3:df:cd:6f:ce:27:90:45:03:cb:a8:
c5:4a:4a:2b:3f:5f:a2:91:ed:87:55:3e:22:fe:e7:35:16:38:
9a:e8:ac:7c:fe:a7:57:0a:69:f2:29:c7:8f:d9:24:40:4e:86:
bc:a6:03:51:c3:c7:2d:51:04:d5:02:80:6e:40:fb:c2:5c:40:
8c:59:70:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk1pXzGMteKcLzLnMEsysBKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYmVkMmRmYzYwOTg3MDkyYTA3YTBlZGNiNDZhYjE0Y2Jm
NzQzMTIwHhcNMjUwOTEwMjIwMTAxWhcNMjUwOTExMjIwMTAxWjAzMTEwLwYDVQQD
Eyg5ZWViMDYzYzZlODdlYTc3YTBjM2QxYzI5N2Q2MjFjMmNmYjE2YzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbQ1LiNaAhD2hVoXXcHuIPU8D0wj
M92KAO7eBJHfRffjhZvFkTgG1ADAQJoO9WVxzduyd9jUZj1yKxbK2ilOKW38EY5d
POUO0j2wXmi1GEVhrphV9hpJc5KsryDaxKbH03jgEBPsxHan6WYxE04aYNR6vEiR
//qVEQ9dwfr9zSeTnXAglzXBV+TSVXmkxRTdFzhUVbJNLpzy1TRU5pwCHbtgeCly
up2OSC6NCA377cTMjWJENirl6we14TTPuYDkmUTMnmiQ9ohm1jjwm1qMFig2Es9D
u2TR82Ybsp2uIymuW3bALnfogoLtjKdlJ6VHcomgrm2GaZtlQ/wYVWDeywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ7rBjxuh+p3oMPRwpfWIcLPsWyNMB8GA1UdIwQY
MBaAFI2+0t/GCYcJKgeg7ctGqxTL90MSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamI3UzM4WUpod2txQjZEdHkwYXJGTXYzUXhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8wY2M3MTItYTY2NS00OGQ3LWIzZDQt
ZjBmOGIwNzc1NTIzLzEvamI3UzM4WUpod2txQjZEdHkwYXJGTXYzUXhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8wY2M3MTItYTY2NS00OGQ3LWIzZDQtZjBmOGIwNzc1NTIz
LzEvamI3UzM4WUpod2txQjZEdHkwYXJGTXYzUXhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVQwbrokx
1vG/bz1IIVWMcLmmASd99nu7HtyE5FSQDpOyEH5HjRe0YS8McUQCzrU4jEII6Hgq
k6fOMuR9D8vpdRVxH+8HLNu5i0dFgg2lzzja9ZAWDcEt9wB0iIUZOZlMhGwccEU6
btXkRgw3T54a3gtP14RcR/J1wk1SIIabvRcSXyBeUK7GNGn9sYbKqiFNo0muo/eD
C3fGFIKwCZ2IFv+jR4VWBTIeKSsKWHUBqDK+UVQv3EhYoPa8NdPfzW/OJ5BFA8uo
xUpKKz9fopHth1U+Iv7nNRY4muisfP6nVwpp8inHj9kkQE6GvKYDUcPHLVEE1QKA
bkD7wlxAjFlwQQ==
-----END CERTIFICATE-----
Generated at Thu Sep 11 00:00:31 2025 by rpki-client