Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
File: j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft (raw, json)
Hash identifier: aVKaTawfpUjQa3kA+HzyIeMkCvKgWqCOM/MCPk5D1RM=
Subject key identifier: 20:02:05:95:51:1B:0C:53:1D:D6:56:2D:8C:92:5C:4B:7C:05:7A:78
Authority key identifier: 8F:F1:C9:8D:3A:77:82:4E:23:6B:2C:4C:DD:93:78:C0:50:9A:3D:E8
Certificate issuer: /CN=8ff1c98d3a77824e236b2c4cdd9378c0509a3de8
Certificate serial: 019922C34F79801BB31E599A1BD6D2DB367B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j_HJjTp3gk4jayxM3ZN4wFCaPeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 06:00:49 +0000
Manifest this update: Sun 07 Sep 2025 06:00:49 +0000
Manifest next update: Mon 08 Sep 2025 06:00:49 +0000
Files and hashes: 1: 10WRObO3tmaDpYMoBfmVIGzlnrU.roa (hash: n66l+JhsIf8xYrrxl7QWiJVsW0qqjRpUm2OsP46Hyms=)
2: j_HJjTp3gk4jayxM3ZN4wFCaPeg.crl (hash: A6dB1A24bjeWLQyo5Fi0yyaHgeiuWpC4A1+/1UZq6p4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j_HJjTp3gk4jayxM3ZN4wFCaPeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:4f:79:80:1b:b3:1e:59:9a:1b:d6:d2:db:36:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ff1c98d3a77824e236b2c4cdd9378c0509a3de8
Validity
Not Before: Sep 7 06:00:49 2025 GMT
Not After : Sep 8 06:00:49 2025 GMT
Subject: CN=20020595511b0c531dd6562d8c925c4b7c057a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a9:b8:fe:44:0b:b4:55:5a:ef:78:03:67:c2:
f5:31:42:16:e1:51:da:fc:16:73:31:4c:28:cc:7d:
98:f1:52:91:11:b0:eb:63:64:c0:b2:de:b0:da:c5:
7e:81:0f:4e:2b:bc:dd:91:97:56:84:20:e3:8f:9d:
52:46:ab:6a:50:0e:f0:4b:54:ef:62:47:99:cb:c7:
1a:3e:13:ec:d4:05:d5:52:ae:f8:56:b1:2b:a3:9e:
f2:53:5a:04:09:7a:c2:ef:c5:b7:e4:97:54:ce:4b:
16:76:68:2f:f5:1c:8c:db:39:65:41:a8:17:7d:52:
17:b1:43:8d:2f:2a:b1:bc:3c:ae:e4:b2:d5:f1:52:
10:c7:3d:0e:33:23:97:5c:f2:98:03:ea:68:7a:97:
b2:27:24:da:9f:2f:b7:aa:57:1e:7d:3f:45:c1:91:
ea:2d:c8:26:7b:6b:b5:87:87:b1:da:dd:47:81:2e:
1f:e9:9b:e0:27:e8:e1:af:60:c1:14:a9:53:4c:48:
a6:69:0f:bf:e6:2a:84:38:4e:73:8d:b5:12:f5:c0:
c2:64:e7:be:16:ef:c3:07:79:7d:14:a1:67:2b:33:
90:15:d3:e5:0d:55:c3:96:50:21:a4:35:f0:7a:b4:
9e:c7:e7:e3:c7:16:e9:f7:58:d5:13:ad:46:ac:b5:
d3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:02:05:95:51:1B:0C:53:1D:D6:56:2D:8C:92:5C:4B:7C:05:7A:78
X509v3 Authority Key Identifier:
keyid:8F:F1:C9:8D:3A:77:82:4E:23:6B:2C:4C:DD:93:78:C0:50:9A:3D:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_HJjTp3gk4jayxM3ZN4wFCaPeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:67:20:19:87:8b:2b:83:e6:e3:9d:0b:40:2f:ea:da:9d:3b:
d1:25:77:a4:42:6a:4c:79:9e:55:bc:79:f2:44:e5:3e:5e:d2:
7d:f1:ec:56:de:69:2d:9a:da:f5:e1:b7:c7:f2:7c:0d:b6:07:
65:ca:e3:a9:74:08:1b:d5:06:de:9e:39:d6:9b:2a:1a:0d:20:
00:2d:9a:41:a1:57:20:35:2c:53:07:a8:62:67:96:9b:8b:68:
b2:e2:27:c0:cf:9b:4d:81:3d:c9:80:31:f0:d0:bc:79:54:77:
35:14:0c:9b:f5:65:96:16:38:34:4a:31:53:08:3e:70:8b:0a:
2a:6f:6e:c2:1c:fa:42:7c:c6:de:08:85:81:ad:d8:a3:6c:ec:
94:dc:97:7f:64:b8:24:b2:45:ac:fa:2a:ed:33:e6:44:4c:42:
78:58:a7:c5:8a:3f:19:b6:24:b1:ed:5a:9a:4c:94:9f:6e:c0:
a7:9f:3e:96:fb:cb:08:cc:bd:8b:a2:10:e7:ca:67:44:f7:8e:
79:5f:44:d2:96:d9:e5:af:06:b0:86:99:9c:d7:eb:2b:88:97:
80:b2:15:66:31:c2:05:66:3f:af:70:da:cb:03:3b:fc:60:02:
b2:8a:15:be:37:c3:8a:e4:3d:7b:9c:78:c1:08:fd:f1:68:f2:
e7:aa:f6:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiw095gBuzHlmaG9bS2zZ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmZjFjOThkM2E3NzgyNGUyMzZiMmM0Y2RkOTM3OGMwNTA5
YTNkZTgwHhcNMjUwOTA3MDYwMDQ5WhcNMjUwOTA4MDYwMDQ5WjAzMTEwLwYDVQQD
EygyMDAyMDU5NTUxMWIwYzUzMWRkNjU2MmQ4YzkyNWM0YjdjMDU3YTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzam4/kQLtFVa73gDZ8L1MUIW4VHa
/BZzMUwozH2Y8VKREbDrY2TAst6w2sV+gQ9OK7zdkZdWhCDjj51SRqtqUA7wS1Tv
YkeZy8caPhPs1AXVUq74VrEro57yU1oECXrC78W35JdUzksWdmgv9RyM2zllQagX
fVIXsUONLyqxvDyu5LLV8VIQxz0OMyOXXPKYA+poepeyJyTany+3qlcefT9FwZHq
Lcgme2u1h4ex2t1HgS4f6ZvgJ+jhr2DBFKlTTEimaQ+/5iqEOE5zjbUS9cDCZOe+
Fu/DB3l9FKFnKzOQFdPlDVXDllAhpDXwerSex+fjxxbp91jVE61GrLXTSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCACBZVRGwxTHdZWLYySXEt8BXp4MB8GA1UdIwQY
MBaAFI/xyY06d4JOI2ssTN2TeMBQmj3oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQval9ISmpUcDNnazRqYXl4TTNaTjR3RkNhUGVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9kNTA1YTUtMjQzZC00NjE5LWE2ZmEt
ZmJkNzAzZWU2YzkzLzEval9ISmpUcDNnazRqYXl4TTNaTjR3RkNhUGVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9kNTA1YTUtMjQzZC00NjE5LWE2ZmEtZmJkNzAzZWU2Yzkz
LzEval9ISmpUcDNnazRqYXl4TTNaTjR3RkNhUGVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAWcgGYeL
K4Pm450LQC/q2p070SV3pEJqTHmeVbx58kTlPl7SffHsVt5pLZra9eG3x/J8DbYH
ZcrjqXQIG9UG3p451psqGg0gAC2aQaFXIDUsUweoYmeWm4tosuInwM+bTYE9yYAx
8NC8eVR3NRQMm/VllhY4NEoxUwg+cIsKKm9uwhz6QnzG3giFga3Yo2zslNyXf2S4
JLJFrPoq7TPmRExCeFinxYo/GbYkse1amkyUn27Ap58+lvvLCMy9i6IQ58pnRPeO
eV9E0pbZ5a8GsIaZnNfrK4iXgLIVZjHCBWY/r3DaywM7/GACsooVvjfDiuQ9e5x4
wQj98Wjy56r2Qg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:27 2025 by rpki-client