Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
File: j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft (raw, json)
Hash identifier: iKFJmQbRaDpU9BE+Ypd1PAFRqROXrQq5OzPBJMPhzK0=
Subject key identifier: 56:1B:35:A9:12:47:6A:6D:5D:0F:22:B1:40:94:78:5E:27:F9:F6:E3
Authority key identifier: 8F:F1:C9:8D:3A:77:82:4E:23:6B:2C:4C:DD:93:78:C0:50:9A:3D:E8
Certificate issuer: /CN=8ff1c98d3a77824e236b2c4cdd9378c0509a3de8
Certificate serial: 019747B0B9372BBCC68469FD9C3B00E2E7D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j_HJjTp3gk4jayxM3ZN4wFCaPeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 00:00:53 +0000
Manifest this update: Sat 07 Jun 2025 00:00:53 +0000
Manifest next update: Sun 08 Jun 2025 00:00:53 +0000
Files and hashes: 1: 10WRObO3tmaDpYMoBfmVIGzlnrU.roa (hash: n66l+JhsIf8xYrrxl7QWiJVsW0qqjRpUm2OsP46Hyms=)
2: j_HJjTp3gk4jayxM3ZN4wFCaPeg.crl (hash: zjWyVgcYXLANiXUIv8deqUXeS75JhnHZmluuWLsI1c8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j_HJjTp3gk4jayxM3ZN4wFCaPeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b0:b9:37:2b:bc:c6:84:69:fd:9c:3b:00:e2:e7:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ff1c98d3a77824e236b2c4cdd9378c0509a3de8
Validity
Not Before: Jun 7 00:00:53 2025 GMT
Not After : Jun 8 00:00:53 2025 GMT
Subject: CN=561b35a912476a6d5d0f22b14094785e27f9f6e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1c:11:ae:56:30:08:17:0d:77:6c:c7:d6:8e:
d6:2d:c1:d2:2b:22:1c:26:24:f1:2d:98:70:bf:b5:
d3:5e:aa:e0:96:8e:5b:07:ad:61:77:a9:27:f4:67:
2f:bd:fd:14:2d:6f:62:92:3c:63:d6:09:57:9f:3c:
24:b1:b5:a7:f0:f9:69:78:d5:5b:d9:2b:b1:e5:d2:
1d:53:6c:ae:5d:7e:19:9d:48:be:0e:72:90:8e:ea:
16:91:40:11:53:0e:7d:45:15:92:47:35:5b:29:76:
6e:a4:70:1f:32:76:3a:8b:3b:dd:1c:bd:47:30:49:
ba:5f:40:0a:86:a2:91:40:21:bf:01:2b:53:62:f9:
89:df:7c:51:af:22:85:cf:fe:a2:f3:57:35:37:bb:
75:93:65:fb:4c:fd:73:d3:1e:f8:87:7f:5c:0c:ff:
1b:38:9a:a1:6e:61:da:1d:f8:49:97:87:10:8c:60:
98:df:9b:d2:fa:ed:b5:1b:b3:32:61:a4:6b:fd:d6:
5b:44:05:ee:79:97:f2:1c:d0:b0:72:59:f5:d7:aa:
1f:ee:20:9e:06:cc:58:da:2d:0f:80:9b:f1:04:8c:
71:5e:7e:33:81:10:35:fe:ea:33:15:6e:15:1b:70:
5c:68:c4:99:d8:bd:74:53:e2:41:07:75:ad:d4:88:
d7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1B:35:A9:12:47:6A:6D:5D:0F:22:B1:40:94:78:5E:27:F9:F6:E3
X509v3 Authority Key Identifier:
keyid:8F:F1:C9:8D:3A:77:82:4E:23:6B:2C:4C:DD:93:78:C0:50:9A:3D:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_HJjTp3gk4jayxM3ZN4wFCaPeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:a9:e6:09:ce:d8:57:2a:a8:85:8b:be:fb:c8:8d:8a:db:be:
23:1c:3d:df:b9:aa:56:69:e0:52:2e:37:42:47:c2:9a:9c:c9:
55:10:a1:b5:3e:0d:40:fe:8f:10:6f:db:3f:af:20:80:17:00:
2f:3e:5b:45:ef:80:00:2f:7c:1b:c3:e8:61:10:dd:d1:d0:5e:
9f:b0:13:93:33:f6:1b:04:8c:63:6c:17:40:2a:c3:8b:1a:93:
0a:88:b9:0d:d7:4d:e9:d8:2e:f5:5c:c6:ec:8c:13:45:e5:43:
3b:e5:65:db:bd:ae:25:d0:0e:f7:40:c2:e1:24:ef:92:4a:ba:
1a:4d:89:dd:64:ff:15:e7:88:79:5a:21:88:c3:d8:45:a0:00:
b8:5a:31:e0:09:f3:75:06:b5:4f:b7:66:e3:30:23:54:12:60:
5f:95:d6:ad:6b:18:c5:68:2e:2b:b6:f9:82:54:e0:db:ec:fc:
f0:77:68:4a:6a:ad:00:0f:21:86:1f:c9:f3:f1:df:44:94:65:
37:42:15:bf:a6:5d:66:1d:77:71:fc:a2:3b:05:95:e9:c4:ed:
79:42:62:15:75:11:fd:87:94:e4:0a:f3:09:72:d0:4e:2a:85:
33:82:47:1a:de:2c:93:2b:38:f2:34:cf:90:ea:1a:2e:f8:f0:
d2:f2:79:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHsLk3K7zGhGn9nDsA4ufTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmZjFjOThkM2E3NzgyNGUyMzZiMmM0Y2RkOTM3OGMwNTA5
YTNkZTgwHhcNMjUwNjA3MDAwMDUzWhcNMjUwNjA4MDAwMDUzWjAzMTEwLwYDVQQD
Eyg1NjFiMzVhOTEyNDc2YTZkNWQwZjIyYjE0MDk0Nzg1ZTI3ZjlmNmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxwRrlYwCBcNd2zH1o7WLcHSKyIc
JiTxLZhwv7XTXqrglo5bB61hd6kn9Gcvvf0ULW9ikjxj1glXnzwksbWn8PlpeNVb
2Sux5dIdU2yuXX4ZnUi+DnKQjuoWkUARUw59RRWSRzVbKXZupHAfMnY6izvdHL1H
MEm6X0AKhqKRQCG/AStTYvmJ33xRryKFz/6i81c1N7t1k2X7TP1z0x74h39cDP8b
OJqhbmHaHfhJl4cQjGCY35vS+u21G7MyYaRr/dZbRAXueZfyHNCwcln116of7iCe
BsxY2i0PgJvxBIxxXn4zgRA1/uozFW4VG3BcaMSZ2L10U+JBB3Wt1IjXLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFYbNakSR2ptXQ8isUCUeF4n+fbjMB8GA1UdIwQY
MBaAFI/xyY06d4JOI2ssTN2TeMBQmj3oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQval9ISmpUcDNnazRqYXl4TTNaTjR3RkNhUGVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9kNTA1YTUtMjQzZC00NjE5LWE2ZmEt
ZmJkNzAzZWU2YzkzLzEval9ISmpUcDNnazRqYXl4TTNaTjR3RkNhUGVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9kNTA1YTUtMjQzZC00NjE5LWE2ZmEtZmJkNzAzZWU2Yzkz
LzEval9ISmpUcDNnazRqYXl4TTNaTjR3RkNhUGVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAqnmCc7Y
VyqohYu++8iNitu+Ixw937mqVmngUi43QkfCmpzJVRChtT4NQP6PEG/bP68ggBcA
Lz5bRe+AAC98G8PoYRDd0dBen7ATkzP2GwSMY2wXQCrDixqTCoi5DddN6dgu9VzG
7IwTReVDO+Vl272uJdAO90DC4STvkkq6Gk2J3WT/FeeIeVohiMPYRaAAuFox4Anz
dQa1T7dm4zAjVBJgX5XWrWsYxWguK7b5glTg2+z88HdoSmqtAA8hhh/J8/HfRJRl
N0IVv6ZdZh13cfyiOwWV6cTteUJiFXUR/YeU5ArzCXLQTiqFM4JHGt4skys48jTP
kOoaLvjw0vJ5nQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 10:33:32 2025 by rpki-client