Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft
File: J5O96Uauk208rME2pfMjnt8kMfQ.mft (raw, json)
Hash identifier: 2vw/oxMGo9p/4IC0jx4TxXyuiprQYyQgfOGVlj4Jx+g=
Subject key identifier: D3:3B:9D:08:13:B5:D6:C6:B2:51:3C:24:DC:3E:DA:BA:2A:96:8F:49
Authority key identifier: 27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4
Certificate issuer: /CN=2793bde946ae936d3cacc136a5f3239edf2431f4
Certificate serial: 01995E6A1DE91E04A2F83CD029C0F13014C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft
Manifest number: 1146
Signing time: Thu 18 Sep 2025 20:00:36 +0000
Manifest this update: Thu 18 Sep 2025 20:00:36 +0000
Manifest next update: Fri 19 Sep 2025 20:00:36 +0000
Files and hashes: 1: 7E5LSfCOnSbjv-AVC1nxJJ66F4U.roa (hash: /aIHlfM99fuCwlGxN5/ehUDLpA24+vyDEzZMgylijKg=)
2: 9UkCw4b12dxaFQuWu2BWrAq18cs.roa (hash: uCtVg42ZHDXRQtsH4hBM45QWmlQhdogsHZ3bdPv3hOo=)
3: J5O96Uauk208rME2pfMjnt8kMfQ.crl (hash: 6WV0j3Xt7wSyvtNiCUQ8PNJpZNQthDEwnXLAXi9easQ=)
4: Lzxta0jd7ucvehlsvKMLCGGj4SU.roa (hash: r2f4C1ycLWis+wP1tatuwRPmqShhZKPPE1FJIgRZw1w=)
5: ONAb3aa9aLqBAH1nZ2X-0Z8C9Vk.roa (hash: toxq5hd68ktpiB99iFz4dER/H0vTabk/sYSInN7166g=)
6: P_96blpHfAQM3voIBaqDmBhs-8E.roa (hash: R9hyFEujTVmaNvCmjtuWK6MWoWwhFPOAcCmIzjoPwgM=)
7: ZtPUyk_TNktoLC4Kb0JqAQbyro0.roa (hash: AOW26RlAnZ0u9tHghS8csH7uDfnP5ryVT/Rp+gEYBlU=)
8: ulUXrUDPWH1jBF3XUvGFq6u9UBA.roa (hash: JO8Wuf/EekqDvWZVFwjNa4p80lEXLhg9dIYBQ3yRrjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5e:6a:1d:e9:1e:04:a2:f8:3c:d0:29:c0:f1:30:14:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2793bde946ae936d3cacc136a5f3239edf2431f4
Validity
Not Before: Sep 18 20:00:36 2025 GMT
Not After : Sep 19 20:00:36 2025 GMT
Subject: CN=d33b9d0813b5d6c6b2513c24dc3edaba2a968f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cd:5d:8a:0a:69:4e:f7:51:c6:86:d0:d4:b2:
73:66:69:e8:98:ee:36:0b:b4:bd:65:dd:e7:56:1e:
ea:f1:18:af:d7:05:55:54:5a:19:21:9e:84:fb:84:
65:f9:b9:ec:18:d5:10:75:c3:94:b4:0f:e8:1c:e3:
ab:d6:06:4f:5e:f2:d0:b0:b4:56:31:c3:a9:47:3a:
a3:ed:3f:d1:fc:ef:16:e1:90:b6:a9:c7:c6:e7:20:
86:d9:00:0d:17:96:4a:b8:ab:65:17:a9:52:37:fc:
5b:dd:28:39:75:89:82:bc:8a:1b:97:fc:05:5f:a9:
08:fe:83:ed:b9:cb:ac:9f:0e:7c:e2:cc:68:40:a2:
df:b4:2b:16:e0:cf:73:34:a1:a6:1e:9c:cc:bc:a8:
fb:15:a0:63:74:f7:74:17:4e:7c:01:31:23:59:0a:
88:3d:a5:ff:ea:ba:8c:39:76:bd:e3:e6:d1:35:7c:
26:ca:8c:0f:c2:97:b6:ea:8f:11:cc:c8:57:d2:70:
d4:6f:57:f1:12:8b:e2:52:cb:53:5d:81:13:e7:90:
2d:75:5d:13:42:dd:02:9b:92:74:8b:03:51:1c:1b:
57:3b:74:6c:a3:ad:2a:42:f6:47:ed:fd:4a:07:1e:
52:8d:44:eb:bb:d7:c8:58:32:ee:fd:9a:0e:63:0f:
eb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3B:9D:08:13:B5:D6:C6:B2:51:3C:24:DC:3E:DA:BA:2A:96:8F:49
X509v3 Authority Key Identifier:
keyid:27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:b4:b7:91:7a:2a:c1:b8:e2:e7:3c:45:e8:e0:cb:49:55:df:
55:10:70:73:cb:f4:4f:19:14:c1:61:fb:97:21:85:e1:2d:57:
68:43:4b:3e:e0:b1:9d:29:9d:86:44:b4:3c:11:91:93:df:4c:
9d:da:40:fc:04:fe:97:53:bb:78:6a:6e:62:0f:08:d4:83:f8:
1b:9e:6d:71:17:d6:37:bf:5d:f1:8b:52:49:64:64:2f:2a:2e:
f5:8c:24:0e:b7:38:d9:1b:8a:b2:e5:08:1c:c5:fd:5f:a9:82:
bd:46:8a:4e:d3:3a:7f:c1:4e:99:77:35:e2:bf:e7:99:0a:fe:
41:b2:b2:96:cf:ba:5d:44:b6:05:25:58:79:c4:9b:18:91:61:
85:eb:3f:97:74:b8:e6:99:05:6a:31:7a:57:2f:ab:f1:cb:88:
bb:6b:5a:39:53:3e:01:ec:f9:e9:c5:56:b2:4d:b0:dd:f6:59:
82:c5:49:30:f8:71:db:e3:ce:40:ad:0e:dd:17:e7:4d:0f:4d:
73:a7:61:d4:7a:2a:7d:75:9b:4f:0f:a0:b9:fc:bc:9a:bd:8f:
d4:3c:17:9d:1a:38:46:68:a0:f1:be:2a:f7:28:7c:e1:b6:14:
e6:69:55:81:f0:58:79:88:f2:f9:74:a7:5d:87:26:c0:df:c0:
d4:c3:6d:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZleah3pHgSi+DzQKcDxMBTJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OTNiZGU5NDZhZTkzNmQzY2FjYzEzNmE1ZjMyMzllZGYy
NDMxZjQwHhcNMjUwOTE4MjAwMDM2WhcNMjUwOTE5MjAwMDM2WjAzMTEwLwYDVQQD
EyhkMzNiOWQwODEzYjVkNmM2YjI1MTNjMjRkYzNlZGFiYTJhOTY4ZjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2M1digppTvdRxobQ1LJzZmnomO42
C7S9Zd3nVh7q8Riv1wVVVFoZIZ6E+4Rl+bnsGNUQdcOUtA/oHOOr1gZPXvLQsLRW
McOpRzqj7T/R/O8W4ZC2qcfG5yCG2QANF5ZKuKtlF6lSN/xb3Sg5dYmCvIobl/wF
X6kI/oPtucusnw584sxoQKLftCsW4M9zNKGmHpzMvKj7FaBjdPd0F058ATEjWQqI
PaX/6rqMOXa94+bRNXwmyowPwpe26o8RzMhX0nDUb1fxEoviUstTXYET55AtdV0T
Qt0Cm5J0iwNRHBtXO3Rso60qQvZH7f1KBx5SjUTru9fIWDLu/ZoOYw/rTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNM7nQgTtdbGslE8JNw+2roqlo9JMB8GA1UdIwQY
MBaAFCeTvelGrpNtPKzBNqXzI57fJDH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjVPOTZVYXVrMjA4ck1FMnBmTWpudDhrTWZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9iZjU4ZGEtYTlkMi00MjFhLWI0M2Et
OTJjM2JmNzRhOTdiLzEvSjVPOTZVYXVrMjA4ck1FMnBmTWpudDhrTWZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9iZjU4ZGEtYTlkMi00MjFhLWI0M2EtOTJjM2JmNzRhOTdi
LzEvSjVPOTZVYXVrMjA4ck1FMnBmTWpudDhrTWZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAobS3kXoq
wbji5zxF6ODLSVXfVRBwc8v0TxkUwWH7lyGF4S1XaENLPuCxnSmdhkS0PBGRk99M
ndpA/AT+l1O7eGpuYg8I1IP4G55tcRfWN79d8YtSSWRkLyou9YwkDrc42RuKsuUI
HMX9X6mCvUaKTtM6f8FOmXc14r/nmQr+QbKyls+6XUS2BSVYecSbGJFhhes/l3S4
5pkFajF6Vy+r8cuIu2taOVM+Aez56cVWsk2w3fZZgsVJMPhx2+POQK0O3RfnTQ9N
c6dh1HoqfXWbTw+gufy8mr2P1DwXnRo4Rmig8b4q9yh84bYU5mlVgfBYeYjy+XSn
XYcmwN/A1MNtBg==
-----END CERTIFICATE-----
Generated at Fri Sep 19 04:46:35 2025 by rpki-client