Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
File: j41-pH0bcAw9a3mTWKp-peyos9I.mft (raw, json)
Hash identifier: We5FBksBMxesm1WVGq/mYLnqj9R8zKFxIkzqFoJbuHc=
Subject key identifier: 04:D9:B8:FF:0F:59:D4:3B:9B:86:8C:48:4D:86:7B:3C:38:AE:45:B1
Authority key identifier: 8F:8D:7E:A4:7D:1B:70:0C:3D:6B:79:93:58:AA:7E:A5:EC:A8:B3:D2
Certificate issuer: /CN=8f8d7ea47d1b700c3d6b799358aa7ea5eca8b3d2
Certificate serial: 019923D6032F33FC79B18B92FA84DCBEC5E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
Manifest number: 134D
Signing time: Sun 07 Sep 2025 11:00:51 +0000
Manifest this update: Sun 07 Sep 2025 11:00:51 +0000
Manifest next update: Mon 08 Sep 2025 11:00:51 +0000
Files and hashes: 1: Cq1uwQrHFQPm5xvJu9eVPDpYJfg.roa (hash: N4jarbfAl3jZNu3gv2b+Z58QVCigDfUQbqsuaDI8gko=)
2: j41-pH0bcAw9a3mTWKp-peyos9I.crl (hash: 0UMO+4Qm/SIDxet10oENKyPj9u4VXcnSGQ8t+48fHVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:03:2f:33:fc:79:b1:8b:92:fa:84:dc:be:c5:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f8d7ea47d1b700c3d6b799358aa7ea5eca8b3d2
Validity
Not Before: Sep 7 11:00:51 2025 GMT
Not After : Sep 8 11:00:51 2025 GMT
Subject: CN=04d9b8ff0f59d43b9b868c484d867b3c38ae45b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:35:f4:f3:24:b4:56:78:86:02:4f:dd:94:95:
81:88:3f:6d:de:c3:4c:8b:9d:63:b7:d1:c4:ae:05:
c3:0d:37:3e:d0:23:20:67:6b:87:aa:29:62:f3:09:
1b:2f:60:41:e0:40:66:4d:8f:3c:1d:e6:1f:75:58:
db:0b:fa:01:a3:d8:ca:cb:ce:81:f4:7d:52:43:76:
3a:f2:db:87:cb:3c:74:8c:34:11:e5:b1:68:00:90:
bb:cb:ec:29:b3:a2:5d:4b:69:cf:1f:1d:3d:9b:c0:
49:1e:26:d3:32:8d:82:a9:4a:ed:ba:9f:21:75:61:
f1:2f:a6:1e:59:6d:64:c1:dd:f1:4d:55:c4:b4:0b:
c2:85:70:40:94:22:51:65:ed:83:31:e5:11:f6:de:
4b:61:c7:31:cb:33:94:7f:fc:9e:6a:fb:7b:ec:fc:
bf:c8:b5:93:a6:f3:7d:05:f7:e8:55:ba:af:cd:5e:
9d:3b:2e:7e:80:26:ba:a6:9e:1a:c5:0e:62:78:5a:
a6:db:d3:06:93:8d:8b:36:eb:ee:2a:d6:18:3d:01:
f5:29:bf:4c:c3:0c:e3:5e:59:5b:85:af:7d:b9:dd:
d3:eb:76:88:16:0a:f6:01:95:35:ab:ba:78:9a:85:
53:50:d4:65:a8:ab:7e:e3:93:c5:99:d0:67:80:06:
9e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D9:B8:FF:0F:59:D4:3B:9B:86:8C:48:4D:86:7B:3C:38:AE:45:B1
X509v3 Authority Key Identifier:
keyid:8F:8D:7E:A4:7D:1B:70:0C:3D:6B:79:93:58:AA:7E:A5:EC:A8:B3:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:25:09:3b:1e:a7:50:4a:56:e1:22:92:e7:e6:0f:f5:6a:19:
68:8f:93:12:83:70:29:13:e4:96:23:57:77:83:c3:86:d5:83:
a5:45:f9:f6:ff:ff:0d:dc:19:74:06:a3:3a:ac:81:7e:5b:82:
8b:5f:f2:dc:c8:f9:67:91:11:48:55:b4:cc:36:f4:f7:45:2e:
23:c1:63:b6:5e:c9:46:8c:67:cf:ab:32:a3:86:7e:80:f5:e1:
94:7c:c1:56:e5:0c:c1:a3:d1:c7:c3:80:aa:60:bb:0d:56:6e:
22:7b:39:8d:07:b7:82:4f:7c:f3:3b:7c:cf:20:43:4b:7a:85:
3a:e4:26:f7:03:7d:d2:0f:e8:3e:ef:a1:1f:c7:31:d1:76:f9:
88:39:e2:0d:4a:29:03:6b:77:6c:38:aa:a7:bf:aa:c4:de:ba:
f2:ee:ad:11:50:1a:22:78:58:e3:d4:fa:09:b9:7f:7f:78:7f:
62:33:8b:76:11:f2:a6:6b:a8:f4:0b:73:60:1b:ca:1d:5b:ea:
12:f0:9f:ac:d3:2a:aa:48:d2:84:b0:ab:ee:0b:a1:84:a9:4b:
83:99:eb:88:a1:45:92:40:85:5e:89:af:ac:26:7c:53:cf:8d:
80:10:d8:1c:7f:b3:1e:ec:c5:3b:ea:13:5e:b4:d1:db:ac:81:
1e:55:c7:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkj1gMvM/x5sYuS+oTcvsXlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmOGQ3ZWE0N2QxYjcwMGMzZDZiNzk5MzU4YWE3ZWE1ZWNh
OGIzZDIwHhcNMjUwOTA3MTEwMDUxWhcNMjUwOTA4MTEwMDUxWjAzMTEwLwYDVQQD
EygwNGQ5YjhmZjBmNTlkNDNiOWI4NjhjNDg0ZDg2N2IzYzM4YWU0NWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzX08yS0VniGAk/dlJWBiD9t3sNM
i51jt9HErgXDDTc+0CMgZ2uHqili8wkbL2BB4EBmTY88HeYfdVjbC/oBo9jKy86B
9H1SQ3Y68tuHyzx0jDQR5bFoAJC7y+wps6JdS2nPHx09m8BJHibTMo2CqUrtup8h
dWHxL6YeWW1kwd3xTVXEtAvChXBAlCJRZe2DMeUR9t5LYccxyzOUf/yeavt77Py/
yLWTpvN9BffoVbqvzV6dOy5+gCa6pp4axQ5ieFqm29MGk42LNuvuKtYYPQH1Kb9M
wwzjXllbha99ud3T63aIFgr2AZU1q7p4moVTUNRlqKt+45PFmdBngAaetQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATZuP8PWdQ7m4aMSE2Gezw4rkWxMB8GA1UdIwQY
MBaAFI+NfqR9G3AMPWt5k1iqfqXsqLPSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajQxLXBIMGJjQXc5YTNtVFdLcC1wZXlvczlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82MzE0ZTUtYTk2NC00NGY2LWFkYTEt
MjA1MjBlNmI2MTdhLzEvajQxLXBIMGJjQXc5YTNtVFdLcC1wZXlvczlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC82MzE0ZTUtYTk2NC00NGY2LWFkYTEtMjA1MjBlNmI2MTdh
LzEvajQxLXBIMGJjQXc5YTNtVFdLcC1wZXlvczlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADCUJOx6n
UEpW4SKS5+YP9WoZaI+TEoNwKRPkliNXd4PDhtWDpUX59v//DdwZdAajOqyBfluC
i1/y3Mj5Z5ERSFW0zDb090UuI8Fjtl7JRoxnz6syo4Z+gPXhlHzBVuUMwaPRx8OA
qmC7DVZuIns5jQe3gk988zt8zyBDS3qFOuQm9wN90g/oPu+hH8cx0Xb5iDniDUop
A2t3bDiqp7+qxN668u6tEVAaInhY49T6Cbl/f3h/YjOLdhHypmuo9AtzYBvKHVvq
EvCfrNMqqkjShLCr7guhhKlLg5nriKFFkkCFXomvrCZ8U8+NgBDYHH+zHuzFO+oT
XrTR26yBHlXH4g==
-----END CERTIFICATE-----
Generated at Sun Sep 7 16:14:41 2025 by rpki-client