Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft
File: JKMLYNI9dOgia81eFdxb93CtMH4.mft (raw, json)
Hash identifier: mW+EOg0UtXSDjLTv0ctTnG3WQ93wLiDnMT0LHKI0ofk=
Subject key identifier: 79:0A:0B:4A:35:66:74:51:1A:04:60:C1:C6:F5:BE:0A:DB:06:60:F0
Authority key identifier: 24:A3:0B:60:D2:3D:74:E8:22:6B:CD:5E:15:DC:5B:F7:70:AD:30:7E
Certificate issuer: /CN=24a30b60d23d74e8226bcd5e15dc5bf770ad307e
Certificate serial: 019923D5BC53262D45CA31EEB8F99CB1A762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKMLYNI9dOgia81eFdxb93CtMH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 11:00:33 +0000
Manifest this update: Sun 07 Sep 2025 11:00:33 +0000
Manifest next update: Mon 08 Sep 2025 11:00:33 +0000
Files and hashes: 1: Cz3faV4D4mPRJzrOkBuxrQDfxkU.roa (hash: kLJ19pvLEfn+3aegz32dVtHoMMSBCouRhdwvdRrL0So=)
2: JKMLYNI9dOgia81eFdxb93CtMH4.crl (hash: sverswnSGowGZAbn91hDEbZwG2G6PTVNPSGNiHRBbhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKMLYNI9dOgia81eFdxb93CtMH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:bc:53:26:2d:45:ca:31:ee:b8:f9:9c:b1:a7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a30b60d23d74e8226bcd5e15dc5bf770ad307e
Validity
Not Before: Sep 7 11:00:33 2025 GMT
Not After : Sep 8 11:00:33 2025 GMT
Subject: CN=790a0b4a356674511a0460c1c6f5be0adb0660f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:31:dd:40:c6:81:12:e3:66:a3:40:79:90:b8:
6b:5f:cd:b9:5f:2d:8d:22:dd:a1:f6:be:c2:e3:56:
d1:dd:e7:cc:b7:4e:dc:6c:ca:fe:ef:a5:cc:5b:96:
d0:9e:17:a8:58:a3:e9:21:dc:8f:40:3c:21:77:23:
d7:f0:79:6e:cf:93:f8:f7:1f:1c:c8:0a:43:1a:ef:
e1:fc:84:56:3e:f0:38:fe:fd:ed:ef:68:39:c5:07:
f5:78:f6:bf:02:99:9d:19:79:7c:3b:e5:f6:a9:f7:
26:11:d5:81:72:80:8f:87:04:62:3c:45:58:b1:c1:
37:74:c2:2c:11:52:ee:35:5b:71:f5:e4:e0:95:46:
fa:0e:33:f2:82:d8:1e:19:1d:4d:4b:51:80:a3:2f:
3e:ee:bd:ba:f5:f5:0d:1d:99:bd:10:d4:a1:22:48:
64:ee:fe:ae:9d:0d:0a:46:df:76:1c:22:f4:0b:c4:
4e:7b:77:54:62:ec:6b:e6:50:91:b0:b2:8a:ab:88:
e8:34:2a:a7:2f:38:6b:e8:dd:b6:39:2a:89:40:3f:
f4:2b:fc:49:35:aa:df:f0:59:fa:5b:0f:b3:72:f1:
4f:b8:75:0b:17:79:27:c7:3d:cb:87:32:ae:62:a3:
31:b3:b3:95:84:6e:a4:7e:57:a7:44:3d:c6:6d:ed:
a7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:0A:0B:4A:35:66:74:51:1A:04:60:C1:C6:F5:BE:0A:DB:06:60:F0
X509v3 Authority Key Identifier:
keyid:24:A3:0B:60:D2:3D:74:E8:22:6B:CD:5E:15:DC:5B:F7:70:AD:30:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKMLYNI9dOgia81eFdxb93CtMH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:cc:72:80:39:28:d7:21:10:94:e1:05:fc:32:18:19:48:30:
f6:c4:0f:9b:87:5e:44:cb:ff:43:e8:b5:03:b6:4d:a0:59:17:
df:e7:e1:ea:ed:ad:54:a9:76:8c:1b:67:55:f6:eb:fd:25:16:
c7:ad:54:44:b7:a5:45:46:4a:ec:9d:b4:db:2b:87:2f:b0:95:
2e:50:bf:ec:b2:99:45:30:8d:70:1f:bc:1f:cb:10:2e:a6:29:
d5:0f:14:12:dc:7e:f8:4d:34:2a:fd:fb:e1:2a:a8:d4:39:08:
b2:a4:c7:0a:c0:65:db:05:1c:05:8f:a6:6c:77:f7:b3:99:e1:
2b:8d:8e:9d:28:29:03:82:34:22:32:42:62:d6:53:c5:8e:6c:
ef:7f:40:59:2a:3d:68:ba:d7:0c:40:69:5c:7d:ff:f9:a5:62:
80:74:7a:f0:39:93:59:19:ce:cc:15:34:59:e2:31:a3:80:cb:
4c:cc:71:2a:85:f9:55:37:9e:3a:bd:62:35:f7:f1:e7:0c:f9:
6b:95:6c:8b:67:df:fa:7a:74:18:b1:0e:28:66:b4:8d:7c:a7:
d7:3e:70:9f:7b:9d:4f:0f:1f:42:52:62:c8:12:6e:b3:dd:a6:
24:2a:f8:f7:3c:8d:63:bd:25:1b:5f:50:a7:a0:ce:97:74:99:
15:74:5a:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkj1bxTJi1FyjHuuPmcsadiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YTMwYjYwZDIzZDc0ZTgyMjZiY2Q1ZTE1ZGM1YmY3NzBh
ZDMwN2UwHhcNMjUwOTA3MTEwMDMzWhcNMjUwOTA4MTEwMDMzWjAzMTEwLwYDVQQD
Eyg3OTBhMGI0YTM1NjY3NDUxMWEwNDYwYzFjNmY1YmUwYWRiMDY2MGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jHdQMaBEuNmo0B5kLhrX825Xy2N
It2h9r7C41bR3efMt07cbMr+76XMW5bQnheoWKPpIdyPQDwhdyPX8Hluz5P49x8c
yApDGu/h/IRWPvA4/v3t72g5xQf1ePa/ApmdGXl8O+X2qfcmEdWBcoCPhwRiPEVY
scE3dMIsEVLuNVtx9eTglUb6DjPygtgeGR1NS1GAoy8+7r269fUNHZm9ENShIkhk
7v6unQ0KRt92HCL0C8ROe3dUYuxr5lCRsLKKq4joNCqnLzhr6N22OSqJQD/0K/xJ
Narf8Fn6Ww+zcvFPuHULF3knxz3LhzKuYqMxs7OVhG6kflenRD3Gbe2n0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHkKC0o1ZnRRGgRgwcb1vgrbBmDwMB8GA1UdIwQY
MBaAFCSjC2DSPXToImvNXhXcW/dwrTB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSktNTFlOSTlkT2dpYTgxZUZkeGI5M0N0TUg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82YTNkM2UtMjVmZC00MmZmLWE1ZmIt
OGIzYmY4YmY5OGViLzEvSktNTFlOSTlkT2dpYTgxZUZkeGI5M0N0TUg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82YTNkM2UtMjVmZC00MmZmLWE1ZmItOGIzYmY4YmY5OGVi
LzEvSktNTFlOSTlkT2dpYTgxZUZkeGI5M0N0TUg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN8xygDko
1yEQlOEF/DIYGUgw9sQPm4deRMv/Q+i1A7ZNoFkX3+fh6u2tVKl2jBtnVfbr/SUW
x61URLelRUZK7J202yuHL7CVLlC/7LKZRTCNcB+8H8sQLqYp1Q8UEtx++E00Kv37
4Sqo1DkIsqTHCsBl2wUcBY+mbHf3s5nhK42OnSgpA4I0IjJCYtZTxY5s739AWSo9
aLrXDEBpXH3/+aVigHR68DmTWRnOzBU0WeIxo4DLTMxxKoX5VTeeOr1iNffx5wz5
a5Vsi2ff+np0GLEOKGa0jXyn1z5wn3udTw8fQlJiyBJus92mJCr49zyNY70lG19Q
p6DOl3SZFXRabg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:53 2025 by rpki-client