Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
File: jAYAQO86CCOqlz8NBZKx3agI94I.mft (raw, json)
Hash identifier: 4789TGOpVzBzv3g8ucQ/+VLqye98zC69vKr7zT4Fitw=
Subject key identifier: 8D:94:A4:AB:35:E6:B9:67:84:3E:91:3F:BE:D8:4F:91:8E:9E:24:90
Authority key identifier: 8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82
Certificate issuer: /CN=8c060040ef3a0823aa973f0d0592b1dda808f782
Certificate serial: 019849664F7B32995E9FD2AAF1B4AFFDEEED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 01:01:38 +0000
Manifest this update: Sun 27 Jul 2025 01:01:38 +0000
Manifest next update: Mon 28 Jul 2025 01:01:38 +0000
Files and hashes: 1: 8ZbyflawwFLPqDg3BZZLbHwGOLc.roa (hash: VykbJevpFsrAKqlNdZuPgmxNQNlKZ+4+VF7D/J1CQCs=)
2: H_TLsPIgEGDD_RE_XHqJUvlqj8E.roa (hash: jVZCYNBVF7woByDpZwClsmu07rKLPUQko61SrEyrK1s=)
3: WyA56EA2oxi30uAjF6x_QQYyE00.roa (hash: 4ql8mO5EaYeFUKdK/VU8GBpEW0nvJwvaHkKL+MQY0zE=)
4: eJe54pJQD4j2JDWbWUTuFe4Zw4k.roa (hash: RfLVPz0RIAcdPGVp8RcU7sTd+HqCq3IoZWz5cYzagaI=)
5: jAYAQO86CCOqlz8NBZKx3agI94I.crl (hash: T63E112ZJnLWYhzb2TropdpGDosJw4llVQrMmw7fUjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:4f:7b:32:99:5e:9f:d2:aa:f1:b4:af:fd:ee:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c060040ef3a0823aa973f0d0592b1dda808f782
Validity
Not Before: Jul 27 01:01:38 2025 GMT
Not After : Jul 28 01:01:38 2025 GMT
Subject: CN=8d94a4ab35e6b967843e913fbed84f918e9e2490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3f:59:b5:4e:35:26:83:94:bf:07:44:17:4b:
f2:5c:67:e6:e4:35:ac:b0:52:38:7b:67:89:5e:05:
97:53:3c:e6:a7:67:79:70:a8:6d:ce:ea:a7:9d:f4:
b9:6a:b9:fa:db:30:08:0f:79:b1:9b:dc:be:33:92:
b7:f2:4c:ba:2c:0a:53:11:e3:a4:c6:74:1d:5f:95:
6f:4b:15:0e:d1:14:74:cc:02:ed:f6:c8:8c:ef:5b:
0e:e3:87:6c:28:9f:e9:85:ad:12:32:0e:26:28:b8:
f1:3b:43:0e:8d:83:75:6e:5c:19:a4:7e:fa:37:06:
3c:0e:22:6a:e8:37:1c:53:ca:66:35:82:04:bf:74:
db:96:b3:22:07:30:49:9a:3c:8c:3a:92:d7:af:eb:
0d:00:1e:32:37:df:97:d9:48:ad:18:2f:d5:c3:c7:
f7:04:a2:c8:28:a2:b5:23:b2:58:c9:35:e9:fa:95:
a4:6b:8c:87:80:21:1e:a4:05:c8:5d:21:67:9d:98:
26:f4:f6:70:49:7b:e4:eb:a9:be:ed:57:51:6d:db:
8a:80:df:7e:1f:94:89:1d:92:d9:35:25:b9:54:f3:
47:e0:6a:84:11:b8:96:34:81:45:ca:98:15:a9:c0:
10:c4:3e:df:7d:cc:04:da:94:25:f5:24:1a:b1:6b:
9b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:94:A4:AB:35:E6:B9:67:84:3E:91:3F:BE:D8:4F:91:8E:9E:24:90
X509v3 Authority Key Identifier:
keyid:8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:4c:8c:20:f9:80:77:a1:3a:e3:3b:7d:4b:2e:0a:32:8d:b2:
1c:02:4f:60:6d:2c:50:ac:f3:0f:04:6d:ad:e1:b9:b3:16:35:
e7:55:33:b7:7f:52:f1:c6:67:39:9c:63:56:bd:97:8c:2b:1d:
90:9c:fd:96:a6:86:76:e6:c7:c0:58:04:dd:fd:98:ed:94:48:
cf:0c:ea:ab:e9:d6:cd:64:58:84:72:1c:3a:95:3a:a1:b1:56:
5b:06:17:bc:36:76:6d:54:53:ae:7f:f3:70:bc:1e:3d:97:dd:
d3:d8:0e:9b:ca:e6:d5:e2:c7:03:0c:60:01:eb:70:9c:d0:18:
f9:db:42:22:d8:19:b3:23:aa:53:a5:d9:45:64:2c:78:ca:53:
6d:56:67:02:4e:ea:0f:53:b7:49:e1:f1:57:2f:20:d7:76:ad:
40:85:ca:5a:a9:02:02:e2:4e:4f:3b:82:8c:e2:4c:12:5d:9c:
fb:77:4e:b0:8e:69:73:49:89:e1:20:a1:f0:e8:0c:b4:0c:2a:
f1:03:23:51:36:ec:9e:25:7f:da:39:56:65:ea:0a:f3:0e:f2:
24:76:61:ad:a8:b7:fd:cb:59:ca:e0:62:95:1e:74:63:67:37:
ba:39:07:e4:c7:16:18:08:76:6d:2d:e1:45:1b:77:d5:d5:9a:
63:84:e1:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZk97Mplen9Kq8bSv/e7tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMDYwMDQwZWYzYTA4MjNhYTk3M2YwZDA1OTJiMWRkYTgw
OGY3ODIwHhcNMjUwNzI3MDEwMTM4WhcNMjUwNzI4MDEwMTM4WjAzMTEwLwYDVQQD
Eyg4ZDk0YTRhYjM1ZTZiOTY3ODQzZTkxM2ZiZWQ4NGY5MThlOWUyNDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz9ZtU41JoOUvwdEF0vyXGfm5DWs
sFI4e2eJXgWXUzzmp2d5cKhtzuqnnfS5arn62zAID3mxm9y+M5K38ky6LApTEeOk
xnQdX5VvSxUO0RR0zALt9siM71sO44dsKJ/pha0SMg4mKLjxO0MOjYN1blwZpH76
NwY8DiJq6DccU8pmNYIEv3TblrMiBzBJmjyMOpLXr+sNAB4yN9+X2UitGC/Vw8f3
BKLIKKK1I7JYyTXp+pWka4yHgCEepAXIXSFnnZgm9PZwSXvk66m+7VdRbduKgN9+
H5SJHZLZNSW5VPNH4GqEEbiWNIFFypgVqcAQxD7ffcwE2pQl9SQasWubqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2UpKs15rlnhD6RP77YT5GOniSQMB8GA1UdIwQY
MBaAFIwGAEDvOggjqpc/DQWSsd2oCPeCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakFZQVFPODZDQ09xbHo4TkJaS3gzYWdJOTRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lNzU0OWUtNWIyNS00MjAwLTg4Yjkt
NGU0YTM1ZGQzNjc3LzEvakFZQVFPODZDQ09xbHo4TkJaS3gzYWdJOTRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9lNzU0OWUtNWIyNS00MjAwLTg4YjktNGU0YTM1ZGQzNjc3
LzEvakFZQVFPODZDQ09xbHo4TkJaS3gzYWdJOTRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsEyMIPmA
d6E64zt9Sy4KMo2yHAJPYG0sUKzzDwRtreG5sxY151Uzt39S8cZnOZxjVr2XjCsd
kJz9lqaGdubHwFgE3f2Y7ZRIzwzqq+nWzWRYhHIcOpU6obFWWwYXvDZ2bVRTrn/z
cLwePZfd09gOm8rm1eLHAwxgAetwnNAY+dtCItgZsyOqU6XZRWQseMpTbVZnAk7q
D1O3SeHxVy8g13atQIXKWqkCAuJOTzuCjOJMEl2c+3dOsI5pc0mJ4SCh8OgMtAwq
8QMjUTbsniV/2jlWZeoK8w7yJHZhrai3/ctZyuBilR50Y2c3ujkH5McWGAh2bS3h
RRt31dWaY4Th6Q==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:29:49 2025 by rpki-client