Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
File: j1T8geUVM4bLQsFzMwUNqDGtqeU.mft (raw, json)
Hash identifier: ETcPRtNNkk++oJFCX9RSVtg+0+U2p7tfDJjqd7lmdP0=
Subject key identifier: B7:7F:8F:03:E1:65:C6:F9:EA:C4:07:85:9F:BD:0D:82:7F:04:02:D4
Authority key identifier: 8F:54:FC:81:E5:15:33:86:CB:42:C1:73:33:05:0D:A8:31:AD:A9:E5
Certificate issuer: /CN=8f54fc81e5153386cb42c17333050da831ada9e5
Certificate serial: 019923314B823D1A5F8620545E95B43D3227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
Manifest number: 0AE9
Signing time: Sun 07 Sep 2025 08:00:57 +0000
Manifest this update: Sun 07 Sep 2025 08:00:57 +0000
Manifest next update: Mon 08 Sep 2025 08:00:57 +0000
Files and hashes: 1: j1T8geUVM4bLQsFzMwUNqDGtqeU.crl (hash: dGiGXz6QxZMaXzVVCl/RNhXEBHEPVWWp06yfCdmvcAg=)
2: v0kVKV7zgFySWfJ-lGmi8aljQUA.roa (hash: QFeJpmHiChV7sVzkjOtXP/zd/9P3djdIsqxjZcryjik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:4b:82:3d:1a:5f:86:20:54:5e:95:b4:3d:32:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f54fc81e5153386cb42c17333050da831ada9e5
Validity
Not Before: Sep 7 08:00:57 2025 GMT
Not After : Sep 8 08:00:57 2025 GMT
Subject: CN=b77f8f03e165c6f9eac407859fbd0d827f0402d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e7:69:42:48:35:c7:b0:e8:d7:46:ef:0c:4d:
2c:11:c5:8b:37:46:93:ec:c8:51:ea:73:8f:be:3e:
29:8f:51:88:b2:48:57:0a:b5:e7:9a:f3:1a:89:ab:
16:2e:43:4e:8f:62:b5:ec:f7:24:8b:75:64:2a:4c:
bd:8a:7d:6d:05:78:e9:06:8c:bf:c2:e9:bf:07:52:
da:dd:b4:00:e3:9b:75:de:28:a2:6a:43:95:a7:eb:
46:b3:41:c9:3b:d0:e3:7f:81:11:4a:2c:c0:dd:a6:
20:4e:b4:9f:51:39:b8:55:7e:00:fb:fb:d7:7a:2f:
df:79:87:3d:bc:f4:8b:21:7e:5d:56:56:f1:7c:20:
32:68:29:ac:59:be:1a:5a:1f:64:0e:8c:8b:87:ab:
87:a2:47:db:57:05:97:5d:c5:09:69:b6:a3:15:b4:
b6:f6:59:a9:9e:2f:02:17:d8:9d:84:a3:25:17:40:
a2:7a:a4:2b:da:02:85:27:fc:68:a5:e0:1a:b8:21:
ad:51:b5:4a:df:7b:f8:95:89:58:de:08:ec:b1:c2:
95:14:5b:74:af:b9:e5:d9:65:b5:01:00:68:3b:e7:
ec:60:91:f1:4f:4f:3f:e3:83:dd:a2:c1:c8:65:74:
80:17:d1:87:0d:32:92:50:10:93:6d:d3:0c:17:a6:
b3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7F:8F:03:E1:65:C6:F9:EA:C4:07:85:9F:BD:0D:82:7F:04:02:D4
X509v3 Authority Key Identifier:
keyid:8F:54:FC:81:E5:15:33:86:CB:42:C1:73:33:05:0D:A8:31:AD:A9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:e4:a9:e3:00:76:a1:09:20:b3:19:d2:5b:15:17:93:2c:9e:
b5:5d:ff:b0:bb:e8:42:bc:f0:b0:96:a5:39:0b:05:60:11:04:
ea:71:1c:35:d4:30:ac:61:de:1a:ed:0c:50:57:57:01:15:f5:
83:98:b1:5a:7a:62:c9:65:da:55:43:cb:a1:3d:9f:cc:a7:b4:
6e:7c:90:0a:6f:63:1e:60:21:08:b1:0f:f9:b1:76:c4:b5:5b:
f4:06:c6:64:bd:56:63:4d:a8:6b:15:71:d6:34:6b:3f:3e:68:
36:e4:3f:5f:e9:1c:99:cb:98:e8:7e:ba:8f:72:2c:70:e6:7a:
b8:96:e0:17:7b:b2:f8:e6:3e:03:0b:f7:f8:b9:88:63:7c:0f:
d3:92:a0:42:2a:ab:c5:46:e5:94:e9:21:c3:7b:3e:31:9d:de:
0b:c1:a4:cd:ba:1c:8a:fd:47:b0:20:3d:d8:f5:7a:11:fd:56:
6a:04:38:77:5e:ab:09:8f:0d:f9:56:0a:b7:54:7f:14:32:c3:
90:03:f1:6a:63:ae:10:46:e1:65:30:7a:2f:b0:4a:62:04:2e:
3d:24:ca:34:d2:6d:b6:c5:c4:03:66:e4:47:67:37:e9:2c:93:
dc:97:9e:17:a3:1e:fe:0d:0b:1c:d2:7c:7c:a4:82:3a:09:de:
f5:ec:cc:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMUuCPRpfhiBUXpW0PTInMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmNTRmYzgxZTUxNTMzODZjYjQyYzE3MzMzMDUwZGE4MzFh
ZGE5ZTUwHhcNMjUwOTA3MDgwMDU3WhcNMjUwOTA4MDgwMDU3WjAzMTEwLwYDVQQD
EyhiNzdmOGYwM2UxNjVjNmY5ZWFjNDA3ODU5ZmJkMGQ4MjdmMDQwMmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+dpQkg1x7Do10bvDE0sEcWLN0aT
7MhR6nOPvj4pj1GIskhXCrXnmvMaiasWLkNOj2K17Pcki3VkKky9in1tBXjpBoy/
wum/B1La3bQA45t13iiiakOVp+tGs0HJO9Djf4ERSizA3aYgTrSfUTm4VX4A+/vX
ei/feYc9vPSLIX5dVlbxfCAyaCmsWb4aWh9kDoyLh6uHokfbVwWXXcUJabajFbS2
9lmpni8CF9idhKMlF0CieqQr2gKFJ/xopeAauCGtUbVK33v4lYlY3gjsscKVFFt0
r7nl2WW1AQBoO+fsYJHxT08/44PdosHIZXSAF9GHDTKSUBCTbdMMF6azzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLd/jwPhZcb56sQHhZ+9DYJ/BALUMB8GA1UdIwQY
MBaAFI9U/IHlFTOGy0LBczMFDagxranlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajFUOGdlVVZNNGJMUXNGek13VU5xREd0cWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81NDIyNTAtYmEwYi00YTEwLThiZGQt
NDU3OTQ5MjRjYjUzLzEvajFUOGdlVVZNNGJMUXNGek13VU5xREd0cWVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC81NDIyNTAtYmEwYi00YTEwLThiZGQtNDU3OTQ5MjRjYjUz
LzEvajFUOGdlVVZNNGJMUXNGek13VU5xREd0cWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABuSp4wB2
oQkgsxnSWxUXkyyetV3/sLvoQrzwsJalOQsFYBEE6nEcNdQwrGHeGu0MUFdXARX1
g5ixWnpiyWXaVUPLoT2fzKe0bnyQCm9jHmAhCLEP+bF2xLVb9AbGZL1WY02oaxVx
1jRrPz5oNuQ/X+kcmcuY6H66j3IscOZ6uJbgF3uy+OY+Awv3+LmIY3wP05KgQiqr
xUbllOkhw3s+MZ3eC8Gkzbociv1HsCA92PV6Ef1WagQ4d16rCY8N+VYKt1R/FDLD
kAPxamOuEEbhZTB6L7BKYgQuPSTKNNJttsXEA2bkR2c36SyT3JeeF6Me/g0LHNJ8
fKSCOgne9ezMmQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:26:51 2025 by rpki-client