Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
File: jsDMCMmOBfTh-wRACNhSoqTaAPA.mft (raw, json)
Hash identifier: 93KTORFpmHykgu9YlhF46faOhecEGsrIR6cYbm2OLpw=
Subject key identifier: 77:F5:D2:C1:E8:55:62:04:57:F7:B1:7C:3E:C2:1F:34:8C:C2:79:A3
Authority key identifier: 8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
Certificate issuer: /CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Certificate serial: 019936F007E06EE5189C7A059437D71DE3AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
Manifest number: 0977
Signing time: Thu 11 Sep 2025 04:02:04 +0000
Manifest this update: Thu 11 Sep 2025 04:02:04 +0000
Manifest next update: Fri 12 Sep 2025 04:02:04 +0000
Files and hashes: 1: jsDMCMmOBfTh-wRACNhSoqTaAPA.crl (hash: WFKzm3/Vf35jv/JxlNebyVjq4chXnrJmcJILSsWoMrY=)
2: nJjrSgE7Va7EKxllkFfukC6fvJY.roa (hash: V3JIEPfJn7JzMttrERHm2nxfQ8d/LYnbQ0isiQmawx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 04:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:f0:07:e0:6e:e5:18:9c:7a:05:94:37:d7:1d:e3:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Validity
Not Before: Sep 11 04:02:04 2025 GMT
Not After : Sep 12 04:02:04 2025 GMT
Subject: CN=77f5d2c1e855620457f7b17c3ec21f348cc279a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a3:94:67:e7:aa:41:91:af:d2:ff:2c:52:ce:
b1:ca:1e:3c:c6:28:6d:79:00:e6:4a:64:35:f6:45:
44:86:fd:6e:7c:47:d1:27:14:7a:c1:33:32:55:c5:
a4:d7:9c:0a:f0:e7:2e:fb:8b:7c:55:ee:7f:29:7c:
7c:89:2e:99:88:50:1e:75:3a:63:33:2b:47:f5:75:
1c:8d:ef:b5:3b:c9:f1:df:44:0f:32:e7:dd:f6:35:
f6:a1:c6:dc:43:c3:5c:cd:36:f0:31:56:d0:3d:08:
ef:5f:55:0b:53:37:8a:64:3a:36:2b:bb:b7:58:3d:
7b:93:61:1a:14:38:af:1f:00:0e:1a:d2:b0:1a:31:
ba:fc:4b:17:7e:a2:4f:e9:96:0d:8c:0d:9d:1a:8a:
f6:47:6c:5d:b8:50:f1:dc:72:33:7c:35:51:b0:9d:
c0:e3:b4:5d:22:b5:27:0f:69:79:7f:af:79:17:eb:
0b:2c:ef:da:1e:13:e5:52:f9:66:be:43:19:57:a7:
dc:b7:24:47:b7:df:73:45:e8:1a:95:eb:33:f3:de:
ee:b2:4c:e6:1e:be:de:7e:ec:36:55:2a:7e:84:c1:
83:5d:0c:61:db:70:5a:70:6a:d5:13:6b:1e:9e:2e:
ef:45:b1:b2:5f:b2:4c:c2:09:d7:e2:2f:24:29:8c:
e7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F5:D2:C1:E8:55:62:04:57:F7:B1:7C:3E:C2:1F:34:8C:C2:79:A3
X509v3 Authority Key Identifier:
keyid:8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ef:58:5f:fd:b1:b8:89:ad:1b:fa:2a:a7:1e:8f:05:87:8f:
e1:27:1f:72:11:9d:41:99:63:89:d5:da:d1:d2:27:fb:8b:0d:
d8:9c:15:ba:c4:38:47:52:a6:7a:f3:36:b2:fd:66:c9:31:51:
bc:4e:a9:65:62:5a:f2:b6:01:66:77:76:94:50:7e:39:e1:e7:
64:6d:91:4b:eb:8e:0d:e8:7c:05:29:24:f6:dc:18:c7:7f:f5:
63:80:95:6a:36:ab:2c:49:8a:f9:42:5c:fd:91:47:e0:7a:ef:
3f:3a:e5:b5:f8:79:a4:b1:14:90:61:43:0c:bd:ca:3f:6a:2c:
f7:bf:a1:55:45:d0:b0:26:13:fa:57:5b:3d:15:66:0c:11:89:
18:20:27:f5:d5:be:b0:c0:43:86:e5:98:c5:7f:07:c0:df:e2:
73:f9:a0:03:26:10:8a:0b:42:d0:b5:88:f0:26:cb:b3:b9:2c:
1f:b0:bd:9a:2e:48:16:52:9e:cf:22:12:64:d1:10:0b:9b:19:
b1:26:d7:06:e5:c3:0e:8f:29:18:99:f5:19:49:a7:7e:de:68:
74:cc:48:29:39:b2:19:e7:54:29:84:27:14:21:b8:ac:b2:85:
0e:0c:6f:80:3f:43:39:6b:03:08:cd:3c:3b:15:5b:d2:7b:fc:
90:13:1e:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk28AfgbuUYnHoFlDfXHeOuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYzBjYzA4Yzk4ZTA1ZjRlMWZiMDQ0MDA4ZDg1MmEyYTRk
YTAwZjAwHhcNMjUwOTExMDQwMjA0WhcNMjUwOTEyMDQwMjA0WjAzMTEwLwYDVQQD
Eyg3N2Y1ZDJjMWU4NTU2MjA0NTdmN2IxN2MzZWMyMWYzNDhjYzI3OWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaOUZ+eqQZGv0v8sUs6xyh48xiht
eQDmSmQ19kVEhv1ufEfRJxR6wTMyVcWk15wK8Ocu+4t8Ve5/KXx8iS6ZiFAedTpj
MytH9XUcje+1O8nx30QPMufd9jX2ocbcQ8NczTbwMVbQPQjvX1ULUzeKZDo2K7u3
WD17k2EaFDivHwAOGtKwGjG6/EsXfqJP6ZYNjA2dGor2R2xduFDx3HIzfDVRsJ3A
47RdIrUnD2l5f695F+sLLO/aHhPlUvlmvkMZV6fctyRHt99zRegalesz897uskzm
Hr7efuw2VSp+hMGDXQxh23BacGrVE2seni7vRbGyX7JMwgnX4i8kKYznaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHf10sHoVWIEV/exfD7CHzSMwnmjMB8GA1UdIwQY
MBaAFI7AzAjJjgX04fsEQAjYUqKk2gDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanNETUNNbU9CZlRoLXdSQUNOaFNvcVRhQVBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9kMGJlMGItYmZhMS00NmRhLWJjMTAt
MzU3NjlmMDYyOTlhLzEvanNETUNNbU9CZlRoLXdSQUNOaFNvcVRhQVBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9kMGJlMGItYmZhMS00NmRhLWJjMTAtMzU3NjlmMDYyOTlh
LzEvanNETUNNbU9CZlRoLXdSQUNOaFNvcVRhQVBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ+9YX/2x
uImtG/oqpx6PBYeP4ScfchGdQZljidXa0dIn+4sN2JwVusQ4R1KmevM2sv1myTFR
vE6pZWJa8rYBZnd2lFB+OeHnZG2RS+uODeh8BSkk9twYx3/1Y4CVajarLEmK+UJc
/ZFH4HrvPzrltfh5pLEUkGFDDL3KP2os97+hVUXQsCYT+ldbPRVmDBGJGCAn9dW+
sMBDhuWYxX8HwN/ic/mgAyYQigtC0LWI8CbLs7ksH7C9mi5IFlKezyISZNEQC5sZ
sSbXBuXDDo8pGJn1GUmnft5odMxIKTmyGedUKYQnFCG4rLKFDgxvgD9DOWsDCM08
OxVb0nv8kBMeuQ==
-----END CERTIFICATE-----
Generated at Thu Sep 11 13:03:19 2025 by rpki-client