Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
File: _jQJESdDd6icofnBXxgNqYbXRLc.mft (raw, json)
Hash identifier: ZBwarxg1ZgBofsuju+/iRvszq10R0rPYMfRtIQuJNOw=
Subject key identifier: AC:5D:EF:DA:2A:6D:F1:BE:0E:9E:10:DF:32:21:AF:B0:90:9E:B3:33
Authority key identifier: FE:34:09:11:27:43:77:A8:9C:A1:F9:C1:5F:18:0D:A9:86:D7:44:B7
Certificate issuer: /CN=fe340911274377a89ca1f9c15f180da986d744b7
Certificate serial: 01974779A311BB1A00D1EABA648919EBF111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
Manifest number: 020E
Signing time: Fri 06 Jun 2025 23:00:43 +0000
Manifest this update: Fri 06 Jun 2025 23:00:43 +0000
Manifest next update: Sat 07 Jun 2025 23:00:43 +0000
Files and hashes: 1: 7qFS32WykIo9De6woWK_a4zI6AE.roa (hash: 2dnjawr1HUy6D3OjqGMisdNqLiSRoZxYXLiFU07VYtM=)
2: _jQJESdDd6icofnBXxgNqYbXRLc.crl (hash: 5uBSjx4bXSIjffsFx9dLPfyB35DMfrjSZoxf1GlWME8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:a3:11:bb:1a:00:d1:ea:ba:64:89:19:eb:f1:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe340911274377a89ca1f9c15f180da986d744b7
Validity
Not Before: Jun 6 23:00:43 2025 GMT
Not After : Jun 7 23:00:43 2025 GMT
Subject: CN=ac5defda2a6df1be0e9e10df3221afb0909eb333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0c:f2:9f:44:12:bc:c4:f9:55:a0:84:15:32:
a0:fe:fe:cc:19:9a:e7:e7:35:c1:04:92:f9:77:da:
76:07:ab:3d:9e:fd:75:7f:6a:63:a2:c7:92:63:0b:
14:bf:6c:0c:43:16:43:a4:e7:d4:d1:59:fd:49:31:
d1:33:5b:1a:8d:c5:b9:9f:47:21:d0:c1:f5:7c:db:
7a:b5:5b:98:dc:3c:37:0f:83:da:ac:32:c8:00:50:
a4:6b:94:5c:77:d8:71:8e:9a:e9:1e:d2:6c:df:9f:
21:f6:b0:4a:7c:62:27:cb:e5:8f:91:c3:d1:41:32:
7d:37:04:f0:64:d1:52:c9:59:2e:11:be:f6:5c:5d:
a0:a0:d8:2e:61:7f:80:05:ca:f3:ea:49:00:3d:ca:
a0:b3:44:68:cb:86:7b:1b:d8:0c:75:e9:f1:ed:db:
e4:12:f8:ce:06:c4:08:81:02:0f:31:f8:c7:27:15:
3f:a9:c1:5c:2d:11:1d:df:64:43:bb:33:14:ea:8e:
ee:6c:df:d3:df:9e:8b:59:02:24:aa:c3:cc:4e:48:
32:26:5c:84:7d:f8:97:ed:15:5c:cb:c2:33:15:3f:
9b:1b:f5:f6:8d:41:84:ed:9c:d5:b0:47:8c:97:33:
47:a1:22:64:e0:aa:4a:d3:68:9e:71:80:87:d7:23:
95:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:5D:EF:DA:2A:6D:F1:BE:0E:9E:10:DF:32:21:AF:B0:90:9E:B3:33
X509v3 Authority Key Identifier:
keyid:FE:34:09:11:27:43:77:A8:9C:A1:F9:C1:5F:18:0D:A9:86:D7:44:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:94:66:f1:9e:4f:83:41:e6:a7:37:45:ee:d8:96:b7:cf:e1:
fe:f2:8a:b8:c7:5a:88:94:67:dc:f6:62:0f:bb:42:c2:91:ff:
22:b4:14:9c:ba:55:7b:c4:3d:4c:20:94:5c:39:02:4b:fc:cb:
c9:47:9e:b4:6d:94:40:40:04:af:87:ef:9b:17:6d:71:11:83:
b7:ad:36:ab:7f:86:52:96:3a:17:3e:15:d5:24:a7:96:16:fa:
61:4c:37:52:b2:f8:1e:8d:0f:47:69:98:4e:02:89:f1:ea:04:
b4:be:47:76:71:52:33:aa:53:ff:b1:73:d1:10:f2:7b:f4:2a:
c9:b0:b3:7a:2c:9c:56:e2:b1:3a:ec:22:40:2b:4c:a7:2f:7a:
9f:9a:bc:0c:31:c2:d3:ac:4a:ce:b3:ce:63:40:d8:9f:eb:02:
e7:76:9c:e2:57:d7:7b:e4:67:6b:40:c4:89:59:34:69:0d:0b:
29:9c:19:a6:78:05:38:0a:ae:b2:de:3a:d0:00:c2:51:ab:bb:
76:c2:88:34:5d:81:ec:8c:b9:63:14:6d:2c:be:d5:6e:27:ad:
e2:c5:6e:91:db:15:23:93:7b:e8:6c:57:a8:a8:83:6a:69:95:
e1:07:88:c5:ff:96:12:65:34:ad:ee:6a:78:6e:3d:4b:fd:43:
53:c9:27:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHeaMRuxoA0eq6ZIkZ6/ERMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMzQwOTExMjc0Mzc3YTg5Y2ExZjljMTVmMTgwZGE5ODZk
NzQ0YjcwHhcNMjUwNjA2MjMwMDQzWhcNMjUwNjA3MjMwMDQzWjAzMTEwLwYDVQQD
EyhhYzVkZWZkYTJhNmRmMWJlMGU5ZTEwZGYzMjIxYWZiMDkwOWViMzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwzyn0QSvMT5VaCEFTKg/v7MGZrn
5zXBBJL5d9p2B6s9nv11f2pjoseSYwsUv2wMQxZDpOfU0Vn9STHRM1sajcW5n0ch
0MH1fNt6tVuY3Dw3D4ParDLIAFCka5Rcd9hxjprpHtJs358h9rBKfGIny+WPkcPR
QTJ9NwTwZNFSyVkuEb72XF2goNguYX+ABcrz6kkAPcqgs0Roy4Z7G9gMdenx7dvk
EvjOBsQIgQIPMfjHJxU/qcFcLREd32RDuzMU6o7ubN/T356LWQIkqsPMTkgyJlyE
ffiX7RVcy8IzFT+bG/X2jUGE7ZzVsEeMlzNHoSJk4KpK02iecYCH1yOVDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKxd79oqbfG+Dp4Q3zIhr7CQnrMzMB8GA1UdIwQY
MBaAFP40CREnQ3eonKH5wV8YDamG10S3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2pRSkVTZERkNmljb2ZuQlh4Z05xWWJYUkxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85ZGFmMmYtNDZkMi00ZDA1LTkyNmIt
YThiZjIxNGVkMTY2LzEvX2pRSkVTZERkNmljb2ZuQlh4Z05xWWJYUkxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85ZGFmMmYtNDZkMi00ZDA1LTkyNmItYThiZjIxNGVkMTY2
LzEvX2pRSkVTZERkNmljb2ZuQlh4Z05xWWJYUkxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkJRm8Z5P
g0HmpzdF7tiWt8/h/vKKuMdaiJRn3PZiD7tCwpH/IrQUnLpVe8Q9TCCUXDkCS/zL
yUeetG2UQEAEr4fvmxdtcRGDt602q3+GUpY6Fz4V1SSnlhb6YUw3UrL4Ho0PR2mY
TgKJ8eoEtL5HdnFSM6pT/7Fz0RDye/QqybCzeiycVuKxOuwiQCtMpy96n5q8DDHC
06xKzrPOY0DYn+sC53ac4lfXe+Rna0DEiVk0aQ0LKZwZpngFOAqust460ADCUau7
dsKINF2B7Iy5YxRtLL7Vbiet4sVukdsVI5N76GxXqKiDammV4QeIxf+WEmU0re5q
eG49S/1DU8knmQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:00:12 2025 by rpki-client