Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
File: Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft (raw, json)
Hash identifier: iCtczoAmeYbcc7Hayye+YIkVrvZbAVpCrLYbFnsVSjo=
Subject key identifier: AE:74:EA:D4:4E:62:91:64:6B:E9:44:BC:48:70:F8:7B:87:9F:18:4F
Authority key identifier: 26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1
Certificate issuer: /CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1
Certificate serial: 0199288ECCC8309B95D705595186F12B0A32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
Manifest number: 0DD9
Signing time: Mon 08 Sep 2025 09:01:11 +0000
Manifest this update: Mon 08 Sep 2025 09:01:11 +0000
Manifest next update: Tue 09 Sep 2025 09:01:11 +0000
Files and hashes: 1: 5dtg3LCI8AxcnAadUkHS3_C52GM.roa (hash: Vn0K1zYewV4QvEpEk/45tt1gNO9Z9NhkFkfGztTyMls=)
2: Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl (hash: xuWg4Kh0bLVwk6e3vm3v/cweFkB949DEJ2+5gr/H1Rg=)
3: iHyMz7WaIpGFj9IV33M_hAhVH-k.roa (hash: LGMsJh4DFo99zD3c9hWW4b1EKTfexLADtFi5DHUXz6A=)
4: qcTZ9F_MrFUBfQXGS6Pdrvtd3hM.roa (hash: 6Y3o3xfek4OtHUqQEh7Mq+AHRFEDKhceMAsEbUlDjDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:8e:cc:c8:30:9b:95:d7:05:59:51:86:f1:2b:0a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1
Validity
Not Before: Sep 8 09:01:11 2025 GMT
Not After : Sep 9 09:01:11 2025 GMT
Subject: CN=ae74ead44e6291646be944bc4870f87b879f184f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:31:c4:3e:e9:66:27:78:0e:7e:02:b2:99:76:
23:de:06:3a:68:46:27:5a:0e:47:06:4b:04:f2:84:
60:9e:60:95:ec:f4:c1:af:8e:73:1e:60:9e:57:fd:
df:9a:46:7f:ed:f9:6f:ca:18:8f:ec:67:34:33:1c:
5a:c5:a1:78:95:a2:3a:79:e1:9a:0e:ab:ca:c9:10:
3b:e8:a1:8a:95:82:e1:06:5c:5c:e5:19:9c:b8:e3:
39:ba:70:85:e6:0f:b5:c8:c9:9d:66:e3:a6:46:c7:
9a:1f:11:b6:d4:25:5f:49:27:d0:a7:08:b0:8a:7b:
21:53:26:e1:93:8f:96:25:35:2c:ce:09:8a:50:2a:
bc:36:1f:08:e0:e9:72:c5:dc:69:54:db:f6:0f:cc:
02:b4:14:40:4a:a7:5f:87:f0:1a:fa:42:5a:f5:6e:
3c:14:c6:45:7d:c6:d3:84:ea:11:32:b6:1f:3a:58:
12:3c:b7:04:61:c1:54:88:aa:3f:63:10:dd:f9:c0:
29:da:27:3d:43:4a:c6:1d:0b:c8:1d:02:00:48:a3:
a2:a3:82:20:8d:79:59:9b:47:39:aa:b8:92:5d:11:
7a:e8:25:ed:b3:5b:b2:e3:8a:c3:4c:94:a9:30:17:
af:1c:1d:9b:85:0b:2f:2e:fe:c2:c2:bb:d9:b2:41:
39:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:74:EA:D4:4E:62:91:64:6B:E9:44:BC:48:70:F8:7B:87:9F:18:4F
X509v3 Authority Key Identifier:
keyid:26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d7:24:f9:68:f4:e1:f8:b8:d4:67:f8:36:f8:b9:d2:92:99:
99:4c:3f:ee:17:2c:d2:c7:1c:c6:67:13:9f:cf:f2:f7:77:83:
26:f8:7e:94:e2:8f:22:95:9b:c3:dd:bd:f2:cd:4d:25:d2:51:
f2:85:70:1c:fa:2b:f5:67:8d:19:64:05:98:f7:ba:44:a8:62:
68:ec:e7:23:40:19:13:ec:18:be:ef:a2:e1:85:ff:7a:13:e2:
f8:61:24:eb:21:74:da:98:88:b1:24:35:c7:ea:4a:15:64:9d:
86:00:17:72:fa:78:c2:69:14:da:3a:0a:80:93:61:1e:5c:25:
73:a6:b9:8d:e8:b4:f4:4c:e5:04:18:90:3e:a6:90:50:cc:fb:
57:57:cf:90:69:a2:79:9a:e3:6e:ac:46:48:f7:33:62:a3:dc:
6c:6a:70:3f:46:3a:88:6d:39:b0:53:1e:b5:9c:81:1e:85:04:
48:19:c4:ff:2c:84:c1:3b:4c:51:72:8e:8b:e3:40:ba:87:bb:
e2:4d:ad:38:97:80:38:52:74:19:6f:87:19:7c:dd:20:24:de:
f8:8a:51:58:25:a8:7f:79:5b:4e:17:25:db:68:90:2d:12:1e:
18:15:6a:b5:5c:d5:e1:87:1e:d0:32:73:6e:c4:54:3a:04:60:
a6:4f:7a:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkojszIMJuV1wVZUYbxKwoyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2YmQ1ZmZiY2U2YmY4NzA3ZmEzZTU5NjdlMGQzOGI0NTVk
OWQ0ZTEwHhcNMjUwOTA4MDkwMTExWhcNMjUwOTA5MDkwMTExWjAzMTEwLwYDVQQD
EyhhZTc0ZWFkNDRlNjI5MTY0NmJlOTQ0YmM0ODcwZjg3Yjg3OWYxODRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzHEPulmJ3gOfgKymXYj3gY6aEYn
Wg5HBksE8oRgnmCV7PTBr45zHmCeV/3fmkZ/7flvyhiP7Gc0MxxaxaF4laI6eeGa
DqvKyRA76KGKlYLhBlxc5RmcuOM5unCF5g+1yMmdZuOmRseaHxG21CVfSSfQpwiw
inshUybhk4+WJTUszgmKUCq8Nh8I4OlyxdxpVNv2D8wCtBRASqdfh/Aa+kJa9W48
FMZFfcbThOoRMrYfOlgSPLcEYcFUiKo/YxDd+cAp2ic9Q0rGHQvIHQIASKOio4Ig
jXlZm0c5qriSXRF66CXts1uy44rDTJSpMBevHB2bhQsvLv7CwrvZskE5fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK506tROYpFka+lEvEhw+HuHnxhPMB8GA1UdIwQY
MBaAFCa9X/vOa/hwf6Plln4NOLRV2dThMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnIxZi04NXItSEJfby1XV2ZnMDR0RlhaMU9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mNDk4YTItZDg2ZC00Yzc1LWJmZDMt
ZThjNTU5YzcxZDY2LzEvSnIxZi04NXItSEJfby1XV2ZnMDR0RlhaMU9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9mNDk4YTItZDg2ZC00Yzc1LWJmZDMtZThjNTU5YzcxZDY2
LzEvSnIxZi04NXItSEJfby1XV2ZnMDR0RlhaMU9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASdck+Wj0
4fi41Gf4Nvi50pKZmUw/7hcs0sccxmcTn8/y93eDJvh+lOKPIpWbw9298s1NJdJR
8oVwHPor9WeNGWQFmPe6RKhiaOznI0AZE+wYvu+i4YX/ehPi+GEk6yF02piIsSQ1
x+pKFWSdhgAXcvp4wmkU2joKgJNhHlwlc6a5jei09EzlBBiQPqaQUMz7V1fPkGmi
eZrjbqxGSPczYqPcbGpwP0Y6iG05sFMetZyBHoUESBnE/yyEwTtMUXKOi+NAuoe7
4k2tOJeAOFJ0GW+HGXzdICTe+IpRWCWof3lbThcl22iQLRIeGBVqtVzV4Yce0DJz
bsRUOgRgpk96ag==
-----END CERTIFICATE-----
Generated at Mon Sep 8 10:15:50 2025 by rpki-client