Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
File: Jo9QG7-eE83S64mdlxIfZpqikTU.mft (raw, json)
Hash identifier: 6YNp7M1fVkSvRoBEyW0qjmUJkbnjBxDaioWsI/KmtDw=
Subject key identifier: F3:41:F6:C5:D5:04:33:37:3B:01:16:80:EA:4E:6B:AF:19:96:36:5E
Authority key identifier: 26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35
Certificate issuer: /CN=268f501bbf9e13cdd2eb899d97121f669aa29135
Certificate serial: 01986693F4614981633FBD76BDDC2D024442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
Manifest number: 1537
Signing time: Fri 01 Aug 2025 17:00:28 +0000
Manifest this update: Fri 01 Aug 2025 17:00:28 +0000
Manifest next update: Sat 02 Aug 2025 17:00:28 +0000
Files and hashes: 1: 4XFlits89wxyHX1vn5VHIsNuyKg.roa (hash: BT2LxZu3wA5VCThqQPlS1bE8oOkqeH9p+4dqdYk4cGk=)
2: Jo9QG7-eE83S64mdlxIfZpqikTU.crl (hash: L9PvOYKLGbeDlabb/reW0JL59wGxSOEtMSMQmJAHONg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:66:93:f4:61:49:81:63:3f:bd:76:bd:dc:2d:02:44:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268f501bbf9e13cdd2eb899d97121f669aa29135
Validity
Not Before: Aug 1 17:00:28 2025 GMT
Not After : Aug 2 17:00:28 2025 GMT
Subject: CN=f341f6c5d50433373b011680ea4e6baf1996365e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bf:bf:e3:a1:0d:b7:6e:f8:91:c3:89:a1:42:
3e:a7:9d:ad:26:34:fb:49:4a:d3:71:fe:e3:d9:98:
1b:30:55:05:46:53:18:94:2b:71:47:b4:e6:9e:14:
0f:a7:15:52:18:51:e8:fd:19:41:a7:07:61:b8:db:
ef:e5:f7:32:13:8e:ca:08:35:6e:68:c7:8a:cb:dc:
81:fe:c6:42:de:9a:75:53:67:af:e4:db:43:3a:59:
d5:e4:3f:5a:f5:0c:df:f6:f2:7f:0c:88:1f:ec:12:
b6:06:1b:21:77:92:da:2e:61:70:2e:2f:43:e6:71:
40:cc:b1:fb:e8:aa:6c:f7:08:43:42:04:70:c2:04:
12:16:e5:bb:9b:57:57:ee:4b:7a:d4:ac:6b:07:7a:
c3:d4:58:0f:84:5f:e6:bc:29:dc:26:99:e9:41:54:
1c:57:8e:11:14:cc:db:d8:66:90:2e:13:70:ab:d9:
89:9f:19:94:07:82:cf:9f:4a:b6:a0:09:25:f6:c1:
3f:b1:1d:fc:47:ba:61:04:9d:33:30:53:6e:6b:e6:
1d:4f:2a:0a:aa:30:72:00:b9:b0:17:aa:af:57:5d:
d0:b4:bf:ac:05:b6:c6:05:58:93:5a:e2:13:f4:38:
e7:af:4a:a4:f4:0c:62:a2:72:8e:27:f5:dd:21:89:
57:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:41:F6:C5:D5:04:33:37:3B:01:16:80:EA:4E:6B:AF:19:96:36:5E
X509v3 Authority Key Identifier:
keyid:26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:b0:bc:2c:76:73:fb:a6:ee:d6:68:59:3c:25:78:03:d0:33:
a5:94:23:90:6e:e9:83:ff:62:5d:53:e0:b2:70:4c:9b:22:57:
d8:94:b1:a5:ae:bb:9a:9c:c7:83:bf:9e:b1:74:7b:2c:5d:f7:
21:77:d9:e2:cd:35:4d:32:98:5b:54:82:a9:26:34:96:92:79:
5b:a6:ae:a2:29:b0:5f:e1:03:bf:7d:5f:9a:af:1f:2f:a7:0b:
f0:f3:9d:75:01:9e:e2:c4:53:c8:31:ad:a1:f8:c8:f7:79:11:
92:c9:0d:00:e5:a2:59:49:d0:56:0b:dd:78:e3:16:46:1f:19:
c0:ba:6d:49:55:66:1a:cb:6e:9b:eb:3b:f9:aa:ff:c0:df:f9:
f5:eb:95:7f:9a:29:f3:9c:7c:0e:78:a2:8a:3f:76:8e:d9:e1:
bd:d5:06:e5:58:02:6f:e0:70:84:b7:70:61:33:01:e5:8b:fd:
7f:53:99:69:de:a4:3c:f7:9d:01:e3:28:ea:3b:09:a7:4c:03:
c8:5a:31:dc:90:a0:88:ec:ae:f4:75:49:5d:1d:e8:44:b1:e4:
cf:05:20:6e:e9:01:55:4e:da:ae:1c:ea:08:3f:f2:8d:b2:39:
67:ef:08:b1:d5:59:1e:6f:44:30:0e:0a:1c:d9:bb:de:49:1e:
a3:06:ba:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhmk/RhSYFjP712vdwtAkRCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2OGY1MDFiYmY5ZTEzY2RkMmViODk5ZDk3MTIxZjY2OWFh
MjkxMzUwHhcNMjUwODAxMTcwMDI4WhcNMjUwODAyMTcwMDI4WjAzMTEwLwYDVQQD
EyhmMzQxZjZjNWQ1MDQzMzM3M2IwMTE2ODBlYTRlNmJhZjE5OTYzNjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7+/46ENt274kcOJoUI+p52tJjT7
SUrTcf7j2ZgbMFUFRlMYlCtxR7TmnhQPpxVSGFHo/RlBpwdhuNvv5fcyE47KCDVu
aMeKy9yB/sZC3pp1U2ev5NtDOlnV5D9a9Qzf9vJ/DIgf7BK2Bhshd5LaLmFwLi9D
5nFAzLH76Kps9whDQgRwwgQSFuW7m1dX7kt61KxrB3rD1FgPhF/mvCncJpnpQVQc
V44RFMzb2GaQLhNwq9mJnxmUB4LPn0q2oAkl9sE/sR38R7phBJ0zMFNua+YdTyoK
qjByALmwF6qvV13QtL+sBbbGBViTWuIT9Djnr0qk9AxionKOJ/XdIYlX0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPNB9sXVBDM3OwEWgOpOa68ZljZeMB8GA1UdIwQY
MBaAFCaPUBu/nhPN0uuJnZcSH2aaopE1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm85UUc3LWVFODNTNjRtZGx4SWZacHFpa1RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82ZDdmMGQtN2U0ZS00N2Q2LWI5ZGIt
Y2EwYzc3MmI3MjlmLzEvSm85UUc3LWVFODNTNjRtZGx4SWZacHFpa1RVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82ZDdmMGQtN2U0ZS00N2Q2LWI5ZGItY2EwYzc3MmI3Mjlm
LzEvSm85UUc3LWVFODNTNjRtZGx4SWZacHFpa1RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWLC8LHZz
+6bu1mhZPCV4A9AzpZQjkG7pg/9iXVPgsnBMmyJX2JSxpa67mpzHg7+esXR7LF33
IXfZ4s01TTKYW1SCqSY0lpJ5W6auoimwX+EDv31fmq8fL6cL8POddQGe4sRTyDGt
ofjI93kRkskNAOWiWUnQVgvdeOMWRh8ZwLptSVVmGstum+s7+ar/wN/59euVf5op
85x8Dniiij92jtnhvdUG5VgCb+BwhLdwYTMB5Yv9f1OZad6kPPedAeMo6jsJp0wD
yFox3JCgiOyu9HVJXR3oRLHkzwUgbukBVU7arhzqCD/yjbI5Z+8IsdVZHm9EMA4K
HNm73kkeowa6tg==
-----END CERTIFICATE-----
Generated at Fri Aug 1 19:03:13 2025 by rpki-client