Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
File: j4aF263_sB3czmxNgql_M8BA7S0.mft (raw, json)
Hash identifier: rxKcPKdzSI6xBoTydtpkhNLd7GjiXftx8L1lCxyaCB4=
Subject key identifier: 8F:FD:0F:E5:40:27:B7:E0:4C:95:9F:97:BD:8A:54:F6:84:0A:4F:5F
Authority key identifier: 8F:86:85:DB:AD:FF:B0:1D:DC:CE:6C:4D:82:A9:7F:33:C0:40:ED:2D
Certificate issuer: /CN=8f8685dbadffb01ddcce6c4d82a97f33c040ed2d
Certificate serial: 01974E5820856A717153107C6C9A8EE348F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
Manifest number: 157C
Signing time: Sun 08 Jun 2025 07:01:27 +0000
Manifest this update: Sun 08 Jun 2025 07:01:27 +0000
Manifest next update: Mon 09 Jun 2025 07:01:27 +0000
Files and hashes: 1: CnLBnKO7kUWDOtI_wZowil8ZDY0.roa (hash: +ZLQWoCpBdEd1GfrIrkM6Ixuxre1nfZzdo3/CXXl60U=)
2: j4aF263_sB3czmxNgql_M8BA7S0.crl (hash: 2zYVQJtcAFjsP9eBTMOHwez5lUnqr7XidCIMaroTpvo=)
3: sUWUQ7xVOWG88c1zTJfQJSXfUGM.roa (hash: VIZMGPKQd062ThwggTDHc4EOlVHSYbX0SY8qNlvlezs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:58:20:85:6a:71:71:53:10:7c:6c:9a:8e:e3:48:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f8685dbadffb01ddcce6c4d82a97f33c040ed2d
Validity
Not Before: Jun 8 07:01:27 2025 GMT
Not After : Jun 9 07:01:27 2025 GMT
Subject: CN=8ffd0fe54027b7e04c959f97bd8a54f6840a4f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2d:9c:94:30:3b:3d:93:35:a9:97:61:0a:2f:
03:89:ca:c9:a2:a1:b5:dc:be:f1:e7:56:1a:b1:d9:
cd:b1:44:8f:de:8d:35:ec:cf:a0:15:4a:58:3c:41:
48:de:72:06:8f:e9:44:45:7c:60:fe:c1:b2:a2:ec:
ba:5a:89:0d:a0:27:5a:af:bb:4a:62:b3:1f:94:a6:
d7:02:80:8a:84:d9:40:7c:b4:f7:02:ec:eb:b3:13:
68:8d:28:55:de:ef:0e:5c:44:66:a7:af:27:1b:be:
6a:43:88:02:6b:7c:6a:67:d6:9a:e0:36:ea:5c:01:
4f:0e:82:ce:7d:e9:ff:de:c2:09:e2:11:bf:23:2e:
37:23:20:4d:06:07:3a:79:e2:9f:6a:fd:ff:18:47:
12:65:c9:d0:01:fb:36:f9:9b:23:c8:e7:ce:44:00:
29:55:51:84:c3:b0:92:6a:05:b7:6c:56:90:37:99:
26:31:5c:5d:47:d5:cf:9c:a2:8b:79:74:ba:9a:51:
95:60:be:40:a8:82:d6:b3:84:7d:3d:ae:46:de:55:
cd:a1:80:79:dc:fb:ff:e1:b7:8e:3a:13:92:52:f6:
8a:ed:ed:86:e2:e2:bb:b3:be:4e:bc:67:5f:63:c9:
1d:57:b7:14:82:ac:6e:78:c7:92:c4:c0:a0:10:fe:
58:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FD:0F:E5:40:27:B7:E0:4C:95:9F:97:BD:8A:54:F6:84:0A:4F:5F
X509v3 Authority Key Identifier:
keyid:8F:86:85:DB:AD:FF:B0:1D:DC:CE:6C:4D:82:A9:7F:33:C0:40:ED:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:69:ad:da:45:50:ee:df:da:22:d8:77:5d:78:61:9a:75:29:
88:ee:b9:d8:2b:a1:74:18:69:4c:ac:4a:32:7f:37:3b:56:a9:
b4:cf:8e:55:11:89:97:08:43:c2:44:1e:a8:6e:b5:a1:83:00:
92:e1:00:0e:c2:99:af:aa:0c:90:51:ee:53:8a:c4:19:b4:76:
0d:22:04:d8:cf:2d:12:9c:8b:0e:a1:d7:8d:e1:22:cb:42:6b:
89:1a:c2:fd:b3:c5:4b:0a:67:5f:78:23:c3:24:25:68:d1:ba:
93:09:30:04:82:38:8f:4d:aa:fb:77:bf:2b:9e:8c:f8:f1:b7:
c2:1a:70:20:41:4b:b8:0e:94:ed:91:11:b1:be:a4:fe:e1:6e:
21:8d:b3:fe:c2:e0:cc:aa:fc:68:80:5e:2e:4e:e4:2b:d2:88:
21:16:a6:f7:e2:f5:d5:5f:d0:0a:e0:85:9b:2f:c2:61:b8:5e:
cb:d5:a7:1d:c9:6f:a2:43:7c:69:ee:b5:46:bf:4b:9c:ed:6e:
3d:1a:38:ac:26:e7:51:3d:ef:28:7b:ab:b6:50:77:4d:1f:fa:
08:d9:50:2d:28:81:c7:9b:fd:26:d1:f2:2d:68:09:28:7a:e0:
c7:7a:8d:ca:08:f6:25:72:2d:d8:a8:81:e0:ad:9b:c9:57:ea:
88:ca:81:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOWCCFanFxUxB8bJqO40j2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmODY4NWRiYWRmZmIwMWRkY2NlNmM0ZDgyYTk3ZjMzYzA0
MGVkMmQwHhcNMjUwNjA4MDcwMTI3WhcNMjUwNjA5MDcwMTI3WjAzMTEwLwYDVQQD
Eyg4ZmZkMGZlNTQwMjdiN2UwNGM5NTlmOTdiZDhhNTRmNjg0MGE0ZjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC2clDA7PZM1qZdhCi8DicrJoqG1
3L7x51YasdnNsUSP3o017M+gFUpYPEFI3nIGj+lERXxg/sGyouy6WokNoCdar7tK
YrMflKbXAoCKhNlAfLT3AuzrsxNojShV3u8OXERmp68nG75qQ4gCa3xqZ9aa4Dbq
XAFPDoLOfen/3sIJ4hG/Iy43IyBNBgc6eeKfav3/GEcSZcnQAfs2+ZsjyOfORAAp
VVGEw7CSagW3bFaQN5kmMVxdR9XPnKKLeXS6mlGVYL5AqILWs4R9Pa5G3lXNoYB5
3Pv/4beOOhOSUvaK7e2G4uK7s75OvGdfY8kdV7cUgqxueMeSxMCgEP5YmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/9D+VAJ7fgTJWfl72KVPaECk9fMB8GA1UdIwQY
MBaAFI+Ghdut/7Ad3M5sTYKpfzPAQO0tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajRhRjI2M19zQjNjem14TmdxbF9NOEJBN1MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS83MTJmMDMtYWZlOS00ZjY1LWFjZWMt
NjdjZmUzMDY3YjJhLzEvajRhRjI2M19zQjNjem14TmdxbF9NOEJBN1MwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS83MTJmMDMtYWZlOS00ZjY1LWFjZWMtNjdjZmUzMDY3YjJh
LzEvajRhRjI2M19zQjNjem14TmdxbF9NOEJBN1MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATmmt2kVQ
7t/aIth3XXhhmnUpiO652CuhdBhpTKxKMn83O1aptM+OVRGJlwhDwkQeqG61oYMA
kuEADsKZr6oMkFHuU4rEGbR2DSIE2M8tEpyLDqHXjeEiy0JriRrC/bPFSwpnX3gj
wyQlaNG6kwkwBII4j02q+3e/K56M+PG3whpwIEFLuA6U7ZERsb6k/uFuIY2z/sLg
zKr8aIBeLk7kK9KIIRam9+L11V/QCuCFmy/CYbhey9WnHclvokN8ae61Rr9LnO1u
PRo4rCbnUT3vKHurtlB3TR/6CNlQLSiBx5v9JtHyLWgJKHrgx3qNygj2JXIt2KiB
4K2byVfqiMqBTA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 10:39:30 2025 by rpki-client