Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
File: jfPflxqnyyXft8tVspyHvL4yCCk.mft (raw, json)
Hash identifier: 365ZD591gHIBh4yoR3LosJXX1uzuI0DdEqqmgH4O2IQ=
Subject key identifier: 56:75:21:EE:90:1D:AB:A0:AC:0F:BC:A2:68:56:1B:E0:F0:28:03:43
Authority key identifier: 8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29
Certificate issuer: /CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829
Certificate serial: 019938DED004D073B1BE28A7CA0012EF0D5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
Manifest number: 1680
Signing time: Thu 11 Sep 2025 13:02:30 +0000
Manifest this update: Thu 11 Sep 2025 13:02:30 +0000
Manifest next update: Fri 12 Sep 2025 13:02:30 +0000
Files and hashes: 1: 1IvUdF6sc26gQi1PrEF2at2Gu_w.roa (hash: v/QlU4UHuYWzg7iCrnrdYQGm1IMje67B6F+Jo7o9yAA=)
2: jfPflxqnyyXft8tVspyHvL4yCCk.crl (hash: ipLkqzZ+WihnOM3dj+3caDXv0jJIGgFiRXsVJgrmC48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 13:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:de:d0:04:d0:73:b1:be:28:a7:ca:00:12:ef:0d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829
Validity
Not Before: Sep 11 13:02:30 2025 GMT
Not After : Sep 12 13:02:30 2025 GMT
Subject: CN=567521ee901daba0ac0fbca268561be0f0280343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c1:2f:f9:10:fd:5f:4e:f8:1b:ef:d5:c4:99:
ac:1a:6c:45:c9:c5:0f:4f:ec:29:b2:76:99:12:66:
89:98:7f:d4:14:79:37:a7:ce:a4:70:cd:9c:0a:11:
b5:f0:ca:0a:34:07:87:57:c6:3e:46:9f:a8:ff:9d:
86:8e:59:68:64:39:93:5f:e2:7c:4a:75:3c:f7:80:
8f:4d:19:2d:bd:ba:2a:0a:1d:40:80:93:b5:59:b7:
cd:44:d9:cf:e2:39:b3:cb:fe:c7:07:50:81:47:b2:
ee:05:06:25:bc:d9:0d:ca:1e:71:2c:67:bb:11:4d:
1a:b2:90:47:61:63:34:ba:1d:00:51:bd:01:92:4b:
f0:5b:da:79:27:45:a1:f6:9d:66:f6:5b:aa:2e:49:
a2:6d:45:4e:20:40:43:ca:51:c0:5f:60:a0:b6:a2:
77:52:4c:ca:f0:60:4b:12:b2:f7:8b:15:9b:83:76:
87:c7:1b:fa:63:9b:45:45:db:1f:ec:b4:76:f8:33:
ba:3f:2e:b4:7c:d4:9a:eb:d0:67:e7:78:f8:a8:3a:
bd:a1:8d:cf:a6:44:5b:af:92:a5:54:97:c8:95:96:
60:8d:27:b1:c0:8e:c2:12:55:85:02:23:6f:a9:2c:
02:02:34:86:1b:3b:65:dd:29:47:c4:cf:73:12:34:
d0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:75:21:EE:90:1D:AB:A0:AC:0F:BC:A2:68:56:1B:E0:F0:28:03:43
X509v3 Authority Key Identifier:
keyid:8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:09:7d:9d:bc:07:d4:3d:ec:ff:4e:a3:e9:de:7e:96:bc:11:
e9:da:86:a9:d8:1b:da:b5:91:e0:40:0b:3d:fd:6a:3a:48:f1:
15:d6:ff:6f:06:13:f9:e8:c0:d7:45:64:92:bd:30:2d:bb:80:
2e:2d:42:cf:26:2f:e1:23:6d:9f:ef:8c:bb:02:5e:8b:f9:e9:
b0:31:b7:af:90:13:43:1d:7b:68:7f:9b:ef:93:9f:27:3d:11:
86:42:e9:9e:86:ec:76:8e:94:77:2c:68:ac:e7:dc:f0:e6:1e:
1e:2c:7f:a8:bb:1d:2f:14:08:c6:c5:3f:23:58:6d:23:2e:dd:
56:63:d4:37:a0:b4:a7:88:6c:26:96:b5:33:cd:7a:63:7f:4b:
17:3d:b5:03:69:39:c5:b4:6e:fb:c0:66:57:f4:bf:74:47:e7:
f7:44:ae:bf:57:1b:a0:4c:34:36:20:57:0c:76:ee:f9:ef:3b:
0d:ed:d8:90:7e:20:ec:b4:48:d8:cb:41:8d:49:11:7c:3c:2b:
4d:4c:43:09:a8:bf:4c:ef:5a:30:4c:38:e2:1f:4f:78:6d:8f:
94:db:3f:a2:b2:69:52:fc:e8:10:07:c7:3e:15:09:2c:1a:9a:
ac:35:a3:ad:f7:55:0f:52:e1:61:49:b4:e2:8d:ef:b0:22:50:
ce:5b:c7:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk43tAE0HOxviinygAS7w1dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkZjNkZjk3MWFhN2NiMjVkZmI3Y2I1NWIyOWM4N2JjYmUz
MjA4MjkwHhcNMjUwOTExMTMwMjMwWhcNMjUwOTEyMTMwMjMwWjAzMTEwLwYDVQQD
Eyg1Njc1MjFlZTkwMWRhYmEwYWMwZmJjYTI2ODU2MWJlMGYwMjgwMzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycEv+RD9X074G+/VxJmsGmxFycUP
T+wpsnaZEmaJmH/UFHk3p86kcM2cChG18MoKNAeHV8Y+Rp+o/52GjlloZDmTX+J8
SnU894CPTRktvboqCh1AgJO1WbfNRNnP4jmzy/7HB1CBR7LuBQYlvNkNyh5xLGe7
EU0aspBHYWM0uh0AUb0BkkvwW9p5J0Wh9p1m9luqLkmibUVOIEBDylHAX2CgtqJ3
UkzK8GBLErL3ixWbg3aHxxv6Y5tFRdsf7LR2+DO6Py60fNSa69Bn53j4qDq9oY3P
pkRbr5KlVJfIlZZgjSexwI7CElWFAiNvqSwCAjSGGztl3SlHxM9zEjTQgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZ1Ie6QHaugrA+8omhWG+DwKANDMB8GA1UdIwQY
MBaAFI3z35cap8sl37fLVbKch7y+MggpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamZQZmx4cW55eVhmdDh0VnNweUh2TDR5Q0NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9jMmFkNDQtZmU3ZC00NmQ5LTkxM2Ut
Yzc5NGI1Zjg3ODA0LzEvamZQZmx4cW55eVhmdDh0VnNweUh2TDR5Q0NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9jMmFkNDQtZmU3ZC00NmQ5LTkxM2UtYzc5NGI1Zjg3ODA0
LzEvamZQZmx4cW55eVhmdDh0VnNweUh2TDR5Q0NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjgl9nbwH
1D3s/06j6d5+lrwR6dqGqdgb2rWR4EALPf1qOkjxFdb/bwYT+ejA10Vkkr0wLbuA
Li1CzyYv4SNtn++MuwJei/npsDG3r5ATQx17aH+b75OfJz0RhkLpnobsdo6Udyxo
rOfc8OYeHix/qLsdLxQIxsU/I1htIy7dVmPUN6C0p4hsJpa1M816Y39LFz21A2k5
xbRu+8BmV/S/dEfn90Suv1cboEw0NiBXDHbu+e87De3YkH4g7LRI2MtBjUkRfDwr
TUxDCai/TO9aMEw44h9PeG2PlNs/orJpUvzoEAfHPhUJLBqarDWjrfdVD1LhYUm0
4o3vsCJQzlvH4A==
-----END CERTIFICATE-----
Generated at Thu Sep 11 23:01:28 2025 by rpki-client