Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.mft
File: J84emmUiYWqzCw8SPgnTBagjBK8.mft (raw, json)
Hash identifier: WEVBAZwdRrUmPKcl2hklboVM3wFTnapCItqyOIdX4e8=
Subject key identifier: 09:6E:F2:10:9E:00:8C:16:C4:9F:2E:D3:9A:C4:6D:99:6E:8E:BB:09
Authority key identifier: 27:CE:1E:9A:65:22:61:6A:B3:0B:0F:12:3E:09:D3:05:A8:23:04:AF
Certificate issuer: /CN=27ce1e9a6522616ab30b0f123e09d305a82304af
Certificate serial: 0199233118DDEEC272A1EC2E183F2D696121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J84emmUiYWqzCw8SPgnTBagjBK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.mft
Manifest number: 1678
Signing time: Sun 07 Sep 2025 08:00:44 +0000
Manifest this update: Sun 07 Sep 2025 08:00:44 +0000
Manifest next update: Mon 08 Sep 2025 08:00:44 +0000
Files and hashes: 1: J84emmUiYWqzCw8SPgnTBagjBK8.crl (hash: ehBvKGOrYOnXEXkzSQxBerKVdEKn+Yh4CDDfi8vEGpE=)
2: WgYDhL0i6U8cqNQpr57kES37q38.roa (hash: RKIGt1CKlAHIm7PDdsvYymoW20pcRCPFEmrAdn3vZno=)
3: xfeGCbXD-YF0qFrPXVL_VBgsViY.roa (hash: +QvSz3wl8pHqddA2o6rF3CbvD6JrTHLlFmQPhouhbbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/J84emmUiYWqzCw8SPgnTBagjBK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:18:dd:ee:c2:72:a1:ec:2e:18:3f:2d:69:61:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ce1e9a6522616ab30b0f123e09d305a82304af
Validity
Not Before: Sep 7 08:00:44 2025 GMT
Not After : Sep 8 08:00:44 2025 GMT
Subject: CN=096ef2109e008c16c49f2ed39ac46d996e8ebb09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3c:11:36:80:22:2c:49:95:e2:ca:62:eb:0a:
94:50:d8:90:9e:68:b0:2c:25:29:28:b4:5e:c8:3f:
4d:51:8c:31:ad:d7:ff:68:6f:35:35:8e:94:67:1d:
6f:7c:75:d3:33:de:77:9c:db:dc:2c:6a:d3:65:06:
53:fc:ac:36:a6:04:1e:78:f3:e3:91:0b:a6:f5:d8:
10:0a:95:ec:97:d4:bf:f4:f3:e5:1f:1a:04:5a:09:
a3:00:bf:dd:bf:14:54:b7:90:d1:f5:26:b5:03:0c:
dd:ac:32:cb:ae:dd:e5:8d:81:0e:7e:04:b0:86:f8:
ff:27:f4:fd:f0:14:1a:2e:d7:e2:67:20:e2:20:39:
bc:81:32:b3:d5:f5:d1:24:d0:e1:c3:46:ce:fb:0b:
af:25:ce:ab:c2:1a:bb:35:eb:13:a5:2c:12:52:c4:
8c:96:41:10:bf:ce:e2:df:35:3c:7d:19:2d:f4:e3:
79:f4:77:08:81:69:3a:07:b5:52:18:61:76:20:b4:
a0:7c:29:09:eb:7f:ed:d6:1c:5f:89:7f:52:08:64:
bc:40:da:10:f9:65:e4:27:05:cf:4e:f9:60:0d:94:
a7:21:57:55:04:0a:f9:37:7b:09:bf:c1:26:17:74:
75:e8:57:a9:4b:71:03:7f:c0:f6:85:c8:ec:f6:b1:
d3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6E:F2:10:9E:00:8C:16:C4:9F:2E:D3:9A:C4:6D:99:6E:8E:BB:09
X509v3 Authority Key Identifier:
keyid:27:CE:1E:9A:65:22:61:6A:B3:0B:0F:12:3E:09:D3:05:A8:23:04:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J84emmUiYWqzCw8SPgnTBagjBK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:58:8f:23:1b:b8:73:a8:a8:26:43:b4:f5:27:47:63:7b:a2:
02:63:8b:72:f3:65:b2:4b:89:cc:94:79:7d:de:87:4c:e3:5c:
40:48:74:03:1e:10:a5:4a:6b:e9:9f:91:f8:4e:0b:3d:51:60:
f0:62:c6:66:4b:24:0b:7f:6a:7b:c8:36:f0:f1:bd:6c:22:26:
7c:56:74:ce:85:bc:63:f7:a4:3c:7a:43:da:54:37:b8:71:ab:
cb:98:a5:b1:7d:eb:15:d7:f1:71:aa:1c:12:10:22:26:36:c6:
04:a6:5b:b0:73:ec:97:13:96:b1:bf:31:b9:7c:55:19:29:a1:
95:43:ae:ec:50:a9:bf:51:d1:84:53:99:e4:85:83:da:e6:a0:
9e:85:68:73:66:15:83:74:3d:9b:91:2e:14:d2:c4:bd:4b:e8:
6b:4a:d6:a9:93:58:ab:23:3a:3a:13:ce:c2:3f:32:68:d4:9e:
cb:5c:28:60:00:52:d1:97:5a:80:d5:e1:f6:0d:d0:8b:11:23:
37:fe:46:38:50:62:d2:4f:3a:97:6c:25:ed:18:26:55:52:a8:
4e:a6:28:4d:91:66:72:55:ed:b9:9d:8f:8b:02:77:a5:6b:0c:
3f:98:0a:07:db:c1:fe:87:ab:02:f3:1f:e0:34:77:7d:e4:b2:
e7:52:86:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMRjd7sJyoewuGD8taWEhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3Y2UxZTlhNjUyMjYxNmFiMzBiMGYxMjNlMDlkMzA1YTgy
MzA0YWYwHhcNMjUwOTA3MDgwMDQ0WhcNMjUwOTA4MDgwMDQ0WjAzMTEwLwYDVQQD
EygwOTZlZjIxMDllMDA4YzE2YzQ5ZjJlZDM5YWM0NmQ5OTZlOGViYjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TwRNoAiLEmV4spi6wqUUNiQnmiw
LCUpKLReyD9NUYwxrdf/aG81NY6UZx1vfHXTM953nNvcLGrTZQZT/Kw2pgQeePPj
kQum9dgQCpXsl9S/9PPlHxoEWgmjAL/dvxRUt5DR9Sa1AwzdrDLLrt3ljYEOfgSw
hvj/J/T98BQaLtfiZyDiIDm8gTKz1fXRJNDhw0bO+wuvJc6rwhq7NesTpSwSUsSM
lkEQv87i3zU8fRkt9ON59HcIgWk6B7VSGGF2ILSgfCkJ63/t1hxfiX9SCGS8QNoQ
+WXkJwXPTvlgDZSnIVdVBAr5N3sJv8EmF3R16FepS3EDf8D2hcjs9rHTeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAlu8hCeAIwWxJ8u05rEbZlujrsJMB8GA1UdIwQY
MBaAFCfOHpplImFqswsPEj4J0wWoIwSvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjg0ZW1tVWlZV3F6Q3c4U1BnblRCYWdqQks4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85ZTIyYTItOTM2NS00OTU2LThlNjYt
Y2U0ZjI1YWNlMjUyLzEvSjg0ZW1tVWlZV3F6Q3c4U1BnblRCYWdqQks4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC85ZTIyYTItOTM2NS00OTU2LThlNjYtY2U0ZjI1YWNlMjUy
LzEvSjg0ZW1tVWlZV3F6Q3c4U1BnblRCYWdqQks4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI1iPIxu4
c6ioJkO09SdHY3uiAmOLcvNlskuJzJR5fd6HTONcQEh0Ax4QpUpr6Z+R+E4LPVFg
8GLGZkskC39qe8g28PG9bCImfFZ0zoW8Y/ekPHpD2lQ3uHGry5ilsX3rFdfxcaoc
EhAiJjbGBKZbsHPslxOWsb8xuXxVGSmhlUOu7FCpv1HRhFOZ5IWD2uagnoVoc2YV
g3Q9m5EuFNLEvUvoa0rWqZNYqyM6OhPOwj8yaNSey1woYABS0ZdagNXh9g3QixEj
N/5GOFBi0k86l2wl7RgmVVKoTqYoTZFmclXtuZ2PiwJ3pWsMP5gKB9vB/oerAvMf
4DR3feSy51KG2g==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:10 2025 by rpki-client