Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.mft
File: JovHlTH32BXSsrUin5rJ9vi_68o.mft (raw, json)
Hash identifier: Jsj385T7JeeGeCs7FYgzqrF44ckZHY/g7qgFtRdeQs4=
Subject key identifier: B3:29:07:62:16:7D:3C:AF:F6:BB:A1:3E:1E:01:AF:DD:31:15:DD:77
Authority key identifier: 26:8B:C7:95:31:F7:D8:15:D2:B2:B5:22:9F:9A:C9:F6:F8:BF:EB:CA
Certificate issuer: /CN=268bc79531f7d815d2b2b5229f9ac9f6f8bfebca
Certificate serial: 0199239FC9A654AA87E9603B50B3DA247AB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JovHlTH32BXSsrUin5rJ9vi_68o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.mft
Manifest number: 0127
Signing time: Sun 07 Sep 2025 10:01:38 +0000
Manifest this update: Sun 07 Sep 2025 10:01:38 +0000
Manifest next update: Mon 08 Sep 2025 10:01:38 +0000
Files and hashes: 1: JovHlTH32BXSsrUin5rJ9vi_68o.crl (hash: RTCKrS698uQzNpRHh8+U02cspf++MJNn2jMJkTM3EMQ=)
2: fbUeFXfkxWs40ix5vT2S2k90Z-k.roa (hash: UcP80IpCz9vBYWCvKMhbqTO9Etv9kTfCKFjSdIAUqCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.mft
rsync://rpki.ripe.net/repository/DEFAULT/JovHlTH32BXSsrUin5rJ9vi_68o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:c9:a6:54:aa:87:e9:60:3b:50:b3:da:24:7a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268bc79531f7d815d2b2b5229f9ac9f6f8bfebca
Validity
Not Before: Sep 7 10:01:38 2025 GMT
Not After : Sep 8 10:01:38 2025 GMT
Subject: CN=b3290762167d3caff6bba13e1e01afdd3115dd77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:60:4b:d6:99:67:4e:7f:9d:4e:7f:12:c7:19:
0a:51:70:49:d0:5c:dc:82:a5:24:24:0f:41:21:cf:
ac:8a:3c:21:fd:02:7f:36:23:57:d7:72:63:f8:27:
a6:68:76:8b:f4:75:ce:65:a4:54:40:65:e5:dd:37:
66:5e:c6:02:18:96:d4:cc:61:a7:2d:4e:ef:2e:90:
d5:7c:b6:3f:f7:cd:f9:95:7c:21:32:65:56:c6:da:
18:b7:7d:40:15:7f:ec:8b:02:4e:64:7d:b2:ca:7f:
57:e5:8a:81:ed:8d:8f:27:8e:25:0d:8a:44:2b:0b:
0c:fb:3d:40:ac:b0:05:b5:34:e7:8f:22:92:09:48:
c7:ed:ba:f7:23:5b:04:cc:69:49:77:94:fe:46:44:
82:d4:9c:5f:8d:94:ab:d9:3a:ef:70:86:2c:c8:ae:
85:54:1f:d5:73:e7:fe:80:9e:b8:e5:6c:04:0b:03:
68:9b:ea:b8:58:9a:22:5e:38:cc:8f:4e:bd:f0:11:
aa:67:22:0c:47:de:aa:b0:5b:6e:ca:84:81:27:b8:
71:11:ef:fc:0e:df:07:0d:4b:e2:88:cb:bb:a5:6a:
29:07:37:a9:3e:8b:96:63:1d:01:28:8f:a4:b5:e5:
10:41:53:4a:55:43:b6:57:b4:96:8d:83:c1:aa:72:
10:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:29:07:62:16:7D:3C:AF:F6:BB:A1:3E:1E:01:AF:DD:31:15:DD:77
X509v3 Authority Key Identifier:
keyid:26:8B:C7:95:31:F7:D8:15:D2:B2:B5:22:9F:9A:C9:F6:F8:BF:EB:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JovHlTH32BXSsrUin5rJ9vi_68o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:23:93:26:6d:6c:af:43:15:66:45:39:19:5a:3b:52:23:15:
ca:85:4a:a1:38:45:2d:4d:ef:2c:cc:3b:a2:d9:ec:a4:cb:2a:
41:4a:9b:fa:f8:03:64:45:18:d3:94:25:05:67:7d:76:db:b7:
fb:6b:d3:ec:e3:14:68:a9:fc:6f:f5:29:0e:7b:47:d1:29:91:
78:af:9e:25:7e:65:f9:95:2b:67:53:2f:64:f1:d1:c3:28:91:
76:4b:44:ae:99:79:09:a7:9c:33:14:a0:b6:62:8a:67:35:4d:
39:da:86:f0:ae:fd:00:a9:53:ba:2f:27:cd:01:c3:62:be:8d:
40:3c:1a:fc:4a:aa:77:ba:5f:58:00:3c:49:8a:e8:8a:d8:86:
f1:33:32:7b:e5:c1:35:9f:93:45:15:34:de:fb:de:b3:ed:fb:
96:a6:d6:b4:90:58:b2:22:32:17:9c:b7:ea:f8:65:10:09:ce:
11:48:3b:a7:0b:0b:8b:05:27:a7:15:25:58:de:8f:14:b4:8d:
59:b3:59:1f:9a:1e:48:7b:db:9c:15:da:92:42:79:c4:73:15:
52:b2:78:ef:d1:7a:d0:fa:d6:83:4c:fd:11:2a:a4:57:73:cf:
01:3c:58:15:d0:47:bb:66:bb:61:b9:2d:b1:b1:fd:0a:3f:39:
e9:cc:55:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjn8mmVKqH6WA7ULPaJHq5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2OGJjNzk1MzFmN2Q4MTVkMmIyYjUyMjlmOWFjOWY2Zjhi
ZmViY2EwHhcNMjUwOTA3MTAwMTM4WhcNMjUwOTA4MTAwMTM4WjAzMTEwLwYDVQQD
EyhiMzI5MDc2MjE2N2QzY2FmZjZiYmExM2UxZTAxYWZkZDMxMTVkZDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2BL1plnTn+dTn8SxxkKUXBJ0Fzc
gqUkJA9BIc+sijwh/QJ/NiNX13Jj+CemaHaL9HXOZaRUQGXl3TdmXsYCGJbUzGGn
LU7vLpDVfLY/9835lXwhMmVWxtoYt31AFX/siwJOZH2yyn9X5YqB7Y2PJ44lDYpE
KwsM+z1ArLAFtTTnjyKSCUjH7br3I1sEzGlJd5T+RkSC1JxfjZSr2TrvcIYsyK6F
VB/Vc+f+gJ645WwECwNom+q4WJoiXjjMj0698BGqZyIMR96qsFtuyoSBJ7hxEe/8
Dt8HDUviiMu7pWopBzepPouWYx0BKI+kteUQQVNKVUO2V7SWjYPBqnIQ6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMpB2IWfTyv9ruhPh4Br90xFd13MB8GA1UdIwQY
MBaAFCaLx5Ux99gV0rK1Ip+ayfb4v+vKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm92SGxUSDMyQlhTc3JVaW41cko5dmlfNjhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yZjA3ZTAtMDc1ZC00NTQ4LTljOWEt
MTU1YjM1N2JkODgwLzEvSm92SGxUSDMyQlhTc3JVaW41cko5dmlfNjhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yZjA3ZTAtMDc1ZC00NTQ4LTljOWEtMTU1YjM1N2JkODgw
LzEvSm92SGxUSDMyQlhTc3JVaW41cko5dmlfNjhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmCOTJm1s
r0MVZkU5GVo7UiMVyoVKoThFLU3vLMw7otnspMsqQUqb+vgDZEUY05QlBWd9dtu3
+2vT7OMUaKn8b/UpDntH0SmReK+eJX5l+ZUrZ1MvZPHRwyiRdktErpl5CaecMxSg
tmKKZzVNOdqG8K79AKlTui8nzQHDYr6NQDwa/Eqqd7pfWAA8SYroitiG8TMye+XB
NZ+TRRU03vves+37lqbWtJBYsiIyF5y36vhlEAnOEUg7pwsLiwUnpxUlWN6PFLSN
WbNZH5oeSHvbnBXakkJ5xHMVUrJ479F60PrWg0z9ESqkV3PPATxYFdBHu2a7Ybkt
sbH9Cj856cxVlg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:43:57 2025 by rpki-client