Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
File: jHr3naXytomGyDVkYKQ_pC0386Y.mft (raw, json)
Hash identifier: Mes4H29BD+Xui54RPU98CwZ6w7KGndsjPnQRrdR6eQQ=
Subject key identifier: 01:E6:F1:00:E1:BD:45:2B:E6:75:DB:48:CC:46:FF:57:F5:81:81:81
Authority key identifier: 8C:7A:F7:9D:A5:F2:B6:89:86:C8:35:64:60:A4:3F:A4:2D:37:F3:A6
Certificate issuer: /CN=8c7af79da5f2b68986c8356460a43fa42d37f3a6
Certificate serial: 019748C32D4F3D5870EB1B7B6A5FAE152051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 05:00:39 +0000
Manifest this update: Sat 07 Jun 2025 05:00:39 +0000
Manifest next update: Sun 08 Jun 2025 05:00:39 +0000
Files and hashes: 1: Y6x4X7ml7gBX__XgDy6M9m8y_fM.roa (hash: euuUJ2B09SVhI3IDat0XeMWmWw0q0J+4EoTaRS+kLdQ=)
2: jHr3naXytomGyDVkYKQ_pC0386Y.crl (hash: EU8d9EDRtVk4QdE+zaOcU7XOC5r7PnxT5bDS+ojqAC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:2d:4f:3d:58:70:eb:1b:7b:6a:5f:ae:15:20:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7af79da5f2b68986c8356460a43fa42d37f3a6
Validity
Not Before: Jun 7 05:00:39 2025 GMT
Not After : Jun 8 05:00:39 2025 GMT
Subject: CN=01e6f100e1bd452be675db48cc46ff57f5818181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6c:f9:0c:05:7d:6f:e5:41:e8:fd:09:c1:68:
a1:f1:3f:f8:4e:e3:dd:49:59:fb:ff:b5:63:20:91:
b0:f5:57:5f:e1:c5:50:54:7c:37:74:29:a1:d3:a8:
e9:83:5a:59:54:96:3c:c6:2c:d2:5d:0b:96:2a:29:
f8:f6:42:82:b0:7f:a4:56:35:66:95:cf:e3:7f:b7:
c6:2b:15:88:ba:c0:f4:2d:ec:56:76:0f:62:af:9c:
0b:09:89:4b:83:73:b3:45:38:5b:fa:1c:a9:16:45:
24:5f:09:7a:98:29:37:4f:50:80:ef:f5:c5:59:63:
af:c3:c0:47:11:24:ff:40:d9:c3:8e:e4:38:bc:12:
0b:93:39:36:fd:ba:1e:78:ce:ed:21:b7:6f:07:40:
1c:d5:ef:15:3b:a8:ca:a9:39:f6:38:9f:7e:8a:6c:
d9:26:e3:5b:a3:b1:37:90:f4:0e:84:8a:d5:2f:e0:
36:e3:7c:46:e1:29:4c:2e:92:db:0e:39:c1:21:68:
55:ab:41:d9:01:b9:e6:06:0b:44:ca:0c:7f:69:a3:
1e:1b:cf:02:c4:ea:2b:b2:df:a5:28:7d:b7:a8:90:
cd:6c:b7:a2:eb:8a:e5:b5:92:24:69:0e:0d:27:b8:
7a:88:ac:69:bd:d9:69:55:8c:e5:82:a0:4d:59:2d:
df:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E6:F1:00:E1:BD:45:2B:E6:75:DB:48:CC:46:FF:57:F5:81:81:81
X509v3 Authority Key Identifier:
keyid:8C:7A:F7:9D:A5:F2:B6:89:86:C8:35:64:60:A4:3F:A4:2D:37:F3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:b0:a0:b3:c3:a1:2d:1b:fc:77:fc:55:61:cb:46:ad:d0:d1:
b4:3c:f4:dc:32:a9:44:e5:1b:67:a3:da:a9:be:37:40:ea:43:
b0:b0:e1:d8:b3:44:46:3f:eb:8a:e7:a6:f4:ca:a6:8c:03:f6:
6f:fe:86:67:4a:bc:95:c3:6c:dc:6e:56:05:b3:34:79:ae:89:
17:b4:be:bb:4c:02:b6:79:b2:fe:f6:9d:b1:85:d7:4b:89:fe:
60:53:2a:c4:29:dd:9a:5f:75:c3:1a:90:68:4c:8d:e7:0f:20:
9d:18:ff:29:f0:75:23:4c:c5:f8:42:25:24:48:07:63:bb:80:
fc:f3:ec:b0:3c:e7:d8:94:dc:d3:59:fd:c0:f0:28:6c:79:5b:
3a:65:b8:c5:08:c6:4b:9c:3c:24:3e:eb:67:ed:17:68:24:f6:
ef:3a:aa:19:47:1f:6a:b9:04:fd:3b:af:d6:61:d3:35:b2:d6:
06:aa:bc:71:7b:21:cc:3b:66:a6:7d:c6:5e:f5:a8:e7:56:6f:
31:d2:fd:50:55:33:cb:d5:8f:90:51:65:b3:d6:02:69:fb:8b:
d1:4e:28:dc:18:85:62:b4:e8:b3:68:e4:a8:c0:51:8f:08:82:
bf:0e:97:ce:d0:92:b4:d8:12:24:f5:65:f9:89:4b:48:9a:00:
3b:c5:2a:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIwy1PPVhw6xt7al+uFSBRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjN2FmNzlkYTVmMmI2ODk4NmM4MzU2NDYwYTQzZmE0MmQz
N2YzYTYwHhcNMjUwNjA3MDUwMDM5WhcNMjUwNjA4MDUwMDM5WjAzMTEwLwYDVQQD
EygwMWU2ZjEwMGUxYmQ0NTJiZTY3NWRiNDhjYzQ2ZmY1N2Y1ODE4MTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWz5DAV9b+VB6P0JwWih8T/4TuPd
SVn7/7VjIJGw9Vdf4cVQVHw3dCmh06jpg1pZVJY8xizSXQuWKin49kKCsH+kVjVm
lc/jf7fGKxWIusD0LexWdg9ir5wLCYlLg3OzRThb+hypFkUkXwl6mCk3T1CA7/XF
WWOvw8BHEST/QNnDjuQ4vBILkzk2/boeeM7tIbdvB0Ac1e8VO6jKqTn2OJ9+imzZ
JuNbo7E3kPQOhIrVL+A243xG4SlMLpLbDjnBIWhVq0HZAbnmBgtEygx/aaMeG88C
xOorst+lKH23qJDNbLei64rltZIkaQ4NJ7h6iKxpvdlpVYzlgqBNWS3fcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAHm8QDhvUUr5nXbSMxG/1f1gYGBMB8GA1UdIwQY
MBaAFIx6952l8raJhsg1ZGCkP6QtN/OmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakhyM25hWHl0b21HeURWa1lLUV9wQzAzODZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8yNzA4NmQtMzdmMy00MTMwLTg3Mjkt
YmNlZGJiZDZlNTc0LzEvakhyM25hWHl0b21HeURWa1lLUV9wQzAzODZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8yNzA4NmQtMzdmMy00MTMwLTg3MjktYmNlZGJiZDZlNTc0
LzEvakhyM25hWHl0b21HeURWa1lLUV9wQzAzODZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhrCgs8Oh
LRv8d/xVYctGrdDRtDz03DKpROUbZ6Paqb43QOpDsLDh2LNERj/riuem9MqmjAP2
b/6GZ0q8lcNs3G5WBbM0ea6JF7S+u0wCtnmy/vadsYXXS4n+YFMqxCndml91wxqQ
aEyN5w8gnRj/KfB1I0zF+EIlJEgHY7uA/PPssDzn2JTc01n9wPAobHlbOmW4xQjG
S5w8JD7rZ+0XaCT27zqqGUcfarkE/Tuv1mHTNbLWBqq8cXshzDtmpn3GXvWo51Zv
MdL9UFUzy9WPkFFls9YCafuL0U4o3BiFYrTos2jkqMBRjwiCvw6XztCStNgSJPVl
+YlLSJoAO8UqQg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:36:17 2025 by rpki-client