Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft
File: jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft (raw, json)
Hash identifier: BkRTmmkCSPUR3agA5lq8wS3G+d7eWZmaVTfmPswmyy4=
Subject key identifier: 2B:E0:0E:AF:4A:AB:6B:D4:C7:D0:CC:08:BD:A7:2B:F7:D7:F9:CD:33
Authority key identifier: 8D:3B:C9:B3:A7:42:4D:95:74:24:27:F9:96:33:D9:C0:B0:0F:67:F0
Certificate issuer: /CN=8d3bc9b3a7424d95742427f99633d9c0b00f67f0
Certificate serial: 0197688549889CA8E3E3D49657AC787DC2EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft
Manifest number: 0842
Signing time: Fri 13 Jun 2025 09:00:54 +0000
Manifest this update: Fri 13 Jun 2025 09:00:54 +0000
Manifest next update: Sat 14 Jun 2025 09:00:54 +0000
Files and hashes: 1: J6N10mOHco_CHrghtNkJ8CZXfhU.roa (hash: 30kmxFBnSaCLifn+bmjA1t+lSi7TIa3l00vfDKtB59Y=)
2: jTvJs6dCTZV0JCf5ljPZwLAPZ_A.crl (hash: W+Snn/Bn3/8wzpuxEY9na+PEI8PbWkSMA3pxmtubVi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:49:88:9c:a8:e3:e3:d4:96:57:ac:78:7d:c2:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3bc9b3a7424d95742427f99633d9c0b00f67f0
Validity
Not Before: Jun 13 09:00:54 2025 GMT
Not After : Jun 14 09:00:54 2025 GMT
Subject: CN=2be00eaf4aab6bd4c7d0cc08bda72bf7d7f9cd33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:de:7e:cd:db:ab:38:12:78:57:78:b1:63:6c:
63:42:3c:23:85:b7:f9:63:6d:4b:39:f9:60:f3:0c:
59:b9:ee:e4:69:2d:87:23:be:a2:7e:ff:b3:6e:20:
4b:f5:04:af:53:0b:6a:56:e3:15:7f:6c:6f:92:21:
0c:f8:59:f4:89:61:de:11:c3:24:50:ec:90:dd:c1:
ac:6b:26:9b:12:04:eb:9c:e4:ef:62:a0:89:3a:88:
39:4a:8a:8f:24:27:31:e6:e7:89:be:74:40:ce:22:
b9:05:3e:85:25:b5:6f:27:04:a9:6e:f6:27:8d:14:
2b:f1:d2:cd:d5:75:85:1a:f3:56:79:2d:24:b9:5c:
20:86:50:fe:cb:d6:53:3a:3d:a7:b1:6b:fb:11:16:
1c:bc:78:ca:da:68:96:70:cb:38:af:f1:11:e5:aa:
b0:86:d0:34:ca:c3:80:a8:6e:37:19:ae:13:95:de:
80:bc:c9:16:41:34:81:d2:d2:0a:c8:26:c8:8d:5a:
0f:87:ed:52:de:27:be:82:19:f0:df:e9:d3:b1:3b:
e4:74:ef:4b:07:11:d6:e4:c8:d8:e6:1a:68:56:9d:
29:a8:49:87:42:95:cf:f7:6c:42:30:8b:6d:02:44:
e8:22:99:62:20:90:60:d7:ab:be:4a:45:55:cc:0a:
4b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E0:0E:AF:4A:AB:6B:D4:C7:D0:CC:08:BD:A7:2B:F7:D7:F9:CD:33
X509v3 Authority Key Identifier:
keyid:8D:3B:C9:B3:A7:42:4D:95:74:24:27:F9:96:33:D9:C0:B0:0F:67:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:5e:96:51:b6:bb:7e:08:c1:1e:1b:b0:99:69:3f:61:de:7d:
75:27:b2:c0:d7:0d:6a:e2:8a:6b:fb:4f:1f:38:f2:f0:a9:13:
d7:eb:90:84:e4:6a:31:b5:55:ec:58:eb:ff:8f:84:c6:09:62:
3b:a5:4d:ff:f9:08:eb:c9:78:f7:ea:50:e9:5e:8c:87:a7:2c:
80:b7:e0:e1:c9:b4:c6:56:86:13:ea:43:ee:43:cb:56:10:3b:
a3:b5:17:a4:4b:e1:8d:17:5b:31:c3:13:bd:2a:e2:b8:30:5b:
a3:60:dd:8a:0a:5b:43:53:00:42:f6:fb:aa:79:7a:d6:2b:4b:
fa:ca:39:28:79:5f:06:6c:d2:98:ba:69:72:53:08:b2:bc:9e:
a9:3d:28:57:49:b4:28:63:2d:e1:c1:67:07:20:b9:bd:88:46:
84:40:57:54:ee:70:53:a7:b6:56:80:bc:13:81:31:cd:d7:22:
33:58:a1:e7:ac:12:b4:bb:9d:52:58:07:cb:76:36:06:1f:40:
08:62:7a:16:9d:36:ba:ac:d8:d8:62:52:ef:df:27:d6:a1:1b:
f0:35:e7:70:3b:57:74:11:90:ad:b6:44:f4:d5:dd:ca:b2:88:
cc:7b:1a:d3:9f:d6:b2:9d:71:c9:fe:43:53:c4:a6:21:11:e3:
08:15:4f:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdohUmInKjj49SWV6x4fcLqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkM2JjOWIzYTc0MjRkOTU3NDI0MjdmOTk2MzNkOWMwYjAw
ZjY3ZjAwHhcNMjUwNjEzMDkwMDU0WhcNMjUwNjE0MDkwMDU0WjAzMTEwLwYDVQQD
EygyYmUwMGVhZjRhYWI2YmQ0YzdkMGNjMDhiZGE3MmJmN2Q3ZjljZDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk95+zdurOBJ4V3ixY2xjQjwjhbf5
Y21LOflg8wxZue7kaS2HI76ifv+zbiBL9QSvUwtqVuMVf2xvkiEM+Fn0iWHeEcMk
UOyQ3cGsayabEgTrnOTvYqCJOog5SoqPJCcx5ueJvnRAziK5BT6FJbVvJwSpbvYn
jRQr8dLN1XWFGvNWeS0kuVwghlD+y9ZTOj2nsWv7ERYcvHjK2miWcMs4r/ER5aqw
htA0ysOAqG43Ga4Tld6AvMkWQTSB0tIKyCbIjVoPh+1S3ie+ghnw3+nTsTvkdO9L
BxHW5MjY5hpoVp0pqEmHQpXP92xCMIttAkToIpliIJBg16u+SkVVzApL0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCvgDq9Kq2vUx9DMCL2nK/fX+c0zMB8GA1UdIwQY
MBaAFI07ybOnQk2VdCQn+ZYz2cCwD2fwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalR2SnM2ZENUWlYwSkNmNWxqUFp3TEFQWl9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jYWE1ZTItMDg1Zi00ZDY3LWI5YjAt
NWNhNTEwZjY3ZjcyLzEvalR2SnM2ZENUWlYwSkNmNWxqUFp3TEFQWl9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9jYWE1ZTItMDg1Zi00ZDY3LWI5YjAtNWNhNTEwZjY3Zjcy
LzEvalR2SnM2ZENUWlYwSkNmNWxqUFp3TEFQWl9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaF6WUba7
fgjBHhuwmWk/Yd59dSeywNcNauKKa/tPHzjy8KkT1+uQhORqMbVV7Fjr/4+Exgli
O6VN//kI68l49+pQ6V6Mh6csgLfg4cm0xlaGE+pD7kPLVhA7o7UXpEvhjRdbMcMT
vSriuDBbo2DdigpbQ1MAQvb7qnl61itL+so5KHlfBmzSmLppclMIsryeqT0oV0m0
KGMt4cFnByC5vYhGhEBXVO5wU6e2VoC8E4ExzdciM1ih56wStLudUlgHy3Y2Bh9A
CGJ6Fp02uqzY2GJS798n1qEb8DXncDtXdBGQrbZE9NXdyrKIzHsa05/Wsp1xyf5D
U8SmIRHjCBVPyg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:04:07 2025 by rpki-client