
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
File: sJ__jo_9j459mntm0cxz3DkoHvY.mft (raw, json)
Hash identifier: wPQvPEOQgm9jn98u4sP+ZsY+N/KGxXcr/lHPctthbYc=
Subject key identifier: BB:D7:67:DF:9E:E2:01:B6:0F:7F:E9:43:83:94:54:27:31:9E:B7:45
Authority key identifier: B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6
Certificate issuer: /CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6
Certificate serial: 019875D1F1BA723107E86DAA5F8D806B01DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
Manifest number: 1622
Signing time: Mon 04 Aug 2025 16:02:29 +0000
Manifest this update: Mon 04 Aug 2025 16:02:29 +0000
Manifest next update: Tue 05 Aug 2025 16:02:29 +0000
Files and hashes: 1: K_3LG8OaW8IFtRNbLO4GRdIs5Vc.roa (hash: xg+Bjx4DC/FY08PaKoFJJvP5HHj4DB2L0enoWEQOn+Y=)
2: qrvgnkiRlc7rMBlueEGY6GFR5f4.roa (hash: GRgjXdvuR0BuPnuResU3wvkGs+6BXCcEgxlm6k2P5XA=)
3: sJ__jo_9j459mntm0cxz3DkoHvY.crl (hash: nfkmGNdxvlRpWENrvsWlyqfwQtpWwgQcbuZd657rg94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d1:f1:ba:72:31:07:e8:6d:aa:5f:8d:80:6b:01:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6
Validity
Not Before: Aug 4 16:02:29 2025 GMT
Not After : Aug 5 16:02:29 2025 GMT
Subject: CN=bbd767df9ee201b60f7fe94383945427319eb745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c8:f7:8a:e6:95:cb:bc:4c:9b:fc:75:88:a0:
99:01:d7:c5:b4:5c:8a:59:be:03:1e:f5:7d:58:39:
98:a5:47:34:f5:f3:3b:b3:2b:03:35:ed:23:78:26:
4c:8b:70:ae:55:27:67:2c:a1:e3:ea:b8:48:85:e3:
44:46:af:07:bc:98:2a:d7:81:90:47:7e:80:96:81:
8d:d4:ff:50:dd:10:ac:62:ab:b7:68:5a:3b:66:2f:
e0:fd:19:7d:cb:28:06:e0:35:38:dd:4d:43:cb:3c:
99:6c:7a:86:89:3d:d2:96:95:85:84:d2:c9:7d:73:
d8:d6:2c:e7:48:f1:26:6e:32:e1:f4:b5:18:a1:70:
e5:03:7d:cc:27:2d:a1:4c:e7:8a:01:2a:2e:45:23:
62:1e:63:7e:6a:42:5e:7c:33:2c:3b:70:36:ff:11:
85:5c:1b:17:85:ee:91:39:b3:6e:17:82:2a:85:c8:
3d:80:30:c3:2d:af:4a:ee:21:04:0c:a9:45:a7:28:
d0:7f:b4:cf:dc:d6:c3:4e:d5:e3:1a:80:b6:87:26:
55:7f:75:96:1e:f6:34:e4:2f:89:04:30:eb:53:78:
6c:ab:79:6e:e9:a6:c9:e8:60:d8:d6:9a:dc:68:3b:
e7:2f:b8:58:7e:d4:ab:12:bf:ec:c6:94:9b:60:f1:
aa:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D7:67:DF:9E:E2:01:B6:0F:7F:E9:43:83:94:54:27:31:9E:B7:45
X509v3 Authority Key Identifier:
keyid:B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:64:71:7c:8f:8a:ac:da:df:10:04:90:26:7a:fc:91:aa:3c:
15:72:e8:c5:4d:95:0c:d7:41:f2:8e:6f:fb:ae:b0:a4:98:73:
04:f4:35:d7:b7:55:41:bf:f0:70:6c:80:a3:ab:73:1d:34:14:
29:56:7f:2a:fd:f5:2b:be:8e:79:44:b8:0e:64:fa:8f:f2:d3:
38:45:71:3f:e3:5c:f6:17:da:53:4c:4a:16:37:f3:36:b4:2b:
47:43:19:ed:63:42:96:7b:57:59:9b:e1:90:f4:67:85:e5:44:
b3:10:06:ca:7a:c4:e9:9d:25:ca:82:51:9f:80:2a:cc:7c:f4:
32:55:2e:76:47:20:5f:7a:a8:ab:13:c1:f6:18:54:d6:e7:80:
6d:fa:d8:41:64:a1:7a:a3:a9:90:ed:2d:5d:6d:cd:2b:d9:ac:
66:40:26:d9:44:a2:7d:36:3d:79:03:63:19:5e:0d:c8:6b:12:
97:dc:6a:67:45:79:62:03:f2:c2:cf:46:a5:d2:8f:d7:30:5f:
08:5e:8b:29:3f:36:9c:94:83:dc:c2:f9:f6:97:c8:0a:f8:f4:
59:cf:36:3f:39:2c:31:a7:3b:72:c9:6a:b6:2e:d7:80:b1:7e:
68:3a:05:6d:8f:6f:82:14:1d:a1:79:c4:fd:78:52:5b:e7:e9:
28:e3:5d:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh10fG6cjEH6G2qX42AawHdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwOWZmZjhlOGZmZDhmOGU3ZDlhN2I2NmQxY2M3M2RjMzky
ODFlZjYwHhcNMjUwODA0MTYwMjI5WhcNMjUwODA1MTYwMjI5WjAzMTEwLwYDVQQD
EyhiYmQ3NjdkZjllZTIwMWI2MGY3ZmU5NDM4Mzk0NTQyNzMxOWViNzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMj3iuaVy7xMm/x1iKCZAdfFtFyK
Wb4DHvV9WDmYpUc09fM7sysDNe0jeCZMi3CuVSdnLKHj6rhIheNERq8HvJgq14GQ
R36AloGN1P9Q3RCsYqu3aFo7Zi/g/Rl9yygG4DU43U1DyzyZbHqGiT3SlpWFhNLJ
fXPY1iznSPEmbjLh9LUYoXDlA33MJy2hTOeKASouRSNiHmN+akJefDMsO3A2/xGF
XBsXhe6RObNuF4Iqhcg9gDDDLa9K7iEEDKlFpyjQf7TP3NbDTtXjGoC2hyZVf3WW
HvY05C+JBDDrU3hsq3lu6abJ6GDY1prcaDvnL7hYftSrEr/sxpSbYPGqdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvXZ9+e4gG2D3/pQ4OUVCcxnrdFMB8GA1UdIwQY
MBaAFLCf/46P/Y+OfZp7ZtHMc9w5KB72MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0pfX2pvXzlqNDU5bW50bTBjeHozRGtvSHZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy84ZmJjN2UtMWY0Ny00ODdjLTgyOTIt
ZTVhNzdmN2E3YWEyLzEvc0pfX2pvXzlqNDU5bW50bTBjeHozRGtvSHZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy84ZmJjN2UtMWY0Ny00ODdjLTgyOTItZTVhNzdmN2E3YWEy
LzEvc0pfX2pvXzlqNDU5bW50bTBjeHozRGtvSHZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0mRxfI+K
rNrfEASQJnr8kao8FXLoxU2VDNdB8o5v+66wpJhzBPQ117dVQb/wcGyAo6tzHTQU
KVZ/Kv31K76OeUS4DmT6j/LTOEVxP+Nc9hfaU0xKFjfzNrQrR0MZ7WNClntXWZvh
kPRnheVEsxAGynrE6Z0lyoJRn4AqzHz0MlUudkcgX3qoqxPB9hhU1ueAbfrYQWSh
eqOpkO0tXW3NK9msZkAm2USifTY9eQNjGV4NyGsSl9xqZ0V5YgPyws9GpdKP1zBf
CF6LKT82nJSD3ML59pfICvj0Wc82PzksMac7cslqti7XgLF+aDoFbY9vghQdoXnE
/XhSW+fpKONdwA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:32:09 2025 by rpki-client