Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
File: jAx_Lrq3yWERyuaHzt0c0um81Wo.mft (raw, json)
Hash identifier: PTK3IRoxnSvfkD7acewS0HyjFZc/BCy1pyqqxsqd8Z4=
Subject key identifier: DE:A6:50:17:F7:1D:06:AE:11:BC:AD:C5:6C:9D:64:70:CE:5F:F8:71
Authority key identifier: 8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
Certificate issuer: /CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Certificate serial: 0198A0BA6C4D3F024A36B03888C8DC5E8A5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
Manifest number: 162E
Signing time: Wed 13 Aug 2025 00:00:28 +0000
Manifest this update: Wed 13 Aug 2025 00:00:28 +0000
Manifest next update: Thu 14 Aug 2025 00:00:28 +0000
Files and hashes: 1: CLLXw20tFXDHP2NnWdXuz6OtVIE.roa (hash: fyANJPQO+a+aRIBA049SI7Qf8CVSPhtzXXD8t/DgeGs=)
2: f46_qQD3jnenHxB8isMlElB8Ow8.roa (hash: xiaUuaIqDN3MaDb9piyX8u90zRoK0nA4gMNUAGOcErw=)
3: jAx_Lrq3yWERyuaHzt0c0um81Wo.crl (hash: bYe2R5zfsrinVIZIyt5FUy+yje2++WPy8Hdp0AUXh4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:ba:6c:4d:3f:02:4a:36:b0:38:88:c8:dc:5e:8a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Validity
Not Before: Aug 13 00:00:28 2025 GMT
Not After : Aug 14 00:00:28 2025 GMT
Subject: CN=dea65017f71d06ae11bcadc56c9d6470ce5ff871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6a:97:54:fd:b9:17:d4:34:7a:9e:1c:a7:92:
ba:d8:9d:b6:e7:ac:c5:19:b7:22:d8:1a:43:18:67:
4f:0e:99:45:07:e7:06:bc:81:cb:e2:3a:1e:90:28:
f6:a7:1f:ff:79:7d:8d:6e:a0:58:0b:2e:7c:d0:59:
d4:d7:66:a9:fc:75:18:f2:ac:86:09:35:82:ba:df:
26:1c:c2:fa:52:bf:c3:93:ed:b9:75:f5:db:ec:24:
fd:a9:24:6d:b0:02:7e:24:95:e8:20:21:17:60:92:
7e:c4:c3:36:ad:23:58:8f:98:f7:7e:56:ca:0c:ed:
8d:f1:85:73:cd:41:ce:2c:3e:31:c6:1e:e9:de:8e:
8e:ac:1f:06:74:96:38:7e:79:1d:c0:07:a2:b5:4b:
98:d0:c9:3c:de:26:e2:04:58:95:bb:e0:60:3f:6f:
53:77:08:fb:de:b5:8c:73:06:c5:3b:04:b7:7c:21:
c8:ab:b6:75:c8:dd:04:b2:24:65:fb:1e:bd:65:ca:
83:69:6b:29:04:28:4d:91:1d:f5:cc:cf:34:cb:24:
bd:89:06:87:7f:d3:d7:a1:b5:0c:02:00:57:a3:cd:
b0:31:29:be:6b:fd:e7:1b:b5:d2:cf:c4:19:87:3f:
db:be:1b:5a:d9:79:1c:fa:4a:72:e9:f9:36:bb:cc:
54:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A6:50:17:F7:1D:06:AE:11:BC:AD:C5:6C:9D:64:70:CE:5F:F8:71
X509v3 Authority Key Identifier:
keyid:8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f6:ed:a0:0f:1f:b2:c1:09:59:e7:b2:45:84:b5:46:85:84:
e6:fe:98:82:d4:ec:66:bb:7e:10:47:76:5c:93:e9:55:41:df:
50:5a:19:82:35:f2:a3:fe:58:51:c2:ee:46:07:cf:47:85:95:
5d:4e:3d:43:29:18:01:c7:a0:71:1a:ad:18:b5:a0:fc:85:3b:
32:44:9b:2b:ec:80:f2:85:68:88:25:40:0a:5a:d3:48:1f:bd:
81:11:11:80:99:1d:e7:73:9b:d8:3a:06:bc:fb:7a:e0:1f:3e:
8f:99:ea:4b:3a:02:fd:71:f1:c1:34:74:29:07:a1:74:05:de:
c0:3a:3f:fe:9b:2c:6b:ff:67:a7:99:6a:b2:4b:55:d4:b5:eb:
ca:f1:8e:72:20:a3:c2:b0:ed:57:9d:84:23:9b:f0:f6:3b:23:
c8:b5:b4:92:5d:50:ff:52:a4:3a:1c:92:2c:de:a7:09:ea:51:
af:cc:fd:0f:86:11:b1:b6:b4:f6:e3:2c:5f:68:8a:27:36:7d:
54:ce:63:7f:0e:f7:22:a3:ee:d6:7f:32:7b:4c:e4:45:97:84:
29:e0:8a:97:85:66:1a:70:ef:23:83:52:c9:e1:54:f2:b7:88:
a6:95:fd:df:8e:48:06:28:38:0c:7d:fd:60:a9:87:0f:37:b8:
9f:31:b4:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZigumxNPwJKNrA4iMjcXopeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMGM3ZjJlYmFiN2M5NjExMWNhZTY4N2NlZGQxY2QyZTli
Y2Q1NmEwHhcNMjUwODEzMDAwMDI4WhcNMjUwODE0MDAwMDI4WjAzMTEwLwYDVQQD
EyhkZWE2NTAxN2Y3MWQwNmFlMTFiY2FkYzU2YzlkNjQ3MGNlNWZmODcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGqXVP25F9Q0ep4cp5K62J2256zF
Gbci2BpDGGdPDplFB+cGvIHL4joekCj2px//eX2NbqBYCy580FnU12ap/HUY8qyG
CTWCut8mHML6Ur/Dk+25dfXb7CT9qSRtsAJ+JJXoICEXYJJ+xMM2rSNYj5j3flbK
DO2N8YVzzUHOLD4xxh7p3o6OrB8GdJY4fnkdwAeitUuY0Mk83ibiBFiVu+BgP29T
dwj73rWMcwbFOwS3fCHIq7Z1yN0EsiRl+x69ZcqDaWspBChNkR31zM80yyS9iQaH
f9PXobUMAgBXo82wMSm+a/3nG7XSz8QZhz/bvhta2Xkc+kpy6fk2u8xUgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6mUBf3HQauEbytxWydZHDOX/hxMB8GA1UdIwQY
MBaAFIwMfy66t8lhEcrmh87dHNLpvNVqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakF4X0xycTN5V0VSeXVhSHp0MGMwdW04MVdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9jNzYzODMtNTkxYy00Y2RlLWIyY2Yt
MjUxZDc0ZWQ3NzU0LzEvakF4X0xycTN5V0VSeXVhSHp0MGMwdW04MVdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9jNzYzODMtNTkxYy00Y2RlLWIyY2YtMjUxZDc0ZWQ3NzU0
LzEvakF4X0xycTN5V0VSeXVhSHp0MGMwdW04MVdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS/btoA8f
ssEJWeeyRYS1RoWE5v6YgtTsZrt+EEd2XJPpVUHfUFoZgjXyo/5YUcLuRgfPR4WV
XU49QykYAcegcRqtGLWg/IU7MkSbK+yA8oVoiCVAClrTSB+9gRERgJkd53Ob2DoG
vPt64B8+j5nqSzoC/XHxwTR0KQehdAXewDo//pssa/9np5lqsktV1LXryvGOciCj
wrDtV52EI5vw9jsjyLW0kl1Q/1KkOhySLN6nCepRr8z9D4YRsba09uMsX2iKJzZ9
VM5jfw73IqPu1n8ye0zkRZeEKeCKl4VmGnDvI4NSyeFU8reIppX9345IBig4DH39
YKmHDze4nzG0Aw==
-----END CERTIFICATE-----
Generated at Wed Aug 13 05:28:34 2025 by rpki-client