Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
File: JFjwpFOzL_OiHmajG3T-SdjkajM.mft (raw, json)
Hash identifier: gb+BoX/OG7qsrdMrzAcBGYaycoYrjN8YCjt5d8bpdfY=
Subject key identifier: 5E:D6:66:95:54:D6:A3:73:A5:DC:44:09:E4:C3:E8:8F:9D:D3:20:36
Authority key identifier: 24:58:F0:A4:53:B3:2F:F3:A2:1E:66:A3:1B:74:FE:49:D8:E4:6A:33
Certificate issuer: /CN=2458f0a453b32ff3a21e66a31b74fe49d8e46a33
Certificate serial: 01989148777D8C46BD675130139ED4F50F53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
Manifest number: 1153
Signing time: Sun 10 Aug 2025 00:01:42 +0000
Manifest this update: Sun 10 Aug 2025 00:01:42 +0000
Manifest next update: Mon 11 Aug 2025 00:01:42 +0000
Files and hashes: 1: JFjwpFOzL_OiHmajG3T-SdjkajM.crl (hash: vy3coeiS1P5ymqXLlwo+GNHxhM2pl7WiHUGSOazlvRo=)
2: _d1GEPj08rPnUJ5e0jIgKD6QCFQ.roa (hash: vnr1x2ojeLhbVafxW9oqVV43qotLr8cLQwIIuErWSfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 00:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:48:77:7d:8c:46:bd:67:51:30:13:9e:d4:f5:0f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2458f0a453b32ff3a21e66a31b74fe49d8e46a33
Validity
Not Before: Aug 10 00:01:42 2025 GMT
Not After : Aug 11 00:01:42 2025 GMT
Subject: CN=5ed6669554d6a373a5dc4409e4c3e88f9dd32036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1c:3c:88:52:1d:a8:58:58:11:e2:97:60:c0:
21:e6:47:20:a8:35:a6:34:cb:65:be:37:8d:ca:64:
63:e2:89:18:63:2c:ac:40:80:53:c8:8a:72:e3:68:
11:8e:2c:da:99:44:35:f3:16:ff:ce:ef:80:62:6d:
ae:55:84:17:fe:b9:5b:bc:d2:68:07:c9:3b:57:65:
4a:f8:6d:02:93:35:1c:75:86:37:79:96:2e:27:2d:
74:7b:82:b2:07:a4:fe:d8:aa:08:e2:2d:ce:7b:02:
e8:f6:de:0c:6e:97:db:2a:b3:7a:06:96:ac:1c:f7:
71:f9:1a:c3:ee:34:a7:ab:c5:f6:5b:3c:7c:a3:84:
91:ae:bd:14:8d:42:26:bc:5d:31:c0:19:83:e1:04:
a2:d3:d1:26:d6:de:f5:2a:a9:5f:24:68:89:b6:a1:
39:30:d4:74:d2:b3:0c:42:81:a9:06:3c:7a:ad:67:
ad:e8:5f:ba:6f:f6:ca:53:17:cb:66:96:e1:30:a1:
ab:19:1b:25:f2:c3:5e:c2:03:54:a9:16:58:62:07:
21:17:ba:40:d9:7e:2e:40:b4:5d:1b:5f:d3:cf:20:
fa:93:92:01:af:83:d0:f0:41:dd:7b:91:0c:ca:7f:
ba:0b:d6:f6:2b:fb:de:db:aa:f9:7f:67:15:46:3e:
61:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D6:66:95:54:D6:A3:73:A5:DC:44:09:E4:C3:E8:8F:9D:D3:20:36
X509v3 Authority Key Identifier:
keyid:24:58:F0:A4:53:B3:2F:F3:A2:1E:66:A3:1B:74:FE:49:D8:E4:6A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f4:38:b2:fa:a9:06:d7:9d:76:d5:7b:f2:03:5a:46:95:99:
f7:79:db:9b:11:57:91:b7:b7:46:e9:6d:5f:59:ec:ef:7b:79:
19:a1:d2:b5:33:90:ef:3b:a4:5d:1d:8e:3f:d5:24:0b:db:a7:
0e:94:77:fd:f7:e1:15:9b:31:a5:a5:23:12:ee:03:17:86:c8:
3c:51:8d:48:37:5d:93:8f:58:33:dc:65:05:47:0f:09:6f:ad:
e7:d9:f2:73:fd:2b:5c:fe:98:09:6c:ca:60:97:7f:72:6c:6b:
00:29:03:19:9b:87:cd:77:a3:51:23:a5:2a:a2:2f:87:1f:d3:
45:cb:3f:c2:b2:23:89:66:cc:86:8b:c2:33:a6:f0:76:a9:4e:
11:e3:32:25:07:0d:d3:ec:6b:b4:42:3c:1c:c3:e6:42:b8:a4:
cf:9a:94:47:45:54:e4:49:e7:aa:e5:60:cb:55:1e:94:13:89:
42:e4:6d:78:cc:fa:1d:23:93:88:27:ff:49:2a:e4:f1:7e:16:
29:23:62:69:a8:2d:c3:66:31:34:c5:c8:3a:8c:47:1a:99:7a:
68:83:ef:86:46:61:3a:2d:57:e7:13:ae:1d:6d:c5:16:04:17:
5b:c8:d7:21:42:88:74:18:ee:1d:ce:59:6e:c7:5c:85:ac:3f:
7c:a3:cd:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiRSHd9jEa9Z1EwE57U9Q9TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NThmMGE0NTNiMzJmZjNhMjFlNjZhMzFiNzRmZTQ5ZDhl
NDZhMzMwHhcNMjUwODEwMDAwMTQyWhcNMjUwODExMDAwMTQyWjAzMTEwLwYDVQQD
Eyg1ZWQ2NjY5NTU0ZDZhMzczYTVkYzQ0MDllNGMzZTg4ZjlkZDMyMDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRw8iFIdqFhYEeKXYMAh5kcgqDWm
NMtlvjeNymRj4okYYyysQIBTyIpy42gRjizamUQ18xb/zu+AYm2uVYQX/rlbvNJo
B8k7V2VK+G0CkzUcdYY3eZYuJy10e4KyB6T+2KoI4i3OewLo9t4MbpfbKrN6Bpas
HPdx+RrD7jSnq8X2Wzx8o4SRrr0UjUImvF0xwBmD4QSi09Em1t71KqlfJGiJtqE5
MNR00rMMQoGpBjx6rWet6F+6b/bKUxfLZpbhMKGrGRsl8sNewgNUqRZYYgchF7pA
2X4uQLRdG1/TzyD6k5IBr4PQ8EHde5EMyn+6C9b2K/ve26r5f2cVRj5hzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF7WZpVU1qNzpdxECeTD6I+d0yA2MB8GA1UdIwQY
MBaAFCRY8KRTsy/zoh5moxt0/knY5GozMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkZqd3BGT3pMX09pSG1hakczVC1TZGprYWpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8xMTE5MmQtMTc0MC00ZThlLTllMDQt
ZWUzNzk1MThjNjg2LzEvSkZqd3BGT3pMX09pSG1hakczVC1TZGprYWpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8xMTE5MmQtMTc0MC00ZThlLTllMDQtZWUzNzk1MThjNjg2
LzEvSkZqd3BGT3pMX09pSG1hakczVC1TZGprYWpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATvQ4svqp
BteddtV78gNaRpWZ93nbmxFXkbe3RultX1ns73t5GaHStTOQ7zukXR2OP9UkC9un
DpR3/ffhFZsxpaUjEu4DF4bIPFGNSDddk49YM9xlBUcPCW+t59nyc/0rXP6YCWzK
YJd/cmxrACkDGZuHzXejUSOlKqIvhx/TRcs/wrIjiWbMhovCM6bwdqlOEeMyJQcN
0+xrtEI8HMPmQrikz5qUR0VU5EnnquVgy1UelBOJQuRteMz6HSOTiCf/SSrk8X4W
KSNiaagtw2YxNMXIOoxHGpl6aIPvhkZhOi1X5xOuHW3FFgQXW8jXIUKIdBjuHc5Z
bsdchaw/fKPNyg==
-----END CERTIFICATE-----
Generated at Sun Aug 10 10:47:05 2025 by rpki-client