Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
File: jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft (raw, json)
Hash identifier: 5xptmiM/hGwm4UKG/yd7BbmjWVdYbIJ0Cn46UCWv0PE=
Subject key identifier: 9D:F5:45:9E:F8:61:15:BA:F8:A9:7D:9E:17:53:80:F4:69:C0:86:94
Authority key identifier: 8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
Certificate issuer: /CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Certificate serial: 01989825A2638B338FE0D9E09FEE32FE1A35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
Manifest number: 0F39
Signing time: Mon 11 Aug 2025 08:00:59 +0000
Manifest this update: Mon 11 Aug 2025 08:00:59 +0000
Manifest next update: Tue 12 Aug 2025 08:00:59 +0000
Files and hashes: 1: bmmsoMxYv54D3Mc8ZLTs5VomINo.roa (hash: kqjLBEFpjOoFx6G/izyFkQ1F3RKWyrbgiXrW4EShNUE=)
2: jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl (hash: RGnSf+sTrSMa8v5bgU7Rw4LMEbhz0vd2Q2zXK2OpUXw=)
3: snNBqH-54jS2dGd9kUA2wImuV_A.roa (hash: +KuCAVSEZ2fMvcpoRb3reL7YI4QgXbzX9w7SZK+eaHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:98:25:a2:63:8b:33:8f:e0:d9:e0:9f:ee:32:fe:1a:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Validity
Not Before: Aug 11 08:00:59 2025 GMT
Not After : Aug 12 08:00:59 2025 GMT
Subject: CN=9df5459ef86115baf8a97d9e175380f469c08694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:79:50:f3:de:32:10:74:02:f2:9f:5d:09:a4:
8d:2d:04:38:82:09:08:2d:30:33:e3:01:ba:6b:23:
68:72:ae:a4:76:81:e5:ee:57:94:c4:07:b5:42:fb:
f2:fa:04:f9:7e:33:ac:30:ef:c1:12:85:34:ce:71:
13:c2:e1:78:04:84:14:5b:60:cb:11:1d:f4:d3:a3:
ce:5d:60:f1:f2:e3:2b:71:e5:06:d0:d6:ed:64:44:
d7:92:9c:7e:bf:ec:fa:ed:8d:db:1a:2a:81:f4:0a:
7f:66:3c:e1:62:35:bb:6f:3a:4a:5b:62:4b:7f:53:
67:57:36:01:26:b9:a1:f2:78:d7:ed:15:4e:be:6e:
b5:a4:e2:01:28:86:57:f0:bd:c2:41:f5:3f:de:04:
a5:08:e0:79:7f:f6:95:e6:23:02:bc:7f:82:ff:e0:
4d:de:ae:14:22:0a:d0:a2:8f:8d:30:ae:6c:1a:2b:
84:6b:fe:0c:e7:cc:99:22:15:87:f7:7e:e7:c3:61:
2d:8c:0c:be:6a:d1:f3:d0:3d:fd:d4:ed:95:80:b9:
e8:4c:9c:b7:10:8f:4a:0f:ce:86:86:03:40:86:25:
7a:3c:6b:92:ba:67:14:4f:9a:de:7c:c3:81:e8:ef:
00:13:5a:b8:f5:e2:b1:5e:21:7c:56:2e:08:e0:42:
27:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F5:45:9E:F8:61:15:BA:F8:A9:7D:9E:17:53:80:F4:69:C0:86:94
X509v3 Authority Key Identifier:
keyid:8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e9:6d:32:1b:d4:5d:96:ae:bc:93:04:28:0f:cc:de:eb:ae:cf:
8b:01:fb:6f:53:ca:3c:d4:4c:41:77:d4:fa:2a:3e:81:1c:57:
d1:bc:6a:eb:b8:77:7f:14:7a:b4:dd:ce:bd:fa:8f:1a:1b:79:
9b:ac:13:c2:1d:32:66:ab:a2:98:66:95:ac:d0:d1:61:05:63:
c8:fa:9e:0d:0a:57:25:b0:e0:e5:cf:ff:c2:d7:3e:1b:35:cc:
6b:5f:db:ba:7c:eb:64:f0:ba:60:a3:87:a6:e4:f5:bc:96:78:
61:5e:0e:8d:b7:3c:36:de:b3:72:95:5d:c7:d1:50:e9:74:f7:
a8:b9:33:c3:d6:22:dc:81:3d:8c:f7:7e:83:62:d6:7d:8b:0a:
5c:60:7f:63:c0:37:b3:26:e1:2f:5d:66:d2:42:01:a0:d4:b0:
01:35:b6:26:49:5d:1b:bc:94:9b:29:5b:0e:41:22:b1:12:9e:
a7:97:d4:6d:72:7e:95:f8:68:df:f7:45:f5:bf:ab:51:15:73:
22:82:ca:f8:f0:79:08:d0:06:86:63:89:1c:e4:98:f2:86:08:
7c:06:f0:9b:97:8f:57:bb:04:46:81:25:d2:57:61:41:16:ab:
e0:20:d1:2b:41:53:9b:0d:62:ae:4a:47:74:1b:80:69:27:d4:
b1:a5:0d:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiYJaJjizOP4Nngn+4y/ho1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNGRkMmQwNmQ5MjBlNDAzOTMzZmRiMmNkMTk4NDg5MzU1
MjU3OWMwHhcNMjUwODExMDgwMDU5WhcNMjUwODEyMDgwMDU5WjAzMTEwLwYDVQQD
Eyg5ZGY1NDU5ZWY4NjExNWJhZjhhOTdkOWUxNzUzODBmNDY5YzA4Njk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXlQ894yEHQC8p9dCaSNLQQ4ggkI
LTAz4wG6ayNocq6kdoHl7leUxAe1Qvvy+gT5fjOsMO/BEoU0znETwuF4BIQUW2DL
ER3006POXWDx8uMrceUG0NbtZETXkpx+v+z67Y3bGiqB9Ap/ZjzhYjW7bzpKW2JL
f1NnVzYBJrmh8njX7RVOvm61pOIBKIZX8L3CQfU/3gSlCOB5f/aV5iMCvH+C/+BN
3q4UIgrQoo+NMK5sGiuEa/4M58yZIhWH937nw2EtjAy+atHz0D391O2VgLnoTJy3
EI9KD86GhgNAhiV6PGuSumcUT5refMOB6O8AE1q49eKxXiF8Vi4I4EInLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ31RZ74YRW6+Kl9nhdTgPRpwIaUMB8GA1UdIwQY
MBaAFI1N0tBtkg5AOTP9ss0ZhIk1UlecMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalUzUzBHMlNEa0E1TV8yeXpSbUVpVFZTVjV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mNjIxYTctZTA4MC00MjU1LTkyNmQt
MzJmZjMxY2VlYzhiLzEvalUzUzBHMlNEa0E1TV8yeXpSbUVpVFZTVjV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mNjIxYTctZTA4MC00MjU1LTkyNmQtMzJmZjMxY2VlYzhi
LzEvalUzUzBHMlNEa0E1TV8yeXpSbUVpVFZTVjV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6W0yG9Rd
lq68kwQoD8ze667PiwH7b1PKPNRMQXfU+io+gRxX0bxq67h3fxR6tN3OvfqPGht5
m6wTwh0yZquimGaVrNDRYQVjyPqeDQpXJbDg5c//wtc+GzXMa1/bunzrZPC6YKOH
puT1vJZ4YV4Ojbc8Nt6zcpVdx9FQ6XT3qLkzw9Yi3IE9jPd+g2LWfYsKXGB/Y8A3
sybhL11m0kIBoNSwATW2JkldG7yUmylbDkEisRKep5fUbXJ+lfho3/dF9b+rURVz
IoLK+PB5CNAGhmOJHOSY8oYIfAbwm5ePV7sERoEl0ldhQRar4CDRK0FTmw1irkpH
dBuAaSfUsaUN6w==
-----END CERTIFICATE-----
Generated at Mon Aug 11 10:06:54 2025 by rpki-client