Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
File: jDPdzqsVS99j54n0RDSErVVIZkw.mft (raw, json)
Hash identifier: 1ioYTGhjrWd4Lqj5/bGxmGWIuicABmVJzi6rqIhxZs0=
Subject key identifier: AC:D2:96:6F:C0:28:19:3C:CF:F4:C0:3C:4E:D4:BC:62:AE:27:B2:1A
Authority key identifier: 8C:33:DD:CE:AB:15:4B:DF:63:E7:89:F4:44:34:84:AD:55:48:66:4C
Certificate issuer: /CN=8c33ddceab154bdf63e789f4443484ad5548664c
Certificate serial: 019896006D573874B24A8FE8CA2DA56CD6C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
Manifest number: 12BB
Signing time: Sun 10 Aug 2025 22:01:07 +0000
Manifest this update: Sun 10 Aug 2025 22:01:07 +0000
Manifest next update: Mon 11 Aug 2025 22:01:07 +0000
Files and hashes: 1: Af23iU2cOAjf5HW9zn9fh70-n50.roa (hash: KFEfbZsYVTLnLOFsm4vXZoNvNqznJDGo1YKGYJ8NDjc=)
2: jDPdzqsVS99j54n0RDSErVVIZkw.crl (hash: FK8ndi1lMOycKoMl3Nhkjotnov1RIy5pyRCcKvop9I0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:00:6d:57:38:74:b2:4a:8f:e8:ca:2d:a5:6c:d6:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c33ddceab154bdf63e789f4443484ad5548664c
Validity
Not Before: Aug 10 22:01:07 2025 GMT
Not After : Aug 11 22:01:07 2025 GMT
Subject: CN=acd2966fc028193ccff4c03c4ed4bc62ae27b21a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a7:26:e3:3a:42:be:e3:e6:6d:26:07:42:eb:
24:88:d8:86:04:db:c3:77:b6:76:14:55:2c:f2:b6:
ee:22:c9:ed:b7:d1:9f:4a:ec:0c:82:fe:3c:04:e0:
23:44:e2:35:bd:06:92:db:db:bb:ef:7c:d2:ef:b5:
c2:51:b2:2c:85:1a:55:48:62:86:a4:c8:6a:a7:27:
32:9d:6f:a8:54:ed:0f:16:cb:a2:c5:86:a3:88:38:
99:1f:e1:6f:b7:2b:d4:71:e8:f7:79:f7:10:3d:54:
d3:71:26:b2:70:f8:e2:a9:04:5b:ba:d4:56:99:bb:
f0:4d:21:f6:6f:7b:60:8e:49:da:46:d1:86:9d:85:
dd:07:96:49:bc:d3:f9:fc:9b:bc:c7:16:52:96:50:
27:63:ad:6f:1e:2a:21:cb:76:11:20:48:25:90:e4:
0d:20:71:90:7a:ae:07:54:99:90:75:b2:25:5f:25:
87:5d:65:3e:b2:25:20:93:14:09:aa:80:63:04:2f:
51:ec:36:e4:ec:e0:51:61:10:e4:41:c2:01:ba:0e:
60:01:05:32:e2:4a:f1:4b:65:68:74:10:06:62:24:
3f:cb:4c:1d:d6:c0:9b:95:04:77:0a:02:05:14:36:
cc:a1:27:da:52:02:b5:b3:85:c0:2e:8e:5f:98:a5:
92:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D2:96:6F:C0:28:19:3C:CF:F4:C0:3C:4E:D4:BC:62:AE:27:B2:1A
X509v3 Authority Key Identifier:
keyid:8C:33:DD:CE:AB:15:4B:DF:63:E7:89:F4:44:34:84:AD:55:48:66:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:43:db:81:26:b0:d1:4b:6b:f1:1c:ca:8e:69:38:4d:2f:52:
e6:f9:50:7a:11:bb:5c:4a:9e:6c:b0:34:a7:93:45:13:b5:03:
18:04:ec:d9:c2:c3:12:27:e0:42:20:7b:67:d5:14:3e:81:c7:
f9:ba:c4:7c:a8:8f:af:07:cc:dc:ff:79:60:14:70:20:d8:e7:
2e:4b:21:8a:98:3d:12:1a:fe:12:bd:e5:51:2c:86:fc:9b:cd:
3e:7d:c2:5a:1b:24:b2:58:ca:df:4b:09:48:59:5a:b5:0a:1d:
47:92:5f:77:4c:a5:84:24:50:f5:94:09:53:74:36:98:74:19:
9f:01:7d:1f:42:63:fb:e4:18:f5:e3:3e:9d:86:21:05:84:10:
0d:62:9d:ad:7c:3b:9f:1b:de:f6:38:20:c8:0d:bc:dd:a1:2f:
cf:e5:3b:45:e7:85:96:91:b4:b0:ea:32:10:58:78:17:3f:5d:
61:64:30:27:e2:e3:6d:8d:92:0c:39:1a:70:08:e1:dd:0f:6e:
f5:f2:22:be:9d:6b:b3:67:a9:77:26:a5:f4:e2:18:07:73:b5:
35:7d:46:76:74:38:c0:8f:ed:08:12:50:be:f9:be:3e:52:ce:
87:06:d9:51:49:1a:0c:55:dc:e6:2e:7f:af:d9:46:e8:b1:1e:
f8:38:96:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWAG1XOHSySo/oyi2lbNbGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMzNkZGNlYWIxNTRiZGY2M2U3ODlmNDQ0MzQ4NGFkNTU0
ODY2NGMwHhcNMjUwODEwMjIwMTA3WhcNMjUwODExMjIwMTA3WjAzMTEwLwYDVQQD
EyhhY2QyOTY2ZmMwMjgxOTNjY2ZmNGMwM2M0ZWQ0YmM2MmFlMjdiMjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6cm4zpCvuPmbSYHQuskiNiGBNvD
d7Z2FFUs8rbuIsntt9GfSuwMgv48BOAjROI1vQaS29u773zS77XCUbIshRpVSGKG
pMhqpycynW+oVO0PFsuixYajiDiZH+FvtyvUcej3efcQPVTTcSaycPjiqQRbutRW
mbvwTSH2b3tgjknaRtGGnYXdB5ZJvNP5/Ju8xxZSllAnY61vHiohy3YRIEglkOQN
IHGQeq4HVJmQdbIlXyWHXWU+siUgkxQJqoBjBC9R7Dbk7OBRYRDkQcIBug5gAQUy
4krxS2VodBAGYiQ/y0wd1sCblQR3CgIFFDbMoSfaUgK1s4XALo5fmKWSHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKzSlm/AKBk8z/TAPE7UvGKuJ7IaMB8GA1UdIwQY
MBaAFIwz3c6rFUvfY+eJ9EQ0hK1VSGZMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakRQZHpxc1ZTOTlqNTRuMFJEU0VyVlZJWmt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jYzQ1MTYtMWI5NC00NWFiLWIxNjEt
ZjJiMGZkM2MzMTM3LzEvakRQZHpxc1ZTOTlqNTRuMFJEU0VyVlZJWmt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jYzQ1MTYtMWI5NC00NWFiLWIxNjEtZjJiMGZkM2MzMTM3
LzEvakRQZHpxc1ZTOTlqNTRuMFJEU0VyVlZJWmt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVkPbgSaw
0Utr8RzKjmk4TS9S5vlQehG7XEqebLA0p5NFE7UDGATs2cLDEifgQiB7Z9UUPoHH
+brEfKiPrwfM3P95YBRwINjnLkshipg9Ehr+Er3lUSyG/JvNPn3CWhsksljK30sJ
SFlatQodR5Jfd0ylhCRQ9ZQJU3Q2mHQZnwF9H0Jj++QY9eM+nYYhBYQQDWKdrXw7
nxve9jggyA283aEvz+U7ReeFlpG0sOoyEFh4Fz9dYWQwJ+LjbY2SDDkacAjh3Q9u
9fIivp1rs2epdyal9OIYB3O1NX1GdnQ4wI/tCBJQvvm+PlLOhwbZUUkaDFXc5i5/
r9lG6LEe+DiWqA==
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:08:55 2025 by rpki-client