Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
File: jsM7jhNW_M_INGbu2KhlUSp9APE.mft (raw, json)
Hash identifier: /rq5efHrOX6FozNQzQMVl2BSDk/OR9lgI7w0TTgnPFo=
Subject key identifier: D3:79:60:7A:94:13:7F:CA:73:AF:A7:A6:DF:43:52:20:6D:06:9E:52
Authority key identifier: 8E:C3:3B:8E:13:56:FC:CF:C8:34:66:EE:D8:A8:65:51:2A:7D:00:F1
Certificate issuer: /CN=8ec33b8e1356fccfc83466eed8a865512a7d00f1
Certificate serial: 019873E2F5843C12D915794E9BEEF29F0109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 07:01:50 +0000
Manifest this update: Mon 04 Aug 2025 07:01:50 +0000
Manifest next update: Tue 05 Aug 2025 07:01:50 +0000
Files and hashes: 1: jsM7jhNW_M_INGbu2KhlUSp9APE.crl (hash: SSwyYfAUN9KilLyRmDOi89Ac3uY0P42D1Ro0sM0ns7I=)
2: qwVGjqL0m5G9ustOpPZ5FS2RFbA.roa (hash: QQptDB1uT/9FFhotqk1bN1Jx0M0NJncKcjU5av3+7no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:f5:84:3c:12:d9:15:79:4e:9b:ee:f2:9f:01:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec33b8e1356fccfc83466eed8a865512a7d00f1
Validity
Not Before: Aug 4 07:01:50 2025 GMT
Not After : Aug 5 07:01:50 2025 GMT
Subject: CN=d379607a94137fca73afa7a6df4352206d069e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b9:8e:51:c0:e0:e0:86:cd:50:e6:1d:d7:2d:
75:cf:5f:0e:1d:5b:67:9f:9c:62:9e:33:d3:99:99:
25:1a:21:8d:42:24:80:d8:6e:8f:00:7a:ef:2a:fb:
af:f3:7c:39:7f:0b:c8:38:e7:07:68:e8:1d:c1:2d:
21:70:27:83:d0:38:dd:f2:87:e8:0d:e6:cc:ac:bc:
c0:b2:c7:88:4f:40:86:57:a8:54:00:94:5d:7e:27:
c9:a5:db:8d:38:66:05:ce:b3:24:8b:c0:d6:f1:a8:
6e:3c:b9:5d:21:c4:ec:4b:4f:51:2c:5b:d8:b0:61:
63:ec:6e:d1:54:c3:95:c2:c0:c0:b4:c3:db:da:b9:
e0:ea:17:31:e2:55:78:c3:93:21:df:15:27:ce:63:
01:0f:b6:4d:53:80:7d:10:af:f8:1e:61:24:fd:57:
6c:dd:e5:02:a5:e9:c8:6c:e1:e0:2a:f2:1a:e7:37:
34:63:0b:85:33:d1:ec:af:e3:8e:b5:5b:62:2a:a4:
0f:30:1f:76:3e:73:9a:dc:da:b8:95:75:7b:08:57:
3e:24:2d:54:58:65:8b:32:f5:91:70:e9:40:7c:39:
22:7b:78:85:2b:3b:41:c8:91:23:db:57:e0:59:dc:
07:f0:50:b6:cf:df:f2:c3:bb:f9:a8:b5:f7:bd:b2:
da:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:79:60:7A:94:13:7F:CA:73:AF:A7:A6:DF:43:52:20:6D:06:9E:52
X509v3 Authority Key Identifier:
keyid:8E:C3:3B:8E:13:56:FC:CF:C8:34:66:EE:D8:A8:65:51:2A:7D:00:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:d6:2c:e8:e7:82:a7:bf:03:1d:44:c9:64:95:39:77:2d:9b:
66:7e:d8:fd:b0:39:2d:a4:82:ba:76:76:0c:8d:97:48:c2:86:
12:71:18:8a:ab:c2:7d:73:ec:81:7c:9e:7e:c8:f7:08:88:1c:
a6:1f:64:fd:e8:ad:ba:2f:56:8e:06:43:a9:9a:d7:bc:89:b4:
a8:66:19:35:aa:27:df:2b:a6:87:fa:b5:2d:4b:7e:6c:db:31:
fe:33:25:f0:2e:4f:f8:0d:c2:0b:fe:77:6b:61:26:22:c1:45:
e2:16:2a:c4:60:f9:75:f6:01:87:39:91:bf:2a:8b:72:1a:38:
2f:2b:be:72:3a:8f:c6:d8:a0:a6:82:e8:94:cc:a4:d0:f6:83:
80:dd:0c:61:cd:18:ea:95:47:c6:a2:6e:d6:7c:a1:87:86:cc:
8d:7d:16:b3:69:aa:e7:9f:e8:55:e8:90:20:c3:f6:4a:e6:ec:
d1:54:27:38:18:e4:41:3d:11:1c:db:05:f5:69:4a:dc:fd:13:
56:60:35:47:8f:8e:cb:10:fa:68:79:f3:7d:25:61:0d:69:c1:
4b:cf:16:dd:71:cb:63:fe:b6:52:d0:0c:1a:b0:3a:9c:6d:78:
63:09:5a:78:43:67:fd:fc:f1:75:5b:38:03:64:77:42:76:29:
6d:29:03:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4vWEPBLZFXlOm+7ynwEJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYzMzYjhlMTM1NmZjY2ZjODM0NjZlZWQ4YTg2NTUxMmE3
ZDAwZjEwHhcNMjUwODA0MDcwMTUwWhcNMjUwODA1MDcwMTUwWjAzMTEwLwYDVQQD
EyhkMzc5NjA3YTk0MTM3ZmNhNzNhZmE3YTZkZjQzNTIyMDZkMDY5ZTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7mOUcDg4IbNUOYd1y11z18OHVtn
n5xinjPTmZklGiGNQiSA2G6PAHrvKvuv83w5fwvIOOcHaOgdwS0hcCeD0Djd8ofo
DebMrLzAsseIT0CGV6hUAJRdfifJpduNOGYFzrMki8DW8ahuPLldIcTsS09RLFvY
sGFj7G7RVMOVwsDAtMPb2rng6hcx4lV4w5Mh3xUnzmMBD7ZNU4B9EK/4HmEk/Vds
3eUCpenIbOHgKvIa5zc0YwuFM9Hsr+OOtVtiKqQPMB92PnOa3Nq4lXV7CFc+JC1U
WGWLMvWRcOlAfDkie3iFKztByJEj21fgWdwH8FC2z9/yw7v5qLX3vbLaQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNN5YHqUE3/Kc6+npt9DUiBtBp5SMB8GA1UdIwQY
MBaAFI7DO44TVvzPyDRm7tioZVEqfQDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanNNN2poTldfTV9JTkdidTJLaGxVU3A5QVBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9iNzI4MDYtNDllOC00MTEyLWEyMzUt
MWMxZTg1MzJkNWIwLzEvanNNN2poTldfTV9JTkdidTJLaGxVU3A5QVBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9iNzI4MDYtNDllOC00MTEyLWEyMzUtMWMxZTg1MzJkNWIw
LzEvanNNN2poTldfTV9JTkdidTJLaGxVU3A5QVBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwNYs6OeC
p78DHUTJZJU5dy2bZn7Y/bA5LaSCunZ2DI2XSMKGEnEYiqvCfXPsgXyefsj3CIgc
ph9k/eitui9WjgZDqZrXvIm0qGYZNaon3yumh/q1LUt+bNsx/jMl8C5P+A3CC/53
a2EmIsFF4hYqxGD5dfYBhzmRvyqLcho4Lyu+cjqPxtigpoLolMyk0PaDgN0MYc0Y
6pVHxqJu1nyhh4bMjX0Ws2mq55/oVeiQIMP2Subs0VQnOBjkQT0RHNsF9WlK3P0T
VmA1R4+OyxD6aHnzfSVhDWnBS88W3XHLY/62UtAMGrA6nG14YwlaeENn/fzxdVs4
A2R3QnYpbSkDaQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:47 2025 by rpki-client