Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.mft
File: jWLdvflYu0uYPali7PA76u441Ek.mft (raw, json)
Hash identifier: QBR+kEfKNGAxaUcIV1Pf3UZb2xQhy5bhkXJZ+xK//3Q=
Subject key identifier: C2:66:CF:76:3F:02:66:77:39:A3:2A:CE:81:64:97:D0:7D:8B:7F:41
Authority key identifier: 8D:62:DD:BD:F9:58:BB:4B:98:3D:A9:62:EC:F0:3B:EA:EE:38:D4:49
Certificate issuer: /CN=8d62ddbdf958bb4b983da962ecf03beaee38d449
Certificate serial: 01987C4022B51923D0E325E59B756DA0BD19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWLdvflYu0uYPali7PA76u441Ek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.mft
Manifest number: 161D
Signing time: Tue 05 Aug 2025 22:00:34 +0000
Manifest this update: Tue 05 Aug 2025 22:00:34 +0000
Manifest next update: Wed 06 Aug 2025 22:00:34 +0000
Files and hashes: 1: jWLdvflYu0uYPali7PA76u441Ek.crl (hash: DWshoi6xa9iwJh71j1LKf0kNfq6rEOEKRynMCmxA9MY=)
2: s34MRUBBXAv4etz_rjf1ivNvKl8.roa (hash: 0Raiu10MwJUtSZKphwMI3EWBFXIoAne26av2cOWMQx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWLdvflYu0uYPali7PA76u441Ek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 22:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:22:b5:19:23:d0:e3:25:e5:9b:75:6d:a0:bd:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d62ddbdf958bb4b983da962ecf03beaee38d449
Validity
Not Before: Aug 5 22:00:34 2025 GMT
Not After : Aug 6 22:00:34 2025 GMT
Subject: CN=c266cf763f02667739a32ace816497d07d8b7f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:42:36:24:6b:78:09:f5:5a:55:ff:85:87:28:
bb:d9:1f:01:b1:5a:11:e8:fc:d4:eb:f4:36:a0:cb:
e5:33:60:95:66:b6:11:2f:ce:85:fd:eb:01:9e:c1:
b6:11:19:a0:e9:2f:56:3b:62:ec:d7:2f:76:16:9d:
0e:06:0f:b7:c8:76:cd:d0:8d:0c:01:67:e3:e4:f7:
c9:22:70:65:2d:a3:6b:96:b8:53:c8:c3:c7:6b:3d:
d7:af:59:fb:91:5f:90:95:03:9d:d7:59:3e:b3:95:
b1:1c:2f:a7:df:d2:c0:8d:4a:af:ae:67:b4:76:4c:
62:b8:9e:97:f7:7c:e1:0b:f8:02:38:e4:3b:c3:05:
cc:74:b8:33:4d:f6:a4:88:75:fa:81:2a:af:16:d1:
ef:a5:90:41:a6:26:80:9f:e1:84:94:a8:70:91:18:
54:9f:20:5b:87:31:50:59:4c:2c:38:64:95:d0:52:
51:4f:95:09:09:02:e5:99:95:0c:02:2c:e2:8e:9e:
73:1b:08:34:14:62:f7:a2:6a:1e:44:5b:dd:a7:ee:
6f:34:c9:6f:c7:11:bf:e4:e8:00:a5:be:db:0a:45:
a3:63:29:22:0b:ab:da:f7:30:0d:9e:7c:2e:a6:57:
61:bb:7e:cf:0c:18:d1:c9:e4:c0:4c:43:57:50:46:
16:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:66:CF:76:3F:02:66:77:39:A3:2A:CE:81:64:97:D0:7D:8B:7F:41
X509v3 Authority Key Identifier:
keyid:8D:62:DD:BD:F9:58:BB:4B:98:3D:A9:62:EC:F0:3B:EA:EE:38:D4:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWLdvflYu0uYPali7PA76u441Ek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f9:78:e7:df:fc:b4:70:20:46:31:b6:03:51:2e:90:f1:c6:
e8:2a:9e:03:4a:b0:0a:75:85:b1:d5:e4:8a:ff:9b:3e:85:da:
3e:49:d9:6a:27:02:dd:a6:1e:bc:ce:62:36:2c:f3:d8:50:91:
7b:de:a5:89:98:92:6a:5a:ba:d3:70:c4:da:55:aa:9b:47:d7:
a9:71:d4:38:b4:11:73:91:83:d6:8a:e0:0c:89:f8:04:aa:88:
be:e7:49:48:f4:01:50:b2:74:ac:22:ea:81:6b:5b:94:77:a3:
7a:8c:90:aa:21:72:33:82:f5:6a:ec:00:36:d0:83:ec:cb:d9:
94:b5:b3:8d:c3:bd:80:9c:f9:f1:ec:cd:d5:e1:de:e1:75:73:
d9:04:5d:21:2c:b6:83:58:e9:b2:02:0e:67:57:6e:88:05:6a:
a2:63:32:db:c3:ce:d4:73:b8:97:ee:c3:df:bb:a2:aa:f0:dc:
bb:9e:6e:d5:b8:28:2c:7e:f0:4e:99:0a:53:e1:6c:9b:f0:d6:
5c:2c:44:a3:a3:2d:05:ca:fb:25:0e:ce:3d:b0:0b:c4:4a:dc:
a0:9b:bb:72:2c:dd:51:87:0b:80:21:76:3f:6d:4e:34:fd:bc:
e7:a0:55:bc:e5:8b:a4:9c:14:66:d3:10:f2:f3:6e:f0:b0:10:
33:e9:57:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8QCK1GSPQ4yXlm3VtoL0ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNjJkZGJkZjk1OGJiNGI5ODNkYTk2MmVjZjAzYmVhZWUz
OGQ0NDkwHhcNMjUwODA1MjIwMDM0WhcNMjUwODA2MjIwMDM0WjAzMTEwLwYDVQQD
EyhjMjY2Y2Y3NjNmMDI2Njc3MzlhMzJhY2U4MTY0OTdkMDdkOGI3ZjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EI2JGt4CfVaVf+Fhyi72R8BsVoR
6PzU6/Q2oMvlM2CVZrYRL86F/esBnsG2ERmg6S9WO2Ls1y92Fp0OBg+3yHbN0I0M
AWfj5PfJInBlLaNrlrhTyMPHaz3Xr1n7kV+QlQOd11k+s5WxHC+n39LAjUqvrme0
dkxiuJ6X93zhC/gCOOQ7wwXMdLgzTfakiHX6gSqvFtHvpZBBpiaAn+GElKhwkRhU
nyBbhzFQWUwsOGSV0FJRT5UJCQLlmZUMAizijp5zGwg0FGL3omoeRFvdp+5vNMlv
xxG/5OgApb7bCkWjYykiC6va9zANnnwupldhu37PDBjRyeTATENXUEYWuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJmz3Y/AmZ3OaMqzoFkl9B9i39BMB8GA1UdIwQY
MBaAFI1i3b35WLtLmD2pYuzwO+ruONRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaldMZHZmbFl1MHVZUGFsaTdQQTc2dTQ0MUVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9iMjBiZWMtMzg0Ni00YmQxLTgxMmYt
MDZlMDBhM2VhMDYyLzEvaldMZHZmbFl1MHVZUGFsaTdQQTc2dTQ0MUVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9iMjBiZWMtMzg0Ni00YmQxLTgxMmYtMDZlMDBhM2VhMDYy
LzEvaldMZHZmbFl1MHVZUGFsaTdQQTc2dTQ0MUVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ/l459/8
tHAgRjG2A1EukPHG6CqeA0qwCnWFsdXkiv+bPoXaPknZaicC3aYevM5iNizz2FCR
e96liZiSalq603DE2lWqm0fXqXHUOLQRc5GD1orgDIn4BKqIvudJSPQBULJ0rCLq
gWtblHejeoyQqiFyM4L1auwANtCD7MvZlLWzjcO9gJz58ezN1eHe4XVz2QRdISy2
g1jpsgIOZ1duiAVqomMy28PO1HO4l+7D37uiqvDcu55u1bgoLH7wTpkKU+Fsm/DW
XCxEo6MtBcr7JQ7OPbALxErcoJu7cizdUYcLgCF2P21ONP2856BVvOWLpJwUZtMQ
8vNu8LAQM+lXkg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 04:03:48 2025 by rpki-client