
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft
File: Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft (raw, json)
Hash identifier: gtHhGu/S5YXN6jGMchDjDrDrhP7ml9ylSlqupgtbzGU=
Subject key identifier: E0:C1:2D:92:54:C3:76:57:99:93:7D:DD:AE:DA:51:AA:D4:55:45:05
Authority key identifier: 27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
Certificate issuer: /CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Certificate serial: 01989DB951535223FDE1FB0537FD4E634A6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft
Manifest number: 1535
Signing time: Tue 12 Aug 2025 10:00:24 +0000
Manifest this update: Tue 12 Aug 2025 10:00:24 +0000
Manifest next update: Wed 13 Aug 2025 10:00:24 +0000
Files and hashes: 1: 6dw1Aml1bh-S2rgu2FLftIv8mdo.roa (hash: bjVQxAFYHa6cLLC44/QIlf7ibxA9hm/+3ibLRF7oZiU=)
2: GB7clsDZOHQr1LdusJTcl_G1778.roa (hash: qc0Ls2xstb+cEZ6tCvVbKsbdZ77Q8gYB2ZQnMh9vnLQ=)
3: Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl (hash: SZFAlgJZYhibiqnuDY5EIG5lXBrFdTnVisis5aazycU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:b9:51:53:52:23:fd:e1:fb:05:37:fd:4e:63:4a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Validity
Not Before: Aug 12 10:00:24 2025 GMT
Not After : Aug 13 10:00:24 2025 GMT
Subject: CN=e0c12d9254c3765799937dddaeda51aad4554505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e7:a8:a4:2c:37:12:c1:09:9e:da:01:c5:31:
0d:be:27:6e:7d:dc:11:8d:06:32:00:58:66:25:a8:
b8:3d:e8:f2:b1:eb:c5:97:17:44:1d:dd:60:8a:d8:
14:ab:9b:ab:4a:25:f9:43:64:5a:6d:5d:74:a3:fc:
de:1c:fd:ab:ea:3a:d5:02:14:c5:2e:b4:8b:4e:83:
01:e1:91:eb:52:78:6f:ad:c7:de:72:87:83:13:d2:
96:fd:ab:14:67:fa:a6:c1:67:a5:cd:e8:03:30:cb:
90:44:ef:34:40:e6:58:23:ce:ae:4e:3a:1f:2f:d3:
13:c6:55:ee:40:6b:bd:59:95:c8:22:74:7e:b4:f0:
21:c6:c6:f1:47:b5:d6:97:a3:90:19:2a:6e:d9:62:
00:f4:14:39:48:78:a4:8a:a9:55:bf:71:21:35:4d:
9d:63:8e:eb:c7:c8:f9:ee:68:06:1b:38:8a:d3:2b:
0b:57:eb:cd:6c:dd:aa:a5:12:56:f9:ba:63:86:e6:
25:0d:61:25:bf:c7:f4:5d:49:e9:aa:87:18:06:1c:
71:4f:76:36:86:f8:c3:7b:e6:0e:60:dc:a9:31:0f:
1c:83:05:3a:21:13:1c:30:a2:61:81:5e:e3:bf:8f:
79:b2:4e:05:ac:43:6d:ff:2c:54:90:2e:46:2c:d7:
56:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C1:2D:92:54:C3:76:57:99:93:7D:DD:AE:DA:51:AA:D4:55:45:05
X509v3 Authority Key Identifier:
keyid:27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d0:6f:7d:76:2d:3c:9b:29:d6:06:85:53:e6:73:b3:af:7c:
c4:5b:c6:62:91:56:88:51:df:43:38:6f:63:dd:46:02:c6:dd:
0d:7d:87:0a:61:21:39:96:75:19:1f:f7:42:5c:c3:a7:b8:f9:
b9:67:48:6e:5d:e6:06:8a:52:74:79:63:42:13:55:df:88:da:
a6:96:6c:f6:8a:f5:ac:10:07:3d:58:7e:c7:a3:ca:95:15:76:
46:be:c9:0c:94:de:96:bc:bd:af:71:b9:78:d8:0a:1d:13:ba:
4d:aa:7e:19:68:06:81:0b:d2:b3:24:06:fa:7c:94:2d:bc:0e:
f4:80:d4:87:2d:49:47:51:cd:46:99:fa:bf:a7:95:19:6e:20:
c4:77:6b:74:26:77:5d:da:86:fb:85:82:15:8f:ba:da:63:88:
18:50:da:8e:6a:b9:f7:08:fe:c2:c8:e9:6a:5e:de:a5:05:2a:
1d:05:92:d0:d7:65:65:e0:36:90:1f:03:d7:c2:63:7f:07:89:
b1:a0:d9:9e:c7:78:90:a4:7d:d5:e9:23:a8:23:07:74:e3:d7:
55:98:9c:23:a9:33:3a:8c:05:46:15:90:dc:fa:44:8f:b0:0b:
5e:d2:a4:36:ba:d7:09:53:bb:a3:f0:92:a0:10:07:59:b1:67:
9e:23:08:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiduVFTUiP94fsFN/1OY0psMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MmVkMDkwYWNmN2M4MjlhMjJiYmZiZTJiMGU5OThjZDIw
YWQ4MjYwHhcNMjUwODEyMTAwMDI0WhcNMjUwODEzMTAwMDI0WjAzMTEwLwYDVQQD
EyhlMGMxMmQ5MjU0YzM3NjU3OTk5MzdkZGRhZWRhNTFhYWQ0NTU0NTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOeopCw3EsEJntoBxTENvidufdwR
jQYyAFhmJai4PejysevFlxdEHd1gitgUq5urSiX5Q2RabV10o/zeHP2r6jrVAhTF
LrSLToMB4ZHrUnhvrcfecoeDE9KW/asUZ/qmwWelzegDMMuQRO80QOZYI86uTjof
L9MTxlXuQGu9WZXIInR+tPAhxsbxR7XWl6OQGSpu2WIA9BQ5SHikiqlVv3EhNU2d
Y47rx8j57mgGGziK0ysLV+vNbN2qpRJW+bpjhuYlDWElv8f0XUnpqocYBhxxT3Y2
hvjDe+YOYNypMQ8cgwU6IRMcMKJhgV7jv495sk4FrENt/yxUkC5GLNdWCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFODBLZJUw3ZXmZN93a7aUarUVUUFMB8GA1UdIwQY
MBaAFCcu0JCs98gpoiu/visOmYzSCtgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnk3UWtLejN5Q21pSzctLUt3NlpqTklLMkNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9hMTVmOTYtZWMxOC00NjQ0LTg5YjMt
YWNjMjJiYjRkY2VkLzEvSnk3UWtLejN5Q21pSzctLUt3NlpqTklLMkNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9hMTVmOTYtZWMxOC00NjQ0LTg5YjMtYWNjMjJiYjRkY2Vk
LzEvSnk3UWtLejN5Q21pSzctLUt3NlpqTklLMkNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACdBvfXYt
PJsp1gaFU+Zzs698xFvGYpFWiFHfQzhvY91GAsbdDX2HCmEhOZZ1GR/3QlzDp7j5
uWdIbl3mBopSdHljQhNV34jappZs9or1rBAHPVh+x6PKlRV2Rr7JDJTelry9r3G5
eNgKHRO6Tap+GWgGgQvSsyQG+nyULbwO9IDUhy1JR1HNRpn6v6eVGW4gxHdrdCZ3
XdqG+4WCFY+62mOIGFDajmq59wj+wsjpal7epQUqHQWS0NdlZeA2kB8D18JjfweJ
saDZnsd4kKR91ekjqCMHdOPXVZicI6kzOowFRhWQ3PpEj7ALXtKkNrrXCVO7o/CS
oBAHWbFnniMI/Q==
-----END CERTIFICATE-----
Generated at Tue Aug 12 14:36:55 2025 by rpki-client