Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.mft
File: jT81agLZZ5zokLXVHg3sLz82M2E.mft (raw, json)
Hash identifier: HTyfgn9GY/PaoGLt32j2z9pYpApaHzeNfErESvwtHU0=
Subject key identifier: 31:A7:94:AF:28:A1:E4:0F:C6:27:74:C5:17:B1:86:C1:66:99:C9:A4
Authority key identifier: 8D:3F:35:6A:02:D9:67:9C:E8:90:B5:D5:1E:0D:EC:2F:3F:36:33:61
Certificate issuer: /CN=8d3f356a02d9679ce890b5d51e0dec2f3f363361
Certificate serial: 019896A6316906C410422A6B911D98C4C1A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jT81agLZZ5zokLXVHg3sLz82M2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.mft
Manifest number: 1051
Signing time: Mon 11 Aug 2025 01:02:10 +0000
Manifest this update: Mon 11 Aug 2025 01:02:10 +0000
Manifest next update: Tue 12 Aug 2025 01:02:10 +0000
Files and hashes: 1: EWrLpH4Sf73kpylzjyIWqmsW4Ak.roa (hash: WAVleiEyABWuPtt06sTvvo12euN11LhTBCh1lmQSM18=)
2: TbDm0VV2IIni5MfaMJDxPEqxHQQ.roa (hash: 7X6b+hTk4kXwHQiBVUnERgcn3N8YcwYoax1mTJYhV7U=)
3: YXd5kwg4HgCLWghJcX8C036D1Wo.roa (hash: 4mxl4tWWj/m9oN5bIXyonk91G4n197ABWNjjuhmRTbU=)
4: jT81agLZZ5zokLXVHg3sLz82M2E.crl (hash: wKbs4dk2/pBQbKr23wlfTc9voMRKj/B3HtzR0BaOsQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/jT81agLZZ5zokLXVHg3sLz82M2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:31:69:06:c4:10:42:2a:6b:91:1d:98:c4:c1:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3f356a02d9679ce890b5d51e0dec2f3f363361
Validity
Not Before: Aug 11 01:02:10 2025 GMT
Not After : Aug 12 01:02:10 2025 GMT
Subject: CN=31a794af28a1e40fc62774c517b186c16699c9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:26:11:25:7b:43:a5:97:bb:6d:ef:61:c8:59:
3b:a8:da:4a:61:d0:77:eb:74:47:cf:45:3f:19:62:
c7:a6:13:b1:1b:9a:b9:89:df:f1:c9:40:28:26:e3:
d4:8f:28:6e:a8:fb:2d:12:0f:be:90:e7:80:e6:d1:
4b:94:54:18:1b:6a:24:08:73:b5:65:b4:35:ad:81:
ea:76:8b:fa:90:38:1d:28:e7:96:4d:0c:8f:43:8c:
46:66:db:51:7e:9b:48:c9:e2:92:4d:eb:c0:0f:fb:
fe:5b:63:c7:30:6f:f6:18:08:2e:3e:fb:96:07:b4:
db:1c:2e:2a:7f:65:4e:d5:d0:df:79:1d:61:04:cf:
65:8c:f4:0c:c5:14:ac:01:f2:28:7c:00:96:23:c5:
6e:3f:74:26:39:be:e4:45:3d:de:e7:dc:3b:ad:5c:
2d:83:a9:5d:9e:1c:5f:f5:48:0f:d0:8c:01:15:66:
49:21:16:f6:df:09:12:96:50:88:a3:18:a7:ac:3a:
aa:54:ca:a5:52:6a:7a:eb:73:12:ec:df:75:80:dc:
9f:d9:57:1e:c6:c4:07:9b:16:a5:a3:7f:6a:80:85:
38:8e:93:ed:96:33:b6:0d:fc:2c:23:d6:a2:55:9b:
a5:24:f4:03:47:2c:65:d3:27:e5:51:85:d5:9c:3c:
6a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A7:94:AF:28:A1:E4:0F:C6:27:74:C5:17:B1:86:C1:66:99:C9:A4
X509v3 Authority Key Identifier:
keyid:8D:3F:35:6A:02:D9:67:9C:E8:90:B5:D5:1E:0D:EC:2F:3F:36:33:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jT81agLZZ5zokLXVHg3sLz82M2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:25:71:b0:1f:14:f6:f5:cd:e1:c1:50:e6:be:c7:d7:08:8b:
1c:bf:35:98:c9:95:6d:9c:09:4c:77:0c:12:f7:6a:49:b6:84:
87:7c:3b:c5:75:c7:0f:59:12:9b:83:26:df:eb:4f:68:43:0d:
12:92:74:e5:22:3a:3e:9c:f3:74:6a:b3:a5:96:93:51:27:30:
33:1b:8c:c5:d1:f6:67:08:ea:66:98:c8:84:4a:ae:ef:a4:ef:
04:4c:79:a7:0d:3f:ff:23:0d:30:dc:28:d4:45:47:1a:6c:45:
3c:eb:a1:5b:aa:ec:06:a9:dd:9a:03:bf:22:10:33:51:8a:9a:
a8:8a:78:70:32:c7:a3:0e:66:b6:56:c6:2a:f2:59:66:e1:d6:
a7:7c:3a:89:60:4f:d6:d1:40:78:f2:7d:88:c8:0d:f3:7f:23:
7d:f8:8c:5f:66:ae:2c:4b:97:58:bc:db:bd:e2:9a:56:54:02:
d4:53:dc:67:a8:2a:8a:41:58:77:d6:68:77:ae:78:c9:03:8e:
cf:1b:a1:dc:ad:a7:be:a1:70:30:d7:0f:45:f3:42:57:39:4b:
5c:77:d7:ce:d9:34:c7:43:ac:81:1d:13:cf:02:75:64:9d:f8:
a2:67:66:0b:21:c7:6f:dd:68:8e:68:99:d8:3c:f8:07:2c:22:
e0:15:03:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWpjFpBsQQQiprkR2YxMGpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkM2YzNTZhMDJkOTY3OWNlODkwYjVkNTFlMGRlYzJmM2Yz
NjMzNjEwHhcNMjUwODExMDEwMjEwWhcNMjUwODEyMDEwMjEwWjAzMTEwLwYDVQQD
EygzMWE3OTRhZjI4YTFlNDBmYzYyNzc0YzUxN2IxODZjMTY2OTljOWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyYRJXtDpZe7be9hyFk7qNpKYdB3
63RHz0U/GWLHphOxG5q5id/xyUAoJuPUjyhuqPstEg++kOeA5tFLlFQYG2okCHO1
ZbQ1rYHqdov6kDgdKOeWTQyPQ4xGZttRfptIyeKSTevAD/v+W2PHMG/2GAguPvuW
B7TbHC4qf2VO1dDfeR1hBM9ljPQMxRSsAfIofACWI8VuP3QmOb7kRT3e59w7rVwt
g6ldnhxf9UgP0IwBFWZJIRb23wkSllCIoxinrDqqVMqlUmp663MS7N91gNyf2Vce
xsQHmxalo39qgIU4jpPtljO2DfwsI9aiVZulJPQDRyxl0yflUYXVnDxq0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDGnlK8ooeQPxid0xRexhsFmmcmkMB8GA1UdIwQY
MBaAFI0/NWoC2Wec6JC11R4N7C8/NjNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalQ4MWFnTFpaNXpva0xYVkhnM3NMejgyTTJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny81NjZjYjEtNzkxNS00ZmZkLTg1NzAt
NmI5M2FmNjEzZDdkLzEvalQ4MWFnTFpaNXpva0xYVkhnM3NMejgyTTJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny81NjZjYjEtNzkxNS00ZmZkLTg1NzAtNmI5M2FmNjEzZDdk
LzEvalQ4MWFnTFpaNXpva0xYVkhnM3NMejgyTTJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXSVxsB8U
9vXN4cFQ5r7H1wiLHL81mMmVbZwJTHcMEvdqSbaEh3w7xXXHD1kSm4Mm3+tPaEMN
EpJ05SI6PpzzdGqzpZaTUScwMxuMxdH2ZwjqZpjIhEqu76TvBEx5pw0//yMNMNwo
1EVHGmxFPOuhW6rsBqndmgO/IhAzUYqaqIp4cDLHow5mtlbGKvJZZuHWp3w6iWBP
1tFAePJ9iMgN838jffiMX2auLEuXWLzbveKaVlQC1FPcZ6gqikFYd9Zod654yQOO
zxuh3K2nvqFwMNcPRfNCVzlLXHfXztk0x0OsgR0TzwJ1ZJ34omdmCyHHb91ojmiZ
2Dz4Bywi4BUDEA==
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:09:09 2025 by rpki-client