Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
File: jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft (raw, json)
Hash identifier: PZ+fAusV0/VU9RfOgh5V1zNHoC2lqJoPFjuCsmV9ShM=
Subject key identifier: 52:86:BE:12:B0:6B:2C:D6:52:A1:8F:8A:B4:93:EA:7E:49:51:92:0B
Authority key identifier: 8C:3F:53:8F:8A:01:ED:D0:A7:6B:00:8B:4D:45:D4:1F:67:82:1B:D2
Certificate issuer: /CN=8c3f538f8a01edd0a76b008b4d45d41f67821bd2
Certificate serial: 019872CF71EB5086A702EF8E18CAD38AD0B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
Manifest number: 0987
Signing time: Mon 04 Aug 2025 02:00:54 +0000
Manifest this update: Mon 04 Aug 2025 02:00:54 +0000
Manifest next update: Tue 05 Aug 2025 02:00:54 +0000
Files and hashes: 1: jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl (hash: P2mrdv/Y4KOjz+JoVNvbYvmmKUG/drzhelF9dEZf1+Q=)
2: y1KtkhbJcf8xMKGegKszt0QDaOo.roa (hash: MP5sL9q4mE2nj3U5Tn7LLkafXsvaYmUnSKWAsDGsqZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:71:eb:50:86:a7:02:ef:8e:18:ca:d3:8a:d0:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c3f538f8a01edd0a76b008b4d45d41f67821bd2
Validity
Not Before: Aug 4 02:00:54 2025 GMT
Not After : Aug 5 02:00:54 2025 GMT
Subject: CN=5286be12b06b2cd652a18f8ab493ea7e4951920b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ff:3a:19:95:f9:bb:69:ef:94:a5:91:97:db:
58:b2:fe:2f:0f:ff:09:20:88:90:8e:48:3e:3d:17:
9a:61:70:ec:51:f0:a9:5f:3d:e6:b4:b2:02:58:e8:
71:44:58:0f:86:12:b8:22:f7:b2:21:65:e1:aa:92:
f4:18:57:5d:b3:55:14:2e:7c:c3:0f:c9:d4:d0:6f:
5b:8b:26:65:ad:72:74:f5:0d:18:60:3e:58:ed:bc:
f0:6e:21:36:cc:32:f9:10:63:94:33:46:dc:0a:7f:
71:be:c7:cf:62:76:2b:a8:1a:f9:07:41:56:53:eb:
b8:a2:28:6f:3e:13:6b:74:39:4e:1e:fd:d1:c4:da:
1a:0c:29:9c:2c:00:c6:9b:e4:9e:9f:e1:4b:ce:c1:
ab:a4:d4:9d:63:1d:39:69:5f:cb:95:7f:5e:57:79:
f8:c5:c3:45:fb:70:3d:14:70:96:89:13:5b:32:2e:
3b:42:32:a9:df:4c:9d:7d:b9:ab:6f:bf:bf:9e:74:
d8:89:a3:7b:8c:69:ed:e4:f0:67:5a:e7:aa:15:73:
9a:02:dc:a5:fb:57:14:42:f1:f4:de:b1:fe:95:60:
a5:40:d5:f2:15:60:2f:2f:05:43:ef:fc:44:72:61:
2f:81:86:2d:64:14:ff:c9:5a:fc:c5:1e:ca:f4:54:
72:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:86:BE:12:B0:6B:2C:D6:52:A1:8F:8A:B4:93:EA:7E:49:51:92:0B
X509v3 Authority Key Identifier:
keyid:8C:3F:53:8F:8A:01:ED:D0:A7:6B:00:8B:4D:45:D4:1F:67:82:1B:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:bc:71:61:93:6a:2c:50:d1:24:30:d1:d1:4c:a1:e1:fd:f8:
58:e0:48:34:7d:aa:f7:98:66:db:69:4b:8b:49:82:f7:36:41:
39:30:60:df:9d:9a:7f:01:58:47:ad:dc:5e:fa:6a:24:d7:e2:
a4:44:f1:81:e5:d1:e0:9a:8b:07:13:35:ff:6d:ab:0d:b0:72:
bc:0c:0b:bf:b3:8d:15:fa:e9:2d:fb:07:77:20:48:1c:c2:33:
73:17:10:38:e0:cf:7b:86:1d:90:24:73:3c:e4:7a:6f:17:0e:
eb:98:a9:76:88:d7:7a:1a:9a:da:84:be:df:50:6f:63:dc:a8:
29:a3:3c:29:04:81:91:49:98:20:98:26:eb:50:37:89:3f:65:
71:64:14:ae:ef:38:e7:b4:40:6d:ca:b5:f3:01:6a:72:4b:e3:
05:e6:29:3b:4f:ad:0b:e5:09:3f:21:ed:f3:06:fd:08:27:e3:
87:f3:20:1f:c2:c0:17:d2:30:a6:c7:9d:f4:5f:6d:01:75:53:
69:0c:01:2b:ff:3e:c0:a8:57:4e:73:2d:23:f3:3f:ab:59:a3:
b4:6a:fe:52:a2:ea:ae:66:02:f4:18:95:7e:78:14:04:f9:55:
57:79:5f:83:60:ef:85:b7:2f:d8:16:d6:a8:a3:c7:47:cf:c3:
ae:9f:05:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyz3HrUIanAu+OGMrTitC1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjM2Y1MzhmOGEwMWVkZDBhNzZiMDA4YjRkNDVkNDFmNjc4
MjFiZDIwHhcNMjUwODA0MDIwMDU0WhcNMjUwODA1MDIwMDU0WjAzMTEwLwYDVQQD
Eyg1Mjg2YmUxMmIwNmIyY2Q2NTJhMThmOGFiNDkzZWE3ZTQ5NTE5MjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0P86GZX5u2nvlKWRl9tYsv4vD/8J
IIiQjkg+PReaYXDsUfCpXz3mtLICWOhxRFgPhhK4IveyIWXhqpL0GFdds1UULnzD
D8nU0G9biyZlrXJ09Q0YYD5Y7bzwbiE2zDL5EGOUM0bcCn9xvsfPYnYrqBr5B0FW
U+u4oihvPhNrdDlOHv3RxNoaDCmcLADGm+Sen+FLzsGrpNSdYx05aV/LlX9eV3n4
xcNF+3A9FHCWiRNbMi47QjKp30ydfbmrb7+/nnTYiaN7jGnt5PBnWueqFXOaAtyl
+1cUQvH03rH+lWClQNXyFWAvLwVD7/xEcmEvgYYtZBT/yVr8xR7K9FRyhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFKGvhKwayzWUqGPirST6n5JUZILMB8GA1UdIwQY
MBaAFIw/U4+KAe3Qp2sAi01F1B9nghvSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakQ5VGo0b0I3ZENuYXdDTFRVWFVIMmVDRzlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9hMTg4MmUtMGM0Yy00Njk2LTg4NWQt
Y2Q2YTUwMzE2M2Q2LzEvakQ5VGo0b0I3ZENuYXdDTFRVWFVIMmVDRzlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9hMTg4MmUtMGM0Yy00Njk2LTg4NWQtY2Q2YTUwMzE2M2Q2
LzEvakQ5VGo0b0I3ZENuYXdDTFRVWFVIMmVDRzlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUrxxYZNq
LFDRJDDR0Uyh4f34WOBINH2q95hm22lLi0mC9zZBOTBg352afwFYR63cXvpqJNfi
pETxgeXR4JqLBxM1/22rDbByvAwLv7ONFfrpLfsHdyBIHMIzcxcQOODPe4YdkCRz
POR6bxcO65ipdojXehqa2oS+31BvY9yoKaM8KQSBkUmYIJgm61A3iT9lcWQUru84
57RAbcq18wFqckvjBeYpO0+tC+UJPyHt8wb9CCfjh/MgH8LAF9Iwpsed9F9tAXVT
aQwBK/8+wKhXTnMtI/M/q1mjtGr+UqLqrmYC9BiVfngUBPlVV3lfg2Dvhbcv2BbW
qKPHR8/Drp8FfA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:36 2025 by rpki-client