
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft
File: jAfs12ZszvkegvfsvOC6KFM2-0U.mft (raw, json)
Hash identifier: UReHOnRF4AlmEcDN1hGJUfSao7V5PQzuM8auvhoRUH8=
Subject key identifier: 28:A3:B0:68:59:C6:35:87:AE:6D:46:AC:D4:A1:94:5B:57:F3:A3:70
Authority key identifier: 8C:07:EC:D7:66:6C:CE:F9:1E:82:F7:EC:BC:E0:BA:28:53:36:FB:45
Certificate issuer: /CN=8c07ecd7666ccef91e82f7ecbce0ba285336fb45
Certificate serial: 01988EEC05408BB79F67E5D3D3431AC18F72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAfs12ZszvkegvfsvOC6KFM2-0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft
Manifest number: 12BF
Signing time: Sat 09 Aug 2025 13:01:29 +0000
Manifest this update: Sat 09 Aug 2025 13:01:29 +0000
Manifest next update: Sun 10 Aug 2025 13:01:29 +0000
Files and hashes: 1: HO38BQkZbk8sOl9HIcFWqylWAn0.roa (hash: f5PO7xcOqg4j7osu62n1SoIVysgleTKMRASaV5PScOY=)
2: jAfs12ZszvkegvfsvOC6KFM2-0U.crl (hash: SxTHnpGgvhYZS3iX1BppppyOVvj89IBT6kxZl7ywZok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAfs12ZszvkegvfsvOC6KFM2-0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ec:05:40:8b:b7:9f:67:e5:d3:d3:43:1a:c1:8f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c07ecd7666ccef91e82f7ecbce0ba285336fb45
Validity
Not Before: Aug 9 13:01:29 2025 GMT
Not After : Aug 10 13:01:29 2025 GMT
Subject: CN=28a3b06859c63587ae6d46acd4a1945b57f3a370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:26:dd:7b:83:8d:6e:ba:af:d8:07:ab:ac:aa:
e2:46:eb:f9:51:0a:2d:ed:cc:4a:c3:58:19:60:60:
19:e5:77:42:5f:99:cd:51:80:50:d2:8e:cd:ac:73:
9f:55:d4:01:27:cb:89:13:93:49:84:3b:43:53:56:
f6:e3:c6:95:3c:59:f7:d6:3b:fe:92:53:94:b2:bf:
e2:35:70:62:91:7a:77:5d:81:58:a2:23:99:f4:56:
0a:55:ef:a0:75:7c:6b:b0:af:e8:00:e1:88:09:2e:
54:c8:8a:e8:7c:8a:75:90:b3:c0:03:52:dd:49:98:
74:3b:2d:b5:e9:73:7e:b3:72:e6:19:63:ef:a4:fa:
94:cd:97:74:1b:9d:db:38:8e:53:b4:57:93:26:3a:
e7:99:f1:b8:61:92:8c:2e:df:61:90:cf:b0:7f:c8:
cf:40:bc:4e:92:71:6e:cb:0b:6c:ea:e8:8e:d8:ec:
4c:73:fd:ab:d8:10:54:d4:b6:dc:bf:49:7f:89:2e:
ff:7f:1b:bc:a0:f9:34:ef:01:61:db:cc:3b:63:4a:
64:4a:37:9c:8a:fe:00:15:98:72:51:fa:92:cb:0a:
a5:be:13:51:40:e6:72:ff:29:bb:a3:ab:37:38:75:
21:dd:4f:75:77:e1:34:e2:d9:1f:38:8f:c2:23:ba:
43:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A3:B0:68:59:C6:35:87:AE:6D:46:AC:D4:A1:94:5B:57:F3:A3:70
X509v3 Authority Key Identifier:
keyid:8C:07:EC:D7:66:6C:CE:F9:1E:82:F7:EC:BC:E0:BA:28:53:36:FB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAfs12ZszvkegvfsvOC6KFM2-0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e9:34:e3:ab:ec:2f:ce:0e:c5:63:67:17:cd:e9:98:5b:70:
e2:8a:de:69:6d:75:1a:d5:11:36:dd:ff:f9:7c:64:ef:36:28:
d8:37:62:aa:bf:b2:59:b9:0d:86:d0:09:91:a6:b1:6f:95:c1:
17:e2:1c:5c:da:2a:7a:d5:e4:a9:a6:c9:f4:a7:c6:04:b5:b1:
9c:0a:b0:31:95:04:f8:40:aa:8e:be:9f:43:0c:00:b1:37:76:
7e:77:47:e5:86:1b:1b:70:ba:be:f8:ea:ef:55:b5:f2:8d:b6:
f5:52:70:f5:76:ef:ea:d4:26:48:40:2f:de:b3:19:52:60:bb:
60:02:d8:2e:6e:aa:99:57:1d:67:7c:46:75:f0:e4:d3:fb:f1:
b4:93:48:d3:9a:69:ae:52:7a:59:75:76:a8:f6:09:1a:4a:13:
da:8f:88:d4:9b:2e:c3:99:8e:8a:f2:26:5f:2d:ba:36:d6:c6:
6c:9f:8b:3b:80:a0:ae:00:44:fa:dd:9d:7c:b1:25:44:30:be:
c2:21:a1:98:6b:ba:f4:8b:eb:01:0f:06:2a:09:bb:c0:a8:56:
fd:05:15:10:8b:79:db:7f:e7:69:89:c4:0c:70:9a:79:45:39:
fa:8b:f8:48:89:c9:c6:4b:56:24:99:51:ad:c6:f1:fb:4e:2d:
3b:e3:41:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiO7AVAi7efZ+XT00MawY9yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMDdlY2Q3NjY2Y2NlZjkxZTgyZjdlY2JjZTBiYTI4NTMz
NmZiNDUwHhcNMjUwODA5MTMwMTI5WhcNMjUwODEwMTMwMTI5WjAzMTEwLwYDVQQD
EygyOGEzYjA2ODU5YzYzNTg3YWU2ZDQ2YWNkNGExOTQ1YjU3ZjNhMzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ibde4ONbrqv2AerrKriRuv5UQot
7cxKw1gZYGAZ5XdCX5nNUYBQ0o7NrHOfVdQBJ8uJE5NJhDtDU1b248aVPFn31jv+
klOUsr/iNXBikXp3XYFYoiOZ9FYKVe+gdXxrsK/oAOGICS5UyIrofIp1kLPAA1Ld
SZh0Oy216XN+s3LmGWPvpPqUzZd0G53bOI5TtFeTJjrnmfG4YZKMLt9hkM+wf8jP
QLxOknFuywts6uiO2OxMc/2r2BBU1Lbcv0l/iS7/fxu8oPk07wFh28w7Y0pkSjec
iv4AFZhyUfqSywqlvhNRQOZy/ym7o6s3OHUh3U91d+E04tkfOI/CI7pD9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCijsGhZxjWHrm1GrNShlFtX86NwMB8GA1UdIwQY
MBaAFIwH7NdmbM75HoL37LzguihTNvtFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakFmczEyWnN6dmtlZ3Zmc3ZPQzZLRk0yLTBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My84NDg0MDYtNTgyNi00ZGJjLWI5M2Ut
NWQyN2M3NWFhZTZmLzEvakFmczEyWnN6dmtlZ3Zmc3ZPQzZLRk0yLTBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My84NDg0MDYtNTgyNi00ZGJjLWI5M2UtNWQyN2M3NWFhZTZm
LzEvakFmczEyWnN6dmtlZ3Zmc3ZPQzZLRk0yLTBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX+k046vs
L84OxWNnF83pmFtw4oreaW11GtURNt3/+Xxk7zYo2Ddiqr+yWbkNhtAJkaaxb5XB
F+IcXNoqetXkqabJ9KfGBLWxnAqwMZUE+ECqjr6fQwwAsTd2fndH5YYbG3C6vvjq
71W18o229VJw9Xbv6tQmSEAv3rMZUmC7YALYLm6qmVcdZ3xGdfDk0/vxtJNI05pp
rlJ6WXV2qPYJGkoT2o+I1Jsuw5mOivImXy26NtbGbJ+LO4CgrgBE+t2dfLElRDC+
wiGhmGu69IvrAQ8GKgm7wKhW/QUVEIt523/naYnEDHCaeUU5+ov4SInJxktWJJlR
rcbx+04tO+NB2Q==
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:37:53 2025 by rpki-client