Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.mft
File: Jw__IYVmW535AIyeG-YmARiafXw.mft (raw, json)
Hash identifier: twX4VaDa764WjjRuJG4JpO0COGXpzDeM1I8QXyPWXSY=
Subject key identifier: 87:F2:6D:87:78:E0:2C:16:57:34:0A:DB:8A:F7:5C:23:3B:F8:B3:E3
Authority key identifier: 27:0F:FF:21:85:66:5B:9D:F9:00:8C:9E:1B:E6:26:01:18:9A:7D:7C
Certificate issuer: /CN=270fff2185665b9df9008c9e1be62601189a7d7c
Certificate serial: 0198963745D46EC7D0F734765F9912CAA1EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jw__IYVmW535AIyeG-YmARiafXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.mft
Manifest number: 09D2
Signing time: Sun 10 Aug 2025 23:01:01 +0000
Manifest this update: Sun 10 Aug 2025 23:01:01 +0000
Manifest next update: Mon 11 Aug 2025 23:01:01 +0000
Files and hashes: 1: Fy2IYBN9hjZkWkvbtPQPrYui0qc.roa (hash: JelZKBaztB5j8Dd3i30kr2+tTI62dQSAVwbIQZ0Mhyo=)
2: Jw__IYVmW535AIyeG-YmARiafXw.crl (hash: 3x+kP+FXLMphaSU5OT74KnffmfatbbwYwNTOKrtcxYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jw__IYVmW535AIyeG-YmARiafXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 23:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:37:45:d4:6e:c7:d0:f7:34:76:5f:99:12:ca:a1:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=270fff2185665b9df9008c9e1be62601189a7d7c
Validity
Not Before: Aug 10 23:01:01 2025 GMT
Not After : Aug 11 23:01:01 2025 GMT
Subject: CN=87f26d8778e02c1657340adb8af75c233bf8b3e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:77:bb:62:ce:26:94:d4:15:8a:4c:17:ee:11:
1e:97:fd:86:fa:29:22:74:cb:a3:6d:e5:95:0c:64:
6c:a7:2b:1c:1e:39:4c:50:6e:8e:f6:ed:67:40:68:
56:60:ea:3d:43:fb:2e:db:9a:ae:c8:c0:e3:8f:5a:
25:de:bf:6f:bf:d1:74:27:72:df:51:7d:d4:cd:53:
2a:c6:f7:40:2f:34:7a:8b:23:3c:e2:24:b0:01:c7:
50:78:47:c5:2c:00:dc:35:37:e4:c3:08:54:cc:dc:
ff:07:e6:9d:f4:fa:ab:d2:c6:a4:e6:0f:c7:03:d4:
8e:63:47:81:d0:2b:44:dc:9c:77:60:7c:2c:c9:e0:
cf:83:16:df:be:a7:28:36:b5:eb:cc:7a:db:ac:9b:
14:78:78:ae:f9:62:cf:44:42:59:bf:1d:af:9d:17:
15:55:3c:38:97:74:68:9c:46:44:24:b1:c8:36:92:
f5:fc:b7:fd:ff:6d:a2:13:89:a8:8d:c9:5b:2f:38:
79:c2:25:9a:a2:17:6d:dd:b3:92:a2:1f:44:e2:2a:
b5:13:a0:69:a1:5c:59:cc:3e:39:4b:c5:4a:01:51:
f5:20:d2:84:41:6d:12:79:32:24:35:18:4b:e7:fb:
f8:1a:ed:d6:c5:17:11:3a:dd:e4:f7:e8:a6:5c:db:
10:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F2:6D:87:78:E0:2C:16:57:34:0A:DB:8A:F7:5C:23:3B:F8:B3:E3
X509v3 Authority Key Identifier:
keyid:27:0F:FF:21:85:66:5B:9D:F9:00:8C:9E:1B:E6:26:01:18:9A:7D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jw__IYVmW535AIyeG-YmARiafXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:8c:4a:18:28:2d:80:77:a6:8f:0b:d6:22:59:41:46:d2:be:
d1:3d:9d:23:91:4d:e6:f3:b5:72:40:45:05:d9:82:dd:d1:bb:
e1:c0:b1:53:eb:d6:ef:23:16:c3:ce:5d:34:90:af:c8:93:69:
fd:02:be:0a:0d:f8:52:22:cb:db:87:e8:d4:d8:26:94:66:a0:
dc:a7:24:5d:3a:6c:60:17:ae:fc:dd:6f:65:70:1e:2d:47:e3:
f1:19:2b:7c:5b:58:37:c5:1a:d4:df:33:a5:fa:7b:98:e5:4a:
5e:f5:c1:20:c8:df:b0:c5:93:b8:ae:c8:de:24:aa:e8:71:0d:
5a:51:26:e8:e3:58:f9:bd:bd:7e:23:c5:00:79:5a:cd:fd:43:
14:8f:b4:2b:0c:1d:17:ef:ab:92:76:06:ac:ee:49:c4:a3:a3:
13:fa:98:66:60:4b:f1:f5:09:cc:00:94:0d:10:bd:de:90:00:
b4:76:f1:15:24:66:a8:b6:c3:54:c6:59:fe:69:54:43:57:f1:
17:a8:74:54:4b:ef:8e:44:ed:c2:b9:2a:17:83:2d:7f:6a:06:
42:b8:c2:c6:e9:60:65:81:7b:c4:58:d8:0b:c7:21:62:04:56:
41:cf:a1:be:48:84:94:28:fc:5d:68:3c:4d:fb:e0:1c:ee:f2:
0b:08:74:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWN0XUbsfQ9zR2X5kSyqHuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MGZmZjIxODU2NjViOWRmOTAwOGM5ZTFiZTYyNjAxMTg5
YTdkN2MwHhcNMjUwODEwMjMwMTAxWhcNMjUwODExMjMwMTAxWjAzMTEwLwYDVQQD
Eyg4N2YyNmQ4Nzc4ZTAyYzE2NTczNDBhZGI4YWY3NWMyMzNiZjhiM2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3e7Ys4mlNQVikwX7hEel/2G+iki
dMujbeWVDGRspyscHjlMUG6O9u1nQGhWYOo9Q/su25quyMDjj1ol3r9vv9F0J3Lf
UX3UzVMqxvdALzR6iyM84iSwAcdQeEfFLADcNTfkwwhUzNz/B+ad9Pqr0sak5g/H
A9SOY0eB0CtE3Jx3YHwsyeDPgxbfvqcoNrXrzHrbrJsUeHiu+WLPREJZvx2vnRcV
VTw4l3RonEZEJLHINpL1/Lf9/22iE4mojclbLzh5wiWaohdt3bOSoh9E4iq1E6Bp
oVxZzD45S8VKAVH1INKEQW0SeTIkNRhL5/v4Gu3WxRcROt3k9+imXNsQYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfybYd44CwWVzQK24r3XCM7+LPjMB8GA1UdIwQY
MBaAFCcP/yGFZlud+QCMnhvmJgEYmn18MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSndfX0lZVm1XNTM1QUl5ZUctWW1BUmlhZlh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni83ZGM0NTQtMTUxNi00OTc5LTljNzIt
ZTQ2OTRhZmJiNmZjLzEvSndfX0lZVm1XNTM1QUl5ZUctWW1BUmlhZlh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni83ZGM0NTQtMTUxNi00OTc5LTljNzItZTQ2OTRhZmJiNmZj
LzEvSndfX0lZVm1XNTM1QUl5ZUctWW1BUmlhZlh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHYxKGCgt
gHemjwvWIllBRtK+0T2dI5FN5vO1ckBFBdmC3dG74cCxU+vW7yMWw85dNJCvyJNp
/QK+Cg34UiLL24fo1NgmlGag3KckXTpsYBeu/N1vZXAeLUfj8RkrfFtYN8Ua1N8z
pfp7mOVKXvXBIMjfsMWTuK7I3iSq6HENWlEm6ONY+b29fiPFAHlazf1DFI+0Kwwd
F++rknYGrO5JxKOjE/qYZmBL8fUJzACUDRC93pAAtHbxFSRmqLbDVMZZ/mlUQ1fx
F6h0VEvvjkTtwrkqF4Mtf2oGQrjCxulgZYF7xFjYC8chYgRWQc+hvkiElCj8XWg8
TfvgHO7yCwh08A==
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:11:18 2025 by rpki-client