Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
File: jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft (raw, json)
Hash identifier: yVehHBFMdb+lez4Rv/PbtYJxeliiLdtsw02Wc/xYjOk=
Subject key identifier: 8B:36:8D:EB:7E:7F:1E:31:6D:32:87:04:A0:CC:92:EE:61:70:0C:33
Authority key identifier: 8F:04:1D:66:9E:A6:C4:11:70:D6:F8:14:09:C0:FF:DC:28:E5:69:07
Certificate issuer: /CN=8f041d669ea6c41170d6f81409c0ffdc28e56907
Certificate serial: 01976929C663BC891E06B4B36E0B9BFE38BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 12:00:34 +0000
Manifest this update: Fri 13 Jun 2025 12:00:34 +0000
Manifest next update: Sat 14 Jun 2025 12:00:34 +0000
Files and hashes: 1: grXRQpT1aZeaC-n0N849AfZZ_V4.roa (hash: x7JYnVR7QlEIld9EwbA1Mq0qnt4Qvkq7/cYHdkassRc=)
2: jwQdZp6mxBFw1vgUCcD_3CjlaQc.crl (hash: +lJ9YMOqgPmXnMae9IIyKFK4dFv3PuuXivYXs7piAyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:c6:63:bc:89:1e:06:b4:b3:6e:0b:9b:fe:38:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f041d669ea6c41170d6f81409c0ffdc28e56907
Validity
Not Before: Jun 13 12:00:34 2025 GMT
Not After : Jun 14 12:00:34 2025 GMT
Subject: CN=8b368deb7e7f1e316d328704a0cc92ee61700c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:dc:e8:fd:d6:30:44:a2:c7:89:cf:84:ae:75:
f7:d2:28:80:14:77:df:08:ce:88:64:86:64:f0:89:
66:1d:67:41:78:31:ab:f0:8e:45:a7:0e:b7:fb:2c:
5a:86:6b:07:78:97:03:a8:7c:93:d4:a8:07:cc:72:
2e:e3:42:3f:8f:e8:cf:ce:8e:a8:44:cd:c8:72:76:
f0:4c:fd:90:54:be:20:6d:90:bf:48:c2:ba:63:23:
9c:d6:a3:33:cf:e4:49:30:ed:cb:58:d6:41:98:68:
ce:bd:10:5a:32:e1:cd:01:98:cf:64:5f:3b:0d:51:
1c:09:32:fe:68:bb:39:6e:e6:4e:42:01:bd:fe:5f:
37:be:88:84:d0:ea:8c:0b:c1:39:83:c4:07:06:2e:
38:54:6c:6a:97:88:f0:6e:b2:89:02:aa:31:44:75:
3b:59:a9:1a:91:06:93:7b:e7:6b:1a:21:e4:35:c5:
42:25:06:2b:a7:55:90:9f:3e:17:ac:21:31:6a:26:
ff:e8:ef:e9:a5:ed:8f:91:bd:d4:ee:96:13:48:2e:
03:b5:a8:74:30:55:f8:0e:e4:65:5d:59:3b:40:9d:
a6:50:0d:4b:0a:57:85:d3:17:25:f8:54:d4:bf:cb:
8a:91:b9:85:ef:2f:a6:a7:27:bb:f1:0d:a0:93:fe:
0b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:36:8D:EB:7E:7F:1E:31:6D:32:87:04:A0:CC:92:EE:61:70:0C:33
X509v3 Authority Key Identifier:
keyid:8F:04:1D:66:9E:A6:C4:11:70:D6:F8:14:09:C0:FF:DC:28:E5:69:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f4:03:05:c3:9e:db:3e:3a:62:bc:bf:9c:40:5f:8d:55:8e:
c4:a7:79:3d:ed:b5:db:cc:f1:d4:7b:17:82:85:06:3e:82:f0:
ad:df:d2:79:de:7e:1e:f3:c1:b0:9c:53:a1:42:8e:12:f2:26:
13:5f:97:d0:76:71:e3:33:fc:7c:6d:f3:91:18:95:c6:17:fa:
9d:0a:9e:0d:f9:c2:68:9b:0e:bd:ce:28:e5:7c:be:65:cd:1c:
71:d8:11:da:60:e0:e3:26:dd:5e:b0:0c:25:72:52:55:07:ed:
82:77:1f:bd:06:57:26:48:50:1b:b7:96:d1:f6:4a:ce:d7:1d:
d0:0c:38:b4:02:24:ef:5d:21:8c:19:50:ac:8f:50:ef:f7:f0:
5c:3c:ef:a1:31:cb:b6:50:f1:7d:4d:49:8a:49:18:c9:06:6e:
c9:4a:f3:3a:f3:07:07:7a:bf:c9:71:5c:41:b6:f2:19:d8:5e:
3d:cb:bd:be:7f:c6:b8:87:aa:c2:da:b9:0a:4c:c0:b3:41:44:
c5:f8:95:2f:eb:9f:45:36:ff:5d:08:40:b1:1e:79:8c:b7:74:
1c:34:88:c4:2f:3e:8f:06:65:46:22:4d:c2:33:27:40:cd:90:
d0:42:a9:bd:b7:46:93:59:f5:54:6c:3c:05:67:af:a0:ca:eb:
ac:5e:04:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpKcZjvIkeBrSzbgub/ji6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMDQxZDY2OWVhNmM0MTE3MGQ2ZjgxNDA5YzBmZmRjMjhl
NTY5MDcwHhcNMjUwNjEzMTIwMDM0WhcNMjUwNjE0MTIwMDM0WjAzMTEwLwYDVQQD
Eyg4YjM2OGRlYjdlN2YxZTMxNmQzMjg3MDRhMGNjOTJlZTYxNzAwYzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Nzo/dYwRKLHic+ErnX30iiAFHff
CM6IZIZk8IlmHWdBeDGr8I5Fpw63+yxahmsHeJcDqHyT1KgHzHIu40I/j+jPzo6o
RM3IcnbwTP2QVL4gbZC/SMK6YyOc1qMzz+RJMO3LWNZBmGjOvRBaMuHNAZjPZF87
DVEcCTL+aLs5buZOQgG9/l83voiE0OqMC8E5g8QHBi44VGxql4jwbrKJAqoxRHU7
WakakQaTe+drGiHkNcVCJQYrp1WQnz4XrCExaib/6O/ppe2Pkb3U7pYTSC4Dtah0
MFX4DuRlXVk7QJ2mUA1LCleF0xcl+FTUv8uKkbmF7y+mpye78Q2gk/4LqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIs2jet+fx4xbTKHBKDMku5hcAwzMB8GA1UdIwQY
MBaAFI8EHWaepsQRcNb4FAnA/9wo5WkHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvandRZFpwNm14QkZ3MXZnVUNjRF8zQ2psYVFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8xYThjYmQtNzJjZi00YTFjLTgzZDIt
YzIzZWFlZDRkMTI1LzEvandRZFpwNm14QkZ3MXZnVUNjRF8zQ2psYVFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8xYThjYmQtNzJjZi00YTFjLTgzZDItYzIzZWFlZDRkMTI1
LzEvandRZFpwNm14QkZ3MXZnVUNjRF8zQ2psYVFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAePQDBcOe
2z46Yry/nEBfjVWOxKd5Pe2128zx1HsXgoUGPoLwrd/Sed5+HvPBsJxToUKOEvIm
E1+X0HZx4zP8fG3zkRiVxhf6nQqeDfnCaJsOvc4o5Xy+Zc0ccdgR2mDg4ybdXrAM
JXJSVQftgncfvQZXJkhQG7eW0fZKztcd0Aw4tAIk710hjBlQrI9Q7/fwXDzvoTHL
tlDxfU1JikkYyQZuyUrzOvMHB3q/yXFcQbbyGdhePcu9vn/GuIeqwtq5CkzAs0FE
xfiVL+ufRTb/XQhAsR55jLd0HDSIxC8+jwZlRiJNwjMnQM2Q0EKpvbdGk1n1VGw8
BWevoMrrrF4EDg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:04:08 2025 by rpki-client