Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft
File: jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft (raw, json)
Hash identifier: AN+bmV1PbW5dvD6mgkC4nktuvBalTG1st1Vf5f1bi00=
Subject key identifier: C7:7D:E1:7E:1C:0E:11:2A:7D:BA:2C:54:C3:7C:E8:26:27:28:D2:0A
Authority key identifier: 8D:3E:59:4B:B2:6E:9C:08:E6:FC:47:36:CA:A5:D3:C2:00:85:4D:EA
Certificate issuer: /CN=8d3e594bb26e9c08e6fc4736caa5d3c200854dea
Certificate serial: 019874192D203798D256EEDB99B6E293532E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 08:01:03 +0000
Manifest this update: Mon 04 Aug 2025 08:01:03 +0000
Manifest next update: Tue 05 Aug 2025 08:01:03 +0000
Files and hashes: 1: Zq0wQhBfexCATl78wMgEOyu6_sU.roa (hash: axein+QEEGhV3z0WrLq2ssDzr5D8Ohz6MOaHA780No8=)
2: jT5ZS7JunAjm_Ec2yqXTwgCFTeo.crl (hash: k6xFOp1Y2Ihf/C8faIjJ53jnWCF16Wn5qijWFaN80wA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:2d:20:37:98:d2:56:ee:db:99:b6:e2:93:53:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3e594bb26e9c08e6fc4736caa5d3c200854dea
Validity
Not Before: Aug 4 08:01:03 2025 GMT
Not After : Aug 5 08:01:03 2025 GMT
Subject: CN=c77de17e1c0e112a7dba2c54c37ce8262728d20a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:67:a2:d5:fd:45:f7:fb:a9:04:75:28:62:f4:
9f:9f:69:fe:82:06:78:cf:6d:d2:88:7d:91:e3:3f:
52:39:df:e0:35:98:97:f4:0e:60:35:3a:e6:de:0d:
bc:e1:a6:94:b6:0a:0d:86:94:a8:ab:fd:f8:99:41:
c1:25:3b:6e:c1:66:df:a7:0b:bf:71:86:cb:d2:5d:
12:65:15:d3:9b:f4:c0:e9:06:32:f3:88:d3:4c:bb:
20:56:37:a7:42:7f:3f:74:2f:09:ed:87:e2:ca:e3:
18:1a:a1:19:71:1c:95:71:de:98:ca:9d:36:fa:c0:
5a:c8:89:5d:80:63:5b:f5:e3:2e:a4:3f:6f:2c:6b:
39:61:d7:ad:bd:e4:c2:55:49:44:0d:4d:2f:5a:45:
e4:43:9a:f9:8d:c7:37:76:fb:f0:2e:5b:5b:94:ca:
63:47:6a:e3:26:75:e0:dd:51:06:85:07:ad:a1:d2:
d2:58:e7:e0:01:20:7c:ff:e4:85:3d:4d:7f:45:75:
8a:16:5f:fc:7d:99:1b:66:3d:2d:c4:b9:6d:13:4d:
2e:38:3d:9c:90:60:46:e2:e4:ea:c9:ac:aa:81:fd:
0e:55:e8:fb:d3:61:1e:41:53:66:e8:20:7e:83:e8:
d4:e4:c2:52:35:1d:98:4b:ef:43:a3:8e:09:6d:c5:
f9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:7D:E1:7E:1C:0E:11:2A:7D:BA:2C:54:C3:7C:E8:26:27:28:D2:0A
X509v3 Authority Key Identifier:
keyid:8D:3E:59:4B:B2:6E:9C:08:E6:FC:47:36:CA:A5:D3:C2:00:85:4D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:c7:9b:73:96:07:54:ef:a9:46:9c:a6:92:ac:8a:02:d8:63:
2e:54:70:a6:6d:26:9d:9d:81:83:f1:5b:d1:83:e7:94:a6:b1:
0b:c9:6c:f2:f7:66:01:29:24:30:32:4a:94:7c:0c:03:ee:83:
77:69:9d:5b:b1:fd:1c:30:e1:0f:23:e0:7d:5c:af:99:e7:fe:
7e:56:84:a3:7e:14:6a:5c:a8:85:92:b2:ec:c7:92:8c:ba:40:
97:dc:50:69:8a:ef:1b:58:b3:d0:b1:90:6a:03:ad:a5:2c:2b:
96:9d:5a:93:c8:69:93:94:36:c0:fd:24:da:c4:ba:cc:81:35:
08:b8:e7:d2:1e:e7:52:5e:41:b2:ef:e4:e2:2b:6d:55:c4:b8:
36:5f:c6:86:61:fa:62:12:25:cc:2a:39:c9:f0:49:b6:2d:7a:
7c:cc:08:f1:2b:2f:b1:5f:a7:86:64:9d:81:7e:73:a0:fe:1b:
f9:29:88:5c:e9:e6:1e:fc:47:cd:41:23:33:67:c3:13:b2:cf:
25:84:d5:dd:42:51:db:cb:3a:b2:84:f5:52:d0:e9:bc:ed:f0:
80:df:93:e8:ae:64:e1:f7:8d:93:9d:92:12:07:51:a4:4d:44:
56:e1:91:5a:0c:ca:76:d7:3a:50:6e:53:77:67:5b:91:56:27:
28:39:44:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0GS0gN5jSVu7bmbbik1MuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkM2U1OTRiYjI2ZTljMDhlNmZjNDczNmNhYTVkM2MyMDA4
NTRkZWEwHhcNMjUwODA0MDgwMTAzWhcNMjUwODA1MDgwMTAzWjAzMTEwLwYDVQQD
EyhjNzdkZTE3ZTFjMGUxMTJhN2RiYTJjNTRjMzdjZTgyNjI3MjhkMjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmei1f1F9/upBHUoYvSfn2n+ggZ4
z23SiH2R4z9SOd/gNZiX9A5gNTrm3g284aaUtgoNhpSoq/34mUHBJTtuwWbfpwu/
cYbL0l0SZRXTm/TA6QYy84jTTLsgVjenQn8/dC8J7YfiyuMYGqEZcRyVcd6Yyp02
+sBayIldgGNb9eMupD9vLGs5YdetveTCVUlEDU0vWkXkQ5r5jcc3dvvwLltblMpj
R2rjJnXg3VEGhQetodLSWOfgASB8/+SFPU1/RXWKFl/8fZkbZj0txLltE00uOD2c
kGBG4uTqyayqgf0OVej702EeQVNm6CB+g+jU5MJSNR2YS+9Do44JbcX5ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMd94X4cDhEqfbosVMN86CYnKNIKMB8GA1UdIwQY
MBaAFI0+WUuybpwI5vxHNsql08IAhU3qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalQ1WlM3SnVuQWptX0VjMnlxWFR3Z0NGVGVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9jNzUzMTctZDVmZC00YTI0LTg3MTQt
ZTdkZWU5YTdjYWQ1LzEvalQ1WlM3SnVuQWptX0VjMnlxWFR3Z0NGVGVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9jNzUzMTctZDVmZC00YTI0LTg3MTQtZTdkZWU5YTdjYWQ1
LzEvalQ1WlM3SnVuQWptX0VjMnlxWFR3Z0NGVGVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB8ebc5YH
VO+pRpymkqyKAthjLlRwpm0mnZ2Bg/Fb0YPnlKaxC8ls8vdmASkkMDJKlHwMA+6D
d2mdW7H9HDDhDyPgfVyvmef+flaEo34UalyohZKy7MeSjLpAl9xQaYrvG1iz0LGQ
agOtpSwrlp1ak8hpk5Q2wP0k2sS6zIE1CLjn0h7nUl5Bsu/k4ittVcS4Nl/GhmH6
YhIlzCo5yfBJti16fMwI8SsvsV+nhmSdgX5zoP4b+SmIXOnmHvxHzUEjM2fDE7LP
JYTV3UJR28s6soT1UtDpvO3wgN+T6K5k4feNk52SEgdRpE1EVuGRWgzKdtc6UG5T
d2dbkVYnKDlEGQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:55 2025 by rpki-client