Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
File: jImAGxmqlyitT2u3GFwR8UudjXw.mft (raw, json)
Hash identifier: ZWCvqiWKdZrjQlTMJL87UNDUon1CLMVh3UzK5i9SDSI=
Subject key identifier: 89:56:A1:00:C3:4B:55:B4:FF:4C:7C:29:22:68:76:DC:0B:49:3C:91
Authority key identifier: 8C:89:80:1B:19:AA:97:28:AD:4F:6B:B7:18:5C:11:F1:4B:9D:8D:7C
Certificate issuer: /CN=8c89801b19aa9728ad4f6bb7185c11f14b9d8d7c
Certificate serial: 019769617E01872BAFC52047A56B62E296DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
Manifest number: 1591
Signing time: Fri 13 Jun 2025 13:01:26 +0000
Manifest this update: Fri 13 Jun 2025 13:01:26 +0000
Manifest next update: Sat 14 Jun 2025 13:01:26 +0000
Files and hashes: 1: jHt_1MNQirxASDmqQViticPF-ps.roa (hash: PWOLXQilLHy5JAj1j3MO8KwTsebKycEVRdXXWLZvuq8=)
2: jImAGxmqlyitT2u3GFwR8UudjXw.crl (hash: N1WZz+4qMzetmnT0pjz7EhNvew8tTFoS1CYev3ZjY+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:7e:01:87:2b:af:c5:20:47:a5:6b:62:e2:96:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c89801b19aa9728ad4f6bb7185c11f14b9d8d7c
Validity
Not Before: Jun 13 13:01:26 2025 GMT
Not After : Jun 14 13:01:26 2025 GMT
Subject: CN=8956a100c34b55b4ff4c7c29226876dc0b493c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:0e:ae:9a:f1:b9:2a:7d:1b:30:51:8c:6d:a4:
33:38:ea:07:21:7b:94:67:fc:eb:cd:22:ad:32:98:
55:c9:03:27:83:60:82:85:c5:5a:77:ac:02:bd:d1:
2c:44:51:61:d6:61:48:2f:42:9c:c0:b9:2d:09:0a:
2d:6e:c9:e8:8e:e0:0f:72:ac:45:58:45:18:5f:86:
c6:75:9b:bf:0f:0e:96:7d:c2:da:63:89:27:dd:22:
57:ec:3f:3b:4d:b1:c8:a8:d1:f8:9b:91:a7:06:33:
2d:06:cb:2a:a2:aa:77:73:4a:e3:31:a7:aa:6b:d5:
9c:f7:2f:ed:8f:4b:6a:51:6f:82:45:54:87:23:1d:
37:64:95:74:19:98:9f:d8:bf:37:d8:6e:58:91:cf:
b2:95:71:18:9a:ed:a3:25:fb:66:ef:2e:2d:a0:2c:
ad:eb:0f:14:46:27:5e:96:48:8c:9c:39:d2:40:67:
53:72:fb:8d:5d:db:6c:c6:da:a3:b9:d7:24:0c:c5:
2b:29:8c:1b:83:92:a9:03:31:e0:a4:5c:f5:bd:02:
96:c9:44:7f:0c:34:33:89:f6:bc:b7:1b:b7:14:f8:
fc:2e:b9:67:c4:e0:44:dc:3c:23:1f:3c:19:7a:43:
76:8e:32:ab:63:7e:6b:55:a1:27:50:be:0d:1c:be:
f3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:56:A1:00:C3:4B:55:B4:FF:4C:7C:29:22:68:76:DC:0B:49:3C:91
X509v3 Authority Key Identifier:
keyid:8C:89:80:1B:19:AA:97:28:AD:4F:6B:B7:18:5C:11:F1:4B:9D:8D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:21:61:44:5a:37:91:b0:29:ca:5d:2a:25:51:79:33:44:9f:
72:33:ac:e5:0e:35:f9:43:66:85:00:6a:3b:ec:74:41:a9:28:
45:01:b9:90:04:99:eb:7b:60:cb:9b:9a:19:79:17:1a:65:de:
47:fb:ac:bf:c0:88:42:a5:42:62:5b:fb:dd:57:d5:a9:3d:b6:
ef:98:ba:3d:e8:96:64:3a:73:2d:4d:d4:05:18:4c:8f:c6:62:
3e:a2:cd:2b:76:16:7d:fc:14:e8:32:90:f3:8b:7f:d3:de:e5:
f9:3d:c6:a1:e4:cd:0c:f1:27:b1:63:46:df:b8:e2:20:5d:be:
c2:c5:7b:f0:45:75:9b:23:f4:87:e8:c9:68:ea:4e:69:ea:e4:
c6:d6:33:36:14:bd:1e:26:ce:31:70:5d:2f:5c:c4:bb:a9:ce:
8b:d8:30:7b:8f:3b:7b:a5:da:50:eb:dc:44:a9:5a:12:75:2a:
c7:16:23:26:22:0c:e5:24:fb:76:6b:76:6f:69:61:d1:80:37:
d4:6a:88:18:79:7d:e7:1e:2d:63:fd:0f:e2:96:35:7c:e8:84:
95:56:ea:8b:76:ba:e8:4a:92:b2:d8:f6:4b:4b:6d:04:e6:54:
60:fd:05:b1:05:6d:fb:0a:4e:06:2e:9c:34:fe:02:8f:3e:5c:
d4:9f:96:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpYX4BhyuvxSBHpWti4pbaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjODk4MDFiMTlhYTk3MjhhZDRmNmJiNzE4NWMxMWYxNGI5
ZDhkN2MwHhcNMjUwNjEzMTMwMTI2WhcNMjUwNjE0MTMwMTI2WjAzMTEwLwYDVQQD
Eyg4OTU2YTEwMGMzNGI1NWI0ZmY0YzdjMjkyMjY4NzZkYzBiNDkzYzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+A6umvG5Kn0bMFGMbaQzOOoHIXuU
Z/zrzSKtMphVyQMng2CChcVad6wCvdEsRFFh1mFIL0KcwLktCQotbsnojuAPcqxF
WEUYX4bGdZu/Dw6WfcLaY4kn3SJX7D87TbHIqNH4m5GnBjMtBssqoqp3c0rjMaeq
a9Wc9y/tj0tqUW+CRVSHIx03ZJV0GZif2L832G5Ykc+ylXEYmu2jJftm7y4toCyt
6w8URidelkiMnDnSQGdTcvuNXdtsxtqjudckDMUrKYwbg5KpAzHgpFz1vQKWyUR/
DDQzifa8txu3FPj8LrlnxOBE3DwjHzwZekN2jjKrY35rVaEnUL4NHL7zTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIlWoQDDS1W0/0x8KSJodtwLSTyRMB8GA1UdIwQY
MBaAFIyJgBsZqpcorU9rtxhcEfFLnY18MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakltQUd4bXFseWl0VDJ1M0dGd1I4VXVkalh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8zMDY2Y2EtZTAxNy00ZjYxLWFkYzUt
NzI4ZTk5NjdkYWNhLzEvakltQUd4bXFseWl0VDJ1M0dGd1I4VXVkalh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8zMDY2Y2EtZTAxNy00ZjYxLWFkYzUtNzI4ZTk5NjdkYWNh
LzEvakltQUd4bXFseWl0VDJ1M0dGd1I4VXVkalh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhiFhRFo3
kbApyl0qJVF5M0SfcjOs5Q41+UNmhQBqO+x0QakoRQG5kASZ63tgy5uaGXkXGmXe
R/usv8CIQqVCYlv73VfVqT2275i6PeiWZDpzLU3UBRhMj8ZiPqLNK3YWffwU6DKQ
84t/097l+T3GoeTNDPEnsWNG37jiIF2+wsV78EV1myP0h+jJaOpOaerkxtYzNhS9
HibOMXBdL1zEu6nOi9gwe487e6XaUOvcRKlaEnUqxxYjJiIM5ST7dmt2b2lh0YA3
1GqIGHl95x4tY/0P4pY1fOiElVbqi3a66EqSstj2S0ttBOZUYP0FsQVt+wpOBi6c
NP4Cjz5c1J+WPQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:42:50 2025 by rpki-client