Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
File: j16oN5vKRPT2p_S2mGTNmwKiexI.mft (raw, json)
Hash identifier: eITJVasTs8pOwXhgV3hZfZDL6XHVaHVhzNHy0vDr7dw=
Subject key identifier: AB:4B:71:41:AB:76:E8:CF:67:5A:43:A6:84:54:7C:FF:67:E9:93:46
Authority key identifier: 8F:5E:A8:37:9B:CA:44:F4:F6:A7:F4:B6:98:64:CD:9B:02:A2:7B:12
Certificate issuer: /CN=8f5ea8379bca44f4f6a7f4b69864cd9b02a27b12
Certificate serial: 01989592E63DDABA3EEEDDCBD2296916CD38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
Manifest number: 1629
Signing time: Sun 10 Aug 2025 20:01:28 +0000
Manifest this update: Sun 10 Aug 2025 20:01:28 +0000
Manifest next update: Mon 11 Aug 2025 20:01:28 +0000
Files and hashes: 1: GI5eR-bcyPUXcabh8oF3ym-w-jY.roa (hash: HMe9khM1DXfAv5MN/QlZDROBBZj6X8B6CZKWjkcWcFY=)
2: f1jshjvqQC1or_SUp4VaHxnz0vg.roa (hash: HU3zUMPmn0Fu+40+47r6GzF5dnxd/KAN0UXFve0A1sw=)
3: j16oN5vKRPT2p_S2mGTNmwKiexI.crl (hash: firdd+2eTTJ8ZVCL3I7KWqR5FVZswGWuSzVc5rfr8uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 20:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:92:e6:3d:da:ba:3e:ee:dd:cb:d2:29:69:16:cd:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f5ea8379bca44f4f6a7f4b69864cd9b02a27b12
Validity
Not Before: Aug 10 20:01:28 2025 GMT
Not After : Aug 11 20:01:28 2025 GMT
Subject: CN=ab4b7141ab76e8cf675a43a684547cff67e99346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9f:5f:a3:06:f7:38:bd:1a:c3:5f:8b:56:9b:
8a:1d:3f:da:63:15:46:1b:6b:4d:d0:51:eb:4d:da:
75:21:6a:b6:aa:85:34:95:12:bc:a1:57:34:a1:61:
7a:ab:35:89:11:f3:82:d6:bb:14:17:67:10:b8:e8:
5f:42:c2:73:d7:f2:68:08:45:f3:ae:6a:ff:24:ea:
8a:5b:16:59:26:02:08:b9:a0:05:fd:de:a7:b5:c4:
2a:0c:54:33:70:c0:1d:ac:a3:a8:74:4e:4a:e7:9e:
d1:05:73:1e:d0:1e:8d:ef:05:12:22:c3:96:13:1a:
bf:fd:68:49:8f:e8:f8:7f:46:f4:39:b5:82:ce:3e:
7f:bd:b9:d0:14:ac:ff:77:99:08:69:bb:a5:40:9a:
e5:8a:76:12:71:46:79:a8:09:07:40:c8:17:da:16:
1c:ea:92:d8:4d:48:f5:57:c5:94:15:2b:d2:aa:6a:
d3:f4:84:4d:ac:c6:90:b7:dc:b5:f8:1c:a6:2d:9d:
d6:f4:3d:69:3b:bf:87:75:0c:8a:23:d7:5f:db:72:
8a:f2:96:e4:6d:59:25:a0:99:d5:fd:3e:fd:b7:c9:
2a:cf:c5:1f:e7:6d:91:ed:f3:70:35:67:e3:3e:8d:
76:ce:04:1e:9e:47:25:b5:9b:df:01:9c:8b:95:0b:
ba:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4B:71:41:AB:76:E8:CF:67:5A:43:A6:84:54:7C:FF:67:E9:93:46
X509v3 Authority Key Identifier:
keyid:8F:5E:A8:37:9B:CA:44:F4:F6:A7:F4:B6:98:64:CD:9B:02:A2:7B:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:1a:f9:8e:ab:fe:1c:38:aa:25:83:5a:d3:4e:4d:b9:c8:aa:
52:92:6a:b8:ba:51:f8:9f:84:5c:e1:a0:b8:39:7b:4d:3f:49:
b7:78:50:68:49:bc:dd:0b:5f:80:41:14:1d:0e:0e:24:71:da:
c6:1b:a5:69:fb:a0:48:8d:61:bb:e7:0e:c7:21:c4:9e:c4:3e:
c2:27:85:cf:72:65:91:8d:e1:21:e6:1f:c3:c1:3f:43:56:6d:
f9:56:61:fc:91:3d:23:1c:64:64:d8:e4:3a:4e:b1:ef:3d:ea:
32:21:12:f3:f9:8e:56:b7:ec:46:6e:f3:8b:66:11:dd:b5:ca:
b7:d6:84:b9:50:6a:30:a1:a7:0e:ed:2f:16:a0:d3:6d:5b:f6:
21:4d:56:91:a3:57:37:17:98:90:a9:55:e6:bb:71:5a:e7:d8:
64:1a:04:34:19:f2:2a:47:cc:37:c7:23:12:d5:ff:b8:3c:54:
b2:a5:a4:92:aa:b9:63:85:80:2b:8c:45:f5:01:ec:58:1b:f6:
cd:92:d5:01:18:3b:a0:79:9d:2f:1c:ae:a3:ef:17:da:1e:f0:
49:2e:55:2d:84:3b:90:67:63:df:23:68:d5:84:4c:3a:96:2d:
60:b2:5c:d2:b9:99:6f:43:af:b7:ba:3a:e4:4d:e5:f2:53:dc:
fd:2f:3c:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiVkuY92ro+7t3L0ilpFs04MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmNWVhODM3OWJjYTQ0ZjRmNmE3ZjRiNjk4NjRjZDliMDJh
MjdiMTIwHhcNMjUwODEwMjAwMTI4WhcNMjUwODExMjAwMTI4WjAzMTEwLwYDVQQD
EyhhYjRiNzE0MWFiNzZlOGNmNjc1YTQzYTY4NDU0N2NmZjY3ZTk5MzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Z9fowb3OL0aw1+LVpuKHT/aYxVG
G2tN0FHrTdp1IWq2qoU0lRK8oVc0oWF6qzWJEfOC1rsUF2cQuOhfQsJz1/JoCEXz
rmr/JOqKWxZZJgIIuaAF/d6ntcQqDFQzcMAdrKOodE5K557RBXMe0B6N7wUSIsOW
Exq//WhJj+j4f0b0ObWCzj5/vbnQFKz/d5kIabulQJrlinYScUZ5qAkHQMgX2hYc
6pLYTUj1V8WUFSvSqmrT9IRNrMaQt9y1+BymLZ3W9D1pO7+HdQyKI9df23KK8pbk
bVkloJnV/T79t8kqz8Uf522R7fNwNWfjPo12zgQenkcltZvfAZyLlQu6IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKtLcUGrdujPZ1pDpoRUfP9n6ZNGMB8GA1UdIwQY
MBaAFI9eqDebykT09qf0tphkzZsConsSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajE2b041dktSUFQycF9TMm1HVE5td0tpZXhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny80MDJkNDMtZTk5Yy00MTEyLWEwMzgt
ZWNiYjk0NDJmNTg5LzEvajE2b041dktSUFQycF9TMm1HVE5td0tpZXhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny80MDJkNDMtZTk5Yy00MTEyLWEwMzgtZWNiYjk0NDJmNTg5
LzEvajE2b041dktSUFQycF9TMm1HVE5td0tpZXhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeBr5jqv+
HDiqJYNa005NuciqUpJquLpR+J+EXOGguDl7TT9Jt3hQaEm83QtfgEEUHQ4OJHHa
xhulafugSI1hu+cOxyHEnsQ+wieFz3JlkY3hIeYfw8E/Q1Zt+VZh/JE9IxxkZNjk
Ok6x7z3qMiES8/mOVrfsRm7zi2YR3bXKt9aEuVBqMKGnDu0vFqDTbVv2IU1WkaNX
NxeYkKlV5rtxWufYZBoENBnyKkfMN8cjEtX/uDxUsqWkkqq5Y4WAK4xF9QHsWBv2
zZLVARg7oHmdLxyuo+8X2h7wSS5VLYQ7kGdj3yNo1YRMOpYtYLJc0rmZb0Ovt7o6
5E3l8lPc/S889w==
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:12:34 2025 by rpki-client