Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
File: JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft (raw, json)
Hash identifier: p0k+ACcO0Yt+ZUPk2KxZQK+uMJzHe6l2YA15Tfa40J8=
Subject key identifier: 25:33:B5:D2:E6:9E:B1:70:3D:2D:B2:A9:A0:B3:87:4F:56:4E:E4:9E
Authority key identifier: 24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
Certificate issuer: /CN=24d906b90c1d856673e414f39805be583d230ba7
Certificate serial: 01987ED3A3050BB879695DBFAEF9F83F0474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
Manifest number: 07D7
Signing time: Wed 06 Aug 2025 10:00:55 +0000
Manifest this update: Wed 06 Aug 2025 10:00:55 +0000
Manifest next update: Thu 07 Aug 2025 10:00:55 +0000
Files and hashes: 1: JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl (hash: QyyRU6bodkwInO4w0CGMIbwuhALkv6MufgPGCuBZL3M=)
2: tH5X1sIrBGaWrxtJcDhQJ2X9uHg.roa (hash: DV2Ywdf2IF4IJkXNNJ6gs2p5s2GMK9q52zFH8lpr0iI=)
3: wpydopt6VUah6RQMZrzjsU6WoPc.roa (hash: cp20Yibn6t1V4VomO6+maPrzeM92DrtR/BD0ISnTpAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:a3:05:0b:b8:79:69:5d:bf:ae:f9:f8:3f:04:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d906b90c1d856673e414f39805be583d230ba7
Validity
Not Before: Aug 6 10:00:55 2025 GMT
Not After : Aug 7 10:00:55 2025 GMT
Subject: CN=2533b5d2e69eb1703d2db2a9a0b3874f564ee49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:30:0c:f8:23:ef:bc:4b:91:48:52:b2:41:de:
10:0b:79:92:12:32:26:94:1b:81:fa:4c:f8:07:84:
0c:41:40:b3:16:cc:1d:a4:0b:62:4b:73:e8:bc:58:
63:9f:f2:4c:58:9b:03:85:18:5d:cc:70:cc:7e:38:
78:3e:3d:96:75:ce:97:7f:be:8f:2f:95:5f:5b:b3:
7a:57:af:d6:a7:ef:68:cf:f9:3a:ab:af:d0:c5:f2:
62:9c:91:83:cf:42:18:05:93:a2:8c:79:64:63:e0:
9a:e2:a0:fc:a3:5b:05:55:57:ef:10:c2:0b:75:27:
2a:c5:9a:c5:f9:fa:93:5c:0c:db:14:39:ff:88:c3:
58:2d:c1:a0:7b:f6:42:fb:b7:55:96:41:99:69:de:
6a:d3:fd:52:d0:c7:fb:6b:0b:9a:15:5a:c4:52:2e:
81:a9:02:c8:09:ee:97:db:ef:24:f7:6d:c5:f4:db:
4b:6d:8d:72:81:e6:42:ab:40:d7:28:74:09:84:ee:
f9:56:a7:0c:86:9b:80:fb:d9:20:6c:e8:6a:a4:1e:
d7:09:d4:9f:d7:f9:94:78:a5:7f:e2:d1:7c:fc:91:
62:18:47:62:ad:a7:46:31:81:bc:f0:af:01:e0:9f:
04:72:10:1f:42:f3:35:97:91:19:81:5a:5f:81:a4:
35:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:33:B5:D2:E6:9E:B1:70:3D:2D:B2:A9:A0:B3:87:4F:56:4E:E4:9E
X509v3 Authority Key Identifier:
keyid:24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:54:03:e2:99:b6:6e:c0:06:6e:79:23:e7:19:14:49:b0:92:
3b:61:ae:1b:0c:c0:6e:1d:23:26:29:02:0b:5d:7c:19:ff:b8:
bf:eb:a5:67:bf:d6:c0:c3:80:6b:d4:1b:60:10:cb:eb:ae:83:
d5:88:41:7e:9a:78:6d:5d:ec:56:5b:87:39:61:60:40:78:3b:
56:68:90:59:c1:99:f4:64:00:8b:3e:24:04:df:87:3a:42:ee:
ce:2f:4c:7e:2d:72:3b:6b:6d:a9:6a:30:a8:89:02:29:ac:7d:
c0:bb:ce:a7:2c:17:f4:dd:c3:0c:65:65:13:43:75:0e:39:e1:
4b:44:5a:07:51:5c:ab:4b:73:7c:8a:18:28:8a:02:71:c3:a7:
1f:49:f2:d5:32:ed:1c:56:7e:90:f2:d5:fa:db:8a:53:ff:4b:
a1:bb:65:89:e3:c8:f5:18:c8:9f:41:27:38:9b:a6:a3:60:00:
af:42:55:fe:f0:34:dc:35:88:98:47:23:fb:c3:d0:af:5a:c5:
22:a3:90:04:1d:70:2c:6b:c8:00:6b:26:18:31:67:8b:33:86:
9d:3a:9e:7f:31:f0:94:e4:2e:21:e1:9a:23:53:50:72:f6:e4:
68:35:b7:b3:21:09:91:d5:16:29:4f:61:8a:7f:10:76:e4:39:
80:1a:31:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+06MFC7h5aV2/rvn4PwR0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZDkwNmI5MGMxZDg1NjY3M2U0MTRmMzk4MDViZTU4M2Qy
MzBiYTcwHhcNMjUwODA2MTAwMDU1WhcNMjUwODA3MTAwMDU1WjAzMTEwLwYDVQQD
EygyNTMzYjVkMmU2OWViMTcwM2QyZGIyYTlhMGIzODc0ZjU2NGVlNDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzAM+CPvvEuRSFKyQd4QC3mSEjIm
lBuB+kz4B4QMQUCzFswdpAtiS3PovFhjn/JMWJsDhRhdzHDMfjh4Pj2Wdc6Xf76P
L5VfW7N6V6/Wp+9oz/k6q6/QxfJinJGDz0IYBZOijHlkY+Ca4qD8o1sFVVfvEMIL
dScqxZrF+fqTXAzbFDn/iMNYLcGge/ZC+7dVlkGZad5q0/1S0Mf7awuaFVrEUi6B
qQLICe6X2+8k923F9NtLbY1ygeZCq0DXKHQJhO75VqcMhpuA+9kgbOhqpB7XCdSf
1/mUeKV/4tF8/JFiGEdiradGMYG88K8B4J8EchAfQvM1l5EZgVpfgaQ1ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUztdLmnrFwPS2yqaCzh09WTuSeMB8GA1UdIwQY
MBaAFCTZBrkMHYVmc+QU85gFvlg9IwunMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk5rR3VRd2RoV1p6NUJUem1BVy1XRDBqQzZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iNTNkYjEtMWUwZS00NGQwLWExMzEt
NGZjMjhlNTA5OGM3LzEvSk5rR3VRd2RoV1p6NUJUem1BVy1XRDBqQzZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9iNTNkYjEtMWUwZS00NGQwLWExMzEtNGZjMjhlNTA5OGM3
LzEvSk5rR3VRd2RoV1p6NUJUem1BVy1XRDBqQzZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAolQD4pm2
bsAGbnkj5xkUSbCSO2GuGwzAbh0jJikCC118Gf+4v+ulZ7/WwMOAa9QbYBDL666D
1YhBfpp4bV3sVluHOWFgQHg7VmiQWcGZ9GQAiz4kBN+HOkLuzi9Mfi1yO2ttqWow
qIkCKax9wLvOpywX9N3DDGVlE0N1DjnhS0RaB1Fcq0tzfIoYKIoCccOnH0ny1TLt
HFZ+kPLV+tuKU/9LobtliePI9RjIn0EnOJumo2AAr0JV/vA03DWImEcj+8PQr1rF
IqOQBB1wLGvIAGsmGDFnizOGnTqefzHwlOQuIeGaI1NQcvbkaDW3syEJkdUWKU9h
in8QduQ5gBoxPg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 13:18:12 2025 by rpki-client