Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
File: jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft (raw, json)
Hash identifier: yhHj7at9fuAI1JPnWPfjm0eRsclvxTzXrTYftBawrlg=
Subject key identifier: 42:85:48:C6:14:A0:10:A0:D7:84:CB:E3:D9:D5:80:EA:03:88:B4:93
Authority key identifier: 8D:30:81:0E:2D:C2:71:A6:A0:F0:7B:8E:20:9E:2D:C2:23:63:78:39
Certificate issuer: /CN=8d30810e2dc271a6a0f07b8e209e2dc223637839
Certificate serial: 01976FD142CF0314F287399C14A5D3738991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
Manifest number: 1594
Signing time: Sat 14 Jun 2025 19:01:14 +0000
Manifest this update: Sat 14 Jun 2025 19:01:14 +0000
Manifest next update: Sun 15 Jun 2025 19:01:14 +0000
Files and hashes: 1: dHwX8PQaURSRhzT9O267zp2eAAU.roa (hash: pQKJANjM+1Peo4ZdiwJW4yKvtPIT0ly/kwXsgNJ+gjU=)
2: jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl (hash: +GRBjuejwM/i6NEnbsZtGieJhXdDn7CN9w30p9lDWz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d1:42:cf:03:14:f2:87:39:9c:14:a5:d3:73:89:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d30810e2dc271a6a0f07b8e209e2dc223637839
Validity
Not Before: Jun 14 19:01:14 2025 GMT
Not After : Jun 15 19:01:14 2025 GMT
Subject: CN=428548c614a010a0d784cbe3d9d580ea0388b493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:77:ab:17:30:5b:41:34:7c:ee:4a:07:4f:c7:
33:50:a8:09:3e:d4:2a:4a:c9:84:76:91:c2:38:ef:
30:81:6f:7f:59:c9:f3:fe:7b:24:2d:09:77:ec:4b:
e5:f6:ab:20:ca:ed:08:a7:31:30:24:6d:59:8e:82:
ae:c6:6f:d6:66:80:4c:23:a7:3f:28:3e:ec:39:1e:
f8:73:63:11:48:c6:89:29:28:2d:16:7b:e3:38:13:
68:38:1d:e1:f5:a8:67:f9:83:5e:99:46:78:b3:ce:
fd:1d:2d:57:dc:9e:d7:8a:28:12:0f:1c:b4:90:68:
ab:35:ec:b2:1f:97:28:76:a4:ec:6c:05:59:13:4d:
55:76:d6:10:cb:b6:c1:df:c8:2b:6d:b9:3c:d8:26:
0e:ce:08:3f:b9:b9:4c:21:a3:8e:12:23:c4:89:71:
bc:e9:2d:1a:9c:39:9c:7f:d1:c4:37:ef:70:d2:9c:
c6:fb:44:9e:6a:b3:14:21:aa:fe:e0:4b:92:b6:47:
4a:03:02:6d:40:a4:34:69:7c:04:fa:65:17:11:93:
63:bb:47:97:58:1d:31:10:4a:2b:34:b0:ef:77:5d:
ac:10:de:a5:90:45:a6:05:25:fc:db:6b:2f:b7:37:
9d:df:5e:b8:77:ba:e7:b2:4b:a8:a2:a5:dc:3b:9e:
7e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:85:48:C6:14:A0:10:A0:D7:84:CB:E3:D9:D5:80:EA:03:88:B4:93
X509v3 Authority Key Identifier:
keyid:8D:30:81:0E:2D:C2:71:A6:A0:F0:7B:8E:20:9E:2D:C2:23:63:78:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ed:dc:0b:db:de:97:2b:a6:34:7b:2c:ca:10:d8:bb:ba:a7:
12:18:3f:59:e4:6d:42:63:52:93:d7:19:af:88:e7:f1:7f:ea:
fc:11:43:8b:de:d6:91:d6:dc:63:e4:5e:70:7e:42:a7:9a:4f:
c5:99:c4:4d:84:fb:f1:55:01:7d:75:0b:78:66:41:8b:74:68:
0c:a4:ff:1b:09:90:05:98:3e:09:c4:e1:c4:28:e4:68:19:88:
88:30:c0:62:21:4e:9b:b3:3e:ce:77:a8:1c:6c:79:a6:21:52:
64:9f:d1:03:f4:2b:fc:cc:2c:a5:cc:58:63:9c:44:2b:63:83:
38:01:f7:32:9e:23:20:ba:93:97:d3:de:10:c7:fa:80:0a:36:
14:e7:d3:07:9e:65:de:4c:b3:ff:90:94:f8:52:8c:85:43:75:
53:e8:64:34:f3:4a:06:2d:6a:dc:e6:14:d7:0f:59:15:52:93:
08:75:8e:74:1f:8d:ca:4e:00:dd:d5:e6:bb:41:19:f1:94:91:
15:61:cc:76:d7:6b:1f:63:6e:dd:bb:09:de:ac:46:bc:8f:34:
2f:f8:39:c8:ac:68:6e:01:28:dc:7b:63:f6:c6:10:57:2d:4f:
a4:87:94:f8:32:73:63:1d:91:11:55:55:93:9f:8f:dc:1e:66:
e4:47:70:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdv0ULPAxTyhzmcFKXTc4mRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMzA4MTBlMmRjMjcxYTZhMGYwN2I4ZTIwOWUyZGMyMjM2
Mzc4MzkwHhcNMjUwNjE0MTkwMTE0WhcNMjUwNjE1MTkwMTE0WjAzMTEwLwYDVQQD
Eyg0Mjg1NDhjNjE0YTAxMGEwZDc4NGNiZTNkOWQ1ODBlYTAzODhiNDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43erFzBbQTR87koHT8czUKgJPtQq
SsmEdpHCOO8wgW9/Wcnz/nskLQl37Evl9qsgyu0IpzEwJG1ZjoKuxm/WZoBMI6c/
KD7sOR74c2MRSMaJKSgtFnvjOBNoOB3h9ahn+YNemUZ4s879HS1X3J7XiigSDxy0
kGirNeyyH5codqTsbAVZE01VdtYQy7bB38grbbk82CYOzgg/ublMIaOOEiPEiXG8
6S0anDmcf9HEN+9w0pzG+0SearMUIar+4EuStkdKAwJtQKQ0aXwE+mUXEZNju0eX
WB0xEEorNLDvd12sEN6lkEWmBSX822svtzed3164d7rnskuooqXcO55+gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEKFSMYUoBCg14TL49nVgOoDiLSTMB8GA1UdIwQY
MBaAFI0wgQ4twnGmoPB7jiCeLcIjY3g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalRDQkRpM0NjYWFnOEh1T0lKNHR3aU5qZURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9hOWQ5ZGEtZjhhNS00N2JhLWI2NmEt
YmQwYjU3NzRmNjM3LzEvalRDQkRpM0NjYWFnOEh1T0lKNHR3aU5qZURrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9hOWQ5ZGEtZjhhNS00N2JhLWI2NmEtYmQwYjU3NzRmNjM3
LzEvalRDQkRpM0NjYWFnOEh1T0lKNHR3aU5qZURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATe3cC9ve
lyumNHssyhDYu7qnEhg/WeRtQmNSk9cZr4jn8X/q/BFDi97WkdbcY+RecH5Cp5pP
xZnETYT78VUBfXULeGZBi3RoDKT/GwmQBZg+CcThxCjkaBmIiDDAYiFOm7M+zneo
HGx5piFSZJ/RA/Qr/MwspcxYY5xEK2ODOAH3Mp4jILqTl9PeEMf6gAo2FOfTB55l
3kyz/5CU+FKMhUN1U+hkNPNKBi1q3OYU1w9ZFVKTCHWOdB+Nyk4A3dXmu0EZ8ZSR
FWHMdtdrH2Nu3bsJ3qxGvI80L/g5yKxobgEo3Htj9sYQVy1PpIeU+DJzYx2REVVV
k5+P3B5m5Edw1w==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:23:33 2025 by rpki-client