Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
File: JLZgphGYDGgnMTnjKv-3S0VKnTI.mft (raw, json)
Hash identifier: vAwmpqEU4fAe4GnEpCtGS6bUzj0cSirEYtiD/ZufB/c=
Subject key identifier: 3E:DF:5A:A6:02:5C:13:65:F7:54:72:D1:26:53:FA:FA:D2:5C:3E:1B
Authority key identifier: 24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
Certificate issuer: /CN=24b660a611980c68273139e32affb74b454a9d32
Certificate serial: 019893DB362C818A31E378B2BEAC11DC828A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
Manifest number: 0DC8
Signing time: Sun 10 Aug 2025 12:01:13 +0000
Manifest this update: Sun 10 Aug 2025 12:01:13 +0000
Manifest next update: Mon 11 Aug 2025 12:01:13 +0000
Files and hashes: 1: 5zfU3CLdzJ4_dnw1BhYJzGB5MAE.roa (hash: FF7iz/Png0ollPk0Y1YxpFPUlPc6nBCym+9BzksDmfY=)
2: JLZgphGYDGgnMTnjKv-3S0VKnTI.crl (hash: WiWfsZb7RrcJSnTUmRl89y1Rf/1pk1h+ZsniVx9jPR8=)
3: _8hSLgr4JdqEI1Dpn8hoZhNP1qQ.roa (hash: GqMn4/1oRrYEDz1sgi+iXh7bgMGiwNGyyfe2qMxH+7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:db:36:2c:81:8a:31:e3:78:b2:be:ac:11:dc:82:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b660a611980c68273139e32affb74b454a9d32
Validity
Not Before: Aug 10 12:01:13 2025 GMT
Not After : Aug 11 12:01:13 2025 GMT
Subject: CN=3edf5aa6025c1365f75472d12653fafad25c3e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5d:f6:8b:24:87:08:79:9f:94:1a:c1:3e:e7:
0d:21:73:ec:de:f6:a1:f5:2e:42:db:6b:d0:b9:21:
35:5c:a0:3e:89:f9:78:07:30:2f:10:70:37:fc:f6:
61:b1:d8:94:81:39:c4:c5:65:56:f4:28:96:17:29:
92:5d:31:2d:79:d6:21:79:2a:e3:fe:47:d0:f8:2c:
5a:3b:68:b1:66:02:e2:c8:ed:9d:7c:e6:c0:97:4e:
eb:79:bd:e6:a0:4e:eb:a1:b5:9e:a1:f9:57:50:f3:
75:60:47:05:4b:3b:9c:04:c2:f9:0a:d8:5a:ad:f3:
e2:75:1f:37:6b:b0:4d:1f:76:81:4a:17:9e:8b:cb:
0e:20:7f:9f:91:da:c3:5b:59:70:cb:46:2a:f4:12:
7b:61:2a:c8:20:16:9a:80:3c:b7:5c:70:71:0d:db:
6d:d3:35:6e:0c:4a:d1:80:5f:3e:42:36:fa:6e:a6:
36:43:e6:19:8a:d9:4b:26:5a:4a:cd:da:5a:c5:e2:
a7:94:4c:75:98:4e:44:47:02:e9:0a:7e:14:f0:48:
8c:45:16:a9:67:89:cc:80:1d:d7:16:9b:bf:91:9b:
db:e0:9d:19:92:76:70:51:d9:42:7b:ad:bc:ca:6c:
88:70:e4:39:30:a0:3b:e9:bb:c1:8b:7c:bd:a0:83:
2f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DF:5A:A6:02:5C:13:65:F7:54:72:D1:26:53:FA:FA:D2:5C:3E:1B
X509v3 Authority Key Identifier:
keyid:24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:48:06:45:22:f0:aa:36:bb:fa:86:6d:92:2c:41:5b:02:f9:
67:16:75:ff:15:2b:18:e7:8f:86:0b:4b:d2:0b:98:85:97:2c:
b8:c2:b0:32:0a:06:b5:2e:62:3c:1e:67:01:41:5b:bb:77:80:
99:1f:6a:41:19:90:90:55:9a:92:06:e5:5a:31:8c:73:7b:45:
b4:08:d6:04:43:e6:78:8d:a5:fa:bb:80:72:9e:e7:46:74:b8:
1c:7d:e1:b2:65:db:bf:32:70:3c:42:45:bb:91:e4:0e:24:a1:
f0:bb:10:05:36:29:ae:ec:45:e4:74:74:f6:3b:58:bb:0d:64:
bf:85:ce:ea:32:24:32:5d:81:a1:c5:9c:69:1f:f6:be:96:54:
71:a4:9c:1d:c5:c2:9c:d0:01:9e:8d:a5:23:89:b2:70:58:e1:
4d:2a:1a:5a:a2:13:19:b2:7c:27:5c:30:7b:20:2f:f4:94:af:
e1:f5:2f:25:63:8d:bf:6c:99:b9:f6:13:45:49:e9:f1:48:6c:
3f:b7:67:40:a1:86:8b:f2:a0:72:ce:7c:75:42:c0:1b:80:8e:
15:2b:a8:7f:69:cb:e8:9a:b9:b6:1f:15:90:e9:41:3c:8f:c3:
e4:13:59:2c:82:e7:ac:ce:6e:a0:08:99:e9:c8:32:6f:56:1f:
f0:c9:2e:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiT2zYsgYox43iyvqwR3IKKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YjY2MGE2MTE5ODBjNjgyNzMxMzllMzJhZmZiNzRiNDU0
YTlkMzIwHhcNMjUwODEwMTIwMTEzWhcNMjUwODExMTIwMTEzWjAzMTEwLwYDVQQD
EygzZWRmNWFhNjAyNWMxMzY1Zjc1NDcyZDEyNjUzZmFmYWQyNWMzZTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAol32iySHCHmflBrBPucNIXPs3vah
9S5C22vQuSE1XKA+ifl4BzAvEHA3/PZhsdiUgTnExWVW9CiWFymSXTEtedYheSrj
/kfQ+CxaO2ixZgLiyO2dfObAl07reb3moE7robWeoflXUPN1YEcFSzucBML5Ctha
rfPidR83a7BNH3aBSheei8sOIH+fkdrDW1lwy0Yq9BJ7YSrIIBaagDy3XHBxDdtt
0zVuDErRgF8+Qjb6bqY2Q+YZitlLJlpKzdpaxeKnlEx1mE5ERwLpCn4U8EiMRRap
Z4nMgB3XFpu/kZvb4J0ZknZwUdlCe628ymyIcOQ5MKA76bvBi3y9oIMv4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7fWqYCXBNl91Ry0SZT+vrSXD4bMB8GA1UdIwQY
MBaAFCS2YKYRmAxoJzE54yr/t0tFSp0yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkxaZ3BoR1lER2duTVRuakt2LTNTMFZLblRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNmQ0YjUtNzZiYi00MzI0LTlhODYt
NzA1MTk3NTA3YTU5LzEvSkxaZ3BoR1lER2duTVRuakt2LTNTMFZLblRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8xNmQ0YjUtNzZiYi00MzI0LTlhODYtNzA1MTk3NTA3YTU5
LzEvSkxaZ3BoR1lER2duTVRuakt2LTNTMFZLblRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAEgGRSLw
qja7+oZtkixBWwL5ZxZ1/xUrGOePhgtL0guYhZcsuMKwMgoGtS5iPB5nAUFbu3eA
mR9qQRmQkFWakgblWjGMc3tFtAjWBEPmeI2l+ruAcp7nRnS4HH3hsmXbvzJwPEJF
u5HkDiSh8LsQBTYpruxF5HR09jtYuw1kv4XO6jIkMl2BocWcaR/2vpZUcaScHcXC
nNABno2lI4mycFjhTSoaWqITGbJ8J1wweyAv9JSv4fUvJWONv2yZufYTRUnp8Uhs
P7dnQKGGi/Kgcs58dULAG4COFSuof2nL6Jq5th8VkOlBPI/D5BNZLILnrM5uoAiZ
6cgyb1Yf8MkuOw==
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:54:06 2025 by rpki-client