Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
File: jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft (raw, json)
Hash identifier: ZbQyzY0SlkOI9eG8z8Gn31Csvv4EXnP1MrFFk1vQqVs=
Subject key identifier: 6C:6A:71:9F:13:32:B9:7E:27:36:AF:3F:2A:5D:CF:93:22:CA:12:87
Authority key identifier: 8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76
Certificate issuer: /CN=8c54a846632e83340e114d0d35591b3d42188b76
Certificate serial: 019893A448576E01E6BE3FB33907D0B30658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
Manifest number: 0E44
Signing time: Sun 10 Aug 2025 11:01:13 +0000
Manifest this update: Sun 10 Aug 2025 11:01:13 +0000
Manifest next update: Mon 11 Aug 2025 11:01:13 +0000
Files and hashes: 1: 0NQ-WA07ivHNbBCHB8RlQLxAoLU.roa (hash: yrHnQMXQ6Qe+mkwHNhl6sEUBZtgafrbZ/F8WnR+E6Bs=)
2: jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl (hash: +AL+Sq/0P+75COsbsExb6emSsBetcq2J9ydrkrEaJrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a4:48:57:6e:01:e6:be:3f:b3:39:07:d0:b3:06:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c54a846632e83340e114d0d35591b3d42188b76
Validity
Not Before: Aug 10 11:01:13 2025 GMT
Not After : Aug 11 11:01:13 2025 GMT
Subject: CN=6c6a719f1332b97e2736af3f2a5dcf9322ca1287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:20:6a:11:99:c2:5c:5a:af:46:89:5f:58:cb:
1d:3a:b0:35:64:e3:f9:7c:31:75:00:1f:b9:22:dc:
fd:df:0a:23:4b:b4:13:18:4d:62:87:72:fb:54:fa:
fc:7d:19:a6:a7:20:4a:db:aa:aa:7d:0e:16:0f:1e:
4c:de:46:c3:df:3c:74:96:49:9c:ff:10:03:ac:81:
0e:57:e1:c6:58:e3:e7:cb:28:8b:e6:d1:97:be:75:
98:d5:7b:b5:3c:2f:c8:b6:5e:46:8d:e0:a5:de:ad:
12:08:b0:57:8b:72:f2:d1:d9:96:a1:2f:13:f1:d8:
4e:a2:54:90:de:18:43:cf:c7:41:c7:23:ee:dc:c6:
b6:b5:00:fc:4e:49:a8:92:bd:04:73:f1:af:07:69:
3d:78:d9:75:b7:a5:f5:90:f3:8b:7a:f1:b2:43:5e:
91:c3:df:c0:d3:b2:29:39:d7:b2:32:1e:e2:b9:31:
59:8a:14:09:9f:1b:72:e2:70:ac:5c:d5:23:73:52:
c4:e8:0b:1a:02:4c:1e:c9:0f:1a:2d:91:3e:fc:4b:
af:d0:54:6d:7d:e3:e9:32:73:c9:ec:a2:5b:fb:41:
47:e7:6e:d6:8a:9e:e0:b8:1b:5b:07:c7:d7:b9:06:
9a:77:3b:2e:ac:56:dd:12:3c:41:8c:3e:b2:0e:dd:
c3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6A:71:9F:13:32:B9:7E:27:36:AF:3F:2A:5D:CF:93:22:CA:12:87
X509v3 Authority Key Identifier:
keyid:8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:8f:74:ce:df:ca:be:a7:99:e0:6f:5f:11:e3:8c:c3:73:bf:
38:a5:04:05:7f:1b:fb:0c:49:6a:a0:0c:62:5e:03:8e:13:54:
45:46:4a:62:5c:ef:9c:58:80:30:99:22:60:80:8e:1f:cf:bb:
76:17:6a:82:c3:14:c8:f3:09:87:a8:ed:04:3e:cf:02:6a:38:
9b:5e:3f:7a:1c:a9:09:d8:ca:a5:e5:77:21:96:09:d8:82:0c:
22:98:dd:df:dd:72:5d:82:23:bc:05:89:20:2f:2d:f4:03:fb:
6c:43:cb:76:4d:95:95:7c:3d:32:c0:e1:3b:6e:fe:12:29:6f:
b6:8d:62:c7:c8:51:be:f6:0b:a0:92:5b:dd:5e:13:c7:1d:ce:
87:a8:b7:d6:b5:e0:32:ee:18:ce:d2:51:f5:84:c8:08:f8:f6:
83:a4:32:64:ad:ee:a7:49:c1:08:27:a1:dc:ec:ac:cc:d3:b0:
36:af:3b:5f:f6:c3:9f:4a:11:75:da:7d:c8:fa:0b:69:d2:ca:
20:06:14:ed:12:e4:b8:94:8f:a8:01:38:0b:8a:48:3e:fb:2d:
fd:63:f4:16:83:04:27:5b:5f:1d:2c:5f:88:63:bb:22:5d:fa:
e5:f7:82:d0:07:43:e1:ac:0f:b9:eb:04:52:d2:d6:86:b3:45:
b8:ed:00:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiTpEhXbgHmvj+zOQfQswZYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjNTRhODQ2NjMyZTgzMzQwZTExNGQwZDM1NTkxYjNkNDIx
ODhiNzYwHhcNMjUwODEwMTEwMTEzWhcNMjUwODExMTEwMTEzWjAzMTEwLwYDVQQD
Eyg2YzZhNzE5ZjEzMzJiOTdlMjczNmFmM2YyYTVkY2Y5MzIyY2ExMjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriBqEZnCXFqvRolfWMsdOrA1ZOP5
fDF1AB+5Itz93wojS7QTGE1ih3L7VPr8fRmmpyBK26qqfQ4WDx5M3kbD3zx0lkmc
/xADrIEOV+HGWOPnyyiL5tGXvnWY1Xu1PC/Itl5GjeCl3q0SCLBXi3Ly0dmWoS8T
8dhOolSQ3hhDz8dBxyPu3Ma2tQD8Tkmokr0Ec/GvB2k9eNl1t6X1kPOLevGyQ16R
w9/A07IpOdeyMh7iuTFZihQJnxty4nCsXNUjc1LE6AsaAkweyQ8aLZE+/Euv0FRt
fePpMnPJ7KJb+0FH527Wip7guBtbB8fXuQaadzsurFbdEjxBjD6yDt3DKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxqcZ8TMrl+JzavPypdz5MiyhKHMB8GA1UdIwQY
MBaAFIxUqEZjLoM0DhFNDTVZGz1CGIt2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakZTb1JtTXVnelFPRVUwTk5Wa2JQVUlZaTNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC84MmE2NjEtNTU4Ny00MDgzLTgxM2Mt
MzQ1OWJlMjY2NzMxLzEvakZTb1JtTXVnelFPRVUwTk5Wa2JQVUlZaTNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC84MmE2NjEtNTU4Ny00MDgzLTgxM2MtMzQ1OWJlMjY2NzMx
LzEvakZTb1JtTXVnelFPRVUwTk5Wa2JQVUlZaTNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARI90zt/K
vqeZ4G9fEeOMw3O/OKUEBX8b+wxJaqAMYl4DjhNURUZKYlzvnFiAMJkiYICOH8+7
dhdqgsMUyPMJh6jtBD7PAmo4m14/ehypCdjKpeV3IZYJ2IIMIpjd391yXYIjvAWJ
IC8t9AP7bEPLdk2VlXw9MsDhO27+Eilvto1ix8hRvvYLoJJb3V4Txx3Oh6i31rXg
Mu4YztJR9YTICPj2g6QyZK3up0nBCCeh3OyszNOwNq87X/bDn0oRddp9yPoLadLK
IAYU7RLkuJSPqAE4C4pIPvst/WP0FoMEJ1tfHSxfiGO7Il365feC0AdD4awPuesE
UtLWhrNFuO0AbQ==
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:18:02 2025 by rpki-client