Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
File: jsDMCMmOBfTh-wRACNhSoqTaAPA.mft (raw, json)
Hash identifier: 0IR/qWRT2xUI0dWLLBhPVJ4n2a+rABXidP8puBnjkfQ=
Subject key identifier: A5:47:98:28:21:AC:40:BA:4C:52:E3:C5:18:35:EF:AC:EB:87:49:00
Authority key identifier: 8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
Certificate issuer: /CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Certificate serial: 019873E22A7D08BFF2534AFDF641E0F9B4DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
Manifest number: 0912
Signing time: Mon 04 Aug 2025 07:00:58 +0000
Manifest this update: Mon 04 Aug 2025 07:00:58 +0000
Manifest next update: Tue 05 Aug 2025 07:00:58 +0000
Files and hashes: 1: jsDMCMmOBfTh-wRACNhSoqTaAPA.crl (hash: +jOwArf/DZ9SIQClBuo5YhV+5hL0htcNarlh9x/cCZU=)
2: nJjrSgE7Va7EKxllkFfukC6fvJY.roa (hash: V3JIEPfJn7JzMttrERHm2nxfQ8d/LYnbQ0isiQmawx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:2a:7d:08:bf:f2:53:4a:fd:f6:41:e0:f9:b4:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Validity
Not Before: Aug 4 07:00:58 2025 GMT
Not After : Aug 5 07:00:58 2025 GMT
Subject: CN=a547982821ac40ba4c52e3c51835efaceb874900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:85:a1:04:3b:5a:5f:5c:14:d1:80:12:7f:c5:
3b:6e:c6:fa:f1:4e:59:a0:42:f2:8e:d3:f8:74:0c:
ec:39:90:07:ea:89:17:a5:3a:94:7a:d2:bc:6d:a8:
88:4f:0a:16:84:52:5b:4a:0f:b1:10:c5:76:15:40:
73:a7:19:93:c9:e9:df:fe:8c:54:90:09:27:5d:41:
cf:14:d2:2f:a3:6e:c7:06:09:bc:3b:a0:3b:a2:e3:
24:f6:b5:1f:6a:23:5e:fb:6e:fd:0e:d9:74:71:bd:
37:d1:95:d3:e9:54:dd:c9:b2:78:0d:98:a5:c9:b6:
9d:6f:e5:2a:8d:bd:19:01:eb:35:11:6c:1a:32:17:
39:5f:8a:62:a2:4b:18:73:4b:0d:6b:66:e9:33:02:
37:96:22:ca:de:08:ad:6f:ff:81:bb:11:e2:65:c1:
73:32:4a:e1:37:a1:7b:df:85:9a:71:ac:1a:3d:b3:
8a:03:15:98:f0:be:cc:b6:16:a5:3f:e5:aa:b7:41:
26:8e:fe:48:a4:d6:24:53:16:4e:b4:fb:91:57:6d:
7e:c2:da:15:2a:9c:11:42:f3:a8:59:a7:a0:8f:ca:
5b:39:11:f5:cc:93:61:9f:a9:9d:a8:5a:67:31:69:
4b:ed:a9:93:a5:92:63:7c:c6:3a:24:79:38:9e:18:
0d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:47:98:28:21:AC:40:BA:4C:52:E3:C5:18:35:EF:AC:EB:87:49:00
X509v3 Authority Key Identifier:
keyid:8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:49:1b:c8:76:de:b4:30:1a:3d:eb:dd:c9:81:12:0d:df:7a:
51:4e:46:81:32:03:0a:3c:40:14:04:89:67:4f:7b:8e:6d:29:
6c:29:5f:91:56:9f:8e:63:f3:41:41:6e:09:c4:98:5a:68:cb:
ee:98:86:76:1d:43:63:71:1e:19:1d:02:c8:09:9b:4f:87:df:
58:9e:6f:10:9f:09:3b:fa:27:fd:6e:2d:c7:1e:c1:6f:cc:8e:
c7:b5:3d:9c:50:ce:d7:31:da:fd:5c:b1:fc:bc:4e:17:86:fb:
28:25:27:2a:d2:cb:45:67:b5:f5:e5:93:25:ba:e9:58:db:d2:
8f:94:68:84:75:3c:68:43:57:67:0f:8c:88:c1:9e:9d:ca:09:
03:cb:11:6b:7e:66:9a:73:41:4c:be:3e:d5:67:75:bd:96:7a:
99:83:21:f7:aa:09:7e:a8:35:3a:2b:0c:57:a2:f5:53:87:19:
70:8c:83:17:70:2f:f6:94:83:21:eb:28:74:c3:ed:06:7a:65:
d9:dc:59:b7:db:40:c4:f6:4b:5b:12:ff:a6:73:b7:98:ba:9f:
f6:77:50:c3:80:6b:5d:de:c5:01:17:45:82:22:35:6f:08:06:
df:23:1d:3c:91:96:c7:af:f5:49:99:fc:52:ef:19:ff:f6:b8:
56:9b:78:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4ip9CL/yU0r99kHg+bTfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYzBjYzA4Yzk4ZTA1ZjRlMWZiMDQ0MDA4ZDg1MmEyYTRk
YTAwZjAwHhcNMjUwODA0MDcwMDU4WhcNMjUwODA1MDcwMDU4WjAzMTEwLwYDVQQD
EyhhNTQ3OTgyODIxYWM0MGJhNGM1MmUzYzUxODM1ZWZhY2ViODc0OTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooWhBDtaX1wU0YASf8U7bsb68U5Z
oELyjtP4dAzsOZAH6okXpTqUetK8baiITwoWhFJbSg+xEMV2FUBzpxmTyenf/oxU
kAknXUHPFNIvo27HBgm8O6A7ouMk9rUfaiNe+279Dtl0cb030ZXT6VTdybJ4DZil
ybadb+Uqjb0ZAes1EWwaMhc5X4pioksYc0sNa2bpMwI3liLK3gitb/+BuxHiZcFz
MkrhN6F734WacawaPbOKAxWY8L7MthalP+Wqt0Emjv5IpNYkUxZOtPuRV21+wtoV
KpwRQvOoWaegj8pbORH1zJNhn6mdqFpnMWlL7amTpZJjfMY6JHk4nhgN1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKVHmCghrEC6TFLjxRg176zrh0kAMB8GA1UdIwQY
MBaAFI7AzAjJjgX04fsEQAjYUqKk2gDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanNETUNNbU9CZlRoLXdSQUNOaFNvcVRhQVBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9kMGJlMGItYmZhMS00NmRhLWJjMTAt
MzU3NjlmMDYyOTlhLzEvanNETUNNbU9CZlRoLXdSQUNOaFNvcVRhQVBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9kMGJlMGItYmZhMS00NmRhLWJjMTAtMzU3NjlmMDYyOTlh
LzEvanNETUNNbU9CZlRoLXdSQUNOaFNvcVRhQVBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABUkbyHbe
tDAaPevdyYESDd96UU5GgTIDCjxAFASJZ097jm0pbClfkVafjmPzQUFuCcSYWmjL
7piGdh1DY3EeGR0CyAmbT4ffWJ5vEJ8JO/on/W4txx7Bb8yOx7U9nFDO1zHa/Vyx
/LxOF4b7KCUnKtLLRWe19eWTJbrpWNvSj5RohHU8aENXZw+MiMGencoJA8sRa35m
mnNBTL4+1Wd1vZZ6mYMh96oJfqg1OisMV6L1U4cZcIyDF3Av9pSDIesodMPtBnpl
2dxZt9tAxPZLWxL/pnO3mLqf9ndQw4BrXd7FARdFgiI1bwgG3yMdPJGWx6/1SZn8
Uu8Z//a4Vpt4vw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:56 2025 by rpki-client