Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft
File: jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft (raw, json)
Hash identifier: LTtNyO3hsd/m2xr/2W+O7K+DiHIvHsDYJMfl/kqxwBI=
Subject key identifier: D6:3F:9E:3A:35:41:BF:26:5F:AB:99:D8:4F:A9:A9:20:FA:46:BA:C2
Authority key identifier: 8D:50:B3:A9:A0:50:39:05:59:6C:77:F5:80:2B:EF:9F:C7:3D:64:7D
Certificate issuer: /CN=8d50b3a9a0503905596c77f5802bef9fc73d647d
Certificate serial: 01987418D2C9F598946BF7855C391787F862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft
Manifest number: 0291
Signing time: Mon 04 Aug 2025 08:00:40 +0000
Manifest this update: Mon 04 Aug 2025 08:00:40 +0000
Manifest next update: Tue 05 Aug 2025 08:00:40 +0000
Files and hashes: 1: a8IXKpHV3NWa7LICJ758JvcRIvY.roa (hash: X2zHQ2bSxMYP23moGooOgAvqdrG84QharuHsT6bVARw=)
2: jVCzqaBQOQVZbHf1gCvvn8c9ZH0.crl (hash: KJA2P0MlNwV2E+AeLH9AuE47oeD747MHno7fOmWZ74I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:d2:c9:f5:98:94:6b:f7:85:5c:39:17:87:f8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d50b3a9a0503905596c77f5802bef9fc73d647d
Validity
Not Before: Aug 4 08:00:40 2025 GMT
Not After : Aug 5 08:00:40 2025 GMT
Subject: CN=d63f9e3a3541bf265fab99d84fa9a920fa46bac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:45:db:82:77:b5:84:82:5b:fd:c9:a7:9b:bd:
c5:3a:e9:91:be:ed:04:c8:fc:35:e6:d6:b8:dc:5a:
ec:b7:39:ab:2e:fe:a1:fb:8a:42:f5:53:3a:a1:67:
c2:0e:4f:cf:d8:4c:44:25:90:56:30:bb:79:9e:2c:
8d:4b:9e:81:fc:1a:e4:c8:be:ec:ab:18:63:ed:fd:
6b:74:54:36:da:89:de:ee:ee:e2:fe:ad:14:0d:ae:
d1:8a:5f:23:dc:28:cb:20:f1:0e:31:0f:d8:f2:8f:
af:4b:a4:7d:9a:82:94:80:f1:7e:46:6c:58:69:cd:
38:f2:83:11:c8:e5:c6:08:fc:3d:24:20:90:58:15:
b3:5c:ec:c8:5b:3c:10:99:4f:69:4d:cc:cc:a5:21:
86:70:e5:b9:27:6e:c9:d1:d3:b6:4a:66:60:c8:fb:
01:2c:6e:27:9a:2e:2f:df:93:f0:69:f2:7a:a5:a3:
c2:eb:d2:8e:17:c8:9c:41:05:dd:fa:00:f5:21:d2:
e9:48:9c:86:b3:b4:24:70:13:21:dd:fd:8c:ff:1e:
ae:7d:d1:58:62:07:96:92:f2:cc:03:a6:e5:43:64:
fd:1b:9f:4f:2f:32:a2:c8:cc:9d:f6:10:90:9b:a4:
42:5b:77:ab:35:0e:f0:ac:76:c6:69:bd:96:7a:ad:
06:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3F:9E:3A:35:41:BF:26:5F:AB:99:D8:4F:A9:A9:20:FA:46:BA:C2
X509v3 Authority Key Identifier:
keyid:8D:50:B3:A9:A0:50:39:05:59:6C:77:F5:80:2B:EF:9F:C7:3D:64:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:a2:2e:d2:88:75:4c:cc:b6:9c:ca:74:68:b2:21:53:06:82:
37:99:e7:cd:94:d7:21:95:c5:76:37:90:60:c2:1b:4a:27:6f:
97:63:86:1d:db:ed:9d:a0:46:33:e6:19:a2:6e:91:f1:b3:8d:
72:c1:6d:e7:65:6e:64:49:ed:82:82:60:dd:47:b9:0a:2c:08:
18:d6:6a:ae:ac:ca:53:72:c8:8c:18:89:2d:7b:37:5e:45:97:
9b:d5:48:88:95:3b:cd:c6:6c:3d:f6:c1:0c:24:ca:89:ea:14:
09:5d:63:20:7c:93:6d:40:7d:ff:96:79:26:0b:34:98:2e:59:
fd:ec:e6:1d:34:42:8e:c4:11:ee:39:ab:46:fd:39:95:68:53:
95:c1:f6:82:2e:dd:d0:24:ca:1c:3c:09:fa:dd:45:d1:e9:fd:
40:54:8d:fd:35:af:e3:85:6d:c3:44:3f:b5:e3:ac:0d:92:37:
49:ea:ac:07:3e:a5:ba:dc:6a:11:74:f1:41:af:0e:0c:ed:7b:
9c:21:9d:d9:15:c2:71:ae:32:6f:9a:c4:7f:b9:11:48:e5:05:
89:7d:3b:86:3c:77:a0:f0:5e:7a:3c:62:8f:22:12:28:a9:14:
b0:87:8d:2d:00:1f:68:7d:a5:78:07:9d:a4:58:02:00:83:e6:
f6:b5:56:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0GNLJ9ZiUa/eFXDkXh/hiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNTBiM2E5YTA1MDM5MDU1OTZjNzdmNTgwMmJlZjlmYzcz
ZDY0N2QwHhcNMjUwODA0MDgwMDQwWhcNMjUwODA1MDgwMDQwWjAzMTEwLwYDVQQD
EyhkNjNmOWUzYTM1NDFiZjI2NWZhYjk5ZDg0ZmE5YTkyMGZhNDZiYWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUXbgne1hIJb/cmnm73FOumRvu0E
yPw15ta43FrstzmrLv6h+4pC9VM6oWfCDk/P2ExEJZBWMLt5niyNS56B/BrkyL7s
qxhj7f1rdFQ22one7u7i/q0UDa7Ril8j3CjLIPEOMQ/Y8o+vS6R9moKUgPF+RmxY
ac048oMRyOXGCPw9JCCQWBWzXOzIWzwQmU9pTczMpSGGcOW5J27J0dO2SmZgyPsB
LG4nmi4v35PwafJ6paPC69KOF8icQQXd+gD1IdLpSJyGs7QkcBMh3f2M/x6ufdFY
YgeWkvLMA6blQ2T9G59PLzKiyMyd9hCQm6RCW3erNQ7wrHbGab2Weq0GDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNY/njo1Qb8mX6uZ2E+pqSD6RrrCMB8GA1UdIwQY
MBaAFI1Qs6mgUDkFWWx39YAr75/HPWR9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalZDenFhQlFPUVZaYkhmMWdDdnZuOGM5WkgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82OGQxNDMtMTIzNy00OTEyLWE4OTIt
Y2VmMDFkODc3ZWJlLzEvalZDenFhQlFPUVZaYkhmMWdDdnZuOGM5WkgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82OGQxNDMtMTIzNy00OTEyLWE4OTItY2VmMDFkODc3ZWJl
LzEvalZDenFhQlFPUVZaYkhmMWdDdnZuOGM5WkgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJaIu0oh1
TMy2nMp0aLIhUwaCN5nnzZTXIZXFdjeQYMIbSidvl2OGHdvtnaBGM+YZom6R8bON
csFt52VuZEntgoJg3Ue5CiwIGNZqrqzKU3LIjBiJLXs3XkWXm9VIiJU7zcZsPfbB
DCTKieoUCV1jIHyTbUB9/5Z5Jgs0mC5Z/ezmHTRCjsQR7jmrRv05lWhTlcH2gi7d
0CTKHDwJ+t1F0en9QFSN/TWv44Vtw0Q/teOsDZI3SeqsBz6lutxqEXTxQa8ODO17
nCGd2RXCca4yb5rEf7kRSOUFiX07hjx3oPBeejxijyISKKkUsIeNLQAfaH2leAed
pFgCAIPm9rVWUQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:03 2025 by rpki-client