
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
File: jhF58KNc8HwWKWcmYoZsoAH3W9M.mft (raw, json)
Hash identifier: ip6enI+VQolgkxs93/RjKlC08f9JiBXESYajg3QaSOM=
Subject key identifier: 9E:3A:92:89:EF:A8:47:3B:6F:2B:44:DB:D8:FA:6F:FE:49:06:3A:E8
Authority key identifier: 8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3
Certificate issuer: /CN=8e1179f0a35cf07c1629672662866ca001f75bd3
Certificate serial: 01987CAE238C64A2218A93EC899F39AF5F70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
Manifest number: 0732
Signing time: Wed 06 Aug 2025 00:00:43 +0000
Manifest this update: Wed 06 Aug 2025 00:00:43 +0000
Manifest next update: Thu 07 Aug 2025 00:00:43 +0000
Files and hashes: 1: EmWFQT9EIlKM8K10K5cWz3oRk8c.roa (hash: mVuZgTV0YIvEIlEbhmtrwLHhCh+ETHzlqM+RSaYL3ls=)
2: jhF58KNc8HwWKWcmYoZsoAH3W9M.crl (hash: szojz8DI3zYVTFSZSQWxDgPgcDz3f3q0zl1NG6NHHas=)
3: vOuw-thqqsBDOxSUXEaJasEA7qM.roa (hash: 5FoG4V28mx1fz8vugdFd18SYEUDw3t0Z7vgkJvX8GgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:23:8c:64:a2:21:8a:93:ec:89:9f:39:af:5f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1179f0a35cf07c1629672662866ca001f75bd3
Validity
Not Before: Aug 6 00:00:43 2025 GMT
Not After : Aug 7 00:00:43 2025 GMT
Subject: CN=9e3a9289efa8473b6f2b44dbd8fa6ffe49063ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0a:ac:3a:15:ea:82:66:48:ce:1f:f6:70:96:
04:37:5c:f0:03:b7:e3:d7:7c:c1:4b:a7:c0:07:90:
ee:ef:6d:c1:86:62:58:b9:8f:ea:24:af:8b:a9:b7:
75:9e:f9:e7:49:4a:35:df:9d:46:8d:26:a9:00:34:
cf:01:1d:43:10:6c:3d:76:54:49:b8:c4:64:4a:bd:
cf:3f:f3:1f:16:ad:f5:40:a2:b0:8c:48:42:2e:c0:
3e:11:cc:4c:e8:96:61:55:23:e9:03:31:2b:33:b5:
ea:c2:8d:62:9f:f3:86:56:06:cb:02:7f:aa:5d:42:
7a:26:d8:db:17:54:7d:27:bc:46:f5:92:fe:d1:bc:
29:63:4b:4e:6d:83:4b:e6:c8:ec:f7:39:c3:ee:85:
44:91:58:10:c3:a1:7b:55:62:6a:f5:1b:b7:36:f3:
9a:bf:d5:3a:a4:f7:d7:2a:b3:a7:79:63:00:b3:3f:
0e:8b:66:84:d4:2c:c8:f0:1c:c5:75:76:ca:78:8c:
68:76:85:30:d3:85:a6:08:aa:74:b7:12:f4:3d:4f:
ea:7d:dd:c2:7b:77:58:65:72:c3:ff:e5:3b:b2:2f:
12:79:e9:7c:fa:ef:52:4a:d0:d6:52:44:fd:f4:a0:
cd:48:74:1b:8f:65:83:9d:1e:a8:37:cb:57:8b:96:
13:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3A:92:89:EF:A8:47:3B:6F:2B:44:DB:D8:FA:6F:FE:49:06:3A:E8
X509v3 Authority Key Identifier:
keyid:8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e3:de:af:80:82:d7:98:f0:0e:e3:84:c0:8a:f3:82:6a:10:
86:12:b6:4d:c8:eb:cb:fe:b3:6a:a6:98:e6:2d:6a:cc:d0:2b:
b3:51:d2:89:5b:96:12:85:23:8f:e7:f0:f1:d1:32:f0:7b:14:
28:ca:7e:33:b7:53:4b:e5:31:91:46:dc:98:fe:04:a4:e5:7b:
c2:08:2f:00:67:c0:ea:a5:cb:c5:0a:a8:bc:ad:8b:4c:fc:a2:
b1:89:17:cc:e7:2f:ee:bc:d2:7c:0f:e9:9e:b2:b7:fc:93:cd:
1b:3d:c9:6c:4a:fd:c8:3f:d6:4c:f1:4a:d7:93:f3:f0:30:f7:
6a:6d:f4:01:a4:92:fe:e8:44:6e:c0:64:ab:f2:5f:7c:e5:8a:
10:fc:81:70:24:85:dc:9d:89:6a:fa:73:54:c2:c2:93:3f:f8:
a3:3e:33:d4:fc:e3:e2:66:f1:d2:ac:41:5d:a7:c6:7b:d3:de:
55:97:83:f6:69:5d:3a:ca:eb:d3:46:f0:d3:a3:75:9f:c2:8b:
5e:c7:ab:77:67:e6:a3:4f:60:5e:2b:33:78:bc:4c:a8:1d:93:
28:a9:0a:7f:a7:46:de:66:7c:d1:41:3d:18:47:72:84:ae:15:
66:b1:4b:43:46:29:91:a0:43:3a:e8:b9:ab:44:79:19:c4:6b:
34:76:01:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8riOMZKIhipPsiZ85r19wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMTE3OWYwYTM1Y2YwN2MxNjI5NjcyNjYyODY2Y2EwMDFm
NzViZDMwHhcNMjUwODA2MDAwMDQzWhcNMjUwODA3MDAwMDQzWjAzMTEwLwYDVQQD
Eyg5ZTNhOTI4OWVmYTg0NzNiNmYyYjQ0ZGJkOGZhNmZmZTQ5MDYzYWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6wqsOhXqgmZIzh/2cJYEN1zwA7fj
13zBS6fAB5Du723BhmJYuY/qJK+Lqbd1nvnnSUo1351GjSapADTPAR1DEGw9dlRJ
uMRkSr3PP/MfFq31QKKwjEhCLsA+EcxM6JZhVSPpAzErM7Xqwo1in/OGVgbLAn+q
XUJ6JtjbF1R9J7xG9ZL+0bwpY0tObYNL5sjs9znD7oVEkVgQw6F7VWJq9Ru3NvOa
v9U6pPfXKrOneWMAsz8Oi2aE1CzI8BzFdXbKeIxodoUw04WmCKp0txL0PU/qfd3C
e3dYZXLD/+U7si8Seel8+u9SStDWUkT99KDNSHQbj2WDnR6oN8tXi5YToQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ46konvqEc7bytE29j6b/5JBjroMB8GA1UdIwQY
MBaAFI4RefCjXPB8FilnJmKGbKAB91vTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamhGNThLTmM4SHdXS1djbVlvWnNvQUgzVzlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9lZThmOTAtZWYyYi00M2MwLWIwYzAt
NGNiYzY3MjE5YjRhLzEvamhGNThLTmM4SHdXS1djbVlvWnNvQUgzVzlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9lZThmOTAtZWYyYi00M2MwLWIwYzAtNGNiYzY3MjE5YjRh
LzEvamhGNThLTmM4SHdXS1djbVlvWnNvQUgzVzlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW+Per4CC
15jwDuOEwIrzgmoQhhK2Tcjry/6zaqaY5i1qzNArs1HSiVuWEoUjj+fw8dEy8HsU
KMp+M7dTS+UxkUbcmP4EpOV7wggvAGfA6qXLxQqovK2LTPyisYkXzOcv7rzSfA/p
nrK3/JPNGz3JbEr9yD/WTPFK15Pz8DD3am30AaSS/uhEbsBkq/JffOWKEPyBcCSF
3J2JavpzVMLCkz/4oz4z1Pzj4mbx0qxBXafGe9PeVZeD9mldOsrr00bw06N1n8KL
Xserd2fmo09gXiszeLxMqB2TKKkKf6dG3mZ80UE9GEdyhK4VZrFLQ0YpkaBDOui5
q0R5GcRrNHYB0A==
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:30:16 2025 by rpki-client