Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
File: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft (raw, json)
Hash identifier: aUGFd2B0XdK8d+wICnDFr1ENUVnXuubywwvvREYgQ6w=
Subject key identifier: 01:DA:70:93:38:5C:E2:7E:D7:A7:D5:1D:D3:3F:E9:94:79:AE:0E:FC
Authority key identifier: 24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12
Certificate issuer: /CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12
Certificate serial: 01987A1B90482DBCE97613A7731BB08F738C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
Manifest number: 13F6
Signing time: Tue 05 Aug 2025 12:01:23 +0000
Manifest this update: Tue 05 Aug 2025 12:01:23 +0000
Manifest next update: Wed 06 Aug 2025 12:01:23 +0000
Files and hashes: 1: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl (hash: 82DU6zn66s3dcJj9nRDl47K8wum32lQhaFr/dKy6OmE=)
2: WGqsuG2r1cPbNk_SlZ77XH2CRuc.roa (hash: LWTe3RG5x6p18VhZoks9MnTE5mxlsn7m+dciM17vR7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 12:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:1b:90:48:2d:bc:e9:76:13:a7:73:1b:b0:8f:73:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12
Validity
Not Before: Aug 5 12:01:23 2025 GMT
Not After : Aug 6 12:01:23 2025 GMT
Subject: CN=01da7093385ce27ed7a7d51dd33fe99479ae0efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:22:c0:4e:7c:d1:d1:7d:f8:2b:9f:55:e3:a5:
d2:d8:91:35:42:bc:43:f4:a1:9a:c8:b2:4d:a5:d9:
16:f9:40:68:6d:ef:bd:72:1b:97:07:0c:43:3f:78:
c8:22:46:5a:2a:0b:ca:8a:a2:3a:c0:41:28:e8:e8:
f2:c9:5a:00:05:63:e1:94:a5:a3:88:35:e9:64:53:
34:68:33:c7:eb:c5:2d:82:45:17:24:56:a0:70:e7:
06:9b:f8:2a:f1:9a:2f:b5:56:7e:cd:05:91:b4:5f:
1f:11:c8:47:20:89:e2:7d:40:96:b7:6a:dc:5c:4e:
43:e4:ee:f8:0c:aa:b2:ea:b1:f5:14:b6:2f:cc:47:
61:12:66:2f:84:69:8b:28:bb:e9:32:6f:32:ad:ae:
82:e9:c1:b1:bd:03:7e:23:2f:cb:31:1d:34:71:37:
b8:29:59:ed:00:2f:31:95:16:c9:52:99:e1:6b:5d:
74:2d:5f:f2:68:db:d6:12:8e:33:51:96:8e:7e:65:
ed:6a:2c:4c:c5:72:a7:8d:25:91:54:aa:77:af:f8:
12:b9:11:05:77:e7:81:af:ff:40:ad:15:3b:4f:ce:
c1:12:60:b9:89:bd:ad:da:d7:61:ff:a8:71:d1:03:
43:87:8d:8a:ce:d5:0f:fe:d1:c7:02:49:48:3b:f9:
b1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:DA:70:93:38:5C:E2:7E:D7:A7:D5:1D:D3:3F:E9:94:79:AE:0E:FC
X509v3 Authority Key Identifier:
keyid:24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:8c:12:5a:fe:c0:d4:d3:e2:75:88:7d:87:e1:68:03:0c:d3:
1d:73:57:dd:b0:4e:f7:49:77:b5:d1:9a:aa:75:9d:76:f6:9e:
f4:bb:34:a5:ba:dc:02:9e:e9:fe:34:09:4f:88:fa:ea:c1:41:
eb:3d:57:d0:8c:f2:2c:73:4d:3b:58:56:a5:f4:7a:31:c7:a0:
9a:0f:2a:6e:eb:11:ed:a7:44:39:74:f7:81:eb:22:92:e6:b0:
48:00:05:33:a9:af:6f:31:b6:34:7e:13:7f:d4:c9:1c:62:36:
2d:9c:cc:ef:5a:6c:00:57:65:e8:e9:c7:17:e7:11:94:ad:76:
c2:e2:db:7a:91:3e:b2:a4:e5:35:72:af:61:bb:da:09:d5:44:
bb:51:46:b0:6e:f8:eb:8f:6e:6c:e3:e5:62:41:8a:f0:e9:dd:
cb:be:eb:03:65:04:cd:96:4d:89:e7:2d:75:8c:e7:0d:af:61:
4c:df:eb:d0:ec:5c:bb:be:da:68:69:47:ec:e8:85:22:f5:9a:
3f:15:bd:44:da:3b:18:ae:89:11:d3:cd:32:83:68:15:b5:46:
61:9f:28:b3:b1:b5:ec:d4:78:f1:6c:f7:80:c2:44:32:d2:64:
94:34:90:65:08:76:66:75:8b:1c:58:32:1f:0f:2c:11:ed:ed:
2a:71:b4:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh6G5BILbzpdhOncxuwj3OMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YjBlNGYxODE4M2ZiZDlkNjk1MGVlYTQzM2ZlNWQyMTZi
ZDVmMTIwHhcNMjUwODA1MTIwMTIzWhcNMjUwODA2MTIwMTIzWjAzMTEwLwYDVQQD
EygwMWRhNzA5MzM4NWNlMjdlZDdhN2Q1MWRkMzNmZTk5NDc5YWUwZWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CLATnzR0X34K59V46XS2JE1QrxD
9KGayLJNpdkW+UBobe+9chuXBwxDP3jIIkZaKgvKiqI6wEEo6OjyyVoABWPhlKWj
iDXpZFM0aDPH68UtgkUXJFagcOcGm/gq8ZovtVZ+zQWRtF8fEchHIInifUCWt2rc
XE5D5O74DKqy6rH1FLYvzEdhEmYvhGmLKLvpMm8yra6C6cGxvQN+Iy/LMR00cTe4
KVntAC8xlRbJUpnha110LV/yaNvWEo4zUZaOfmXtaixMxXKnjSWRVKp3r/gSuREF
d+eBr/9ArRU7T87BEmC5ib2t2tdh/6hx0QNDh42KztUP/tHHAklIO/mxgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAHacJM4XOJ+16fVHdM/6ZR5rg78MB8GA1UdIwQY
MBaAFCSw5PGBg/vZ1pUO6kM/5dIWvV8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkxEazhZR0QtOW5XbFE3cVF6X2wwaGE5WHhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy84NDliY2YtZGE1Zi00Yzk3LTk3YjEt
NWJhNTk1NGRmYzM3LzEvSkxEazhZR0QtOW5XbFE3cVF6X2wwaGE5WHhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy84NDliY2YtZGE1Zi00Yzk3LTk3YjEtNWJhNTk1NGRmYzM3
LzEvSkxEazhZR0QtOW5XbFE3cVF6X2wwaGE5WHhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ4wSWv7A
1NPidYh9h+FoAwzTHXNX3bBO90l3tdGaqnWddvae9Ls0pbrcAp7p/jQJT4j66sFB
6z1X0IzyLHNNO1hWpfR6Mcegmg8qbusR7adEOXT3gesikuawSAAFM6mvbzG2NH4T
f9TJHGI2LZzM71psAFdl6OnHF+cRlK12wuLbepE+sqTlNXKvYbvaCdVEu1FGsG74
649ubOPlYkGK8Ondy77rA2UEzZZNiectdYznDa9hTN/r0Oxcu77aaGlH7OiFIvWa
PxW9RNo7GK6JEdPNMoNoFbVGYZ8os7G17NR48Wz3gMJEMtJklDSQZQh2ZnWLHFgy
Hw8sEe3tKnG0xw==
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:21:18 2025 by rpki-client