Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
File: JEXvDPLil0idGXNw-IXVn4npWqs.mft (raw, json)
Hash identifier: 8zjafupQ0In6spl6HFp1JX27ualyv8uouVY9LjYyVEo=
Subject key identifier: 15:0F:AF:60:5D:AA:53:8E:7B:64:2A:2D:EA:28:D0:76:F8:B8:5B:BE
Authority key identifier: 24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB
Certificate issuer: /CN=2445ef0cf2e297489d197370f885d59f89e95aab
Certificate serial: 01987306918F3644E848C864CF0D7AD8F277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
Manifest number: 12ED
Signing time: Mon 04 Aug 2025 03:01:06 +0000
Manifest this update: Mon 04 Aug 2025 03:01:06 +0000
Manifest next update: Tue 05 Aug 2025 03:01:06 +0000
Files and hashes: 1: 7BGirnEkwzmDaMHYb7_OyeObZ-o.roa (hash: Mqe4eHaFftNeUPq4ztkhypVdBvRsFekv3LwUY3g3YP4=)
2: JEXvDPLil0idGXNw-IXVn4npWqs.crl (hash: 0PNxmL/dAP7M3/Srp1zUeSgSOdVHTZWBsT/ETKHVo9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:91:8f:36:44:e8:48:c8:64:cf:0d:7a:d8:f2:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2445ef0cf2e297489d197370f885d59f89e95aab
Validity
Not Before: Aug 4 03:01:06 2025 GMT
Not After : Aug 5 03:01:06 2025 GMT
Subject: CN=150faf605daa538e7b642a2dea28d076f8b85bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d1:f2:8f:60:14:1c:34:e3:58:d6:2a:4d:35:
0f:63:66:4d:33:9e:b0:63:d5:79:58:02:2a:8a:02:
e6:ad:a2:0d:4c:eb:21:ca:bd:27:21:96:6f:f8:f1:
76:cb:17:c2:d5:b3:4d:61:32:f1:59:0d:ea:8c:f9:
ba:07:00:43:7e:57:18:f1:53:56:c1:15:cc:76:59:
32:a1:86:45:7b:59:ea:43:f1:52:27:da:4e:b6:b1:
12:6b:5b:8d:ed:23:a0:21:63:16:50:dc:fe:d4:a2:
2a:70:5d:d2:40:df:d5:22:c0:26:a4:3a:d7:d5:a8:
a4:f6:77:84:f4:02:6c:a2:d8:10:4a:42:87:8f:b9:
ec:23:ce:bc:b9:0f:a9:68:40:bc:17:38:1f:aa:83:
0e:95:1d:e9:cb:fd:35:17:95:cf:d1:24:62:46:be:
3d:8e:0e:4f:cc:17:f3:b4:5e:a9:75:91:1e:aa:1e:
ea:db:33:29:06:44:3e:be:bf:28:af:bf:21:15:26:
e7:f5:b7:7f:37:a1:9a:fc:1d:89:00:de:45:28:b1:
f9:a0:a9:00:b2:3f:49:c5:53:fe:90:c4:32:9f:58:
e3:80:ad:b7:e0:86:12:66:60:c5:67:a4:61:c5:4f:
0a:2b:3b:72:97:ab:39:fb:63:1f:c3:34:2c:5f:71:
82:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:0F:AF:60:5D:AA:53:8E:7B:64:2A:2D:EA:28:D0:76:F8:B8:5B:BE
X509v3 Authority Key Identifier:
keyid:24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:5d:ca:bd:aa:77:41:f5:15:85:49:75:33:6b:c9:38:33:a8:
a0:c3:03:db:d9:5d:af:a7:fb:66:77:a9:26:e4:6d:84:7c:5e:
a3:01:be:5a:93:a0:18:0a:ea:85:eb:43:69:69:ab:39:8f:f7:
70:e9:42:66:ec:8d:66:f1:bc:f7:c4:3d:99:64:46:0f:df:e7:
ef:d0:54:0e:b8:03:5b:0d:8a:49:af:d1:6c:08:46:43:c3:9c:
c9:ac:c1:46:98:56:17:66:d5:47:05:c5:61:cb:82:ad:a2:ee:
af:91:6c:07:b7:40:93:0c:ef:f3:8d:8c:28:c3:08:e4:24:e5:
09:9d:dc:d5:8e:d0:f6:49:ed:21:47:4f:bf:e3:06:6e:22:6d:
e7:24:96:62:81:1f:91:30:80:5d:29:53:da:f8:19:c2:60:55:
d5:96:03:2b:aa:0d:ba:b1:60:1b:51:eb:3a:b1:52:e8:07:7d:
a4:ac:c7:f1:ac:a3:37:1c:5f:97:84:e1:89:1a:27:a2:24:a9:
53:af:65:9e:3f:2b:23:4a:ff:95:1e:36:5d:85:ad:73:0f:09:
99:24:39:94:95:11:7f:f4:ab:fc:f0:46:1d:70:15:57:cb:7e:
0a:4b:45:48:42:da:b7:6a:eb:5f:80:2c:a7:25:17:4d:7d:e1:
32:bc:34:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzBpGPNkToSMhkzw162PJ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NDVlZjBjZjJlMjk3NDg5ZDE5NzM3MGY4ODVkNTlmODll
OTVhYWIwHhcNMjUwODA0MDMwMTA2WhcNMjUwODA1MDMwMTA2WjAzMTEwLwYDVQQD
EygxNTBmYWY2MDVkYWE1MzhlN2I2NDJhMmRlYTI4ZDA3NmY4Yjg1YmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdHyj2AUHDTjWNYqTTUPY2ZNM56w
Y9V5WAIqigLmraINTOshyr0nIZZv+PF2yxfC1bNNYTLxWQ3qjPm6BwBDflcY8VNW
wRXMdlkyoYZFe1nqQ/FSJ9pOtrESa1uN7SOgIWMWUNz+1KIqcF3SQN/VIsAmpDrX
1aik9neE9AJsotgQSkKHj7nsI868uQ+paEC8FzgfqoMOlR3py/01F5XP0SRiRr49
jg5PzBfztF6pdZEeqh7q2zMpBkQ+vr8or78hFSbn9bd/N6Ga/B2JAN5FKLH5oKkA
sj9JxVP+kMQyn1jjgK234IYSZmDFZ6RhxU8KKztyl6s5+2MfwzQsX3GC6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBUPr2BdqlOOe2QqLeoo0Hb4uFu+MB8GA1UdIwQY
MBaAFCRF7wzy4pdInRlzcPiF1Z+J6VqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkVYdkRQTGlsMGlkR1hOdy1JWFZuNG5wV3FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jMjczMDAtZmI5NS00OWQ0LTg2NTct
MDk5YmY3MzQzZTJjLzEvSkVYdkRQTGlsMGlkR1hOdy1JWFZuNG5wV3FzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9jMjczMDAtZmI5NS00OWQ0LTg2NTctMDk5YmY3MzQzZTJj
LzEvSkVYdkRQTGlsMGlkR1hOdy1JWFZuNG5wV3FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcl3Kvap3
QfUVhUl1M2vJODOooMMD29ldr6f7ZnepJuRthHxeowG+WpOgGArqhetDaWmrOY/3
cOlCZuyNZvG898Q9mWRGD9/n79BUDrgDWw2KSa/RbAhGQ8OcyazBRphWF2bVRwXF
YcuCraLur5FsB7dAkwzv842MKMMI5CTlCZ3c1Y7Q9kntIUdPv+MGbiJt5ySWYoEf
kTCAXSlT2vgZwmBV1ZYDK6oNurFgG1HrOrFS6Ad9pKzH8ayjNxxfl4ThiRonoiSp
U69lnj8rI0r/lR42XYWtcw8JmSQ5lJURf/Sr/PBGHXAVV8t+CktFSELat2rrX4As
pyUXTX3hMrw0gQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:32 2025 by rpki-client