Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
File: j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft (raw, json)
Hash identifier: R2hDcqhKdNVuVgYf8Tk5M8Vn5QqUUHogI4sIgE3IG1M=
Subject key identifier: 25:6E:85:E5:79:9F:2F:23:08:FA:E0:52:7B:1A:56:36:07:7F:1C:0D
Authority key identifier: 8F:98:05:F6:48:01:DD:93:59:94:14:A6:25:09:B1:2A:54:02:F8:68
Certificate issuer: /CN=8f9805f64801dd93599414a62509b12a5402f868
Certificate serial: 019771F664686CB1623729D45D8D8B584DF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
Manifest number: 02E0
Signing time: Sun 15 Jun 2025 05:01:02 +0000
Manifest this update: Sun 15 Jun 2025 05:01:02 +0000
Manifest next update: Mon 16 Jun 2025 05:01:02 +0000
Files and hashes: 1: NCxg4iDnSPo7sNDZogY6EAQ1qnU.roa (hash: a1KXZCaEoxN1UkOcv0YA7zkHr19aSLSv8QON/lo/20Y=)
2: j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl (hash: Iq3KeWF6UEOX1T9diszCaEbJSF/VW5go/IF9MtnnuTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f6:64:68:6c:b1:62:37:29:d4:5d:8d:8b:58:4d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9805f64801dd93599414a62509b12a5402f868
Validity
Not Before: Jun 15 05:01:02 2025 GMT
Not After : Jun 16 05:01:02 2025 GMT
Subject: CN=256e85e5799f2f2308fae0527b1a5636077f1c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c7:2e:28:28:0e:6a:82:e1:84:36:2b:bc:7a:
ac:4b:58:5b:86:47:5a:89:0d:aa:c6:63:44:d6:03:
db:5f:9b:18:11:25:7f:38:ea:db:ae:76:8a:90:34:
4e:98:3f:d7:db:5b:a6:a2:17:87:6e:13:3f:0a:e4:
ad:f1:15:56:05:65:0f:28:b3:99:34:53:55:46:f3:
29:aa:80:10:e3:02:e1:b8:25:11:f2:d7:2f:50:61:
d5:6e:50:f6:eb:9d:0a:f8:e9:d2:78:2d:35:0c:86:
52:2c:1e:cd:0b:86:de:88:94:8e:0c:13:ee:8f:e4:
0f:cb:a2:21:d7:ca:86:9b:d1:95:64:29:16:db:35:
07:1f:e9:71:86:cd:77:ab:ad:5f:9b:76:45:c5:d6:
53:4c:ce:f7:03:8b:12:04:2a:b3:54:77:31:e7:f1:
3b:22:9b:52:46:6a:43:fb:25:4c:e5:5d:4b:40:0f:
1b:fb:16:28:4f:3b:b5:85:fd:80:e4:17:30:69:3a:
07:c9:bc:00:0e:98:74:03:4a:9c:d6:4f:d3:c5:26:
3c:a7:78:4f:69:67:59:67:74:ca:4c:68:91:b3:02:
c5:0d:ab:cb:20:51:d0:06:56:06:4a:cc:f1:b5:4b:
13:d0:08:4f:ba:9f:86:1a:62:fa:e2:bb:b8:48:24:
e0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6E:85:E5:79:9F:2F:23:08:FA:E0:52:7B:1A:56:36:07:7F:1C:0D
X509v3 Authority Key Identifier:
keyid:8F:98:05:F6:48:01:DD:93:59:94:14:A6:25:09:B1:2A:54:02:F8:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:6a:0d:d7:c9:1c:62:c2:6c:7b:8a:09:c7:1b:a4:53:9b:e0:
24:1b:41:6d:dc:72:06:a0:1c:f6:a1:2b:06:de:42:1c:9f:47:
13:bc:e9:ad:3b:84:48:3d:56:07:19:76:83:14:1e:74:6f:ee:
8f:0f:29:39:fd:c2:fd:2e:3a:65:d1:43:e8:e0:82:56:b2:d6:
93:7f:ef:33:ce:9d:c4:8b:bb:1e:04:98:ee:38:b6:df:ba:1c:
cc:e8:38:7a:37:dc:66:3d:d7:fc:60:65:fd:a2:c7:5c:cd:d9:
88:0b:11:b7:56:d1:0a:2e:83:3c:5e:5b:1c:d7:19:ab:fb:20:
81:6d:d9:af:55:e6:5e:f0:99:98:b3:07:08:92:37:84:47:aa:
74:e8:40:65:ae:9c:44:c0:64:4e:cc:8d:02:a6:f4:9c:1b:f3:
08:fb:bb:4d:9e:4c:e0:06:81:70:cb:5d:9f:b4:7d:be:09:f1:
2a:8a:ae:24:84:6f:fe:56:bb:3f:e3:92:9e:58:9c:9c:f8:bb:
ef:5c:4c:84:0d:22:fe:ad:10:62:35:bd:38:db:92:25:d8:1f:
da:40:47:88:91:ff:12:56:9c:eb:a2:aa:81:cf:4d:8e:b0:5a:
70:20:44:6f:86:58:ce:6f:e8:61:0d:2e:42:27:ff:1d:3f:99:
c2:2e:e5:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdx9mRobLFiNynUXY2LWE33MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmOTgwNWY2NDgwMWRkOTM1OTk0MTRhNjI1MDliMTJhNTQw
MmY4NjgwHhcNMjUwNjE1MDUwMTAyWhcNMjUwNjE2MDUwMTAyWjAzMTEwLwYDVQQD
EygyNTZlODVlNTc5OWYyZjIzMDhmYWUwNTI3YjFhNTYzNjA3N2YxYzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ccuKCgOaoLhhDYrvHqsS1hbhkda
iQ2qxmNE1gPbX5sYESV/OOrbrnaKkDROmD/X21umoheHbhM/CuSt8RVWBWUPKLOZ
NFNVRvMpqoAQ4wLhuCUR8tcvUGHVblD2650K+OnSeC01DIZSLB7NC4beiJSODBPu
j+QPy6Ih18qGm9GVZCkW2zUHH+lxhs13q61fm3ZFxdZTTM73A4sSBCqzVHcx5/E7
IptSRmpD+yVM5V1LQA8b+xYoTzu1hf2A5BcwaToHybwADph0A0qc1k/TxSY8p3hP
aWdZZ3TKTGiRswLFDavLIFHQBlYGSszxtUsT0AhPup+GGmL64ru4SCTg0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCVuheV5ny8jCPrgUnsaVjYHfxwNMB8GA1UdIwQY
MBaAFI+YBfZIAd2TWZQUpiUJsSpUAvhoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajVnRjlrZ0IzWk5abEJTbUpRbXhLbFFDLUdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81M2Y5YmQtN2Y1NC00YmQyLWI1YTQt
ZTU4NGNkNWY4ZDExLzEvajVnRjlrZ0IzWk5abEJTbUpRbXhLbFFDLUdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS81M2Y5YmQtN2Y1NC00YmQyLWI1YTQtZTU4NGNkNWY4ZDEx
LzEvajVnRjlrZ0IzWk5abEJTbUpRbXhLbFFDLUdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2oN18kc
YsJse4oJxxukU5vgJBtBbdxyBqAc9qErBt5CHJ9HE7zprTuESD1WBxl2gxQedG/u
jw8pOf3C/S46ZdFD6OCCVrLWk3/vM86dxIu7HgSY7ji237oczOg4ejfcZj3X/GBl
/aLHXM3ZiAsRt1bRCi6DPF5bHNcZq/sggW3Zr1XmXvCZmLMHCJI3hEeqdOhAZa6c
RMBkTsyNAqb0nBvzCPu7TZ5M4AaBcMtdn7R9vgnxKoquJIRv/la7P+OSnlicnPi7
71xMhA0i/q0QYjW9ONuSJdgf2kBHiJH/Elac66Kqgc9NjrBacCBEb4ZYzm/oYQ0u
Qif/HT+Zwi7lig==
-----END CERTIFICATE-----
Generated at Sun Jun 15 11:44:11 2025 by rpki-client