Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
File: jX-qW7mz6kATfbhsQHL84Vj2pc8.mft (raw, json)
Hash identifier: RQNPaM7ZzOnrY2713/mN70c/DsCzYg6cDfgO8fNMA/k=
Subject key identifier: AE:CD:DE:4D:5A:EE:24:F2:32:69:50:CC:13:DD:B4:50:62:1A:0B:08
Authority key identifier: 8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF
Certificate issuer: /CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf
Certificate serial: 019778663BB5555B64E7D055627FE6142DD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
Manifest number: 0AC5
Signing time: Mon 16 Jun 2025 11:00:55 +0000
Manifest this update: Mon 16 Jun 2025 11:00:55 +0000
Manifest next update: Tue 17 Jun 2025 11:00:55 +0000
Files and hashes: 1: hhrm1Em1WlxZZH38Jm2yxN4no3I.roa (hash: 3IW1YAxLQw3KLIWXwxwYcOQuTgohlVo0d+wGlA+Yr7I=)
2: jX-qW7mz6kATfbhsQHL84Vj2pc8.crl (hash: 5JmyOn7AwkWYwcrSIopcbysv9NyW7pgGRrp4miX4WTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:66:3b:b5:55:5b:64:e7:d0:55:62:7f:e6:14:2d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf
Validity
Not Before: Jun 16 11:00:55 2025 GMT
Not After : Jun 17 11:00:55 2025 GMT
Subject: CN=aecdde4d5aee24f2326950cc13ddb450621a0b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:79:6f:7d:17:e4:90:a3:1d:eb:b2:4e:6d:d9:
e3:40:de:90:80:88:85:54:7b:0c:36:77:7a:be:18:
b9:5c:65:f1:a2:b4:05:ee:30:ba:d7:6a:08:6e:f5:
6f:d6:cf:d5:2e:2b:dc:e0:27:36:9d:73:8c:8e:86:
34:5a:89:6e:48:3a:fc:a4:54:f2:84:ff:2f:d9:56:
3a:56:b0:17:be:0b:e9:1c:55:bc:2c:c8:4f:71:07:
61:da:1a:54:69:2d:cc:69:17:07:4b:46:c1:24:d7:
70:e4:b9:6a:4c:78:c4:78:6e:7e:c9:b3:a2:b1:48:
e3:c7:5c:2b:1f:f5:f2:d1:01:12:d7:25:00:59:b4:
d5:8f:50:19:40:38:95:95:d3:86:d2:f8:08:82:f2:
3f:95:f4:47:2c:fa:d7:18:1e:6c:96:7b:db:90:1c:
14:43:b2:eb:1d:65:4b:e3:bb:b4:0e:f5:db:8e:22:
9b:ee:71:07:44:1b:68:ba:44:d1:49:11:66:1c:03:
e7:f3:81:12:76:f3:09:fb:ed:21:63:f5:82:76:82:
b9:31:57:2c:30:9e:64:4b:da:db:04:04:89:a3:5a:
5d:65:4b:fc:85:46:23:73:59:b1:fc:b7:32:1f:ba:
d9:9e:84:05:4c:8d:ea:72:c6:ab:66:d7:ca:dd:e1:
b4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:CD:DE:4D:5A:EE:24:F2:32:69:50:CC:13:DD:B4:50:62:1A:0B:08
X509v3 Authority Key Identifier:
keyid:8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:03:b4:68:ae:49:64:b2:72:22:a8:0f:7a:3e:17:b3:9d:69:
80:e9:bd:90:9c:90:bb:a2:79:a6:94:b0:d4:67:da:bd:34:c2:
09:e4:1a:2a:da:54:5e:ad:5a:e8:9b:43:34:4d:ed:a0:3a:0c:
33:82:f0:1c:26:03:cd:d2:89:49:12:a4:89:e1:16:bf:ec:18:
f4:ec:c9:e2:00:69:76:1e:ae:42:19:3f:cf:ba:95:ab:e4:50:
e3:0e:28:58:e9:9e:4a:f1:ad:de:a7:2d:1b:e5:6d:f6:7f:c8:
6d:70:15:c6:77:83:f5:33:ba:50:24:31:c7:dd:3d:07:c2:c2:
f8:59:db:c9:92:2b:ba:3d:46:5d:e2:a0:96:cd:2a:3a:e2:12:
0f:4d:50:58:00:25:c4:ac:d5:e6:8c:f3:e6:8e:ed:5d:60:ba:
2e:18:8e:b7:a7:14:21:c1:f5:fa:5b:b8:0f:9e:f3:47:6d:c0:
d5:a9:fb:ab:38:5d:5a:fd:f7:0d:29:66:9b:b8:6f:45:c7:34:
5e:38:18:f6:74:45:54:a9:13:73:20:99:8d:64:40:7f:2d:8e:
98:84:44:7f:f6:c2:4a:4a:80:a5:e2:15:80:5e:69:97:e6:4b:
8f:aa:0c:5f:a3:52:d5:19:43:37:d1:60:cb:eb:14:ba:65:c8:
e6:c7:a8:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd4Zju1VVtk59BVYn/mFC3SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkN2ZhYTViYjliM2VhNDAxMzdkYjg2YzQwNzJmY2UxNThm
NmE1Y2YwHhcNMjUwNjE2MTEwMDU1WhcNMjUwNjE3MTEwMDU1WjAzMTEwLwYDVQQD
EyhhZWNkZGU0ZDVhZWUyNGYyMzI2OTUwY2MxM2RkYjQ1MDYyMWEwYjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnlvfRfkkKMd67JObdnjQN6QgIiF
VHsMNnd6vhi5XGXxorQF7jC612oIbvVv1s/VLivc4Cc2nXOMjoY0WoluSDr8pFTy
hP8v2VY6VrAXvgvpHFW8LMhPcQdh2hpUaS3MaRcHS0bBJNdw5LlqTHjEeG5+ybOi
sUjjx1wrH/Xy0QES1yUAWbTVj1AZQDiVldOG0vgIgvI/lfRHLPrXGB5slnvbkBwU
Q7LrHWVL47u0DvXbjiKb7nEHRBtoukTRSRFmHAPn84ESdvMJ++0hY/WCdoK5MVcs
MJ5kS9rbBASJo1pdZUv8hUYjc1mx/LcyH7rZnoQFTI3qcsarZtfK3eG0TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7N3k1a7iTyMmlQzBPdtFBiGgsIMB8GA1UdIwQY
MBaAFI1/qlu5s+pAE324bEBy/OFY9qXPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalgtcVc3bXo2a0FUZmJoc1FITDg0VmoycGM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8zYmYyM2EtOTA0Yy00ZTRmLTlmMDIt
Zjk5OWUxYmViOTYxLzEvalgtcVc3bXo2a0FUZmJoc1FITDg0VmoycGM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8zYmYyM2EtOTA0Yy00ZTRmLTlmMDItZjk5OWUxYmViOTYx
LzEvalgtcVc3bXo2a0FUZmJoc1FITDg0VmoycGM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAegO0aK5J
ZLJyIqgPej4Xs51pgOm9kJyQu6J5ppSw1GfavTTCCeQaKtpUXq1a6JtDNE3toDoM
M4LwHCYDzdKJSRKkieEWv+wY9OzJ4gBpdh6uQhk/z7qVq+RQ4w4oWOmeSvGt3qct
G+Vt9n/IbXAVxneD9TO6UCQxx909B8LC+FnbyZIruj1GXeKgls0qOuISD01QWAAl
xKzV5ozz5o7tXWC6LhiOt6cUIcH1+lu4D57zR23A1an7qzhdWv33DSlmm7hvRcc0
XjgY9nRFVKkTcyCZjWRAfy2OmIREf/bCSkqApeIVgF5pl+ZLj6oMX6NS1RlDN9Fg
y+sUumXI5seoHg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:44:49 2025 by rpki-client