Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
File: JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft (raw, json)
Hash identifier: zaL8t8WGMZ9qjJa6BJDm+YtwVo05hkeYpernBA/6uC0=
Subject key identifier: 4E:1A:5D:15:00:1D:74:95:E0:D0:E4:14:2D:8C:67:04:A7:72:26:B5
Authority key identifier: 24:AF:EA:E8:3D:2D:5E:2E:A7:7A:C6:14:7F:75:83:7B:27:F7:43:49
Certificate issuer: /CN=24afeae83d2d5e2ea77ac6147f75837b27f74349
Certificate serial: 01987DC11E8A5E0B1056160876B5F6A703BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
Manifest number: 02FA
Signing time: Wed 06 Aug 2025 05:01:04 +0000
Manifest this update: Wed 06 Aug 2025 05:01:04 +0000
Manifest next update: Thu 07 Aug 2025 05:01:04 +0000
Files and hashes: 1: JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl (hash: /yEVimgvLtlfTH37q47dv7y23MV6eSNq0QxgXSmtBts=)
2: Np4SGefOBCZiVQwVOhlw43OZIsc.roa (hash: 4LHgzyDtN1tlOUmbwRr7JMfVVPaWldi7uvsqlFbuzcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c1:1e:8a:5e:0b:10:56:16:08:76:b5:f6:a7:03:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24afeae83d2d5e2ea77ac6147f75837b27f74349
Validity
Not Before: Aug 6 05:01:04 2025 GMT
Not After : Aug 7 05:01:04 2025 GMT
Subject: CN=4e1a5d15001d7495e0d0e4142d8c6704a77226b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bd:be:8e:a8:84:54:77:42:33:28:36:c6:02:
72:21:26:f2:8b:8e:08:77:01:69:47:15:67:a7:3e:
b2:47:39:a8:b1:db:47:87:b9:67:36:8d:82:59:3d:
0a:f0:1f:6a:89:0e:82:c5:51:c7:67:dd:9a:78:e7:
89:ec:80:96:fc:7a:ab:77:07:96:6f:b4:e7:cd:10:
c1:51:8a:cf:df:26:14:65:fb:8c:07:77:e2:fa:85:
c1:40:ff:7c:b7:f9:7e:24:3b:4a:d0:9b:63:28:03:
71:12:9a:4a:da:01:59:ea:80:63:77:21:94:46:7b:
a9:3d:a9:17:99:97:98:55:ed:c1:5a:b5:26:f0:9e:
58:c4:ce:33:5b:b5:59:e8:ec:9e:51:dc:1d:19:61:
a1:2e:9a:21:89:c2:5c:cd:6c:ee:a7:f7:23:ed:de:
a5:53:47:f4:87:fb:1f:43:7b:99:4f:c8:52:0f:a3:
ae:c7:7a:5d:3c:1d:48:80:18:8a:a3:0e:85:15:93:
1f:8b:c4:60:55:97:16:f9:43:22:17:8e:b2:cf:3a:
c8:40:11:ac:60:ac:57:dd:b4:b0:a5:ca:f3:02:84:
bf:de:5f:36:aa:e8:81:0b:a0:2a:20:bf:2a:2c:d8:
6f:f3:ce:8c:b9:b8:40:88:01:6e:fe:2d:a3:d0:f5:
78:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:1A:5D:15:00:1D:74:95:E0:D0:E4:14:2D:8C:67:04:A7:72:26:B5
X509v3 Authority Key Identifier:
keyid:24:AF:EA:E8:3D:2D:5E:2E:A7:7A:C6:14:7F:75:83:7B:27:F7:43:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:9b:6b:1f:1e:ff:c1:68:de:87:ba:82:7c:d3:43:7b:e4:85:
12:ba:2a:36:e7:dc:3e:35:82:3c:f0:73:a6:99:f5:f5:e6:21:
9e:a4:99:e8:30:f2:a3:19:61:bf:ea:7f:7d:12:ea:30:a2:da:
e6:d0:33:32:48:81:91:c9:4c:1f:79:8e:d1:66:4b:40:b5:d5:
af:97:80:aa:02:04:98:7a:68:fa:b9:34:5a:97:9c:2e:0b:f3:
6a:81:18:4b:69:63:23:f7:de:04:6a:f5:31:70:2a:74:d8:06:
ef:85:ae:a5:d0:6f:18:1d:de:f2:18:08:85:4f:0a:a8:f3:76:
d7:a1:eb:55:e0:98:a3:3d:bc:58:fd:65:ac:8c:1d:04:b4:03:
d8:68:48:58:ea:49:1a:c6:7d:1b:f3:e8:57:67:cc:61:77:28:
64:fc:d1:da:5f:dd:95:9c:4d:d3:75:18:51:f5:d1:6c:26:00:
ae:aa:c9:bb:3d:07:80:c2:a4:2e:bb:c0:22:ca:ba:52:50:a4:
da:f4:b6:d7:fd:fd:6b:c8:ea:87:4d:95:1b:c0:39:5e:ab:f5:
52:ac:00:2f:f3:be:38:0f:5f:cb:74:1c:15:99:75:54:2e:a4:
10:55:a2:20:d3:f4:24:0a:f6:62:48:fb:2e:ee:4d:7d:8f:89:
4e:73:44:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9wR6KXgsQVhYIdrX2pwO/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YWZlYWU4M2QyZDVlMmVhNzdhYzYxNDdmNzU4MzdiMjdm
NzQzNDkwHhcNMjUwODA2MDUwMTA0WhcNMjUwODA3MDUwMTA0WjAzMTEwLwYDVQQD
Eyg0ZTFhNWQxNTAwMWQ3NDk1ZTBkMGU0MTQyZDhjNjcwNGE3NzIyNmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmr2+jqiEVHdCMyg2xgJyISbyi44I
dwFpRxVnpz6yRzmosdtHh7lnNo2CWT0K8B9qiQ6CxVHHZ92aeOeJ7ICW/HqrdweW
b7TnzRDBUYrP3yYUZfuMB3fi+oXBQP98t/l+JDtK0JtjKANxEppK2gFZ6oBjdyGU
RnupPakXmZeYVe3BWrUm8J5YxM4zW7VZ6OyeUdwdGWGhLpohicJczWzup/cj7d6l
U0f0h/sfQ3uZT8hSD6Oux3pdPB1IgBiKow6FFZMfi8RgVZcW+UMiF46yzzrIQBGs
YKxX3bSwpcrzAoS/3l82quiBC6AqIL8qLNhv886MubhAiAFu/i2j0PV4kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE4aXRUAHXSV4NDkFC2MZwSncia1MB8GA1UdIwQY
MBaAFCSv6ug9LV4up3rGFH91g3sn90NJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSktfcTZEMHRYaTZuZXNZVWYzV0RleWYzUTBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy83YTk0MGItMzQwYS00ZDA4LWFmZDgt
NTNjNTcyMGNmYmViLzEvSktfcTZEMHRYaTZuZXNZVWYzV0RleWYzUTBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy83YTk0MGItMzQwYS00ZDA4LWFmZDgtNTNjNTcyMGNmYmVi
LzEvSktfcTZEMHRYaTZuZXNZVWYzV0RleWYzUTBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMptrHx7/
wWjeh7qCfNNDe+SFEroqNufcPjWCPPBzppn19eYhnqSZ6DDyoxlhv+p/fRLqMKLa
5tAzMkiBkclMH3mO0WZLQLXVr5eAqgIEmHpo+rk0WpecLgvzaoEYS2ljI/feBGr1
MXAqdNgG74WupdBvGB3e8hgIhU8KqPN216HrVeCYoz28WP1lrIwdBLQD2GhIWOpJ
GsZ9G/PoV2fMYXcoZPzR2l/dlZxN03UYUfXRbCYArqrJuz0HgMKkLrvAIsq6UlCk
2vS21/39a8jqh02VG8A5Xqv1UqwAL/O+OA9fy3QcFZl1VC6kEFWiINP0JAr2Ykj7
Lu5NfY+JTnNE0Q==
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:08:24 2025 by rpki-client