Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
File: JClc5xJHPQ4-bap3fbiQb4AB33A.mft (raw, json)
Hash identifier: 6cNqzu44j0w0+msiplgQ06VlSVSEAHK5Hd58aVMBQPM=
Subject key identifier: 0D:BC:BF:BE:78:34:50:14:0A:1E:C7:18:B0:AE:2D:3B:36:6E:2C:23
Authority key identifier: 24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
Certificate issuer: /CN=24295ce712473d0e3e6daa777db8906f8001df70
Certificate serial: 0198733CF701164572C0A8BC93ACD49AEB77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
Manifest number: 11CE
Signing time: Mon 04 Aug 2025 04:00:31 +0000
Manifest this update: Mon 04 Aug 2025 04:00:31 +0000
Manifest next update: Tue 05 Aug 2025 04:00:31 +0000
Files and hashes: 1: 2f42Ui-pru7wNiS6tvX-43aKjFs.roa (hash: mtpDrlYTTPVwbZc60pOa8NtALeV5Jm4wS3DacId4T/Q=)
2: JClc5xJHPQ4-bap3fbiQb4AB33A.crl (hash: pLkAgNZt/RDNixlKXZJPGYZEnlyPITwosreFkhNfMUU=)
3: Xhs8fAc0SGAyN4KDD0cOKWAqtow.roa (hash: 0rR/+YP0FGlnVR+donPj6Q3O2XueDV+VyXKsGyjN1KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3c:f7:01:16:45:72:c0:a8:bc:93:ac:d4:9a:eb:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24295ce712473d0e3e6daa777db8906f8001df70
Validity
Not Before: Aug 4 04:00:31 2025 GMT
Not After : Aug 5 04:00:31 2025 GMT
Subject: CN=0dbcbfbe783450140a1ec718b0ae2d3b366e2c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fd:4c:19:78:45:b6:ef:5e:c6:62:fd:d9:9a:
2e:57:cd:91:52:39:a4:4a:c6:54:2f:83:62:de:fc:
31:37:df:ac:c3:b1:1c:36:8d:b4:84:55:5d:15:22:
72:24:11:19:2c:e1:c1:1e:2d:6f:6a:df:5b:a8:ef:
de:30:03:a5:e7:5a:c2:77:69:a5:66:74:61:0b:f9:
1a:78:14:3b:a8:e8:db:91:5c:0a:cb:64:de:50:ba:
5f:79:ab:3b:a9:0d:1d:e1:70:b2:47:69:b7:4d:72:
02:86:6c:7e:26:10:5e:ff:e1:ce:9e:92:74:16:5d:
54:3d:59:21:9a:79:0b:23:4e:d6:41:7b:e7:d1:e5:
cc:23:46:ac:ea:2b:c7:30:c8:4e:27:9c:7c:07:9a:
66:59:2b:ce:66:38:90:a7:cc:e7:2f:0a:f8:9d:19:
eb:2d:11:9d:76:be:56:54:eb:0b:46:1d:c1:73:9d:
e8:f2:b6:d5:7a:2b:01:02:15:f1:e5:4c:b0:82:c4:
89:2d:b3:9b:19:a7:7f:d7:f8:c3:41:db:00:99:91:
69:c9:1d:1e:39:71:c1:ba:d9:55:bb:fd:16:d8:e4:
95:7e:64:1e:08:55:fa:76:8a:c7:4d:bb:ba:07:48:
dc:f5:7c:40:fc:3a:64:bc:5c:5f:11:8a:57:be:ad:
62:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:BC:BF:BE:78:34:50:14:0A:1E:C7:18:B0:AE:2D:3B:36:6E:2C:23
X509v3 Authority Key Identifier:
keyid:24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:55:31:c0:e6:db:52:85:d9:82:0e:16:4e:02:0c:45:3c:c1:
4a:6c:98:8d:5d:46:e2:b7:db:46:22:39:4d:cc:f2:4a:22:78:
48:47:b3:c5:62:2a:2a:04:cd:0c:57:db:ce:64:03:e4:f3:ba:
1f:fb:62:d9:b5:f7:a5:1f:f0:1a:8f:29:fd:b3:69:ca:59:22:
41:c4:ee:68:2f:bc:2c:ae:c4:36:04:40:46:3b:a3:a6:ca:a3:
4f:44:56:42:a3:36:db:72:41:1a:d3:fa:1b:26:47:1f:e7:1f:
78:66:5a:ed:d4:e6:d1:98:0f:72:e5:f5:2f:b9:4c:05:7c:45:
7e:41:77:5e:51:fd:64:37:c7:d7:0c:83:5a:6a:72:44:a2:22:
26:07:9c:e1:d2:80:26:25:16:7e:3d:6c:ef:58:3e:f3:5e:e8:
69:f8:98:a0:9b:51:ed:0e:a8:62:d6:3b:40:71:e3:8d:dc:ae:
03:13:7e:9b:aa:6f:57:91:fa:6f:fe:75:ad:98:3c:98:89:e6:
be:72:82:bb:a1:f4:bb:5f:bd:4e:8b:c4:e5:f4:2a:8a:a0:ab:
a3:28:ed:50:dd:a0:f8:b1:36:50:38:42:4b:88:68:4a:f4:6d:
5a:f1:b0:d3:31:f0:ad:fb:35:41:41:07:1d:1b:3b:2a:8c:15:
52:5a:7d:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPPcBFkVywKi8k6zUmut3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0Mjk1Y2U3MTI0NzNkMGUzZTZkYWE3NzdkYjg5MDZmODAw
MWRmNzAwHhcNMjUwODA0MDQwMDMxWhcNMjUwODA1MDQwMDMxWjAzMTEwLwYDVQQD
EygwZGJjYmZiZTc4MzQ1MDE0MGExZWM3MThiMGFlMmQzYjM2NmUyYzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqf1MGXhFtu9exmL92ZouV82RUjmk
SsZUL4Ni3vwxN9+sw7EcNo20hFVdFSJyJBEZLOHBHi1vat9bqO/eMAOl51rCd2ml
ZnRhC/kaeBQ7qOjbkVwKy2TeULpfeas7qQ0d4XCyR2m3TXIChmx+JhBe/+HOnpJ0
Fl1UPVkhmnkLI07WQXvn0eXMI0as6ivHMMhOJ5x8B5pmWSvOZjiQp8znLwr4nRnr
LRGddr5WVOsLRh3Bc53o8rbVeisBAhXx5UywgsSJLbObGad/1/jDQdsAmZFpyR0e
OXHButlVu/0W2OSVfmQeCFX6dorHTbu6B0jc9XxA/DpkvFxfEYpXvq1i6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA28v754NFAUCh7HGLCuLTs2biwjMB8GA1UdIwQY
MBaAFCQpXOcSRz0OPm2qd324kG+AAd9wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkNsYzV4SkhQUTQtYmFwM2ZiaVFiNEFCMzNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8xYTBjNmEtMWE1ZS00MjRiLTlhNjkt
OTk1NTMxODYyNDE5LzEvSkNsYzV4SkhQUTQtYmFwM2ZiaVFiNEFCMzNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8xYTBjNmEtMWE1ZS00MjRiLTlhNjktOTk1NTMxODYyNDE5
LzEvSkNsYzV4SkhQUTQtYmFwM2ZiaVFiNEFCMzNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdlUxwObb
UoXZgg4WTgIMRTzBSmyYjV1G4rfbRiI5TczySiJ4SEezxWIqKgTNDFfbzmQD5PO6
H/ti2bX3pR/wGo8p/bNpylkiQcTuaC+8LK7ENgRARjujpsqjT0RWQqM223JBGtP6
GyZHH+cfeGZa7dTm0ZgPcuX1L7lMBXxFfkF3XlH9ZDfH1wyDWmpyRKIiJgec4dKA
JiUWfj1s71g+817oafiYoJtR7Q6oYtY7QHHjjdyuAxN+m6pvV5H6b/51rZg8mInm
vnKCu6H0u1+9TovE5fQqiqCroyjtUN2g+LE2UDhCS4hoSvRtWvGw0zHwrfs1QUEH
HRs7KowVUlp95w==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:17 2025 by rpki-client