Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
File: jYdAeZyRwmMKgJIXjbgk86iJp18.mft (raw, json)
Hash identifier: fIS8VKeBAbQFXZqyCmgpsr4tV7wam5q6tIsX0C0lN14=
Subject key identifier: 41:3B:25:D7:70:CC:82:9D:EC:F0:F4:26:51:7C:88:44:C6:62:6C:C5
Authority key identifier: 8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F
Certificate issuer: /CN=8d8740799c91c2630a8092178db824f3a889a75f
Certificate serial: 0197850F323D78114D06994B276EB74F3540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
Manifest number: 159A
Signing time: Wed 18 Jun 2025 22:00:54 +0000
Manifest this update: Wed 18 Jun 2025 22:00:54 +0000
Manifest next update: Thu 19 Jun 2025 22:00:54 +0000
Files and hashes: 1: K-6vxGr3EkVKtgWk3f7FXppAHWU.roa (hash: OqJwTUOjnt783umU3SvwJ0pGKHDe69wtlF63xIDInso=)
2: K7Su5tLQd2NMZMj9NBaGujGCyFc.roa (hash: mUfUc0m1Q5fvSqMO5jRLGU7xEPj6/17vBXx5MZ0j9fY=)
3: eE7CtoiQAT2pLGSZ83z4bGyxlms.roa (hash: 0jzCXVU/84NgsdnKR1p45oVJW0ZBdnomnSJlnmwgNt0=)
4: jYdAeZyRwmMKgJIXjbgk86iJp18.crl (hash: y1G34bonbgUTKMWi0jDT5u46uWNQR+gU684zzxcl/Rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:85:0f:32:3d:78:11:4d:06:99:4b:27:6e:b7:4f:35:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d8740799c91c2630a8092178db824f3a889a75f
Validity
Not Before: Jun 18 22:00:54 2025 GMT
Not After : Jun 19 22:00:54 2025 GMT
Subject: CN=413b25d770cc829decf0f426517c8844c6626cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:41:68:33:b0:af:c2:68:71:91:8f:48:6b:10:
56:e6:13:19:53:86:cc:74:de:9f:18:cd:f6:41:fb:
b9:90:fd:4d:58:3a:74:44:75:01:d5:1e:17:fd:80:
cf:ec:41:c4:52:3d:6a:dc:12:c4:18:94:51:3f:32:
bf:1f:34:11:77:e2:ea:0f:8c:c3:bf:c2:75:e3:00:
df:10:63:f7:7f:f8:b6:b1:ec:4d:e7:96:52:07:1c:
ae:96:49:d8:6a:7e:c4:1c:2f:41:4d:2f:cb:c0:64:
7f:e4:1f:0a:86:2a:02:20:66:f9:a0:66:52:cd:28:
31:a0:ce:ba:63:e9:dc:82:b5:cb:24:68:bf:9f:97:
60:e4:23:5c:e7:ed:ea:04:b3:5f:15:5b:ca:9f:1e:
fe:b3:60:10:a4:67:99:25:b1:fd:8a:d7:fd:05:f8:
d1:84:3d:cb:c4:2a:3e:15:1d:dd:2e:1b:f5:ae:99:
6c:af:0f:6a:b7:97:1e:c4:21:f0:72:de:da:a0:e7:
4a:74:60:cf:f6:c3:1a:14:ed:97:54:da:e8:87:85:
48:ca:4c:3e:80:f3:51:d1:50:d4:e6:7b:39:77:fd:
02:c8:8b:b0:81:9c:13:54:8a:61:05:45:2b:a5:b0:
cc:5f:cb:b8:8c:46:51:c8:67:7a:79:3e:d7:21:06:
d6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3B:25:D7:70:CC:82:9D:EC:F0:F4:26:51:7C:88:44:C6:62:6C:C5
X509v3 Authority Key Identifier:
keyid:8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ff:fd:4b:6c:a5:cd:f5:bd:ab:66:9f:b6:6f:11:6d:85:4d:
f6:3f:2c:2d:02:76:5a:93:84:f3:4f:87:de:aa:03:ee:05:f5:
d3:81:7e:d6:97:0a:bd:4e:76:f8:44:69:aa:b5:d0:c6:55:9b:
0e:02:34:3b:cd:29:b0:b7:4e:14:3a:ce:ee:31:91:10:40:1c:
65:f4:57:d5:3e:6a:09:f6:ea:76:da:53:62:1f:f0:8b:64:a0:
72:95:70:06:a2:be:b7:c5:cd:30:d0:d1:06:4a:25:cc:61:3d:
ea:89:ed:e7:2a:2e:41:9b:89:64:d4:08:0d:c6:22:74:75:a5:
84:ff:7b:47:9f:ca:2f:32:6f:ae:e4:23:53:e5:0e:52:ae:28:
7d:d7:a6:38:4b:c1:c4:15:c4:9d:09:55:92:d2:f6:ab:21:f4:
5b:24:1f:a2:c4:78:22:4f:d0:c1:8c:05:34:81:54:fe:13:f9:
e3:c7:53:32:e8:54:3c:5f:c9:a2:8e:6c:cb:81:49:cd:4a:4d:
25:09:27:92:1b:87:51:c9:c8:85:c4:aa:d2:75:67:fb:5d:ef:
23:54:63:6f:e7:2c:1c:3c:26:82:f4:0c:d2:6e:66:52:a8:f8:
c2:3e:18:ab:7e:c8:a0:c4:a2:ba:c3:fc:25:76:dc:77:87:7d:
70:4b:99:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeFDzI9eBFNBplLJ263TzVAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkODc0MDc5OWM5MWMyNjMwYTgwOTIxNzhkYjgyNGYzYTg4
OWE3NWYwHhcNMjUwNjE4MjIwMDU0WhcNMjUwNjE5MjIwMDU0WjAzMTEwLwYDVQQD
Eyg0MTNiMjVkNzcwY2M4MjlkZWNmMGY0MjY1MTdjODg0NGM2NjI2Y2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEFoM7CvwmhxkY9IaxBW5hMZU4bM
dN6fGM32Qfu5kP1NWDp0RHUB1R4X/YDP7EHEUj1q3BLEGJRRPzK/HzQRd+LqD4zD
v8J14wDfEGP3f/i2sexN55ZSBxyulknYan7EHC9BTS/LwGR/5B8KhioCIGb5oGZS
zSgxoM66Y+ncgrXLJGi/n5dg5CNc5+3qBLNfFVvKnx7+s2AQpGeZJbH9itf9BfjR
hD3LxCo+FR3dLhv1rplsrw9qt5cexCHwct7aoOdKdGDP9sMaFO2XVNroh4VIykw+
gPNR0VDU5ns5d/0CyIuwgZwTVIphBUUrpbDMX8u4jEZRyGd6eT7XIQbWcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEE7JddwzIKd7PD0JlF8iETGYmzFMB8GA1UdIwQY
MBaAFI2HQHmckcJjCoCSF424JPOoiadfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvallkQWVaeVJ3bU1LZ0pJWGpiZ2s4NmlKcDE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy81YjdjOTQtYTYwZC00Mzk5LTk4Mjkt
NTJiODE2NjgyOWQ3LzEvallkQWVaeVJ3bU1LZ0pJWGpiZ2s4NmlKcDE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy81YjdjOTQtYTYwZC00Mzk5LTk4MjktNTJiODE2NjgyOWQ3
LzEvallkQWVaeVJ3bU1LZ0pJWGpiZ2s4NmlKcDE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABf/9S2yl
zfW9q2aftm8RbYVN9j8sLQJ2WpOE80+H3qoD7gX104F+1pcKvU52+ERpqrXQxlWb
DgI0O80psLdOFDrO7jGREEAcZfRX1T5qCfbqdtpTYh/wi2SgcpVwBqK+t8XNMNDR
BkolzGE96ont5youQZuJZNQIDcYidHWlhP97R5/KLzJvruQjU+UOUq4ofdemOEvB
xBXEnQlVktL2qyH0WyQfosR4Ik/QwYwFNIFU/hP548dTMuhUPF/Joo5sy4FJzUpN
JQknkhuHUcnIhcSq0nVn+13vI1Rjb+csHDwmgvQM0m5mUqj4wj4Yq37IoMSiusP8
JXbcd4d9cEuZQw==
-----END CERTIFICATE-----
Generated at Thu Jun 19 04:31:27 2025 by rpki-client