Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
File: jTrSodmrXJtPu05eAlIe4FK4nV8.mft (raw, json)
Hash identifier: JrwfD2wC/AxyHtVwqJLNeL7havEkEtBxD4NFNyWjdcw=
Subject key identifier: B0:B8:18:6D:86:29:35:96:72:77:B5:E1:61:16:1E:6F:41:B3:74:F7
Authority key identifier: 8D:3A:D2:A1:D9:AB:5C:9B:4F:BB:4E:5E:02:52:1E:E0:52:B8:9D:5F
Certificate issuer: /CN=8d3ad2a1d9ab5c9b4fbb4e5e02521ee052b89d5f
Certificate serial: 01987C4076DBE2536F4A96359007288E9430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
Manifest number: 161B
Signing time: Tue 05 Aug 2025 22:00:56 +0000
Manifest this update: Tue 05 Aug 2025 22:00:56 +0000
Manifest next update: Wed 06 Aug 2025 22:00:56 +0000
Files and hashes: 1: gUp9W6gdzA4HeeDeBLYOgieiGro.roa (hash: lrN/LUw9qbgMyjQd+6zHffB/Q9YQH49/9bc6+74QbTo=)
2: jTrSodmrXJtPu05eAlIe4FK4nV8.crl (hash: gTmb1JGmkCrx9sMBhxvUP2Nngj0g9epB8HWaNtqNrrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 22:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:76:db:e2:53:6f:4a:96:35:90:07:28:8e:94:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3ad2a1d9ab5c9b4fbb4e5e02521ee052b89d5f
Validity
Not Before: Aug 5 22:00:56 2025 GMT
Not After : Aug 6 22:00:56 2025 GMT
Subject: CN=b0b8186d862935967277b5e161161e6f41b374f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5b:0a:bf:24:88:5b:be:d9:11:4d:aa:36:f5:
cb:6c:00:3a:1a:4e:13:0f:3c:ad:82:48:db:93:71:
8f:66:4e:5f:02:53:65:b7:35:c3:c8:05:65:97:13:
0d:e5:f8:e7:c9:68:87:96:38:b2:d0:72:52:ec:37:
1f:23:c8:d4:da:b8:0e:76:05:1f:cd:df:bf:2d:43:
11:a8:f6:8c:63:bb:c7:35:0a:58:d7:50:ed:ee:e3:
34:b7:9f:2f:db:b2:3e:71:ec:d2:de:29:4c:69:8e:
0f:0e:90:6e:58:10:b5:d6:0b:8a:b7:c9:a4:3a:0b:
ba:9d:8e:a9:f3:43:0a:7a:aa:38:d4:84:e9:08:af:
86:19:2c:66:dc:d6:8a:96:4c:3b:6e:13:a1:21:ba:
ce:59:0a:50:a4:a8:5c:40:62:98:83:9d:f3:c0:fb:
7e:5b:bc:e0:cb:d9:db:df:0b:9d:5f:49:1e:f2:4b:
75:5e:1f:ce:0e:67:68:c4:bc:08:b5:d1:5e:38:b7:
d6:77:82:6c:5c:40:f0:8e:a6:c0:74:ea:39:0e:96:
6c:c0:03:33:1c:b9:2c:9b:04:81:d3:83:1f:76:e8:
20:55:42:a4:f5:a3:45:f1:19:55:61:b7:2f:ea:c4:
43:7b:53:0c:11:e7:fe:91:86:c8:27:09:9e:64:ea:
3d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B8:18:6D:86:29:35:96:72:77:B5:E1:61:16:1E:6F:41:B3:74:F7
X509v3 Authority Key Identifier:
keyid:8D:3A:D2:A1:D9:AB:5C:9B:4F:BB:4E:5E:02:52:1E:E0:52:B8:9D:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:5f:97:08:2a:da:8b:50:7c:13:44:23:41:80:60:1e:db:d6:
e6:60:0a:71:b1:c3:36:cc:3e:73:63:87:9d:05:9b:92:31:74:
cd:4c:a4:ef:a4:47:e9:fd:38:0c:02:26:3b:3d:a1:0e:33:58:
4c:0f:98:3a:a2:f8:5c:d5:3e:53:85:53:f1:cb:66:1c:b5:78:
7d:c2:dd:af:7a:76:ef:1b:fe:98:ef:31:ef:bf:57:0f:ac:b7:
fa:df:24:0e:7f:7f:ec:3b:4f:e7:88:b0:79:37:a2:a2:c2:6d:
8f:bc:60:60:e2:68:5a:81:f1:5c:d8:93:19:c1:cc:77:ee:52:
98:9d:ed:7b:45:87:48:12:91:e4:a5:c5:02:93:57:d7:cf:e8:
7d:6b:94:d8:aa:17:c0:e2:a8:d1:89:3c:fb:a6:06:21:f6:6b:
a0:49:38:b8:7f:df:42:d8:04:72:0e:ff:8c:b5:2c:9d:f1:e5:
79:08:b7:ac:7f:59:0d:93:17:25:11:0b:96:49:11:01:a0:72:
d2:55:8c:d1:c1:68:ae:0a:e9:f7:f8:bc:20:aa:58:49:46:f4:
e4:14:ab:81:54:56:ae:07:fd:08:5f:75:d5:f6:26:f8:42:ca:
53:92:48:32:d3:ca:b3:1c:1f:f9:30:a5:b1:35:17:06:6f:22:
cc:3f:14:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8QHbb4lNvSpY1kAcojpQwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkM2FkMmExZDlhYjVjOWI0ZmJiNGU1ZTAyNTIxZWUwNTJi
ODlkNWYwHhcNMjUwODA1MjIwMDU2WhcNMjUwODA2MjIwMDU2WjAzMTEwLwYDVQQD
EyhiMGI4MTg2ZDg2MjkzNTk2NzI3N2I1ZTE2MTE2MWU2ZjQxYjM3NGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1sKvySIW77ZEU2qNvXLbAA6Gk4T
Dzytgkjbk3GPZk5fAlNltzXDyAVllxMN5fjnyWiHljiy0HJS7DcfI8jU2rgOdgUf
zd+/LUMRqPaMY7vHNQpY11Dt7uM0t58v27I+cezS3ilMaY4PDpBuWBC11guKt8mk
Ogu6nY6p80MKeqo41ITpCK+GGSxm3NaKlkw7bhOhIbrOWQpQpKhcQGKYg53zwPt+
W7zgy9nb3wudX0ke8kt1Xh/ODmdoxLwItdFeOLfWd4JsXEDwjqbAdOo5DpZswAMz
HLksmwSB04MfduggVUKk9aNF8RlVYbcv6sRDe1MMEef+kYbIJwmeZOo9QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLC4GG2GKTWWcne14WEWHm9Bs3T3MB8GA1UdIwQY
MBaAFI060qHZq1ybT7tOXgJSHuBSuJ1fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalRyU29kbXJYSnRQdTA1ZUFsSWU0Rks0blY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hMmJmMzUtNTRhMy00Zjc4LWI3MjAt
NGE5ZTI5NjE1YzA1LzEvalRyU29kbXJYSnRQdTA1ZUFsSWU0Rks0blY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9hMmJmMzUtNTRhMy00Zjc4LWI3MjAtNGE5ZTI5NjE1YzA1
LzEvalRyU29kbXJYSnRQdTA1ZUFsSWU0Rks0blY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYV+XCCra
i1B8E0QjQYBgHtvW5mAKcbHDNsw+c2OHnQWbkjF0zUyk76RH6f04DAImOz2hDjNY
TA+YOqL4XNU+U4VT8ctmHLV4fcLdr3p27xv+mO8x779XD6y3+t8kDn9/7DtP54iw
eTeiosJtj7xgYOJoWoHxXNiTGcHMd+5SmJ3te0WHSBKR5KXFApNX18/ofWuU2KoX
wOKo0Yk8+6YGIfZroEk4uH/fQtgEcg7/jLUsnfHleQi3rH9ZDZMXJRELlkkRAaBy
0lWM0cForgrp9/i8IKpYSUb05BSrgVRWrgf9CF911fYm+ELKU5JIMtPKsxwf+TCl
sTUXBm8izD8UYg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:18:03 2025 by rpki-client