Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
File: jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft (raw, json)
Hash identifier: 96lri51PZZPSzbYF7QwElVBPuaH0ayWt6KKRghnOsAo=
Subject key identifier: 3E:44:02:0A:A2:A2:DE:63:61:1C:75:B9:DD:D8:4A:3D:C7:EC:7E:E3
Authority key identifier: 8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
Certificate issuer: /CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Certificate serial: 019771F664D2146E98887B2722E49498BD75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
Manifest number: 01A8
Signing time: Sun 15 Jun 2025 05:01:02 +0000
Manifest this update: Sun 15 Jun 2025 05:01:02 +0000
Manifest next update: Mon 16 Jun 2025 05:01:02 +0000
Files and hashes: 1: 2a4uGqXqRLFwxkrNzW_s6-qnGXE.roa (hash: goHZck25hCom6tNMtTpOVgal0/zlXu42ccbA4cfzVE0=)
2: jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl (hash: SbN4fat97fmqstj+C7t9mNTVf8dPsf2ie2MCQ/3jFbc=)
3: kFOw0UjGI7qti8qa1uAUEOsP1Y0.roa (hash: 3Ka4QMk7D3J6EIhtUeiuaJXa58kFmA+7bZN+m672Gvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f6:64:d2:14:6e:98:88:7b:27:22:e4:94:98:bd:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Validity
Not Before: Jun 15 05:01:02 2025 GMT
Not After : Jun 16 05:01:02 2025 GMT
Subject: CN=3e44020aa2a2de63611c75b9ddd84a3dc7ec7ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:37:5f:bb:94:f5:be:f6:c2:df:15:8d:db:f5:
60:4b:58:7b:de:32:ac:22:f9:38:d5:3f:a9:ca:03:
25:cc:79:17:73:a7:9f:8e:a7:09:7b:ae:8c:16:d6:
a2:41:b3:06:90:f3:db:a9:1f:ea:48:af:3a:14:5f:
a3:64:1d:77:a3:68:4e:29:a9:60:96:6c:90:40:b9:
61:19:42:0c:9e:c0:44:ed:b1:f8:85:9e:f7:e0:2a:
5d:21:03:47:1b:07:69:93:62:8a:ad:c0:32:ed:bd:
bf:c6:b5:42:3d:a5:6c:65:6f:43:d9:a0:83:7a:f0:
96:d0:58:b0:34:10:f9:61:f0:c6:a0:5e:f2:a0:46:
4f:a2:f4:b0:98:13:6f:c2:5f:3b:62:dd:e0:e6:38:
33:af:22:10:7c:01:aa:bc:c2:68:40:09:a9:3c:51:
39:72:7e:03:ba:a5:41:55:fb:18:74:e9:c1:e3:c3:
fe:a3:41:13:bf:5f:e3:1a:1a:dc:3c:f7:69:a6:e5:
2d:bb:a7:6a:0d:46:12:50:d0:51:11:af:55:78:65:
ad:70:9a:d5:3d:ed:3f:ea:94:84:da:39:c3:ad:c1:
f1:d7:a0:33:46:22:c9:17:7d:b8:61:a0:56:fd:90:
da:56:90:bf:69:fc:61:33:c8:c2:df:fb:a6:86:d4:
b2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:44:02:0A:A2:A2:DE:63:61:1C:75:B9:DD:D8:4A:3D:C7:EC:7E:E3
X509v3 Authority Key Identifier:
keyid:8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c9:87:a0:f0:41:cf:a5:ec:9a:4c:0d:58:5f:eb:00:71:ea:
cc:27:06:14:bb:4c:55:f3:06:7d:a9:eb:fc:e6:50:0f:13:86:
f5:b9:c8:6a:7c:d1:5a:c4:28:01:9b:d1:b0:ac:3c:eb:7d:43:
bf:8c:a0:a7:40:ba:f3:a0:b3:f5:18:c2:28:f4:06:34:21:2a:
45:e3:70:fd:8b:c2:b1:3a:e0:c1:55:84:c3:20:fc:bd:21:0e:
aa:43:a4:7a:66:b7:1c:54:9c:ac:63:d3:7f:f9:22:66:a4:ca:
b1:5e:ac:f6:35:48:6b:31:ee:a1:3b:a6:0c:4d:0c:7e:c0:f8:
b5:d0:ea:d1:ab:1b:2c:86:37:03:19:97:04:79:84:5d:a7:ac:
0d:8a:05:70:ab:c0:b9:e0:69:df:75:c3:b5:0e:3f:e6:b7:ca:
74:1d:55:59:d3:a8:65:8e:60:1f:43:8e:1e:c2:e9:44:f6:2c:
fc:9b:85:6b:a6:b1:89:5d:b6:81:8b:08:11:7b:60:02:5c:78:
c2:75:94:cd:a7:61:c2:76:58:2f:97:e6:64:ec:75:44:42:16:
c5:b6:2a:aa:b9:4d:8c:80:ab:00:c5:12:3d:3e:b2:d7:b4:03:
a0:8a:ab:a4:36:21:40:5b:e7:2c:50:4c:74:af:21:94:76:6a:
c2:8a:89:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdx9mTSFG6YiHsnIuSUmL11MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMzRmYWI5YWEzM2ViNTVkOTg1NDIzN2JkMGQyMjUyNzky
MTMyZTYwHhcNMjUwNjE1MDUwMTAyWhcNMjUwNjE2MDUwMTAyWjAzMTEwLwYDVQQD
EygzZTQ0MDIwYWEyYTJkZTYzNjExYzc1YjlkZGQ4NGEzZGM3ZWM3ZWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jdfu5T1vvbC3xWN2/VgS1h73jKs
Ivk41T+pygMlzHkXc6efjqcJe66MFtaiQbMGkPPbqR/qSK86FF+jZB13o2hOKalg
lmyQQLlhGUIMnsBE7bH4hZ734CpdIQNHGwdpk2KKrcAy7b2/xrVCPaVsZW9D2aCD
evCW0FiwNBD5YfDGoF7yoEZPovSwmBNvwl87Yt3g5jgzryIQfAGqvMJoQAmpPFE5
cn4DuqVBVfsYdOnB48P+o0ETv1/jGhrcPPdppuUtu6dqDUYSUNBREa9VeGWtcJrV
Pe0/6pSE2jnDrcHx16AzRiLJF324YaBW/ZDaVpC/afxhM8jC3/umhtSyTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD5EAgqiot5jYRx1ud3YSj3H7H7jMB8GA1UdIwQY
MBaAFI00+rmqM+tV2YVCN70NIlJ5ITLmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalRUNnVhb3o2MVhaaFVJM3ZRMGlVbmtoTXVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC82ZGU3ZmYtMzIxZS00YjQ3LWIzYzUt
NmRiMDg2YzAwZjZhLzEvalRUNnVhb3o2MVhaaFVJM3ZRMGlVbmtoTXVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC82ZGU3ZmYtMzIxZS00YjQ3LWIzYzUtNmRiMDg2YzAwZjZh
LzEvalRUNnVhb3o2MVhaaFVJM3ZRMGlVbmtoTXVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhMmHoPBB
z6XsmkwNWF/rAHHqzCcGFLtMVfMGfanr/OZQDxOG9bnIanzRWsQoAZvRsKw8631D
v4ygp0C686Cz9RjCKPQGNCEqReNw/YvCsTrgwVWEwyD8vSEOqkOkema3HFScrGPT
f/kiZqTKsV6s9jVIazHuoTumDE0MfsD4tdDq0asbLIY3AxmXBHmEXaesDYoFcKvA
ueBp33XDtQ4/5rfKdB1VWdOoZY5gH0OOHsLpRPYs/JuFa6axiV22gYsIEXtgAlx4
wnWUzadhwnZYL5fmZOx1REIWxbYqqrlNjICrAMUSPT6y17QDoIqrpDYhQFvnLFBM
dK8hlHZqwoqJVQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:57:51 2025 by rpki-client