Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
File: JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft (raw, json)
Hash identifier: Wt74S+Mb/ZzD/RVFnLdzKRlw8dLVkMiudZP2JF6LoNc=
Subject key identifier: B6:F4:60:D0:C4:EF:22:80:4D:76:F7:32:FE:6A:B3:08:1A:D6:97:B2
Authority key identifier: 26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B
Certificate issuer: /CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
Certificate serial: 0197B77C37ECFA6697F4ADE117AC8E2B44CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 17:01:00 +0000
Manifest this update: Sat 28 Jun 2025 17:01:00 +0000
Manifest next update: Sun 29 Jun 2025 17:01:00 +0000
Files and hashes: 1: 1-29V0La4_P0UpNW2hXVyslRw2K4.roa (hash: PRcWahKcQ2LuKI711vQsn8rwzS7rSwXmqcqEY1pScJk=)
2: JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl (hash: yZMNcC2fEMvghptBD8WdjN9dYnQSudRSBIylJ1kC4bs=)
3: pGjA2Uim9v1yrTvx6Xsjk4Bq-40.roa (hash: oBPfYvQmBc3Rm7ciqYTDbiAEwbpepUx9w2RLYYy+K/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:37:ec:fa:66:97:f4:ad:e1:17:ac:8e:2b:44:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
Validity
Not Before: Jun 28 17:01:00 2025 GMT
Not After : Jun 29 17:01:00 2025 GMT
Subject: CN=b6f460d0c4ef22804d76f732fe6ab3081ad697b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d2:d1:a1:aa:de:b1:b9:92:95:b7:4f:2e:19:
a3:7d:d5:74:d0:cb:55:07:98:74:bd:62:f4:43:ac:
51:37:c7:25:85:a1:37:0d:44:7c:db:a7:dc:04:1a:
17:be:08:3d:f9:df:48:9e:cb:ef:45:bf:e3:0c:60:
1e:86:ba:5a:13:ec:01:dd:12:d9:9b:c8:c3:3d:9a:
59:89:06:f7:ea:1d:34:40:da:da:82:a3:5f:5a:01:
9a:81:8e:5f:be:79:74:6b:e6:35:a3:d2:37:05:f9:
27:3d:f9:24:ce:f7:f1:d0:eb:7d:6e:c8:ef:33:d8:
a5:ab:e2:73:86:ad:4a:29:ad:d6:0c:7e:fe:e5:97:
71:53:c1:c1:50:b8:38:41:04:85:0a:d0:dc:32:23:
42:8d:bb:1e:76:2d:a7:b6:d9:fd:1e:d7:d2:f4:a7:
e0:fd:c9:fe:95:af:60:64:64:d4:96:9e:38:97:d8:
1d:6d:f7:56:a6:25:b9:e2:c5:c9:2b:b3:24:69:e2:
6a:55:89:26:9b:1e:69:69:8e:8c:1c:16:de:7d:f7:
e4:31:af:de:2b:60:50:59:b0:50:72:08:12:35:6d:
dc:7d:e6:dc:66:a0:b9:03:a9:4a:c5:9c:74:4d:f3:
75:87:b9:c4:29:79:8a:30:79:1e:15:0e:d4:e2:32:
73:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F4:60:D0:C4:EF:22:80:4D:76:F7:32:FE:6A:B3:08:1A:D6:97:B2
X509v3 Authority Key Identifier:
keyid:26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:9b:54:b0:50:58:bb:a5:90:84:47:38:23:9d:24:bf:9b:de:
8c:98:9f:c7:a7:15:e4:0b:e7:43:7f:ac:91:11:83:c6:0a:9b:
f5:aa:ae:0f:af:1b:79:c4:9b:90:0c:1e:c4:b6:af:82:4b:44:
e7:88:9a:b8:aa:c1:96:6f:e9:e2:a6:32:33:47:7b:1f:50:96:
04:03:f1:db:0f:2f:cc:f0:14:94:f1:dd:30:15:3b:bd:16:5a:
7d:4b:b0:23:7c:08:cb:8e:98:5f:16:4d:08:b5:7a:c8:89:a2:
b2:53:ff:07:47:08:1e:4e:90:6e:72:b1:fe:b3:c9:7a:f2:be:
84:3a:ce:22:87:19:4c:d8:a7:90:05:77:4b:b2:5c:67:e7:e0:
d9:05:95:75:6e:38:db:39:9a:02:ca:c4:df:77:fd:c4:c9:c4:
bd:6b:20:96:e4:fb:64:af:7d:bc:36:c9:36:7f:ed:d4:98:b9:
ad:5e:30:86:39:7e:c6:68:53:56:c0:b4:b9:7b:79:9d:1d:a5:
c6:87:6b:9f:65:81:6b:c1:80:52:fe:70:62:e5:37:01:40:0e:
87:ff:a7:37:cd:55:3f:6c:6a:90:ff:23:75:16:8b:89:80:8c:
d9:63:83:1e:8e:ac:52:34:71:fa:62:a7:83:9c:08:93:3b:d7:
32:73:7e:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fDfs+maX9K3hF6yOK0TPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2ODFiN2I0YWUzZTc1ZGM0YjM2Y2ZmMjkzNzkyM2VjZGZm
NzI1OWIwHhcNMjUwNjI4MTcwMTAwWhcNMjUwNjI5MTcwMTAwWjAzMTEwLwYDVQQD
EyhiNmY0NjBkMGM0ZWYyMjgwNGQ3NmY3MzJmZTZhYjMwODFhZDY5N2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNLRoaresbmSlbdPLhmjfdV00MtV
B5h0vWL0Q6xRN8clhaE3DUR826fcBBoXvgg9+d9InsvvRb/jDGAehrpaE+wB3RLZ
m8jDPZpZiQb36h00QNragqNfWgGagY5fvnl0a+Y1o9I3BfknPfkkzvfx0Ot9bsjv
M9ilq+Jzhq1KKa3WDH7+5ZdxU8HBULg4QQSFCtDcMiNCjbsedi2nttn9HtfS9Kfg
/cn+la9gZGTUlp44l9gdbfdWpiW54sXJK7MkaeJqVYkmmx5paY6MHBbefffkMa/e
K2BQWbBQcggSNW3cfebcZqC5A6lKxZx0TfN1h7nEKXmKMHkeFQ7U4jJzTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLb0YNDE7yKATXb3Mv5qswga1peyMB8GA1UdIwQY
MBaAFCaBt7SuPnXcSzbP8pN5I+zf9yWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm9HM3RLNC1kZHhMTnNfeWsza2o3Tl8zSlpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC85Nzg4NzEtMjU1Yi00NDNhLThlMDEt
ZmM4MzliYjZkMTczLzEvSm9HM3RLNC1kZHhMTnNfeWsza2o3Tl8zSlpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC85Nzg4NzEtMjU1Yi00NDNhLThlMDEtZmM4MzliYjZkMTcz
LzEvSm9HM3RLNC1kZHhMTnNfeWsza2o3Tl8zSlpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS5tUsFBY
u6WQhEc4I50kv5vejJifx6cV5AvnQ3+skRGDxgqb9aquD68becSbkAwexLavgktE
54iauKrBlm/p4qYyM0d7H1CWBAPx2w8vzPAUlPHdMBU7vRZafUuwI3wIy46YXxZN
CLV6yImislP/B0cIHk6QbnKx/rPJevK+hDrOIocZTNinkAV3S7JcZ+fg2QWVdW44
2zmaAsrE33f9xMnEvWsgluT7ZK99vDbJNn/t1Ji5rV4whjl+xmhTVsC0uXt5nR2l
xodrn2WBa8GAUv5wYuU3AUAOh/+nN81VP2xqkP8jdRaLiYCM2WODHo6sUjRx+mKn
g5wIkzvXMnN+ag==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:37:08 2025 by rpki-client