Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
File: jNzyb3SGBYjKxrrhf5neItvEmuY.mft (raw, json)
Hash identifier: e0xiZWa2nzTXj5ZrwAOdCiF9vTiZkDZ/SVTeEIvQric=
Subject key identifier: C4:E9:F4:E0:6B:18:5C:2A:B1:9A:73:23:ED:16:87:7C:A1:CF:31:A3
Authority key identifier: 8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
Certificate issuer: /CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Certificate serial: 0197B96A80F0E8583B849448E59206324984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
Manifest number: 15BC
Signing time: Sun 29 Jun 2025 02:00:54 +0000
Manifest this update: Sun 29 Jun 2025 02:00:54 +0000
Manifest next update: Mon 30 Jun 2025 02:00:54 +0000
Files and hashes: 1: jNzyb3SGBYjKxrrhf5neItvEmuY.crl (hash: IO1Wlil9lie98siKAES3Rlqa3ecBNLRv+djBBXYB888=)
2: nE8Xo_fpUw6ElJP9CBp37mVdbvg.roa (hash: dylbw9FFNOC/9ham5DxR+U09aH9ubZH/opQ+2bz68ow=)
3: nMDCAx4S7BvyRseCP1AtruhoXlQ.roa (hash: MzKXqieiYhEALeqU1AUv5CMaIkFtOJxEDtJDUquvAg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:80:f0:e8:58:3b:84:94:48:e5:92:06:32:49:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Validity
Not Before: Jun 29 02:00:54 2025 GMT
Not After : Jun 30 02:00:54 2025 GMT
Subject: CN=c4e9f4e06b185c2ab19a7323ed16877ca1cf31a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ab:8d:b2:b8:35:4f:1b:77:aa:d2:7e:ef:64:
1d:9b:f4:a1:67:ea:e1:4d:f9:5c:33:f9:9d:51:d9:
ef:3f:ed:f4:c4:f1:e2:da:17:5a:36:93:77:63:09:
3a:41:3c:5a:38:9d:59:25:3c:b5:b6:75:fb:6f:28:
c6:7a:17:e3:84:c6:f4:69:4b:0f:3a:57:4f:f6:dc:
39:6a:99:91:f2:9b:ac:e4:cc:85:55:6d:d4:a2:18:
86:3f:06:a2:a6:9c:c5:be:3e:d4:77:e8:3e:05:c0:
b1:29:8e:51:b3:b8:2d:c2:01:06:20:a2:40:f4:98:
fd:5b:e1:d7:4e:a6:17:34:69:29:cb:39:6b:6d:a9:
a0:35:2b:7d:0b:77:66:f0:83:42:b5:3d:78:e8:38:
fb:c0:f2:83:3f:28:53:7c:02:9e:6d:07:58:47:d9:
e2:5b:f1:f4:03:12:ce:55:5d:79:04:8c:8e:2c:a0:
64:6c:74:4d:5a:94:d7:75:3f:a0:2c:af:1b:04:23:
ef:41:a0:48:1d:a3:b1:7e:b2:ec:a6:f4:d4:3f:57:
0a:27:40:52:21:d3:b8:0f:55:34:92:0e:09:0a:0f:
03:32:e2:65:05:a2:72:3e:1a:7d:2f:89:68:81:4f:
a3:8e:3e:f1:ee:cc:dd:0e:54:e1:27:09:f2:4f:97:
d4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E9:F4:E0:6B:18:5C:2A:B1:9A:73:23:ED:16:87:7C:A1:CF:31:A3
X509v3 Authority Key Identifier:
keyid:8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:41:e1:27:aa:d9:6b:96:3c:2c:88:76:70:7f:d1:f1:95:3d:
ed:c0:5a:1b:a8:26:e4:ad:20:03:49:01:23:61:c4:f3:83:72:
4f:4b:85:98:86:39:b4:c2:39:70:2f:d6:d1:62:1d:5b:c2:53:
85:84:e0:65:c1:a3:3f:eb:10:8e:1f:3c:02:ec:02:b6:6a:20:
d0:a2:3f:1c:98:b4:ba:7c:aa:97:88:8e:b8:2e:41:f2:57:3e:
89:1c:99:b5:ef:ae:52:31:d0:ce:db:38:14:71:ec:c5:b4:3c:
dd:9f:30:13:c7:fc:d1:b9:53:92:e9:3a:eb:d5:a8:e2:9b:6c:
f2:45:5a:72:ee:b4:22:08:f3:4d:ce:f2:17:20:a4:89:f6:ce:
09:67:bf:af:4b:3f:4e:7c:ca:0c:83:1b:f4:07:e2:96:07:47:
77:eb:b5:6c:59:c9:f6:78:83:e4:17:a7:27:1e:6f:5d:53:92:
58:7e:9c:72:1f:e3:e2:a6:50:ec:0d:51:6c:85:66:cc:d1:21:
41:fd:db:6b:ce:08:3d:8f:3d:a6:4b:da:34:8a:60:f6:df:bb:
94:25:7b:5b:93:19:d0:0b:d9:cb:93:23:94:d7:ef:e9:ec:1b:
f1:f7:09:a8:88:0e:84:be:4b:3c:3c:d6:e2:1f:5b:e2:42:e8:
86:8e:af:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5aoDw6Fg7hJRI5ZIGMkmEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZGNmMjZmNzQ4NjA1ODhjYWM2YmFlMTdmOTlkZTIyZGJj
NDlhZTYwHhcNMjUwNjI5MDIwMDU0WhcNMjUwNjMwMDIwMDU0WjAzMTEwLwYDVQQD
EyhjNGU5ZjRlMDZiMTg1YzJhYjE5YTczMjNlZDE2ODc3Y2ExY2YzMWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKuNsrg1Txt3qtJ+72Qdm/ShZ+rh
TflcM/mdUdnvP+30xPHi2hdaNpN3Ywk6QTxaOJ1ZJTy1tnX7byjGehfjhMb0aUsP
OldP9tw5apmR8pus5MyFVW3UohiGPwaippzFvj7Ud+g+BcCxKY5Rs7gtwgEGIKJA
9Jj9W+HXTqYXNGkpyzlrbamgNSt9C3dm8INCtT146Dj7wPKDPyhTfAKebQdYR9ni
W/H0AxLOVV15BIyOLKBkbHRNWpTXdT+gLK8bBCPvQaBIHaOxfrLspvTUP1cKJ0BS
IdO4D1U0kg4JCg8DMuJlBaJyPhp9L4logU+jjj7x7szdDlThJwnyT5fUCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMTp9OBrGFwqsZpzI+0Wh3yhzzGjMB8GA1UdIwQY
MBaAFIzc8m90hgWIysa64X+Z3iLbxJrmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak56eWIzU0dCWWpLeHJyaGY1bmVJdHZFbXVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9kNWIxYTctNDY2ZC00NzFjLWE3MGMt
MmZiMjVhYmZkYzUzLzEvak56eWIzU0dCWWpLeHJyaGY1bmVJdHZFbXVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9kNWIxYTctNDY2ZC00NzFjLWE3MGMtMmZiMjVhYmZkYzUz
LzEvak56eWIzU0dCWWpLeHJyaGY1bmVJdHZFbXVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb0HhJ6rZ
a5Y8LIh2cH/R8ZU97cBaG6gm5K0gA0kBI2HE84NyT0uFmIY5tMI5cC/W0WIdW8JT
hYTgZcGjP+sQjh88AuwCtmog0KI/HJi0unyql4iOuC5B8lc+iRyZte+uUjHQzts4
FHHsxbQ83Z8wE8f80blTkuk669Wo4pts8kVacu60IgjzTc7yFyCkifbOCWe/r0s/
TnzKDIMb9AfilgdHd+u1bFnJ9niD5BenJx5vXVOSWH6cch/j4qZQ7A1RbIVmzNEh
Qf3ba84IPY89pkvaNIpg9t+7lCV7W5MZ0AvZy5MjlNfv6ewb8fcJqIgOhL5LPDzW
4h9b4kLoho6vBA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:07:18 2025 by rpki-client