Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
File: jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft (raw, json)
Hash identifier: UaQ+jfdTXjcA9J4z0DUfXR5bSoFNCWFZVU7AF+V19X4=
Subject key identifier: 24:E6:79:6E:5B:D7:BD:E2:55:F7:92:E0:45:EE:19:A5:4D:13:B1:CF
Authority key identifier: 8E:5A:41:80:02:7D:92:3D:9F:E0:C9:57:0C:90:B9:D1:30:8F:A6:72
Certificate issuer: /CN=8e5a4180027d923d9fe0c9570c90b9d1308fa672
Certificate serial: 0197B8900D4BC54A500955EDD5F4A0942B8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
Manifest number: 04C8
Signing time: Sat 28 Jun 2025 22:02:17 +0000
Manifest this update: Sat 28 Jun 2025 22:02:17 +0000
Manifest next update: Sun 29 Jun 2025 22:02:17 +0000
Files and hashes: 1: jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl (hash: VY3P7ksQFoE9evYzsS2qpIhA/vzh4HSewHroALV8aB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:0d:4b:c5:4a:50:09:55:ed:d5:f4:a0:94:2b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5a4180027d923d9fe0c9570c90b9d1308fa672
Validity
Not Before: Jun 28 22:02:17 2025 GMT
Not After : Jun 29 22:02:17 2025 GMT
Subject: CN=24e6796e5bd7bde255f792e045ee19a54d13b1cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:43:6c:a1:58:07:bc:63:42:d1:8f:e1:44:5e:
38:67:d1:6e:49:e1:4a:13:53:cd:d6:3e:bd:a5:b3:
3e:90:9a:4a:b6:9a:0d:7d:92:47:65:6b:19:d8:76:
c2:04:c5:7e:cf:83:25:86:69:74:15:91:96:af:6d:
6a:ae:96:d6:00:ae:24:7d:23:21:4a:e1:ba:d3:aa:
ef:30:8e:b0:f8:6c:a0:7b:d7:aa:cf:70:f6:a3:74:
72:13:fa:71:9f:14:c7:b6:88:7a:7d:7b:ff:8e:e5:
2d:f8:f5:7a:68:dc:55:40:bc:e3:b0:18:13:6c:c8:
6b:10:a6:99:77:23:e8:c3:3e:9b:64:5f:a7:03:db:
56:03:9a:41:ea:ab:50:97:56:2d:0f:cd:e1:6d:04:
9e:cb:02:b1:d9:61:3d:72:e2:3e:8e:b7:5a:b8:5d:
b9:d7:36:db:4e:e1:ff:4a:35:79:2b:15:71:a9:0f:
1d:3a:99:de:7f:a7:09:e7:6a:f1:8f:8f:9a:af:45:
1f:c0:44:06:b9:42:5c:30:d9:00:04:0d:f2:14:20:
b4:15:54:65:81:8e:41:62:02:38:db:eb:58:1f:0d:
3b:c5:ce:0a:9e:b6:76:fe:47:82:de:3a:e2:21:d8:
32:bb:a3:85:7f:9a:cb:01:b7:be:77:06:1e:da:6d:
b0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E6:79:6E:5B:D7:BD:E2:55:F7:92:E0:45:EE:19:A5:4D:13:B1:CF
X509v3 Authority Key Identifier:
keyid:8E:5A:41:80:02:7D:92:3D:9F:E0:C9:57:0C:90:B9:D1:30:8F:A6:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:b7:82:2b:1a:a2:b8:59:7e:c9:a2:83:af:44:18:55:52:1f:
53:7a:96:4d:8c:ef:ae:04:04:00:23:58:9d:a1:08:3c:82:f4:
9c:e3:8e:dc:c8:1f:2f:4a:68:26:3c:3a:80:83:a0:9a:4b:65:
10:20:c3:fe:14:de:db:6e:09:df:ee:e9:97:77:7e:2e:7e:02:
d2:e9:df:61:44:a1:f9:d2:07:73:15:52:02:ee:8b:4b:cd:3d:
58:02:27:6f:e4:4a:ef:25:0b:ca:8a:09:e7:11:1a:39:ea:a7:
01:e0:fe:2a:28:c1:e4:d6:5c:5e:10:a4:fc:fd:61:cd:46:98:
54:c7:6c:20:b4:ca:ee:0c:7f:50:95:12:a3:a0:d0:50:11:3c:
35:92:f5:4c:64:32:f4:8d:02:15:44:14:ee:da:6d:d2:93:43:
d1:7d:3b:49:06:26:63:26:a1:b6:18:d8:35:ed:22:54:8e:0c:
e5:f5:45:f0:9e:c7:73:98:7a:ff:f1:62:a8:e4:82:16:ed:04:
77:89:b7:4a:2f:27:2a:6b:30:9e:bb:a9:eb:de:67:b5:02:ee:
06:f4:fd:e4:61:b1:de:b9:d5:c2:3d:65:13:92:e7:f5:92:27:
45:9d:4b:3f:f5:38:f8:e2:19:05:5a:9f:55:ce:3a:12:42:6a:
d5:71:2c:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4kA1LxUpQCVXt1fSglCuPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNWE0MTgwMDI3ZDkyM2Q5ZmUwYzk1NzBjOTBiOWQxMzA4
ZmE2NzIwHhcNMjUwNjI4MjIwMjE3WhcNMjUwNjI5MjIwMjE3WjAzMTEwLwYDVQQD
EygyNGU2Nzk2ZTViZDdiZGUyNTVmNzkyZTA0NWVlMTlhNTRkMTNiMWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkNsoVgHvGNC0Y/hRF44Z9FuSeFK
E1PN1j69pbM+kJpKtpoNfZJHZWsZ2HbCBMV+z4Mlhml0FZGWr21qrpbWAK4kfSMh
SuG606rvMI6w+Gyge9eqz3D2o3RyE/pxnxTHtoh6fXv/juUt+PV6aNxVQLzjsBgT
bMhrEKaZdyPowz6bZF+nA9tWA5pB6qtQl1YtD83hbQSeywKx2WE9cuI+jrdauF25
1zbbTuH/SjV5KxVxqQ8dOpnef6cJ52rxj4+ar0UfwEQGuUJcMNkABA3yFCC0FVRl
gY5BYgI42+tYHw07xc4KnrZ2/keC3jriIdgyu6OFf5rLAbe+dwYe2m2wAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTmeW5b173iVfeS4EXuGaVNE7HPMB8GA1UdIwQY
MBaAFI5aQYACfZI9n+DJVwyQudEwj6ZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamxwQmdBSjlrajJmNE1sWERKQzUwVENQcG5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC81OTAwZmMtZDllMC00YWY2LWE5ZTIt
NWY5ODdlMWVjMDM1LzEvamxwQmdBSjlrajJmNE1sWERKQzUwVENQcG5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC81OTAwZmMtZDllMC00YWY2LWE5ZTItNWY5ODdlMWVjMDM1
LzEvamxwQmdBSjlrajJmNE1sWERKQzUwVENQcG5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAabeCKxqi
uFl+yaKDr0QYVVIfU3qWTYzvrgQEACNYnaEIPIL0nOOO3MgfL0poJjw6gIOgmktl
ECDD/hTe224J3+7pl3d+Ln4C0unfYUSh+dIHcxVSAu6LS809WAInb+RK7yULyooJ
5xEaOeqnAeD+KijB5NZcXhCk/P1hzUaYVMdsILTK7gx/UJUSo6DQUBE8NZL1TGQy
9I0CFUQU7tpt0pND0X07SQYmYyahthjYNe0iVI4M5fVF8J7Hc5h6//FiqOSCFu0E
d4m3Si8nKmswnrup695ntQLuBvT95GGx3rnVwj1lE5Ln9ZInRZ1LP/U4+OIZBVqf
Vc46EkJq1XEsZg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:08:28 2025 by rpki-client