Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
File: J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft (raw, json)
Hash identifier: WJrutewsQso9fTdkEMQqehsBpRvmp9Sqe0TUAEBA+eQ=
Subject key identifier: 55:A2:94:57:72:2B:31:08:0D:3C:9E:67:0B:6A:78:7C:BC:D9:07:4F
Authority key identifier: 27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A
Certificate issuer: /CN=27516d20ebefd12f072d413c4d2606bdb258691a
Certificate serial: 0197B7B317D8AC9C9458288714FA610F45FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
Manifest number: 0A91
Signing time: Sat 28 Jun 2025 18:00:56 +0000
Manifest this update: Sat 28 Jun 2025 18:00:56 +0000
Manifest next update: Sun 29 Jun 2025 18:00:56 +0000
Files and hashes: 1: J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl (hash: 6cdb4f7okmZA3Koker4ePH82QwCEUK8O2ZFhVZX9OzQ=)
2: XfoYu50NheNzs0VtCSRCooYU-SU.roa (hash: jh91aUsS01TW33r2YJfBHj2Cr7ZQFr1/RMMxWf8OtR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:17:d8:ac:9c:94:58:28:87:14:fa:61:0f:45:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27516d20ebefd12f072d413c4d2606bdb258691a
Validity
Not Before: Jun 28 18:00:56 2025 GMT
Not After : Jun 29 18:00:56 2025 GMT
Subject: CN=55a29457722b31080d3c9e670b6a787cbcd9074f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0f:6a:10:7b:21:3b:6b:e1:0a:b0:4e:45:29:
2c:d7:5e:12:87:d1:8d:ec:2e:5b:c9:e7:cc:c5:73:
45:63:74:9b:c3:79:18:b2:d1:b8:8f:b1:6c:89:fc:
36:4e:30:05:f5:7a:8e:f2:d3:00:9d:d9:8d:ad:2b:
95:d6:9c:8b:b5:1d:b2:11:28:4a:e1:60:8f:b3:5c:
3f:3a:2f:16:91:b6:d2:29:51:cc:7a:3b:0a:b6:6b:
1d:8a:d7:4a:0c:a2:13:33:48:11:fb:04:ac:cb:de:
6b:5a:f6:b1:86:e3:6a:f6:c7:9e:92:57:08:d5:83:
ad:56:e2:f7:73:29:b1:24:46:59:ef:d7:7b:6d:86:
2b:ce:ac:c4:8f:97:31:36:1d:14:92:f9:8d:3d:4a:
94:69:5a:79:0e:bc:0c:9c:ef:b8:29:ff:77:19:5f:
c5:3e:61:6b:18:18:22:6d:3b:62:92:89:81:01:10:
7f:ea:af:87:af:df:93:4e:4a:90:8d:b8:1e:89:b5:
08:c7:31:49:0d:ba:89:e6:49:ec:d4:60:00:7c:d2:
1e:91:18:c8:64:66:b8:de:53:e0:90:9b:c3:60:a9:
ed:2c:70:6c:79:c6:f8:cc:84:dc:db:6d:a0:88:04:
01:24:b1:a5:e0:ea:ae:47:15:f4:8b:19:36:bd:fa:
4b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A2:94:57:72:2B:31:08:0D:3C:9E:67:0B:6A:78:7C:BC:D9:07:4F
X509v3 Authority Key Identifier:
keyid:27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:41:3f:71:f6:12:64:35:98:d2:a6:eb:a9:1b:26:dd:3b:29:
8a:27:7e:75:0d:89:02:18:36:bc:fd:0e:a7:3f:95:22:16:f3:
0e:eb:4d:a9:e0:48:1f:08:e8:c7:ef:76:15:d6:95:c9:b0:b2:
03:8b:b8:7d:03:8b:3e:b4:99:6c:f4:bd:9e:42:e4:58:39:34:
79:5c:a8:9e:ea:b7:05:ef:7e:15:d6:78:e0:25:8e:71:05:24:
b8:a8:df:8c:91:da:2c:43:d7:78:24:17:39:25:0f:de:13:8a:
d7:f2:1d:d6:2c:d3:c5:78:25:ae:62:fe:fc:0e:24:8b:b9:55:
1b:c0:42:b8:db:ce:17:4f:f8:d0:51:19:8a:4b:eb:89:9f:96:
ca:7c:af:4f:88:36:f8:25:ef:94:4e:c6:05:e3:72:3c:7f:6e:
83:3b:2f:ab:e4:fc:5d:25:b4:60:c4:91:5a:a6:ad:c8:72:3b:
70:7b:a5:60:bc:8b:89:74:64:66:ff:42:4d:1a:af:11:51:f4:
19:8c:b5:21:7b:c4:31:2a:ca:06:6f:bf:9d:a8:6a:57:2c:af:
74:08:9e:5c:e8:2e:b8:42:f5:f6:91:a8:b4:f6:de:1e:f3:b7:
96:c9:66:75:f5:cb:df:9a:2d:11:32:64:74:2d:9d:75:b1:86:
b2:4b:52:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3sxfYrJyUWCiHFPphD0X6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NTE2ZDIwZWJlZmQxMmYwNzJkNDEzYzRkMjYwNmJkYjI1
ODY5MWEwHhcNMjUwNjI4MTgwMDU2WhcNMjUwNjI5MTgwMDU2WjAzMTEwLwYDVQQD
Eyg1NWEyOTQ1NzcyMmIzMTA4MGQzYzllNjcwYjZhNzg3Y2JjZDkwNzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAog9qEHshO2vhCrBORSks114Sh9GN
7C5byefMxXNFY3Sbw3kYstG4j7Fsifw2TjAF9XqO8tMAndmNrSuV1pyLtR2yEShK
4WCPs1w/Oi8WkbbSKVHMejsKtmsditdKDKITM0gR+wSsy95rWvaxhuNq9seeklcI
1YOtVuL3cymxJEZZ79d7bYYrzqzEj5cxNh0UkvmNPUqUaVp5DrwMnO+4Kf93GV/F
PmFrGBgibTtikomBARB/6q+Hr9+TTkqQjbgeibUIxzFJDbqJ5kns1GAAfNIekRjI
ZGa43lPgkJvDYKntLHBsecb4zITc222giAQBJLGl4OquRxX0ixk2vfpLDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFWilFdyKzEIDTyeZwtqeHy82QdPMB8GA1UdIwQY
MBaAFCdRbSDr79EvBy1BPE0mBr2yWGkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjFGdElPdnYwUzhITFVFOFRTWUd2YkpZYVJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy81OWQ4MDgtMTU0Zi00MmFlLWFmOGYt
NzkwMjQ0NTA4ZGY0LzEvSjFGdElPdnYwUzhITFVFOFRTWUd2YkpZYVJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy81OWQ4MDgtMTU0Zi00MmFlLWFmOGYtNzkwMjQ0NTA4ZGY0
LzEvSjFGdElPdnYwUzhITFVFOFRTWUd2YkpZYVJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAREE/cfYS
ZDWY0qbrqRsm3Tspiid+dQ2JAhg2vP0Opz+VIhbzDutNqeBIHwjox+92FdaVybCy
A4u4fQOLPrSZbPS9nkLkWDk0eVyonuq3Be9+FdZ44CWOcQUkuKjfjJHaLEPXeCQX
OSUP3hOK1/Id1izTxXglrmL+/A4ki7lVG8BCuNvOF0/40FEZikvriZ+WynyvT4g2
+CXvlE7GBeNyPH9ugzsvq+T8XSW0YMSRWqatyHI7cHulYLyLiXRkZv9CTRqvEVH0
GYy1IXvEMSrKBm+/nahqVyyvdAieXOguuEL19pGotPbeHvO3lslmdfXL35otETJk
dC2ddbGGsktSBQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:16:37 2025 by rpki-client