Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
File: JzWNbTPibSr4Q9WB3PacDREKneg.mft (raw, json)
Hash identifier: J5WWcHshujGSbCvGZj0pBeGpY+/9aUwf0x9XLED9nE4=
Subject key identifier: C2:6E:77:74:38:C2:59:0A:3A:20:E3:17:2E:4A:52:FD:CE:09:70:D5
Authority key identifier: 27:35:8D:6D:33:E2:6D:2A:F8:43:D5:81:DC:F6:9C:0D:11:0A:9D:E8
Certificate issuer: /CN=27358d6d33e26d2af843d581dcf69c0d110a9de8
Certificate serial: 0197B7456D6AEA980F90FDE09E5F05BDA70F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
Manifest number: 01CF
Signing time: Sat 28 Jun 2025 16:01:09 +0000
Manifest this update: Sat 28 Jun 2025 16:01:09 +0000
Manifest next update: Sun 29 Jun 2025 16:01:09 +0000
Files and hashes: 1: JzWNbTPibSr4Q9WB3PacDREKneg.crl (hash: BLgax9dM7QfAqnTImn5Y4mLNXTtVPeoZkLnNUNnLiLY=)
2: xCvl2MPRqLFevw92K1xWqEyP8xM.roa (hash: x5lJC5gSbKWJztGnWxiyT9yj/ffbvJ91buVaYTLqpME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:6d:6a:ea:98:0f:90:fd:e0:9e:5f:05:bd:a7:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27358d6d33e26d2af843d581dcf69c0d110a9de8
Validity
Not Before: Jun 28 16:01:09 2025 GMT
Not After : Jun 29 16:01:09 2025 GMT
Subject: CN=c26e777438c2590a3a20e3172e4a52fdce0970d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:23:06:1f:7b:b9:74:7b:5e:a2:b5:1e:97:1c:
86:1b:a1:d3:dd:0c:ba:9b:2d:0b:77:5f:1f:e4:7e:
04:49:d3:05:57:0c:ee:46:2c:c9:83:38:ae:4c:db:
a4:ca:57:ed:3a:58:28:04:23:57:99:b0:7a:ea:09:
3d:87:00:1a:e1:8c:a1:20:59:0d:00:69:05:40:83:
cb:8b:40:20:2d:0c:2d:43:2b:aa:c5:d0:e6:73:91:
1b:6c:ac:ad:e2:26:79:1c:cd:aa:62:3b:aa:c7:c5:
2b:9f:14:ed:b7:b5:66:d1:73:b3:ae:97:2d:75:45:
13:ff:fd:30:c9:cb:f7:48:0f:d0:56:c2:91:8e:f6:
a0:78:88:66:28:d2:80:2a:d0:a3:76:03:f5:89:fd:
41:86:81:6f:65:b6:44:e7:ad:0f:64:f9:63:49:a1:
93:bc:c8:a7:80:79:a5:b1:56:90:da:3e:ce:9f:e0:
0b:6f:74:fd:e6:63:5f:5c:85:b9:df:e7:4b:a6:e3:
13:50:07:00:49:cd:42:3d:5d:9b:ca:cc:05:9c:30:
8a:3c:5c:9c:a8:c3:6a:2a:e7:0c:e3:cb:0e:66:e7:
76:f9:8a:47:88:2e:ee:ac:4b:32:62:61:91:7f:f9:
78:02:2f:8e:42:dd:7a:c1:c8:42:4b:d5:57:04:7c:
24:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6E:77:74:38:C2:59:0A:3A:20:E3:17:2E:4A:52:FD:CE:09:70:D5
X509v3 Authority Key Identifier:
keyid:27:35:8D:6D:33:E2:6D:2A:F8:43:D5:81:DC:F6:9C:0D:11:0A:9D:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:63:8c:1d:8e:d5:35:57:13:3a:f0:0e:73:da:cf:fc:1c:74:
b0:a2:65:79:11:73:69:6a:98:2f:d2:2f:d1:a1:5d:da:88:a8:
e9:88:cc:6d:80:26:69:86:66:b4:7f:b7:d6:68:fc:5c:29:47:
8b:06:d6:77:5f:c3:0d:92:07:fd:6b:e9:90:2c:c5:69:d5:ee:
f8:80:1c:7b:97:89:a4:e2:b7:ea:b0:ac:8f:66:97:f3:d6:75:
66:dd:81:94:95:ac:d9:a2:07:ad:bf:68:eb:08:38:1a:27:98:
71:d9:0e:2b:bb:8d:6d:51:95:fa:9a:73:db:81:6c:cb:26:f1:
64:ba:8a:dd:36:d6:5b:87:63:51:2e:e8:3d:b1:c2:b2:72:d6:
6b:04:00:6c:39:b3:86:f7:66:c3:37:72:f7:0b:c0:64:c7:ff:
8f:e4:47:6b:09:ed:c0:cb:4a:5a:54:f0:fc:0c:b5:16:dc:b3:
00:ba:86:cb:16:db:f9:02:97:2c:89:f6:3e:de:07:ff:13:67:
f8:97:5b:f9:df:0d:98:56:ca:79:bf:14:7c:c6:f0:f7:df:42:
67:58:79:bf:d4:9d:8e:bb:6c:fa:d1:26:c2:f0:ee:8f:42:dc:
a6:6e:cf:50:96:b1:cd:8f:17:6b:29:7a:8d:14:44:2c:86:f7:
d6:a3:74:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RW1q6pgPkP3gnl8FvacPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MzU4ZDZkMzNlMjZkMmFmODQzZDU4MWRjZjY5YzBkMTEw
YTlkZTgwHhcNMjUwNjI4MTYwMTA5WhcNMjUwNjI5MTYwMTA5WjAzMTEwLwYDVQQD
EyhjMjZlNzc3NDM4YzI1OTBhM2EyMGUzMTcyZTRhNTJmZGNlMDk3MGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiMGH3u5dHteorUelxyGG6HT3Qy6
my0Ld18f5H4ESdMFVwzuRizJgziuTNukylftOlgoBCNXmbB66gk9hwAa4YyhIFkN
AGkFQIPLi0AgLQwtQyuqxdDmc5EbbKyt4iZ5HM2qYjuqx8UrnxTtt7Vm0XOzrpct
dUUT//0wycv3SA/QVsKRjvageIhmKNKAKtCjdgP1if1BhoFvZbZE560PZPljSaGT
vMingHmlsVaQ2j7On+ALb3T95mNfXIW53+dLpuMTUAcASc1CPV2byswFnDCKPFyc
qMNqKucM48sOZud2+YpHiC7urEsyYmGRf/l4Ai+OQt16wchCS9VXBHwkDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJud3Q4wlkKOiDjFy5KUv3OCXDVMB8GA1UdIwQY
MBaAFCc1jW0z4m0q+EPVgdz2nA0RCp3oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnpXTmJUUGliU3I0UTlXQjNQYWNEUkVLbmVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mYzE4ZjMtYzBkYi00Y2QyLWEwODMt
NDI2ZDlmZjIwN2QxLzEvSnpXTmJUUGliU3I0UTlXQjNQYWNEUkVLbmVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mYzE4ZjMtYzBkYi00Y2QyLWEwODMtNDI2ZDlmZjIwN2Qx
LzEvSnpXTmJUUGliU3I0UTlXQjNQYWNEUkVLbmVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA2OMHY7V
NVcTOvAOc9rP/Bx0sKJleRFzaWqYL9Iv0aFd2oio6YjMbYAmaYZmtH+31mj8XClH
iwbWd1/DDZIH/WvpkCzFadXu+IAce5eJpOK36rCsj2aX89Z1Zt2BlJWs2aIHrb9o
6wg4GieYcdkOK7uNbVGV+ppz24FsyybxZLqK3TbWW4djUS7oPbHCsnLWawQAbDmz
hvdmwzdy9wvAZMf/j+RHawntwMtKWlTw/Ay1FtyzALqGyxbb+QKXLIn2Pt4H/xNn
+Jdb+d8NmFbKeb8UfMbw999CZ1h5v9Sdjrts+tEmwvDuj0Lcpm7PUJaxzY8Xayl6
jRRELIb31qN0Xg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 18:52:58 2025 by rpki-client