Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
File: jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft (raw, json)
Hash identifier: GnRUW/GkGW3wG8/KrEprSg4+TYkLAQE0HGuXQh4XDB4=
Subject key identifier: 62:46:73:EA:08:6F:E1:E6:27:B4:C1:C2:1E:EB:E3:DD:C2:11:CF:EC
Authority key identifier: 8C:D5:24:39:CA:C2:71:9B:64:E8:5B:26:FF:0E:A8:46:8D:57:96:0E
Certificate issuer: /CN=8cd52439cac2719b64e85b26ff0ea8468d57960e
Certificate serial: 0197C4933DDB042EA5410919ABAC6EED4434
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
Manifest number: 15BD
Signing time: Tue 01 Jul 2025 06:01:13 +0000
Manifest this update: Tue 01 Jul 2025 06:01:13 +0000
Manifest next update: Wed 02 Jul 2025 06:01:13 +0000
Files and hashes: 1: 7jEmnnvVVJelmr8qrjn50rWFOcw.roa (hash: EchIPXfoij0iDBazd31BWfFW6DqbRboeZNJcaicEn4E=)
2: aRZdBae0vWh1J6sn44sYIdyVlG8.roa (hash: w9fqOKBIoaM9G2/C9dOdVNyy6b2w4OHx2wQuYWhSANs=)
3: jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl (hash: ZiPA5lV8nShedr47ddHWExzb90hnbi7bRCCNcmuLs08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:93:3d:db:04:2e:a5:41:09:19:ab:ac:6e:ed:44:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd52439cac2719b64e85b26ff0ea8468d57960e
Validity
Not Before: Jul 1 06:01:13 2025 GMT
Not After : Jul 2 06:01:13 2025 GMT
Subject: CN=624673ea086fe1e627b4c1c21eebe3ddc211cfec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ea:6a:f5:b2:6b:77:53:1e:75:ce:45:52:63:
ca:03:ba:5c:21:25:28:20:ed:73:ec:ff:21:09:31:
ea:29:bc:7d:b2:4b:fc:3b:bb:96:ff:36:61:a3:d7:
73:d8:ab:2e:58:fb:43:0f:0c:df:2c:b7:65:78:a0:
d0:3e:ff:00:ca:37:9b:0f:c5:cf:72:04:e9:85:00:
97:f0:f3:29:d1:ff:6c:94:51:5d:83:72:d3:91:c1:
33:02:65:6f:15:14:6d:40:71:78:29:50:4a:b9:f3:
b8:3c:44:0c:f5:de:dd:f7:07:32:32:33:05:9d:44:
4e:15:d0:f9:e6:c7:c1:8a:b5:75:22:a5:12:c1:c1:
bc:b9:0a:5b:8a:62:3a:77:46:b7:44:f8:be:3e:3f:
db:74:09:c9:8a:c5:43:77:03:ea:57:fc:8b:2b:a8:
aa:83:1a:11:09:fa:5f:3a:0a:ac:4e:5b:a9:2f:2c:
b2:61:a7:44:c3:3b:2c:48:38:4f:fb:8a:ae:06:c3:
6d:49:96:fe:97:ba:b7:3e:fc:c5:78:ff:95:ae:c7:
17:f6:f9:fe:66:56:89:ef:4b:b4:58:4e:78:f7:67:
a8:8c:6d:19:af:c5:f7:f0:36:9e:75:d9:41:14:a5:
c0:1d:a4:5a:1b:b7:ac:1a:4a:04:59:a5:05:75:3b:
62:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:46:73:EA:08:6F:E1:E6:27:B4:C1:C2:1E:EB:E3:DD:C2:11:CF:EC
X509v3 Authority Key Identifier:
keyid:8C:D5:24:39:CA:C2:71:9B:64:E8:5B:26:FF:0E:A8:46:8D:57:96:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:e3:89:07:81:53:ba:2d:c1:78:90:54:4e:a6:fa:0e:05:3b:
06:3e:c8:5a:b7:c1:0c:c3:bb:69:3f:2d:2c:a0:99:8e:1e:23:
b8:c2:f1:cb:ea:e2:30:3c:a8:14:e9:cb:50:e6:e9:49:af:ea:
89:92:5f:68:5e:2f:2d:4b:35:67:98:97:a6:e3:7b:39:d7:07:
82:af:74:fe:c7:01:2a:78:f3:00:d6:1d:45:a0:a4:af:ba:c9:
43:4d:36:82:92:c7:0a:20:0e:be:8a:16:f4:26:2c:28:8d:b8:
e5:89:d0:4b:ea:5d:fb:bc:eb:24:d1:92:42:b5:8f:04:3c:20:
85:0b:2b:de:e6:b6:e1:90:f3:62:34:f8:b6:25:a9:2a:ad:9a:
7f:15:81:a1:40:61:83:e5:66:10:82:1a:a7:f4:7a:fc:40:54:
e2:85:35:b5:0e:51:d8:20:ae:b2:68:fd:69:e4:b2:90:33:c7:
0f:39:7b:3b:c7:ae:df:77:ac:ed:7b:4f:91:8d:de:37:2a:60:
27:6c:e9:bb:f0:23:6f:19:3c:8e:60:9f:19:b2:55:9f:f3:5d:
8b:f0:ce:85:1d:ce:0a:20:28:ff:c3:1c:1c:99:55:85:15:3f:
86:2b:38:12:8e:a1:d5:1e:3e:d3:8a:de:f9:ac:09:93:0b:3d:
31:f2:9c:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfEkz3bBC6lQQkZq6xu7UQ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZDUyNDM5Y2FjMjcxOWI2NGU4NWIyNmZmMGVhODQ2OGQ1
Nzk2MGUwHhcNMjUwNzAxMDYwMTEzWhcNMjUwNzAyMDYwMTEzWjAzMTEwLwYDVQQD
Eyg2MjQ2NzNlYTA4NmZlMWU2MjdiNGMxYzIxZWViZTNkZGMyMTFjZmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxupq9bJrd1Medc5FUmPKA7pcISUo
IO1z7P8hCTHqKbx9skv8O7uW/zZho9dz2KsuWPtDDwzfLLdleKDQPv8AyjebD8XP
cgTphQCX8PMp0f9slFFdg3LTkcEzAmVvFRRtQHF4KVBKufO4PEQM9d7d9wcyMjMF
nUROFdD55sfBirV1IqUSwcG8uQpbimI6d0a3RPi+Pj/bdAnJisVDdwPqV/yLK6iq
gxoRCfpfOgqsTlupLyyyYadEwzssSDhP+4quBsNtSZb+l7q3PvzFeP+VrscX9vn+
ZlaJ70u0WE5492eojG0Zr8X38DaeddlBFKXAHaRaG7esGkoEWaUFdTtiywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJGc+oIb+HmJ7TBwh7r493CEc/sMB8GA1UdIwQY
MBaAFIzVJDnKwnGbZOhbJv8OqEaNV5YOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak5Va09jckNjWnRrNkZzbV93Nm9SbzFYbGc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jZDM3MTEtNzA4NC00YjE1LWJjMjUt
M2U0YTAyNmRmMDAwLzEvak5Va09jckNjWnRrNkZzbV93Nm9SbzFYbGc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9jZDM3MTEtNzA4NC00YjE1LWJjMjUtM2U0YTAyNmRmMDAw
LzEvak5Va09jckNjWnRrNkZzbV93Nm9SbzFYbGc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr+OJB4FT
ui3BeJBUTqb6DgU7Bj7IWrfBDMO7aT8tLKCZjh4juMLxy+riMDyoFOnLUObpSa/q
iZJfaF4vLUs1Z5iXpuN7OdcHgq90/scBKnjzANYdRaCkr7rJQ002gpLHCiAOvooW
9CYsKI245YnQS+pd+7zrJNGSQrWPBDwghQsr3ua24ZDzYjT4tiWpKq2afxWBoUBh
g+VmEIIap/R6/EBU4oU1tQ5R2CCusmj9aeSykDPHDzl7O8eu33es7XtPkY3eNypg
J2zpu/Ajbxk8jmCfGbJVn/Ndi/DOhR3OCiAo/8McHJlVhRU/his4Eo6h1R4+04re
+awJkws9MfKcxw==
-----END CERTIFICATE-----
Generated at Tue Jul 1 07:51:45 2025 by rpki-client