Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
File: JUdfWtnsz_acNaYw3P8sWmY_188.mft (raw, json)
Hash identifier: aIpBHAfIxTXNZXMMnmGmXGwrBeoUFRsP8X38i5KKpUM=
Subject key identifier: B8:24:73:3A:C4:B8:E4:AA:6E:11:D6:31:B4:15:C9:D7:7A:FA:99:38
Authority key identifier: 25:47:5F:5A:D9:EC:CF:F6:9C:35:A6:30:DC:FF:2C:5A:66:3F:D7:CF
Certificate issuer: /CN=25475f5ad9eccff69c35a630dcff2c5a663fd7cf
Certificate serial: 0197B6A053C1B6C5BFFFFD965DBF845E2B27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:00:49 +0000
Manifest this update: Sat 28 Jun 2025 13:00:49 +0000
Manifest next update: Sun 29 Jun 2025 13:00:49 +0000
Files and hashes: 1: JUdfWtnsz_acNaYw3P8sWmY_188.crl (hash: XpvDDrH/T3zNsD6in4NmLnagFa5fyUISz0pfmiflYhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:53:c1:b6:c5:bf:ff:fd:96:5d:bf:84:5e:2b:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25475f5ad9eccff69c35a630dcff2c5a663fd7cf
Validity
Not Before: Jun 28 13:00:49 2025 GMT
Not After : Jun 29 13:00:49 2025 GMT
Subject: CN=b824733ac4b8e4aa6e11d631b415c9d77afa9938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0b:8a:c7:73:6d:82:35:ef:8f:07:61:cd:da:
1d:05:a4:0a:2b:55:a7:37:ee:02:8d:b1:74:4e:c8:
5d:a4:86:a9:59:5d:c7:6f:0d:98:ae:b4:e5:4e:07:
cc:03:df:1e:89:3e:d3:2c:c8:bb:6e:16:ed:54:b2:
41:24:24:8d:d9:86:e1:2d:38:ff:d7:85:bf:d3:46:
4d:d2:2b:a4:ac:d9:e9:1a:dd:eb:d2:99:1e:43:36:
48:b6:f4:d9:d9:e9:d7:a4:12:93:8d:ab:0d:31:2b:
0e:03:9a:62:43:fa:9e:49:9a:48:10:56:bf:4c:1c:
3f:d0:9c:58:b1:03:97:6e:a1:3b:dc:07:46:fd:bd:
09:58:54:e3:62:00:27:5e:b7:81:b9:b0:ea:9c:97:
25:e9:55:ac:f8:82:ce:70:e8:03:1e:9e:a1:08:f2:
1e:83:80:1d:79:02:63:4f:68:66:9c:db:dd:45:31:
16:97:49:ab:c6:99:77:12:46:aa:8a:a3:eb:58:42:
27:00:3b:90:24:36:2a:6d:3f:5d:de:75:3c:9c:91:
39:ea:75:1d:e2:61:fb:80:a4:f4:d5:97:ee:54:69:
1c:42:11:c4:bc:93:30:3c:6f:5a:3b:81:1a:84:ff:
36:ee:a3:23:16:2f:71:71:12:29:24:00:2b:15:34:
34:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:24:73:3A:C4:B8:E4:AA:6E:11:D6:31:B4:15:C9:D7:7A:FA:99:38
X509v3 Authority Key Identifier:
keyid:25:47:5F:5A:D9:EC:CF:F6:9C:35:A6:30:DC:FF:2C:5A:66:3F:D7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:9f:b3:7a:ab:97:2d:1e:1c:75:18:af:39:e1:3d:23:fe:1c:
04:f7:b0:d7:55:0d:64:ff:82:a9:cc:27:d4:15:76:a5:2f:bd:
9b:a7:ac:a8:47:55:fb:4d:31:ca:92:03:dd:15:33:d7:60:dd:
14:e6:c6:3e:b4:dd:f6:a5:49:c1:91:f1:28:92:1e:61:71:94:
3a:7f:69:63:52:a6:dd:f2:74:a1:38:85:bd:eb:90:1c:5c:1a:
13:ad:cf:00:80:a5:f7:c3:48:4f:be:e6:6e:d1:fb:6b:ba:6c:
84:f4:35:39:73:a5:e8:35:4b:b0:02:82:0f:b6:be:35:9e:6c:
70:d9:21:cc:93:d5:b2:fb:28:51:72:d3:8c:d3:46:ea:7f:4a:
d5:8e:db:6d:fb:e9:04:3b:03:af:a4:29:f3:83:e4:3b:30:2f:
51:2d:8f:57:75:ff:7c:e2:86:a7:b8:ab:98:d5:f9:04:c1:42:
b8:7a:61:5e:d6:17:ae:6b:97:56:06:1c:09:e7:28:fc:c6:3c:
56:c4:5b:a5:b8:16:cc:0e:13:1e:3a:5f:0a:8c:30:21:4e:ab:
a3:ac:42:06:f1:72:10:83:d9:a8:ff:7e:06:43:3d:9e:5a:1a:
70:c1:9f:57:eb:ab:28:3b:e3:9d:23:e8:ef:c6:3e:7f:77:d7:
ef:7c:a0:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oFPBtsW///2WXb+EXisnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NDc1ZjVhZDllY2NmZjY5YzM1YTYzMGRjZmYyYzVhNjYz
ZmQ3Y2YwHhcNMjUwNjI4MTMwMDQ5WhcNMjUwNjI5MTMwMDQ5WjAzMTEwLwYDVQQD
EyhiODI0NzMzYWM0YjhlNGFhNmUxMWQ2MzFiNDE1YzlkNzdhZmE5OTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwuKx3NtgjXvjwdhzdodBaQKK1Wn
N+4CjbF0TshdpIapWV3Hbw2YrrTlTgfMA98eiT7TLMi7bhbtVLJBJCSN2YbhLTj/
14W/00ZN0iukrNnpGt3r0pkeQzZItvTZ2enXpBKTjasNMSsOA5piQ/qeSZpIEFa/
TBw/0JxYsQOXbqE73AdG/b0JWFTjYgAnXreBubDqnJcl6VWs+ILOcOgDHp6hCPIe
g4AdeQJjT2hmnNvdRTEWl0mrxpl3EkaqiqPrWEInADuQJDYqbT9d3nU8nJE56nUd
4mH7gKT01ZfuVGkcQhHEvJMwPG9aO4EahP827qMjFi9xcRIpJAArFTQ0VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgkczrEuOSqbhHWMbQVydd6+pk4MB8GA1UdIwQY
MBaAFCVHX1rZ7M/2nDWmMNz/LFpmP9fPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlVkZld0bnN6X2FjTmFZdzNQOHNXbVlfMTg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iZmVjMDgtOGNiZS00YzQ1LThkYjEt
NGQ0NmM2YTcwMTBhLzEvSlVkZld0bnN6X2FjTmFZdzNQOHNXbVlfMTg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iZmVjMDgtOGNiZS00YzQ1LThkYjEtNGQ0NmM2YTcwMTBh
LzEvSlVkZld0bnN6X2FjTmFZdzNQOHNXbVlfMTg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE5+zequX
LR4cdRivOeE9I/4cBPew11UNZP+Cqcwn1BV2pS+9m6esqEdV+00xypID3RUz12Dd
FObGPrTd9qVJwZHxKJIeYXGUOn9pY1Km3fJ0oTiFveuQHFwaE63PAICl98NIT77m
btH7a7pshPQ1OXOl6DVLsAKCD7a+NZ5scNkhzJPVsvsoUXLTjNNG6n9K1Y7bbfvp
BDsDr6Qp84PkOzAvUS2PV3X/fOKGp7irmNX5BMFCuHphXtYXrmuXVgYcCeco/MY8
VsRbpbgWzA4THjpfCowwIU6ro6xCBvFyEIPZqP9+BkM9nloacMGfV+urKDvjnSPo
78Y+f3fX73yg5Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:26:57 2025 by rpki-client