Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.mft
File: jTQC6uAnq82SYJDMDd7_gKq5LDU.mft (raw, json)
Hash identifier: KGPndcYjZgmBV4c7kjRCGRTyEzBSf44jVGSFXkPfenM=
Subject key identifier: 9F:65:13:A7:66:DB:E4:3B:C4:BB:73:9F:06:D9:14:5B:1A:C4:89:1B
Authority key identifier: 8D:34:02:EA:E0:27:AB:CD:92:60:90:CC:0D:DE:FF:80:AA:B9:2C:35
Certificate issuer: /CN=8d3402eae027abcd926090cc0ddeff80aab92c35
Certificate serial: 0197B7EA85BDB5240DFE96BAD3184FCE8499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.mft
Manifest number: 074F
Signing time: Sat 28 Jun 2025 19:01:29 +0000
Manifest this update: Sat 28 Jun 2025 19:01:29 +0000
Manifest next update: Sun 29 Jun 2025 19:01:29 +0000
Files and hashes: 1: jTQC6uAnq82SYJDMDd7_gKq5LDU.crl (hash: +egezsxCRnSqPUVqP6V5bGPX8TBlhw5i5NnGaXjBN/s=)
2: rOnq86dV2BXa4tQU-vqcTAdf2VM.roa (hash: nUAAXheN4rY8m+/9k6ldoGDPKA5ssts8flzhVGQ+fHk=)
3: sExC59C2viDQKDDYj8CusH8J5Lg.roa (hash: cOWFAprr/QGP2vQ6eCaPmf7CyWdmOoqQ/ISFnDFZTmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:85:bd:b5:24:0d:fe:96:ba:d3:18:4f:ce:84:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3402eae027abcd926090cc0ddeff80aab92c35
Validity
Not Before: Jun 28 19:01:29 2025 GMT
Not After : Jun 29 19:01:29 2025 GMT
Subject: CN=9f6513a766dbe43bc4bb739f06d9145b1ac4891b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f8:7a:ae:47:ed:d5:75:b4:77:24:cc:e7:b4:
2d:67:67:8c:08:a8:89:ee:fc:08:51:c4:7e:46:29:
0a:42:eb:c6:a1:25:76:4e:43:e8:a7:3e:48:c6:38:
58:8e:e5:bb:65:7d:0d:0c:f4:33:e2:fd:b3:8c:50:
6c:19:f2:41:ca:22:d7:0a:a6:f5:b2:53:f1:b0:67:
cc:16:f8:b8:a1:bf:f9:84:70:41:1a:26:00:6a:ab:
a3:1d:4e:12:49:3b:b5:0e:e9:cb:71:80:bd:4a:29:
fa:ea:4d:79:16:1b:c9:17:c0:90:55:d6:f6:33:29:
03:a0:f3:f5:a7:ce:c9:9b:4b:a9:b8:57:59:3d:fb:
f2:b9:41:1a:6a:fa:98:8d:49:bc:f5:85:eb:43:16:
7c:34:fe:67:f7:98:f3:6f:95:64:bb:1d:b1:f3:6a:
81:1d:2c:3b:5f:35:3c:45:ad:a4:ff:d4:47:15:1f:
9d:42:32:67:38:ca:7f:09:73:2e:61:d4:5a:a6:e4:
57:3b:dd:46:9b:59:54:44:c8:ae:8e:e3:10:4d:28:
f5:19:35:c3:8b:61:ac:47:34:ca:0e:2a:6d:94:f4:
76:7f:08:65:3d:5b:a6:6a:33:6a:80:5e:ff:93:95:
ca:7a:4f:58:1d:04:a3:52:ae:d9:11:cf:2f:1f:36:
20:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:65:13:A7:66:DB:E4:3B:C4:BB:73:9F:06:D9:14:5B:1A:C4:89:1B
X509v3 Authority Key Identifier:
keyid:8D:34:02:EA:E0:27:AB:CD:92:60:90:CC:0D:DE:FF:80:AA:B9:2C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e6:84:14:4f:fa:cd:ae:2e:25:cc:52:a4:5e:22:3d:0e:79:
bd:6d:17:d2:2d:11:d6:a3:7c:22:db:24:f4:e2:06:f0:88:20:
4d:eb:87:18:3f:19:2b:47:98:7f:8e:49:01:be:c6:5a:6a:56:
6f:da:a1:bc:51:04:7c:5d:d2:96:70:c9:1b:07:42:43:d0:82:
e5:18:f7:3a:64:b6:e3:8a:7b:70:8b:d6:3c:0e:0a:b5:84:ed:
9b:1b:35:75:e9:bb:2f:97:02:d5:ca:5a:68:68:09:24:42:48:
23:c5:3c:0a:d0:73:20:24:af:b4:5f:da:ef:7a:62:fa:7f:06:
00:6d:97:0e:05:8e:f7:0a:dc:33:f5:8d:5e:b8:e9:e1:99:77:
c3:0c:fd:e5:81:22:f6:8f:f0:ec:52:e1:ad:c8:0b:1b:78:35:
7a:b5:19:55:e8:94:3b:41:21:8c:32:7c:9c:a6:d0:ed:a4:82:
98:3d:eb:95:2c:4d:95:58:5f:2c:4d:c2:17:36:af:7e:5c:02:
24:99:58:77:31:76:43:02:d3:2d:45:19:e3:c0:31:ee:2d:17:
7f:0d:14:58:79:fe:37:b1:7f:68:b2:4f:e2:4c:7a:78:16:42:
eb:1a:d7:94:ca:1a:7c:d8:2c:a1:95:ab:94:0f:be:b5:aa:e4:
f7:ee:6e:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36oW9tSQN/pa60xhPzoSZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMzQwMmVhZTAyN2FiY2Q5MjYwOTBjYzBkZGVmZjgwYWFi
OTJjMzUwHhcNMjUwNjI4MTkwMTI5WhcNMjUwNjI5MTkwMTI5WjAzMTEwLwYDVQQD
Eyg5ZjY1MTNhNzY2ZGJlNDNiYzRiYjczOWYwNmQ5MTQ1YjFhYzQ4OTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fh6rkft1XW0dyTM57QtZ2eMCKiJ
7vwIUcR+RikKQuvGoSV2TkPopz5IxjhYjuW7ZX0NDPQz4v2zjFBsGfJByiLXCqb1
slPxsGfMFvi4ob/5hHBBGiYAaqujHU4SSTu1DunLcYC9Sin66k15FhvJF8CQVdb2
MykDoPP1p87Jm0upuFdZPfvyuUEaavqYjUm89YXrQxZ8NP5n95jzb5Vkux2x82qB
HSw7XzU8Ra2k/9RHFR+dQjJnOMp/CXMuYdRapuRXO91Gm1lURMiujuMQTSj1GTXD
i2GsRzTKDiptlPR2fwhlPVumajNqgF7/k5XKek9YHQSjUq7ZEc8vHzYggQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9lE6dm2+Q7xLtznwbZFFsaxIkbMB8GA1UdIwQY
MBaAFI00AurgJ6vNkmCQzA3e/4CquSw1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalRRQzZ1QW5xODJTWUpETURkN19nS3E1TERVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81NTgzNDgtNDkxMi00YmMxLThlNTgt
ZjkyZDdkYzM3ZDJlLzEvalRRQzZ1QW5xODJTWUpETURkN19nS3E1TERVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS81NTgzNDgtNDkxMi00YmMxLThlNTgtZjkyZDdkYzM3ZDJl
LzEvalRRQzZ1QW5xODJTWUpETURkN19nS3E1TERVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMeaEFE/6
za4uJcxSpF4iPQ55vW0X0i0R1qN8Itsk9OIG8IggTeuHGD8ZK0eYf45JAb7GWmpW
b9qhvFEEfF3SlnDJGwdCQ9CC5Rj3OmS244p7cIvWPA4KtYTtmxs1dem7L5cC1cpa
aGgJJEJII8U8CtBzICSvtF/a73pi+n8GAG2XDgWO9wrcM/WNXrjp4Zl3wwz95YEi
9o/w7FLhrcgLG3g1erUZVeiUO0EhjDJ8nKbQ7aSCmD3rlSxNlVhfLE3CFzavflwC
JJlYdzF2QwLTLUUZ48Ax7i0Xfw0UWHn+N7F/aLJP4kx6eBZC6xrXlMoafNgsoZWr
lA++tark9+5uOg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:43 2025 by rpki-client