Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft
File: JCSASgJ3cDnEz9jADcKfqR2KOQw.mft (raw, json)
Hash identifier: 2L25CQyBTBJUh1IsKTtZO4PQfHtUZpCZlALa+7Y6t14=
Subject key identifier: A5:17:E5:F1:D9:D6:0C:B8:AF:1E:DF:1E:2C:AE:11:43:30:33:0D:41
Authority key identifier: 24:24:80:4A:02:77:70:39:C4:CF:D8:C0:0D:C2:9F:A9:1D:8A:39:0C
Certificate issuer: /CN=2424804a02777039c4cfd8c00dc29fa91d8a390c
Certificate serial: 0197B74535063DD7155071E8436932E2E0A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JCSASgJ3cDnEz9jADcKfqR2KOQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft
Manifest number: 01F2
Signing time: Sat 28 Jun 2025 16:00:55 +0000
Manifest this update: Sat 28 Jun 2025 16:00:55 +0000
Manifest next update: Sun 29 Jun 2025 16:00:55 +0000
Files and hashes: 1: JCSASgJ3cDnEz9jADcKfqR2KOQw.crl (hash: reI1aie/Bn4XRvG7vchNwq4b2//hg1qlhtlbp98cQbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JCSASgJ3cDnEz9jADcKfqR2KOQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:35:06:3d:d7:15:50:71:e8:43:69:32:e2:e0:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2424804a02777039c4cfd8c00dc29fa91d8a390c
Validity
Not Before: Jun 28 16:00:55 2025 GMT
Not After : Jun 29 16:00:55 2025 GMT
Subject: CN=a517e5f1d9d60cb8af1edf1e2cae114330330d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:73:6e:c3:ef:64:c2:f5:bf:86:2e:ca:a3:7f:
ad:ab:2b:4c:38:6d:2b:f3:a9:94:84:3b:a0:bd:bd:
bd:1f:25:1e:da:d2:5e:8c:7b:08:24:ab:7f:ea:e3:
73:f2:92:57:74:3a:c5:70:2a:a3:30:0d:33:21:04:
2d:e1:cf:85:2d:eb:61:99:28:ee:ef:cc:d1:c4:26:
08:d3:17:dd:25:0f:02:bb:cf:6b:df:21:7b:b8:1a:
21:bd:46:19:d7:11:2f:ad:51:24:4f:91:2b:d3:ab:
f2:33:ff:b0:40:8e:ed:8d:a3:98:e4:90:85:8d:3b:
67:2c:be:5b:63:e6:75:57:28:12:80:90:3f:30:55:
4d:a5:84:97:93:a2:58:c4:21:68:54:9e:87:3a:9d:
8e:bc:55:e6:8c:af:07:46:ad:90:aa:a0:6a:57:8e:
0a:a7:7a:02:59:2b:0e:79:87:7a:6c:99:f4:8a:5d:
34:d3:cb:39:68:88:18:ae:94:57:3b:4d:29:9f:65:
ef:d2:4d:7c:d1:60:59:0a:84:c3:e4:ae:8d:e8:a5:
34:43:9a:00:65:b2:cf:b1:70:39:31:12:25:68:d9:
83:50:9f:89:d2:81:80:bf:2a:be:45:69:38:dd:9e:
7f:22:dd:e6:d8:77:61:9d:54:6b:59:ca:0f:8a:68:
71:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:17:E5:F1:D9:D6:0C:B8:AF:1E:DF:1E:2C:AE:11:43:30:33:0D:41
X509v3 Authority Key Identifier:
keyid:24:24:80:4A:02:77:70:39:C4:CF:D8:C0:0D:C2:9F:A9:1D:8A:39:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JCSASgJ3cDnEz9jADcKfqR2KOQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:d8:b1:c5:d4:86:5d:26:7a:9e:10:f7:79:ea:e8:c7:1c:83:
5d:4b:9b:db:7a:25:87:69:50:2a:5f:37:71:91:3e:ac:0f:23:
f9:38:1a:91:13:9a:55:e9:be:e4:d7:d2:62:89:75:38:5d:13:
8b:5d:ef:84:a4:a7:97:c7:39:3d:1a:4a:c4:15:1c:33:e9:0f:
57:44:76:ae:fd:1f:19:d9:72:5b:e6:3c:fb:1e:a3:00:31:36:
50:93:67:d6:ac:59:a6:8e:ff:00:f6:d9:dd:2b:1c:8b:35:45:
6e:01:22:77:87:e1:d1:f2:3b:cf:4b:44:1f:6e:0c:f4:31:07:
a7:7a:68:a5:79:79:77:75:6e:87:cb:a1:48:a7:c8:73:00:4d:
b0:45:f3:fb:43:22:7d:43:51:08:e8:ad:b4:39:e9:fd:0b:12:
58:4d:19:30:ff:fb:b7:3e:bb:dc:1b:52:16:ab:ec:81:28:51:
92:fd:a0:4c:3c:82:ce:69:7a:e4:4b:71:91:5a:d4:92:c2:c6:
dd:56:64:6b:41:fb:43:c2:41:53:f1:0f:19:62:dc:09:8b:8c:
aa:4c:a3:6f:fd:1e:5d:41:74:cf:b1:4e:3a:6b:45:ec:5b:13:
7a:ce:d3:11:d8:31:77:e1:7c:97:32:14:87:f5:76:c8:96:67:
f6:9f:66:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RTUGPdcVUHHoQ2ky4uCpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MjQ4MDRhMDI3NzcwMzljNGNmZDhjMDBkYzI5ZmE5MWQ4
YTM5MGMwHhcNMjUwNjI4MTYwMDU1WhcNMjUwNjI5MTYwMDU1WjAzMTEwLwYDVQQD
EyhhNTE3ZTVmMWQ5ZDYwY2I4YWYxZWRmMWUyY2FlMTE0MzMwMzMwZDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXNuw+9kwvW/hi7Ko3+tqytMOG0r
86mUhDugvb29HyUe2tJejHsIJKt/6uNz8pJXdDrFcCqjMA0zIQQt4c+FLethmSju
78zRxCYI0xfdJQ8Cu89r3yF7uBohvUYZ1xEvrVEkT5Er06vyM/+wQI7tjaOY5JCF
jTtnLL5bY+Z1VygSgJA/MFVNpYSXk6JYxCFoVJ6HOp2OvFXmjK8HRq2QqqBqV44K
p3oCWSsOeYd6bJn0il0008s5aIgYrpRXO00pn2Xv0k180WBZCoTD5K6N6KU0Q5oA
ZbLPsXA5MRIlaNmDUJ+J0oGAvyq+RWk43Z5/It3m2HdhnVRrWcoPimhx7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUX5fHZ1gy4rx7fHiyuEUMwMw1BMB8GA1UdIwQY
MBaAFCQkgEoCd3A5xM/YwA3Cn6kdijkMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkNTQVNnSjNjRG5FejlqQURjS2ZxUjJLT1F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iNTdhZWEtM2NkZi00NGQwLWFlZDQt
ZDAwYjU4MjJjY2VmLzEvSkNTQVNnSjNjRG5FejlqQURjS2ZxUjJLT1F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9iNTdhZWEtM2NkZi00NGQwLWFlZDQtZDAwYjU4MjJjY2Vm
LzEvSkNTQVNnSjNjRG5FejlqQURjS2ZxUjJLT1F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQtixxdSG
XSZ6nhD3eeroxxyDXUub23olh2lQKl83cZE+rA8j+TgakROaVem+5NfSYol1OF0T
i13vhKSnl8c5PRpKxBUcM+kPV0R2rv0fGdlyW+Y8+x6jADE2UJNn1qxZpo7/APbZ
3SscizVFbgEid4fh0fI7z0tEH24M9DEHp3popXl5d3Vuh8uhSKfIcwBNsEXz+0Mi
fUNRCOittDnp/QsSWE0ZMP/7tz673BtSFqvsgShRkv2gTDyCzml65EtxkVrUksLG
3VZka0H7Q8JBU/EPGWLcCYuMqkyjb/0eXUF0z7FOOmtF7FsTes7TEdgxd+F8lzIU
h/V2yJZn9p9msg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:20:16 2025 by rpki-client