Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
File: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft (raw, json)
Hash identifier: 6AJ3DPBaQkcog82zntDSX63YpSw5QC2ZlMorb3J+SF8=
Subject key identifier: 72:26:AD:47:2F:2F:90:B1:CD:A3:56:2C:3C:F7:7A:A3:48:9C:F5:B5
Authority key identifier: 24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
Certificate issuer: /CN=24d470214c69e430f8b385e0936ad960166acdf0
Certificate serial: 0197C2380D9834CE5B90F4216BC7A053E0BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
Manifest number: 0846
Signing time: Mon 30 Jun 2025 19:02:22 +0000
Manifest this update: Mon 30 Jun 2025 19:02:22 +0000
Manifest next update: Tue 01 Jul 2025 19:02:22 +0000
Files and hashes: 1: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl (hash: czrS3D1m6zd+3UgCDQfofYtDZfVnOH7jqLWHFtNKjDI=)
2: P7b5zmQiLmwTefl5liI-KoZJpcY.roa (hash: VJKcy+JlG04cLK8U6Txf4TogJYWS6O9qHAuZFHI6UVY=)
3: fkZMJf--qW7MT6bXdyPn8Rz0kGM.roa (hash: FGOPoxO9vvC4y9ljtcZplGO40KLgXf+OUCl+F6C8Bmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:38:0d:98:34:ce:5b:90:f4:21:6b:c7:a0:53:e0:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d470214c69e430f8b385e0936ad960166acdf0
Validity
Not Before: Jun 30 19:02:22 2025 GMT
Not After : Jul 1 19:02:22 2025 GMT
Subject: CN=7226ad472f2f90b1cda3562c3cf77aa3489cf5b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:28:06:1f:0b:d9:02:da:65:79:da:94:db:52:
30:f9:c6:d0:a6:02:b1:b0:c4:4b:e5:cb:22:29:34:
71:cc:f7:ea:5e:42:94:29:6d:6c:65:b0:75:15:25:
40:c6:40:42:51:6a:f2:e7:0b:8d:ae:4e:58:2b:d2:
7d:b4:0c:bb:37:d2:f1:cc:09:04:a0:c4:cf:45:13:
f9:d0:23:9e:d8:bd:22:c7:a5:d6:c9:bc:3d:b8:28:
6f:c6:87:df:83:33:c1:c9:94:d6:aa:00:a7:22:9c:
25:00:38:02:94:f4:4a:fd:c7:94:c1:38:8b:51:f3:
03:95:08:01:ae:f7:8c:cc:b9:df:43:30:0f:f5:49:
96:65:7c:cd:b6:be:9c:b9:f1:a4:18:66:76:a1:75:
15:2a:9e:28:f7:78:a0:12:bf:e6:a2:7a:0b:79:a1:
d7:7b:03:ff:b2:a4:24:c2:77:d0:0c:07:47:75:0b:
02:48:9d:42:f6:00:76:19:89:b7:77:7d:5d:14:70:
20:92:c9:d5:9a:79:3b:50:93:e1:e1:eb:85:47:cf:
48:66:86:35:a0:2b:5f:63:72:ce:12:74:41:92:b2:
56:0c:de:21:3b:50:95:ae:e2:27:65:de:81:69:78:
80:1e:0d:09:21:ed:65:71:6b:8e:2b:85:de:0b:6f:
08:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:26:AD:47:2F:2F:90:B1:CD:A3:56:2C:3C:F7:7A:A3:48:9C:F5:B5
X509v3 Authority Key Identifier:
keyid:24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ef:ae:d5:4d:80:b1:e4:0d:9f:dd:99:2d:50:d3:38:8f:7d:
fb:92:5d:f0:2d:dd:4b:3f:b6:01:4a:fc:32:46:72:01:32:87:
3c:b0:bf:5a:73:bd:dd:f8:0a:c8:6c:47:af:42:1d:f4:91:98:
bf:4a:b5:53:19:fe:db:3b:c1:99:50:46:f0:28:81:d3:0d:ce:
3f:2e:ed:32:2a:24:b0:48:37:38:2f:b6:fb:a7:0d:7f:d1:37:
0b:72:6e:e1:50:90:ca:d9:2c:b6:3d:7e:e9:7e:a9:a7:68:1b:
51:81:1c:0f:87:aa:41:00:f1:da:2b:f9:35:13:d2:3a:bf:d1:
28:98:2f:4b:f1:bf:cc:7f:12:0f:1f:1c:91:6f:61:26:4b:98:
c8:65:9c:67:d6:47:c5:74:84:5e:de:ff:60:04:1b:15:5f:44:
92:04:1c:bc:3a:91:5a:a8:1c:7b:c1:ae:ee:7a:7f:71:c1:3b:
ac:4a:6d:49:85:e3:81:e3:c5:3c:a0:d3:a6:4a:8e:22:aa:da:
e7:c6:16:2f:72:3a:0e:c9:f3:32:98:51:74:a9:73:fc:8f:95:
4a:56:f8:0b:1b:0f:2c:ed:1c:18:90:96:ad:bf:56:25:d4:50:
7e:4b:cf:75:ec:d3:3e:85:56:bd:c9:07:00:82:62:a6:c2:45:
6c:64:d6:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfCOA2YNM5bkPQha8egU+C6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZDQ3MDIxNGM2OWU0MzBmOGIzODVlMDkzNmFkOTYwMTY2
YWNkZjAwHhcNMjUwNjMwMTkwMjIyWhcNMjUwNzAxMTkwMjIyWjAzMTEwLwYDVQQD
Eyg3MjI2YWQ0NzJmMmY5MGIxY2RhMzU2MmMzY2Y3N2FhMzQ4OWNmNWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAligGHwvZAtpledqU21Iw+cbQpgKx
sMRL5csiKTRxzPfqXkKUKW1sZbB1FSVAxkBCUWry5wuNrk5YK9J9tAy7N9LxzAkE
oMTPRRP50COe2L0ix6XWybw9uChvxoffgzPByZTWqgCnIpwlADgClPRK/ceUwTiL
UfMDlQgBrveMzLnfQzAP9UmWZXzNtr6cufGkGGZ2oXUVKp4o93igEr/monoLeaHX
ewP/sqQkwnfQDAdHdQsCSJ1C9gB2GYm3d31dFHAgksnVmnk7UJPh4euFR89IZoY1
oCtfY3LOEnRBkrJWDN4hO1CVruInZd6BaXiAHg0JIe1lcWuOK4XeC28ImwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHImrUcvL5CxzaNWLDz3eqNInPW1MB8GA1UdIwQY
MBaAFCTUcCFMaeQw+LOF4JNq2WAWas3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk5Sd0lVeHA1REQ0czRYZ2syclpZQlpxemZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xYjk2MzctMjc5NS00ZTdjLWIzM2Yt
ZTI4Mjk1ZTU0YzNjLzEvSk5Sd0lVeHA1REQ0czRYZ2syclpZQlpxemZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8xYjk2MzctMjc5NS00ZTdjLWIzM2YtZTI4Mjk1ZTU0YzNj
LzEvSk5Sd0lVeHA1REQ0czRYZ2syclpZQlpxemZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV++u1U2A
seQNn92ZLVDTOI99+5Jd8C3dSz+2AUr8MkZyATKHPLC/WnO93fgKyGxHr0Id9JGY
v0q1Uxn+2zvBmVBG8CiB0w3OPy7tMioksEg3OC+2+6cNf9E3C3Ju4VCQytkstj1+
6X6pp2gbUYEcD4eqQQDx2iv5NRPSOr/RKJgvS/G/zH8SDx8ckW9hJkuYyGWcZ9ZH
xXSEXt7/YAQbFV9EkgQcvDqRWqgce8Gu7np/ccE7rEptSYXjgePFPKDTpkqOIqra
58YWL3I6DsnzMphRdKlz/I+VSlb4CxsPLO0cGJCWrb9WJdRQfkvPdezTPoVWvckH
AIJipsJFbGTWBg==
-----END CERTIFICATE-----
Generated at Mon Jun 30 21:40:35 2025 by rpki-client