Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft
File: J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft (raw, json)
Hash identifier: q6QFi4DcoY19jbS9+MhgghS+nksrEfjnA8TjVxFuxds=
Subject key identifier: 87:54:B7:99:4C:76:21:2E:EA:94:82:35:66:94:1B:7E:C0:AA:C1:FE
Authority key identifier: 27:E3:67:D8:DE:CF:7D:62:6E:54:78:0F:80:E5:73:60:D2:C0:78:CD
Certificate issuer: /CN=27e367d8decf7d626e54780f80e57360d2c078cd
Certificate serial: 0197B632C60B607A7B4F8EAAC5D11F9AF793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft
Manifest number: 0CA0
Signing time: Sat 28 Jun 2025 11:01:10 +0000
Manifest this update: Sat 28 Jun 2025 11:01:10 +0000
Manifest next update: Sun 29 Jun 2025 11:01:10 +0000
Files and hashes: 1: J-Nn2N7PfWJuVHgPgOVzYNLAeM0.crl (hash: u9/eYRaiI1QAwBgR1LsZ0YUOFeozy+KkI6Zc946P2Pw=)
2: kH84XjWCF3YsEupBc9_NB-UJ1LE.roa (hash: vFi6ltA+YLY/2jEI7t4T0lx3r1xW2YaGJ9YVTzgeHZA=)
3: m8b-nSkJNQaQc9Ko3VmUYZ_aR5k.roa (hash: x/jmnJNzCw/+lpmfHMz6HsStw+fWqWLA6QrXjLJpCDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:c6:0b:60:7a:7b:4f:8e:aa:c5:d1:1f:9a:f7:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e367d8decf7d626e54780f80e57360d2c078cd
Validity
Not Before: Jun 28 11:01:10 2025 GMT
Not After : Jun 29 11:01:10 2025 GMT
Subject: CN=8754b7994c76212eea94823566941b7ec0aac1fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d8:cd:26:96:ea:3d:ba:8f:52:b9:b5:c4:02:
1b:61:e3:04:52:18:53:40:94:7b:53:82:f0:80:99:
dc:75:d8:b9:05:3a:f4:a0:c4:fe:0b:5a:61:1d:f3:
64:37:3f:05:d1:f9:15:5e:fb:3a:40:81:17:02:0a:
b0:84:1a:51:d6:20:1e:ab:82:fa:c8:49:61:4a:52:
49:95:e8:94:7f:a7:a8:90:de:93:74:e8:be:2b:24:
25:1c:81:25:cb:c6:b9:c8:e0:70:a2:bb:fe:30:31:
cc:2c:f6:ec:8c:b1:0a:ac:88:1a:21:d5:44:67:fa:
73:19:21:72:74:80:05:b2:60:9b:50:25:a1:1a:a1:
05:83:7f:fc:57:57:ac:f7:6f:f0:6f:5f:c7:b3:27:
38:d8:d1:b3:fd:4f:8e:9d:24:f5:1d:d1:a2:43:df:
1a:67:37:93:cb:52:67:e0:57:85:1f:95:4b:75:88:
54:65:70:a5:66:6b:9f:c5:04:3d:af:09:94:05:09:
00:86:51:b5:31:11:78:db:26:db:bc:63:da:83:1d:
5e:08:0b:10:e2:70:46:45:e2:d6:ac:61:c9:6f:85:
d8:87:6e:87:46:d8:fb:f4:44:78:b5:61:2b:53:10:
d3:e5:c0:5c:ce:d9:38:7c:9f:14:e2:bc:78:71:f1:
dc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:54:B7:99:4C:76:21:2E:EA:94:82:35:66:94:1B:7E:C0:AA:C1:FE
X509v3 Authority Key Identifier:
keyid:27:E3:67:D8:DE:CF:7D:62:6E:54:78:0F:80:E5:73:60:D2:C0:78:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ce:73:10:79:e6:24:f2:04:58:c3:9a:b4:0d:07:39:5e:97:
1e:e5:2e:68:10:d5:72:55:83:0e:9b:35:52:d2:ca:89:d8:6b:
0f:04:3f:90:d1:fd:ba:61:ff:73:80:66:d0:b1:e4:25:cc:a3:
39:ed:d7:01:67:e7:7e:65:09:67:3a:03:36:6a:74:10:4e:79:
4e:43:fa:f9:c9:03:e6:b1:fb:85:98:11:87:44:46:54:89:99:
01:9a:55:11:f8:2c:ce:85:17:35:af:f4:d3:06:56:2e:8c:40:
df:24:5a:a0:72:d8:2d:e3:c4:fa:64:d6:21:f5:f2:5c:54:ea:
52:6e:06:bf:c9:bf:98:08:3f:96:f2:e7:d1:84:b1:16:03:c6:
a3:ec:47:85:db:0a:1b:54:6d:5e:70:e2:0d:c0:02:b8:23:8a:
86:f2:53:68:84:f1:c8:7f:e6:7a:a6:88:6d:0a:66:31:6f:b5:
7b:6c:70:cc:40:d5:cd:11:bb:e0:80:eb:a4:a6:5a:6d:26:64:
e3:4b:4f:6b:43:f0:59:f8:64:43:0f:4b:f5:bf:c3:b3:78:2c:
54:7d:fe:8d:b5:c4:2f:a3:4c:92:67:71:66:c2:49:e5:f8:17:
83:6c:b7:b0:d4:2b:6c:ea:90:e3:2d:d0:e0:5b:ae:d4:8b:68:
a5:01:13:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2MsYLYHp7T46qxdEfmveTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZTM2N2Q4ZGVjZjdkNjI2ZTU0NzgwZjgwZTU3MzYwZDJj
MDc4Y2QwHhcNMjUwNjI4MTEwMTEwWhcNMjUwNjI5MTEwMTEwWjAzMTEwLwYDVQQD
Eyg4NzU0Yjc5OTRjNzYyMTJlZWE5NDgyMzU2Njk0MWI3ZWMwYWFjMWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNjNJpbqPbqPUrm1xAIbYeMEUhhT
QJR7U4LwgJncddi5BTr0oMT+C1phHfNkNz8F0fkVXvs6QIEXAgqwhBpR1iAeq4L6
yElhSlJJleiUf6eokN6TdOi+KyQlHIEly8a5yOBworv+MDHMLPbsjLEKrIgaIdVE
Z/pzGSFydIAFsmCbUCWhGqEFg3/8V1es92/wb1/Hsyc42NGz/U+OnST1HdGiQ98a
ZzeTy1Jn4FeFH5VLdYhUZXClZmufxQQ9rwmUBQkAhlG1MRF42ybbvGPagx1eCAsQ
4nBGReLWrGHJb4XYh26HRtj79ER4tWErUxDT5cBcztk4fJ8U4rx4cfHclwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdUt5lMdiEu6pSCNWaUG37AqsH+MB8GA1UdIwQY
MBaAFCfjZ9jez31iblR4D4Dlc2DSwHjNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSi1ObjJON1BmV0p1VkhnUGdPVnpZTkxBZU0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi81ZjA1NzktMGVmYS00MjJiLWFhNjgt
YTQzNGZkMDg4ZmQwLzEvSi1ObjJON1BmV0p1VkhnUGdPVnpZTkxBZU0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi81ZjA1NzktMGVmYS00MjJiLWFhNjgtYTQzNGZkMDg4ZmQw
LzEvSi1ObjJON1BmV0p1VkhnUGdPVnpZTkxBZU0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM85zEHnm
JPIEWMOatA0HOV6XHuUuaBDVclWDDps1UtLKidhrDwQ/kNH9umH/c4Bm0LHkJcyj
Oe3XAWfnfmUJZzoDNmp0EE55TkP6+ckD5rH7hZgRh0RGVImZAZpVEfgszoUXNa/0
0wZWLoxA3yRaoHLYLePE+mTWIfXyXFTqUm4Gv8m/mAg/lvLn0YSxFgPGo+xHhdsK
G1RtXnDiDcACuCOKhvJTaITxyH/meqaIbQpmMW+1e2xwzEDVzRG74IDrpKZabSZk
40tPa0PwWfhkQw9L9b/Ds3gsVH3+jbXEL6NMkmdxZsJJ5fgXg2y3sNQrbOqQ4y3Q
4Fuu1ItopQETtA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:10 2025 by rpki-client