Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft
File: JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft (raw, json)
Hash identifier: +mFmxV9qFTX8l6oTcp6mGo81I/BNMcW7YsUhZhQeL1U=
Subject key identifier: 70:B5:A1:D2:B7:3D:9D:32:B0:38:01:04:3E:A2:58:84:35:34:82:B4
Authority key identifier: 26:C6:72:DA:72:A3:4C:C2:82:AD:C4:0F:28:26:76:DE:75:11:76:54
Certificate issuer: /CN=26c672da72a34cc282adc40f282676de75117654
Certificate serial: 0197B6A0681934AA0186AFB2CE8FFBC7F157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft
Manifest number: 0203
Signing time: Sat 28 Jun 2025 13:00:55 +0000
Manifest this update: Sat 28 Jun 2025 13:00:55 +0000
Manifest next update: Sun 29 Jun 2025 13:00:55 +0000
Files and hashes: 1: 3T-1XN6_cwuMNW22iL1_AA25sSU.roa (hash: zx2BF5CFYR8Sr363pI6NcjPdMBZx2ThD7Wo/N06Wwyo=)
2: JsZy2nKjTMKCrcQPKCZ23nURdlQ.crl (hash: tPab3UfuEiOiqttIAICU4AmIFOzZ/4+kxMF72UsLZns=)
3: kB78k7d7cNChEiOEdhutVluA5Eg.roa (hash: a/qillBjMak//HIfJthslOlVYybCavMHPJc8Tn/8qiM=)
4: wDk7LmI6cHqgPwoPiReork5n7TM.roa (hash: f4jrE7YABghrHsA4bobpIqsKuhp5LdVQIAwVcPaNdyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:68:19:34:aa:01:86:af:b2:ce:8f:fb:c7:f1:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26c672da72a34cc282adc40f282676de75117654
Validity
Not Before: Jun 28 13:00:55 2025 GMT
Not After : Jun 29 13:00:55 2025 GMT
Subject: CN=70b5a1d2b73d9d32b03801043ea25884353482b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bc:7d:d3:0b:66:a8:b4:f3:26:aa:9d:aa:0d:
a2:f0:8f:51:9c:f5:a2:16:67:7b:b2:b8:92:cd:0a:
de:cd:dd:8e:27:f2:14:05:3a:14:b0:2d:1f:e1:82:
00:ca:27:83:ea:ae:aa:61:bf:87:db:8a:37:83:cf:
42:e7:90:52:57:52:d9:74:25:40:d2:d5:35:29:d6:
cc:5c:9d:4f:b5:9c:79:8a:ce:fe:6d:da:bb:7a:a3:
e2:bf:45:ff:52:82:ad:cf:ab:b3:53:1d:25:e8:ae:
3b:d9:0e:51:59:eb:b6:d7:44:33:3b:f9:56:77:d9:
7c:b0:d5:b6:0a:5c:8d:73:5c:a5:c0:64:af:8e:c1:
1a:30:fb:9d:c8:b7:32:79:71:fa:f1:59:c8:cd:f2:
36:45:12:6e:15:92:3f:d8:da:7f:7e:43:27:77:93:
e3:84:49:ca:29:06:a0:6c:ba:82:8a:9d:fb:3c:2d:
dc:67:74:e8:7d:20:5b:dd:ca:f8:67:7f:c0:bb:7a:
61:2a:54:75:9d:36:28:f4:71:77:52:ad:4c:1c:bc:
68:92:00:5d:c9:94:fd:05:0c:a1:fc:df:58:b3:45:
08:58:18:c0:c7:85:04:fd:a3:42:79:31:e7:5d:09:
34:b9:28:cf:32:85:72:22:0b:71:13:54:a7:75:54:
91:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B5:A1:D2:B7:3D:9D:32:B0:38:01:04:3E:A2:58:84:35:34:82:B4
X509v3 Authority Key Identifier:
keyid:26:C6:72:DA:72:A3:4C:C2:82:AD:C4:0F:28:26:76:DE:75:11:76:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:0f:db:d4:32:20:e5:84:1d:13:cd:e9:c8:96:ff:15:23:4f:
82:17:f4:88:15:04:21:f2:7c:55:bb:ea:06:06:07:19:45:2b:
64:af:47:56:94:1e:21:87:84:1d:9d:4c:68:0d:90:5d:bf:a2:
e0:8f:1c:53:b6:76:37:ec:21:90:d5:ae:1a:f2:ba:1e:47:60:
c8:db:1e:3d:c4:47:64:2f:e1:51:62:c5:25:ba:b8:bc:5f:50:
d6:dd:7e:37:7c:eb:0d:35:1e:e2:7e:1e:b5:c8:1a:4e:16:71:
8e:a3:ec:a0:64:9b:f3:e6:81:2d:7a:cc:4c:48:b7:02:04:d2:
58:b2:3d:be:f5:ed:92:f4:ec:09:94:1e:f9:6a:00:41:05:4d:
c0:c1:32:23:78:0a:61:0a:a4:41:72:07:c3:c3:e7:a7:9c:00:
d8:46:eb:84:4d:ec:c8:81:06:cf:04:02:69:52:78:2b:67:32:
32:6e:b1:47:a9:86:b0:5c:b0:35:36:f0:d4:35:c8:29:9f:f9:
d5:be:4b:83:df:49:83:00:89:a3:01:ee:f9:ad:91:82:9e:d4:
40:35:03:17:7d:79:fb:d5:4b:b0:a7:4d:f4:98:1b:c9:a2:3f:
fc:69:43:78:0a:6b:a1:c2:91:30:1a:87:21:aa:2f:58:70:fb:
ea:24:bd:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oGgZNKoBhq+yzo/7x/FXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2YzY3MmRhNzJhMzRjYzI4MmFkYzQwZjI4MjY3NmRlNzUx
MTc2NTQwHhcNMjUwNjI4MTMwMDU1WhcNMjUwNjI5MTMwMDU1WjAzMTEwLwYDVQQD
Eyg3MGI1YTFkMmI3M2Q5ZDMyYjAzODAxMDQzZWEyNTg4NDM1MzQ4MmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrx90wtmqLTzJqqdqg2i8I9RnPWi
Fmd7sriSzQrezd2OJ/IUBToUsC0f4YIAyieD6q6qYb+H24o3g89C55BSV1LZdCVA
0tU1KdbMXJ1PtZx5is7+bdq7eqPiv0X/UoKtz6uzUx0l6K472Q5RWeu210QzO/lW
d9l8sNW2ClyNc1ylwGSvjsEaMPudyLcyeXH68VnIzfI2RRJuFZI/2Np/fkMnd5Pj
hEnKKQagbLqCip37PC3cZ3TofSBb3cr4Z3/Au3phKlR1nTYo9HF3Uq1MHLxokgBd
yZT9BQyh/N9Ys0UIWBjAx4UE/aNCeTHnXQk0uSjPMoVyIgtxE1SndVSRJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHC1odK3PZ0ysDgBBD6iWIQ1NIK0MB8GA1UdIwQY
MBaAFCbGctpyo0zCgq3EDygmdt51EXZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnNaeTJuS2pUTUtDcmNRUEtDWjIzblVSZGxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni83ZmUwMTUtNWNkNS00NDI5LThiN2Qt
MjJkMDI3MTk3NzEyLzEvSnNaeTJuS2pUTUtDcmNRUEtDWjIzblVSZGxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni83ZmUwMTUtNWNkNS00NDI5LThiN2QtMjJkMDI3MTk3NzEy
LzEvSnNaeTJuS2pUTUtDcmNRUEtDWjIzblVSZGxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwg/b1DIg
5YQdE83pyJb/FSNPghf0iBUEIfJ8VbvqBgYHGUUrZK9HVpQeIYeEHZ1MaA2QXb+i
4I8cU7Z2N+whkNWuGvK6HkdgyNsePcRHZC/hUWLFJbq4vF9Q1t1+N3zrDTUe4n4e
tcgaThZxjqPsoGSb8+aBLXrMTEi3AgTSWLI9vvXtkvTsCZQe+WoAQQVNwMEyI3gK
YQqkQXIHw8Pnp5wA2EbrhE3syIEGzwQCaVJ4K2cyMm6xR6mGsFywNTbw1DXIKZ/5
1b5Lg99JgwCJowHu+a2Rgp7UQDUDF315+9VLsKdN9JgbyaI//GlDeAprocKRMBqH
IaovWHD76iS91g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:39:03 2025 by rpki-client