Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.mft
File: J-lCeLPhkBhjrdYde98tJzzxNAw.mft (raw, json)
Hash identifier: +zaBeiKbIP2bBopQoF3JKnLsUvTMefee1MDTiVmu8N8=
Subject key identifier: E4:BA:22:20:E3:31:D8:09:16:AA:24:2E:19:92:12:67:2E:F7:21:3B
Authority key identifier: 27:E9:42:78:B3:E1:90:18:63:AD:D6:1D:7B:DF:2D:27:3C:F1:34:0C
Certificate issuer: /CN=27e94278b3e1901863add61d7bdf2d273cf1340c
Certificate serial: 0197B6A1FDAA16D552C53F64FE3AFA06AD5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-lCeLPhkBhjrdYde98tJzzxNAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:02:38 +0000
Manifest this update: Sat 28 Jun 2025 13:02:38 +0000
Manifest next update: Sun 29 Jun 2025 13:02:38 +0000
Files and hashes: 1: 7oIgDgDNpX6XAW4lQ5qq69olmro.roa (hash: 3Y/w0AZ9JHVMQciRUgte6R4EVpLThqmwyOoyqP/qwcw=)
2: J-lCeLPhkBhjrdYde98tJzzxNAw.crl (hash: PHqtlxUIkqmMqb5f9xQe3W+UPS7cvpDtnkMI5LHEQkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-lCeLPhkBhjrdYde98tJzzxNAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:fd:aa:16:d5:52:c5:3f:64:fe:3a:fa:06:ad:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e94278b3e1901863add61d7bdf2d273cf1340c
Validity
Not Before: Jun 28 13:02:38 2025 GMT
Not After : Jun 29 13:02:38 2025 GMT
Subject: CN=e4ba2220e331d80916aa242e199212672ef7213b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b1:36:16:8d:93:3b:a0:01:ca:23:ef:f5:91:
f0:b8:ba:9c:a9:46:4c:28:cf:51:87:ee:97:91:ef:
8d:14:bb:0f:2a:f9:97:86:d0:b6:41:3b:8b:c6:e8:
63:7e:3e:7e:53:38:e8:ce:a1:a8:98:e6:56:1d:74:
18:cc:25:ab:64:bc:ea:81:ac:e6:fa:81:db:57:c1:
0b:b0:9c:be:14:eb:db:2c:07:18:54:d0:27:80:72:
2a:9e:71:c7:43:fc:76:40:42:4b:8b:72:d2:67:b0:
95:58:f6:db:20:97:35:c6:8e:cd:69:79:75:66:08:
c3:fe:5e:d4:ec:ad:f9:3d:84:e9:96:6c:4b:9e:ac:
ca:ec:d7:06:6f:7d:3e:e0:56:c1:6d:16:d0:76:e4:
38:75:c5:ef:19:40:00:ff:c0:fb:10:1d:b7:e2:04:
2d:9e:fe:a4:b6:f2:40:f5:4b:da:25:d9:ee:5a:1b:
d0:8e:e2:84:08:6b:50:a9:ff:90:98:b8:75:a5:47:
d6:98:f7:29:dd:73:33:75:28:e6:b4:c3:30:da:b2:
ab:06:36:86:4a:84:c4:d5:f2:1b:7f:d0:b9:cc:6c:
1c:11:de:6a:91:72:2e:bf:15:cf:ae:bf:9d:6e:7b:
1b:e1:04:c3:ad:9d:ca:37:88:f9:e3:89:41:4e:ad:
4a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BA:22:20:E3:31:D8:09:16:AA:24:2E:19:92:12:67:2E:F7:21:3B
X509v3 Authority Key Identifier:
keyid:27:E9:42:78:B3:E1:90:18:63:AD:D6:1D:7B:DF:2D:27:3C:F1:34:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-lCeLPhkBhjrdYde98tJzzxNAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b2:f2:ca:0a:a7:1f:3a:83:60:ae:40:34:6e:4c:f2:66:13:
ef:36:83:80:d4:49:a7:64:d7:8f:52:8c:fa:91:a8:64:1a:8f:
fd:95:d7:c1:44:c3:3e:59:4f:1c:74:51:38:e3:c2:05:96:fb:
e7:04:dd:e7:e2:39:d9:b5:5f:dd:49:d9:c1:bd:be:7a:a6:64:
32:71:20:68:ff:22:ac:be:48:0e:9e:08:cb:77:4f:7b:a3:1e:
b8:bf:de:05:52:c9:08:4a:16:b9:ad:35:f6:e0:42:fa:bb:c2:
b2:e3:bc:b4:86:60:d1:2f:a4:24:b7:8e:03:2b:53:b5:0f:46:
fe:69:89:fc:16:ae:12:ae:4f:7b:ea:a4:84:a8:4b:0e:07:98:
38:c1:62:72:d3:30:99:20:10:13:35:58:82:fc:8e:9a:5e:57:
4a:d2:91:a2:7a:1d:f6:42:41:5b:a4:2f:d4:14:e3:06:3a:64:
81:c9:11:ef:49:0a:14:bd:3f:bc:d1:ea:a6:4e:e2:d2:c8:a6:
a3:8e:d5:80:2f:eb:df:e8:bb:97:8c:78:09:0a:22:32:d9:1d:
6f:1e:f1:4a:fa:5a:95:40:c9:24:4b:16:77:99:a1:d4:9a:45:
34:58:4c:eb:b0:31:c8:a3:80:75:e2:d6:ce:c8:0f:9a:58:e2:
24:ee:7d:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2of2qFtVSxT9k/jr6Bq1aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZTk0Mjc4YjNlMTkwMTg2M2FkZDYxZDdiZGYyZDI3M2Nm
MTM0MGMwHhcNMjUwNjI4MTMwMjM4WhcNMjUwNjI5MTMwMjM4WjAzMTEwLwYDVQQD
EyhlNGJhMjIyMGUzMzFkODA5MTZhYTI0MmUxOTkyMTI2NzJlZjcyMTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbE2Fo2TO6AByiPv9ZHwuLqcqUZM
KM9Rh+6Xke+NFLsPKvmXhtC2QTuLxuhjfj5+UzjozqGomOZWHXQYzCWrZLzqgazm
+oHbV8ELsJy+FOvbLAcYVNAngHIqnnHHQ/x2QEJLi3LSZ7CVWPbbIJc1xo7NaXl1
ZgjD/l7U7K35PYTplmxLnqzK7NcGb30+4FbBbRbQduQ4dcXvGUAA/8D7EB234gQt
nv6ktvJA9UvaJdnuWhvQjuKECGtQqf+QmLh1pUfWmPcp3XMzdSjmtMMw2rKrBjaG
SoTE1fIbf9C5zGwcEd5qkXIuvxXPrr+dbnsb4QTDrZ3KN4j544lBTq1KNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOS6IiDjMdgJFqokLhmSEmcu9yE7MB8GA1UdIwQY
MBaAFCfpQniz4ZAYY63WHXvfLSc88TQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSi1sQ2VMUGhrQmhqcmRZZGU5OHRKenp4TkF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iZjQxYjQtMWRiOS00YWEyLWFkNzQt
YjdjOTlkZGFjNzAzLzEvSi1sQ2VMUGhrQmhqcmRZZGU5OHRKenp4TkF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9iZjQxYjQtMWRiOS00YWEyLWFkNzQtYjdjOTlkZGFjNzAz
LzEvSi1sQ2VMUGhrQmhqcmRZZGU5OHRKenp4TkF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdbLyygqn
HzqDYK5ANG5M8mYT7zaDgNRJp2TXj1KM+pGoZBqP/ZXXwUTDPllPHHRROOPCBZb7
5wTd5+I52bVf3UnZwb2+eqZkMnEgaP8irL5IDp4Iy3dPe6MeuL/eBVLJCEoWua01
9uBC+rvCsuO8tIZg0S+kJLeOAytTtQ9G/mmJ/BauEq5Pe+qkhKhLDgeYOMFictMw
mSAQEzVYgvyOml5XStKRonod9kJBW6Qv1BTjBjpkgckR70kKFL0/vNHqpk7i0sim
o47VgC/r3+i7l4x4CQoiMtkdbx7xSvpalUDJJEsWd5mh1JpFNFhM67AxyKOAdeLW
zsgPmljiJO59gw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:21 2025 by rpki-client