Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
File: JQ599DyC0SChPTyGXx8G9JZEseE.mft (raw, json)
Hash identifier: 6XpgpmNpTOVoEHJXo4vGiBmspSjKT7jIuN11mhiWpds=
Subject key identifier: 2E:4D:D3:B4:CF:DF:01:9E:0E:1A:70:44:AE:D8:A4:72:FA:C7:9E:AD
Authority key identifier: 25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1
Certificate issuer: /CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
Certificate serial: 0197B7EABCCAC3B27690A740FDDF2B6E8BCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
Manifest number: 0D9B
Signing time: Sat 28 Jun 2025 19:01:43 +0000
Manifest this update: Sat 28 Jun 2025 19:01:43 +0000
Manifest next update: Sun 29 Jun 2025 19:01:43 +0000
Files and hashes: 1: JQ599DyC0SChPTyGXx8G9JZEseE.crl (hash: 1vO/nX59tD7kzUg5Mtd2gtlCETv7z4r9bNWlOp8tsWc=)
2: NxEFYabQ1De2D9MRDvZOgIu0R4g.roa (hash: lAojMYDzIDb75W7SBnvnLzGQZua9BCv398UHDwqthXo=)
3: uBhMU8FaL6yzEgI8KXo0amRkPt0.roa (hash: rZaJZ+vs9poyZNeTB4YM94eOiwwWluQ2wWx8JrMOGHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:bc:ca:c3:b2:76:90:a7:40:fd:df:2b:6e:8b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
Validity
Not Before: Jun 28 19:01:43 2025 GMT
Not After : Jun 29 19:01:43 2025 GMT
Subject: CN=2e4dd3b4cfdf019e0e1a7044aed8a472fac79ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:90:69:99:b7:45:46:cf:42:f1:71:56:53:44:
bd:13:ab:1a:9f:e3:72:9f:be:8b:7d:f5:0a:4d:df:
42:7f:ed:57:5a:ac:ea:a4:fa:e3:ff:4d:a5:51:7f:
26:9a:b2:b9:26:3e:ff:98:22:10:9d:ca:c6:72:e4:
f7:e0:90:67:60:c1:39:6b:16:17:4d:e9:e0:94:34:
85:a5:4b:85:ca:54:d5:42:2f:18:fd:26:8a:f0:ed:
08:52:a5:ab:e5:3e:c7:27:f0:6f:ef:7f:d4:df:ce:
92:2d:36:f2:83:c6:2c:11:65:04:30:ef:72:98:8e:
b7:ff:b0:b6:20:8b:6d:1a:5d:dd:3e:00:9e:a7:e1:
03:cf:3c:d5:fb:28:d7:91:ca:6a:35:1f:e4:7c:91:
8a:18:b7:85:91:7e:74:f1:e2:5e:00:c3:ba:12:c2:
57:0b:3f:aa:2e:52:27:5d:2f:87:d8:84:0d:01:28:
d3:f8:44:9b:4f:d2:af:53:94:b8:c6:a1:3a:8e:7b:
f7:dc:25:32:c4:b5:13:43:5f:2b:c7:f3:7b:ee:a4:
75:00:48:7b:d3:55:6c:a6:cc:e0:a9:fb:bb:33:4c:
d5:4f:98:d6:8a:52:6b:71:62:7b:d5:ff:84:7b:51:
11:68:8b:1a:ac:22:cd:29:a1:1b:a2:4f:23:d7:59:
5e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:4D:D3:B4:CF:DF:01:9E:0E:1A:70:44:AE:D8:A4:72:FA:C7:9E:AD
X509v3 Authority Key Identifier:
keyid:25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:4b:6a:ca:c1:40:41:08:95:28:f6:0c:32:86:43:42:af:d8:
5a:c1:5a:28:be:28:d3:11:74:d2:96:80:22:6c:b9:73:79:b5:
95:23:18:f3:78:c4:6a:bd:5e:60:5b:55:cb:f8:27:8b:2d:df:
76:3e:af:07:1c:5a:fb:3b:5d:cb:b9:cc:ce:22:a4:25:63:86:
d7:e5:a6:76:2a:67:59:a7:b3:0a:b3:01:c6:47:71:b5:81:87:
13:96:31:13:56:a0:8f:c9:46:de:b3:19:58:91:a4:3e:2e:50:
13:7a:73:32:7a:d5:54:5f:3d:55:cb:42:4a:08:4a:69:22:fc:
2b:c7:12:2b:79:8a:70:f7:b5:c5:63:e3:3d:53:02:cf:1d:6b:
fb:f9:0a:1b:59:49:49:1a:74:5e:f1:d9:86:4e:e5:de:ed:05:
9b:46:b4:69:7f:00:7b:b7:af:78:2f:71:e5:b3:5c:8c:f4:d6:
0e:0d:c9:21:0d:91:52:8c:b6:dd:c0:d6:22:55:51:f7:73:f0:
e0:b7:80:ba:f9:53:60:89:b1:ff:b5:0f:b6:93:d0:d7:ba:ea:
99:67:9d:c2:67:f7:ad:77:bf:54:b3:51:f0:75:29:2e:e3:5d:
f2:3f:99:59:52:3f:8a:8f:12:96:e9:85:a6:57:9f:72:8a:9c:
29:67:36:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36rzKw7J2kKdA/d8rbovOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MGU3ZGY0M2M4MmQxMjBhMTNkM2M4NjVmMWYwNmY0OTY0
NGIxZTEwHhcNMjUwNjI4MTkwMTQzWhcNMjUwNjI5MTkwMTQzWjAzMTEwLwYDVQQD
EygyZTRkZDNiNGNmZGYwMTllMGUxYTcwNDRhZWQ4YTQ3MmZhYzc5ZWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpBpmbdFRs9C8XFWU0S9E6san+Ny
n76LffUKTd9Cf+1XWqzqpPrj/02lUX8mmrK5Jj7/mCIQncrGcuT34JBnYME5axYX
TenglDSFpUuFylTVQi8Y/SaK8O0IUqWr5T7HJ/Bv73/U386SLTbyg8YsEWUEMO9y
mI63/7C2IIttGl3dPgCep+EDzzzV+yjXkcpqNR/kfJGKGLeFkX508eJeAMO6EsJX
Cz+qLlInXS+H2IQNASjT+ESbT9KvU5S4xqE6jnv33CUyxLUTQ18rx/N77qR1AEh7
01Vspszgqfu7M0zVT5jWilJrcWJ71f+Ee1ERaIsarCLNKaEbok8j11leOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC5N07TP3wGeDhpwRK7YpHL6x56tMB8GA1UdIwQY
MBaAFCUOffQ8gtEgoT08hl8fBvSWRLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlE1OTlEeUMwU0NoUFR5R1h4OEc5SlpFc2VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS83ZDJlNjQtMTBkOS00YTRlLWE0YzYt
NGE5YmIyZmU3MzMxLzEvSlE1OTlEeUMwU0NoUFR5R1h4OEc5SlpFc2VFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS83ZDJlNjQtMTBkOS00YTRlLWE0YzYtNGE5YmIyZmU3MzMx
LzEvSlE1OTlEeUMwU0NoUFR5R1h4OEc5SlpFc2VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOEtqysFA
QQiVKPYMMoZDQq/YWsFaKL4o0xF00paAImy5c3m1lSMY83jEar1eYFtVy/gniy3f
dj6vBxxa+ztdy7nMziKkJWOG1+WmdipnWaezCrMBxkdxtYGHE5YxE1agj8lG3rMZ
WJGkPi5QE3pzMnrVVF89VctCSghKaSL8K8cSK3mKcPe1xWPjPVMCzx1r+/kKG1lJ
SRp0XvHZhk7l3u0Fm0a0aX8Ae7eveC9x5bNcjPTWDg3JIQ2RUoy23cDWIlVR93Pw
4LeAuvlTYImx/7UPtpPQ17rqmWedwmf3rXe/VLNR8HUpLuNd8j+ZWVI/io8SlumF
plefcoqcKWc2Mw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:43 2025 by rpki-client