Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft
File: JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft (raw, json)
Hash identifier: 9LfxzuKJQa73nHBCj1KPocVwzM18UWGIgGXkmXiBgY0=
Subject key identifier: 94:2E:08:C0:07:34:C8:1D:60:63:50:75:7B:DE:53:25:C5:36:62:A9
Authority key identifier: 24:DB:53:64:7A:D6:45:A9:42:0F:60:B8:6D:6E:93:75:FC:F8:5A:27
Certificate issuer: /CN=24db53647ad645a9420f60b86d6e9375fcf85a27
Certificate serial: 0197B70E6CA0C2DFC1B7161D757A0EB34D9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNtTZHrWRalCD2C4bW6Tdfz4Wic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 15:01:05 +0000
Manifest this update: Sat 28 Jun 2025 15:01:05 +0000
Manifest next update: Sun 29 Jun 2025 15:01:05 +0000
Files and hashes: 1: JNtTZHrWRalCD2C4bW6Tdfz4Wic.crl (hash: ECbNEW1n9OdVkK9In9gLymmAnWCzpBiOnVPQB/3jkQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNtTZHrWRalCD2C4bW6Tdfz4Wic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:6c:a0:c2:df:c1:b7:16:1d:75:7a:0e:b3:4d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24db53647ad645a9420f60b86d6e9375fcf85a27
Validity
Not Before: Jun 28 15:01:05 2025 GMT
Not After : Jun 29 15:01:05 2025 GMT
Subject: CN=942e08c00734c81d606350757bde5325c53662a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cd:79:83:22:4d:23:51:f7:c2:65:1f:18:78:
df:12:ed:e9:47:80:58:13:1d:e7:64:d8:d6:40:a5:
ea:e6:bb:3c:1b:21:9a:a5:60:7c:c2:5d:e2:ec:aa:
d2:87:ed:2a:4a:bc:7e:d3:2d:c0:b9:88:e7:89:b1:
9a:12:74:6b:7d:37:ab:e9:dd:18:68:7c:c1:94:53:
97:de:66:bf:d2:32:01:9d:95:39:86:c2:c3:e3:0d:
85:3a:11:e2:0d:01:48:b1:eb:12:5c:c1:a8:1a:8c:
46:f9:3e:21:db:ef:d6:bd:21:f4:45:ed:c5:40:af:
63:e7:97:c9:81:25:c0:dc:37:48:0f:46:ef:45:17:
3a:e8:91:ec:28:a2:a3:e8:c2:c8:b3:f8:2e:de:f5:
c3:b4:e8:21:a2:1f:7a:c5:4e:d0:20:55:aa:f1:c1:
fd:0d:ae:ae:76:bf:95:5c:ec:2e:1a:ab:e0:d4:40:
59:27:07:ed:77:04:33:86:34:a5:ff:c0:30:e3:91:
b2:5a:5c:99:b6:3a:73:27:65:f7:83:c1:89:88:02:
8b:5f:5c:92:2f:9c:cc:87:18:16:d5:05:6d:6e:24:
d4:84:f0:e9:f9:12:89:b4:67:c0:e9:f5:4e:70:f8:
09:32:ba:3c:d8:03:aa:af:3a:d1:56:28:66:2d:09:
5f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2E:08:C0:07:34:C8:1D:60:63:50:75:7B:DE:53:25:C5:36:62:A9
X509v3 Authority Key Identifier:
keyid:24:DB:53:64:7A:D6:45:A9:42:0F:60:B8:6D:6E:93:75:FC:F8:5A:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNtTZHrWRalCD2C4bW6Tdfz4Wic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:79:76:1e:25:a0:c3:04:ea:d2:a7:b1:a1:20:a2:a5:86:eb:
ae:e3:bd:61:f9:45:a2:bf:5a:a9:7f:11:00:95:0b:9d:a3:40:
b5:2b:dc:48:a7:86:65:87:44:6c:cb:15:39:5a:9e:51:4a:69:
17:6b:f5:77:ca:4c:21:36:9d:41:47:32:ed:e0:99:24:39:20:
8e:c3:29:a6:06:ed:b0:e4:41:43:dd:32:07:b3:7a:74:b3:d1:
a5:03:d2:58:46:02:ac:b8:09:82:5f:00:46:00:31:10:d7:2d:
b6:a6:33:23:3e:9c:96:18:9f:97:3e:96:01:9e:01:fb:1a:d8:
e6:ed:fe:e4:d4:8d:e4:a7:c1:0b:bb:3a:9b:d8:6b:aa:f3:93:
55:13:5e:74:60:15:0e:e5:26:36:91:21:28:7d:49:8b:4e:a4:
a0:98:9e:2b:5c:89:86:eb:3c:39:65:b9:7b:9b:f3:71:de:8c:
77:01:fb:24:a4:c7:6e:fb:7c:1a:cb:ea:79:22:3d:f2:c8:00:
24:d3:61:15:7f:4d:ed:c7:3f:90:36:31:0c:3e:17:06:d2:3b:
0d:28:27:ca:19:86:7e:57:a9:ee:44:c2:fc:0f:3d:4b:be:c1:
40:ba:8e:cb:2e:7f:c6:e6:8e:30:df:58:6c:c4:13:c6:fa:52:
6a:ed:4c:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dmygwt/BtxYddXoOs02dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZGI1MzY0N2FkNjQ1YTk0MjBmNjBiODZkNmU5Mzc1ZmNm
ODVhMjcwHhcNMjUwNjI4MTUwMTA1WhcNMjUwNjI5MTUwMTA1WjAzMTEwLwYDVQQD
Eyg5NDJlMDhjMDA3MzRjODFkNjA2MzUwNzU3YmRlNTMyNWM1MzY2MmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwc15gyJNI1H3wmUfGHjfEu3pR4BY
Ex3nZNjWQKXq5rs8GyGapWB8wl3i7KrSh+0qSrx+0y3AuYjnibGaEnRrfTer6d0Y
aHzBlFOX3ma/0jIBnZU5hsLD4w2FOhHiDQFIsesSXMGoGoxG+T4h2+/WvSH0Re3F
QK9j55fJgSXA3DdID0bvRRc66JHsKKKj6MLIs/gu3vXDtOghoh96xU7QIFWq8cH9
Da6udr+VXOwuGqvg1EBZJwftdwQzhjSl/8Aw45GyWlyZtjpzJ2X3g8GJiAKLX1yS
L5zMhxgW1QVtbiTUhPDp+RKJtGfA6fVOcPgJMro82AOqrzrRVihmLQlfawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQuCMAHNMgdYGNQdXveUyXFNmKpMB8GA1UdIwQY
MBaAFCTbU2R61kWpQg9guG1uk3X8+FonMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk50VFpIcldSYWxDRDJDNGJXNlRkZno0V2ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9lYjg2ZjctMjFlZi00Mjc4LWJkODEt
NDYxMDcyYmY4YWVmLzEvSk50VFpIcldSYWxDRDJDNGJXNlRkZno0V2ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9lYjg2ZjctMjFlZi00Mjc4LWJkODEtNDYxMDcyYmY4YWVm
LzEvSk50VFpIcldSYWxDRDJDNGJXNlRkZno0V2ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc3l2HiWg
wwTq0qexoSCipYbrruO9YflFor9aqX8RAJULnaNAtSvcSKeGZYdEbMsVOVqeUUpp
F2v1d8pMITadQUcy7eCZJDkgjsMppgbtsORBQ90yB7N6dLPRpQPSWEYCrLgJgl8A
RgAxENcttqYzIz6clhiflz6WAZ4B+xrY5u3+5NSN5KfBC7s6m9hrqvOTVRNedGAV
DuUmNpEhKH1Ji06koJieK1yJhus8OWW5e5vzcd6MdwH7JKTHbvt8GsvqeSI98sgA
JNNhFX9N7cc/kDYxDD4XBtI7DSgnyhmGflep7kTC/A89S77BQLqOyy5/xuaOMN9Y
bMQTxvpSau1Mmw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:54:12 2025 by rpki-client