Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
File: JeqXR70BpFf6K7AvzArIIxQLUY8.mft (raw, json)
Hash identifier: IxsMahSMuGk9WUIEaBSRxTD8g3slnkFusua+TQXwXUw=
Subject key identifier: 37:D6:E0:BB:3B:6A:0F:E5:37:7C:C6:6B:6F:4E:5B:C2:94:C4:02:14
Authority key identifier: 25:EA:97:47:BD:01:A4:57:FA:2B:B0:2F:CC:0A:C8:23:14:0B:51:8F
Certificate issuer: /CN=25ea9747bd01a457fa2bb02fcc0ac823140b518f
Certificate serial: 0197B5C4F75F4A3DD233DEEC50039C671882
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
Manifest number: 045D
Signing time: Sat 28 Jun 2025 09:01:13 +0000
Manifest this update: Sat 28 Jun 2025 09:01:13 +0000
Manifest next update: Sun 29 Jun 2025 09:01:13 +0000
Files and hashes: 1: JeqXR70BpFf6K7AvzArIIxQLUY8.crl (hash: mv3CC8XpHDrZ8xoLJDvsCUhCPgD3vph/YiD8yHf6xwg=)
2: MmaQNXqdY0uKh-k6Q3lAXI1Chz8.roa (hash: gbTLg78j8QXaXHSAXv6UFJxOI7JnWlqhBTReKaDFIXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:f7:5f:4a:3d:d2:33:de:ec:50:03:9c:67:18:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25ea9747bd01a457fa2bb02fcc0ac823140b518f
Validity
Not Before: Jun 28 09:01:13 2025 GMT
Not After : Jun 29 09:01:13 2025 GMT
Subject: CN=37d6e0bb3b6a0fe5377cc66b6f4e5bc294c40214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:77:e2:bd:de:01:19:35:ae:5d:52:ce:d6:
e9:bb:cf:2c:9a:c3:c6:96:8b:cb:fe:2b:a6:e8:48:
c0:8f:a8:42:4c:b2:2e:59:f6:87:bf:74:ad:84:b2:
50:51:81:23:6f:1c:cb:55:45:3e:89:a0:61:e5:81:
c2:35:30:4e:76:bf:a6:3b:dd:79:7e:09:ed:ad:6b:
d1:82:b5:e6:6d:b0:9a:da:11:32:f3:92:fa:11:49:
58:c2:7c:7d:4b:63:47:ad:a1:fb:76:dd:aa:9e:af:
ab:49:c0:37:b3:eb:d1:26:db:20:7c:20:87:91:a7:
c4:ba:4b:a0:75:fd:f5:61:c0:88:d7:64:99:78:19:
dc:e8:02:6b:f3:be:67:ca:71:ad:76:a2:b6:23:67:
5d:9f:8a:87:43:7a:b4:50:d1:f9:3c:4f:bb:6a:2c:
66:a0:7c:f3:12:cd:03:ab:04:d8:be:fa:be:b2:7e:
42:85:a7:ef:13:e8:72:14:df:7e:fe:cd:f3:1b:b7:
e3:f5:92:b3:bf:b2:5e:91:a8:0f:54:78:a5:2e:9b:
fe:53:b0:e0:9b:6c:9f:0d:ef:19:c4:91:af:9c:84:
b6:14:bb:17:66:db:3f:9d:e8:0a:09:90:2d:e9:5a:
28:1f:bd:4e:21:ba:16:4e:76:ef:87:e1:a5:9f:a8:
c3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D6:E0:BB:3B:6A:0F:E5:37:7C:C6:6B:6F:4E:5B:C2:94:C4:02:14
X509v3 Authority Key Identifier:
keyid:25:EA:97:47:BD:01:A4:57:FA:2B:B0:2F:CC:0A:C8:23:14:0B:51:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:12:ce:c4:07:72:e3:d7:0e:41:ce:25:d7:d7:e1:4a:eb:d2:
ff:82:9b:5f:39:e9:36:3e:61:83:15:ef:b8:23:b8:72:b4:19:
70:1b:1d:80:be:ec:75:0a:0e:89:0a:9a:55:56:98:f5:45:f4:
f1:01:05:8d:38:1f:78:25:1c:3f:53:61:43:4c:3b:93:7d:30:
1d:2a:bf:1a:18:f1:d3:6e:a5:d9:66:81:c6:44:f5:5d:1c:2a:
10:5e:43:9f:52:e6:b4:0c:64:d0:58:2e:1e:6e:ef:80:13:02:
fa:bf:5d:52:91:9a:df:da:ff:d8:08:09:56:fb:98:4c:24:f2:
41:0b:e6:90:0d:08:09:e1:02:58:83:a1:b9:a4:3d:98:75:76:
55:f8:7b:ec:c5:f6:43:8c:b7:be:aa:ff:28:ac:85:f9:86:60:
57:16:dd:d6:89:1f:12:8b:40:14:fc:bb:8a:34:3b:4b:00:bd:
ed:ad:8a:e8:c0:62:b2:12:a5:29:7b:2e:d9:d5:02:a9:44:fc:
07:51:e9:f5:d5:88:d1:b8:4a:7d:37:47:27:f0:04:9d:1a:08:
74:1e:57:c6:a4:b6:29:cb:98:e5:a0:bb:90:a2:1e:91:c3:ea:
62:3b:9f:02:59:1e:35:a6:07:17:0b:e8:a5:61:51:f0:62:45:
bd:1b:f4:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1xPdfSj3SM97sUAOcZxiCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZWE5NzQ3YmQwMWE0NTdmYTJiYjAyZmNjMGFjODIzMTQw
YjUxOGYwHhcNMjUwNjI4MDkwMTEzWhcNMjUwNjI5MDkwMTEzWjAzMTEwLwYDVQQD
EygzN2Q2ZTBiYjNiNmEwZmU1Mzc3Y2M2NmI2ZjRlNWJjMjk0YzQwMjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8p34r3eARk1rl1Sztbpu88smsPG
lovL/ium6EjAj6hCTLIuWfaHv3SthLJQUYEjbxzLVUU+iaBh5YHCNTBOdr+mO915
fgntrWvRgrXmbbCa2hEy85L6EUlYwnx9S2NHraH7dt2qnq+rScA3s+vRJtsgfCCH
kafEukugdf31YcCI12SZeBnc6AJr875nynGtdqK2I2ddn4qHQ3q0UNH5PE+7aixm
oHzzEs0DqwTYvvq+sn5ChafvE+hyFN9+/s3zG7fj9ZKzv7JekagPVHilLpv+U7Dg
m2yfDe8ZxJGvnIS2FLsXZts/negKCZAt6VooH71OIboWTnbvh+Gln6jDdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDfW4Ls7ag/lN3zGa29OW8KUxAIUMB8GA1UdIwQY
MBaAFCXql0e9AaRX+iuwL8wKyCMUC1GPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmVxWFI3MEJwRmY2SzdBdnpBcklJeFFMVVk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni80ZmVmMDAtOTA4ZS00NDNjLTlmZjIt
MDE2ZDZkY2ZhZDgxLzEvSmVxWFI3MEJwRmY2SzdBdnpBcklJeFFMVVk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni80ZmVmMDAtOTA4ZS00NDNjLTlmZjItMDE2ZDZkY2ZhZDgx
LzEvSmVxWFI3MEJwRmY2SzdBdnpBcklJeFFMVVk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHRLOxAdy
49cOQc4l19fhSuvS/4KbXznpNj5hgxXvuCO4crQZcBsdgL7sdQoOiQqaVVaY9UX0
8QEFjTgfeCUcP1NhQ0w7k30wHSq/Ghjx026l2WaBxkT1XRwqEF5Dn1LmtAxk0Fgu
Hm7vgBMC+r9dUpGa39r/2AgJVvuYTCTyQQvmkA0ICeECWIOhuaQ9mHV2Vfh77MX2
Q4y3vqr/KKyF+YZgVxbd1okfEotAFPy7ijQ7SwC97a2K6MBishKlKXsu2dUCqUT8
B1Hp9dWI0bhKfTdHJ/AEnRoIdB5XxqS2KcuY5aC7kKIekcPqYjufAlkeNaYHFwvo
pWFR8GJFvRv0gQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:23:24 2025 by rpki-client