Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.mft
File: JVnpvh-9HmkJoL6akLOA-CT6saU.mft (raw, json)
Hash identifier: m4CyvIBLOGaF2AP9+oGOc8ksNbc5TFvcfXwg/akINX0=
Subject key identifier: E8:3A:C2:A1:5C:88:D7:1B:A5:6A:DF:17:73:C2:68:44:A8:0E:72:A3
Authority key identifier: 25:59:E9:BE:1F:BD:1E:69:09:A0:BE:9A:90:B3:80:F8:24:FA:B1:A5
Certificate issuer: /CN=2559e9be1fbd1e6909a0be9a90b380f824fab1a5
Certificate serial: 0197B8FD9F55A07A204F3220AEF9335733BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVnpvh-9HmkJoL6akLOA-CT6saU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.mft
Manifest number: 15B6
Signing time: Sun 29 Jun 2025 00:01:58 +0000
Manifest this update: Sun 29 Jun 2025 00:01:58 +0000
Manifest next update: Mon 30 Jun 2025 00:01:58 +0000
Files and hashes: 1: 04EXo_aa8R-wCVS1fC9fkSKHbQk.roa (hash: D39mfhIOXghwegUx11UFZTXpnVcMRyxswgHcx5Y2hRA=)
2: BlZm0sYSiIU1jZrNYK3L2v3x4VM.roa (hash: czqqE6msCgy8fH0iDys1D75RKoCAAvAyOHtekUZuaxc=)
3: JVnpvh-9HmkJoL6akLOA-CT6saU.crl (hash: nodSpr99L/pG0PRucLSN2po9NpP5DqodGmOtp44XRFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.mft
rsync://rpki.ripe.net/repository/DEFAULT/JVnpvh-9HmkJoL6akLOA-CT6saU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:9f:55:a0:7a:20:4f:32:20:ae:f9:33:57:33:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2559e9be1fbd1e6909a0be9a90b380f824fab1a5
Validity
Not Before: Jun 29 00:01:58 2025 GMT
Not After : Jun 30 00:01:58 2025 GMT
Subject: CN=e83ac2a15c88d71ba56adf1773c26844a80e72a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f6:6b:f2:b1:12:8d:11:a8:d9:69:b4:f1:e3:
ae:f3:98:a1:8e:28:e5:ac:62:ad:0e:83:26:5b:10:
b4:35:84:3f:fc:29:ad:0d:ec:c7:d1:18:72:d3:70:
b4:fe:dd:36:c7:9a:41:ef:e6:ff:dc:68:63:52:93:
72:78:ea:ee:0d:07:76:a0:06:ee:b3:f6:a4:6d:75:
31:3d:ad:77:0b:e8:0a:4e:7c:2e:4d:42:69:07:0d:
fa:13:48:cd:8c:ac:bb:5a:a8:be:0e:99:16:43:bf:
2e:45:b7:18:46:0a:d9:6f:a1:bf:e7:78:6e:9b:06:
60:00:40:65:7e:6e:e5:fc:73:15:c4:e1:0d:bc:09:
8c:95:d8:d2:e2:8c:1f:e5:36:21:f7:da:9c:54:c9:
8b:db:67:c9:7a:f1:b7:ee:8c:18:83:cb:72:f0:ea:
1b:bb:5c:1c:a9:97:da:24:c4:dc:d2:51:23:ac:41:
e3:b7:13:eb:45:9c:99:fd:3b:22:8f:11:ce:f8:10:
64:8a:c1:11:e2:0a:07:19:e2:7d:fe:c0:59:fd:ae:
be:58:1e:a6:c7:84:65:3d:cf:c1:11:50:ac:b0:92:
15:78:f3:88:bb:84:ae:53:96:b3:46:d8:db:6b:30:
10:17:64:7a:31:39:bb:5c:0c:05:72:1c:12:29:a4:
12:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3A:C2:A1:5C:88:D7:1B:A5:6A:DF:17:73:C2:68:44:A8:0E:72:A3
X509v3 Authority Key Identifier:
keyid:25:59:E9:BE:1F:BD:1E:69:09:A0:BE:9A:90:B3:80:F8:24:FA:B1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVnpvh-9HmkJoL6akLOA-CT6saU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e8:67:e1:83:8d:15:09:96:b7:8a:c6:e1:24:f0:53:68:c4:d9:
80:f7:e2:33:ef:42:e6:a4:26:47:16:52:54:c8:0f:2f:12:80:
dd:cf:6e:14:2e:8f:65:99:79:be:1c:fe:cf:17:dc:88:31:75:
5a:2a:00:f9:c3:90:c4:9a:94:5f:5c:67:ac:ae:9b:da:71:ef:
98:fb:43:97:a0:f9:c3:a8:43:d2:58:47:57:65:db:1a:3e:e9:
6e:a3:35:2c:c6:5a:66:c2:72:76:2a:6d:5e:e4:58:b8:b0:4e:
71:2b:60:e6:fe:36:3c:43:4d:b6:e2:78:0e:d3:30:04:ce:6a:
96:4f:15:e1:26:12:e4:12:1d:aa:b0:3f:f4:4c:f6:c6:e9:c2:
38:85:3c:3a:b4:59:58:f9:91:e4:6e:f0:6d:f8:9f:37:48:de:
51:a1:04:01:a5:aa:c8:7c:44:0e:33:53:9a:01:38:27:ba:69:
5b:5c:dc:5a:6a:b8:60:b1:d4:60:b8:1e:d7:e4:87:a2:72:e2:
9d:fd:cf:cc:e8:cc:8e:88:4e:1c:1e:ef:91:82:42:b0:4c:d1:
aa:03:48:da:e5:7d:2d:fc:21:94:4b:af:9c:eb:35:53:37:ff:
44:e9:f8:0f:af:06:9c:20:f7:38:a5:57:65:89:88:21:9f:68:
0e:aa:d5:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4/Z9VoHogTzIgrvkzVzO/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NTllOWJlMWZiZDFlNjkwOWEwYmU5YTkwYjM4MGY4MjRm
YWIxYTUwHhcNMjUwNjI5MDAwMTU4WhcNMjUwNjMwMDAwMTU4WjAzMTEwLwYDVQQD
EyhlODNhYzJhMTVjODhkNzFiYTU2YWRmMTc3M2MyNjg0NGE4MGU3MmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/Zr8rESjRGo2Wm08eOu85ihjijl
rGKtDoMmWxC0NYQ//CmtDezH0Rhy03C0/t02x5pB7+b/3GhjUpNyeOruDQd2oAbu
s/akbXUxPa13C+gKTnwuTUJpBw36E0jNjKy7Wqi+DpkWQ78uRbcYRgrZb6G/53hu
mwZgAEBlfm7l/HMVxOENvAmMldjS4owf5TYh99qcVMmL22fJevG37owYg8ty8Oob
u1wcqZfaJMTc0lEjrEHjtxPrRZyZ/TsijxHO+BBkisER4goHGeJ9/sBZ/a6+WB6m
x4RlPc/BEVCssJIVePOIu4SuU5azRtjbazAQF2R6MTm7XAwFchwSKaQS5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOg6wqFciNcbpWrfF3PCaESoDnKjMB8GA1UdIwQY
MBaAFCVZ6b4fvR5pCaC+mpCzgPgk+rGlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlZucHZoLTlIbWtKb0w2YWtMT0EtQ1Q2c2FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy81ZWRkNmYtMmM2NS00NDdkLWJjYWQt
NGFhYWRhNjVkNzFjLzEvSlZucHZoLTlIbWtKb0w2YWtMT0EtQ1Q2c2FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy81ZWRkNmYtMmM2NS00NDdkLWJjYWQtNGFhYWRhNjVkNzFj
LzEvSlZucHZoLTlIbWtKb0w2YWtMT0EtQ1Q2c2FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6Gfhg40V
CZa3isbhJPBTaMTZgPfiM+9C5qQmRxZSVMgPLxKA3c9uFC6PZZl5vhz+zxfciDF1
WioA+cOQxJqUX1xnrK6b2nHvmPtDl6D5w6hD0lhHV2XbGj7pbqM1LMZaZsJydipt
XuRYuLBOcStg5v42PENNtuJ4DtMwBM5qlk8V4SYS5BIdqrA/9Ez2xunCOIU8OrRZ
WPmR5G7wbfifN0jeUaEEAaWqyHxEDjNTmgE4J7ppW1zcWmq4YLHUYLge1+SHonLi
nf3PzOjMjohOHB7vkYJCsEzRqgNI2uV9LfwhlEuvnOs1Uzf/ROn4D68GnCD3OKVX
ZYmIIZ9oDqrVaw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:26:25 2025 by rpki-client