Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft
File: jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft (raw, json)
Hash identifier: bqNXMZ5XNYS0cJYOlifhHbFtGEdpIwo5WgiCKvZX+IA=
Subject key identifier: 27:CF:1C:BA:4D:C0:38:77:29:9A:9C:DB:5C:3B:2C:2E:DB:18:F7:1D
Authority key identifier: 8C:08:36:3E:5C:10:67:AD:18:8C:38:03:90:B0:9D:09:A6:2A:17:09
Certificate issuer: /CN=8c08363e5c1067ad188c380390b09d09a62a1709
Certificate serial: 0197B70E5CF4CCA278242C85150AC057983A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAg2PlwQZ60YjDgDkLCdCaYqFwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft
Manifest number: 032F
Signing time: Sat 28 Jun 2025 15:01:01 +0000
Manifest this update: Sat 28 Jun 2025 15:01:01 +0000
Manifest next update: Sun 29 Jun 2025 15:01:01 +0000
Files and hashes: 1: jAg2PlwQZ60YjDgDkLCdCaYqFwk.crl (hash: ZBIEqbpSyoH7pZtXlFBUvyfu4X0lLHYOtdGwM+vVM4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAg2PlwQZ60YjDgDkLCdCaYqFwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:5c:f4:cc:a2:78:24:2c:85:15:0a:c0:57:98:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c08363e5c1067ad188c380390b09d09a62a1709
Validity
Not Before: Jun 28 15:01:01 2025 GMT
Not After : Jun 29 15:01:01 2025 GMT
Subject: CN=27cf1cba4dc03877299a9cdb5c3b2c2edb18f71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b1:b8:13:2e:69:cc:70:91:ae:98:36:49:84:
3c:48:e4:ba:62:ec:68:27:50:bf:e5:75:4f:3b:9c:
a1:b2:d9:14:a8:f2:b8:d3:da:bc:17:49:a3:b9:95:
2e:b7:06:d0:55:6d:02:2c:02:cb:da:99:83:76:d2:
c8:45:47:ce:c5:7a:68:3e:95:4a:f6:49:64:fa:3e:
fd:10:71:49:58:44:df:0e:25:1f:24:b0:00:3e:1d:
79:a7:c5:2e:55:89:d1:9a:c5:f5:e6:f3:48:98:ec:
5b:24:52:bf:bd:76:7d:80:ab:f4:2a:16:00:27:59:
eb:62:4c:4c:43:97:c4:9f:85:3f:9f:41:50:e7:85:
d1:b3:24:84:bf:62:f8:36:f9:83:19:b9:6e:60:47:
c9:8f:d3:31:06:f9:95:f9:24:c0:b8:d4:76:d4:f6:
91:7c:b0:64:3c:e8:4f:c0:3a:9a:d3:a1:e5:54:77:
b7:92:a2:46:76:fe:82:b9:24:c6:10:fc:99:7c:c0:
57:1a:30:d5:75:ed:43:5f:a0:1d:75:1b:dd:5c:a2:
b6:bd:0b:be:68:18:65:d3:30:f9:43:6e:06:7d:7d:
2c:bb:c0:68:96:c0:8c:8f:d5:ea:5b:99:c1:7b:d2:
77:dc:49:b9:e2:a5:b6:83:fb:c6:3d:77:a0:f7:af:
58:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:CF:1C:BA:4D:C0:38:77:29:9A:9C:DB:5C:3B:2C:2E:DB:18:F7:1D
X509v3 Authority Key Identifier:
keyid:8C:08:36:3E:5C:10:67:AD:18:8C:38:03:90:B0:9D:09:A6:2A:17:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAg2PlwQZ60YjDgDkLCdCaYqFwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:5c:47:87:c4:08:3b:38:69:cf:23:c9:62:04:c9:c0:d2:46:
22:fc:fc:e6:be:61:3c:6c:9b:d7:31:07:84:d1:27:75:d4:d6:
86:0b:cb:de:f2:a2:42:2d:26:22:04:45:9b:10:ec:af:47:ea:
b5:36:68:bb:a1:ce:11:1d:fe:78:82:e8:9c:f1:05:8b:72:de:
b5:b5:39:32:38:d3:24:fb:e0:df:3f:9b:18:7d:68:0b:ca:ae:
6b:af:75:d5:90:b8:b3:1c:87:de:57:e9:e1:75:a8:bc:e8:4e:
10:da:46:2d:5a:db:30:03:b6:06:85:bc:0d:80:b3:ce:77:85:
8b:23:0b:e7:3a:6a:bc:5c:b6:bf:1a:d6:1d:c4:14:d3:b2:bd:
d3:1d:2a:bd:1f:e2:6d:f9:aa:f2:94:79:bf:91:97:a9:dd:4f:
bf:36:cc:95:ae:8a:34:23:a6:58:38:07:7c:ae:eb:31:fa:72:
28:8d:57:72:fe:94:2f:b3:76:01:2c:2c:c1:b4:b8:aa:b2:a8:
7d:0e:03:04:7f:92:ae:e0:ad:f2:42:7c:91:b9:5e:6a:07:18:
4b:f1:e6:e4:49:c8:52:8b:ca:f9:8d:a9:80:2c:6c:06:c2:c3:
a9:6e:4f:e7:28:99:dc:89:32:31:e9:92:65:97:6b:f6:33:13:
66:ec:4d:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dlz0zKJ4JCyFFQrAV5g6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMDgzNjNlNWMxMDY3YWQxODhjMzgwMzkwYjA5ZDA5YTYy
YTE3MDkwHhcNMjUwNjI4MTUwMTAxWhcNMjUwNjI5MTUwMTAxWjAzMTEwLwYDVQQD
EygyN2NmMWNiYTRkYzAzODc3Mjk5YTljZGI1YzNiMmMyZWRiMThmNzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLG4Ey5pzHCRrpg2SYQ8SOS6Yuxo
J1C/5XVPO5yhstkUqPK409q8F0mjuZUutwbQVW0CLALL2pmDdtLIRUfOxXpoPpVK
9klk+j79EHFJWETfDiUfJLAAPh15p8UuVYnRmsX15vNImOxbJFK/vXZ9gKv0KhYA
J1nrYkxMQ5fEn4U/n0FQ54XRsySEv2L4NvmDGbluYEfJj9MxBvmV+STAuNR21PaR
fLBkPOhPwDqa06HlVHe3kqJGdv6CuSTGEPyZfMBXGjDVde1DX6AddRvdXKK2vQu+
aBhl0zD5Q24GfX0su8BolsCMj9XqW5nBe9J33Em54qW2g/vGPXeg969Y8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfPHLpNwDh3KZqc21w7LC7bGPcdMB8GA1UdIwQY
MBaAFIwINj5cEGetGIw4A5CwnQmmKhcJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakFnMlBsd1FaNjBZakRnRGtMQ2RDYVlxRndrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9lOTMzMTEtZmMzYi00MWJkLThjYzYt
Yjg3YWI2YjBhMDI5LzEvakFnMlBsd1FaNjBZakRnRGtMQ2RDYVlxRndrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9lOTMzMTEtZmMzYi00MWJkLThjYzYtYjg3YWI2YjBhMDI5
LzEvakFnMlBsd1FaNjBZakRnRGtMQ2RDYVlxRndrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAClxHh8QI
OzhpzyPJYgTJwNJGIvz85r5hPGyb1zEHhNEnddTWhgvL3vKiQi0mIgRFmxDsr0fq
tTZou6HOER3+eILonPEFi3LetbU5MjjTJPvg3z+bGH1oC8qua6911ZC4sxyH3lfp
4XWovOhOENpGLVrbMAO2BoW8DYCzzneFiyML5zpqvFy2vxrWHcQU07K90x0qvR/i
bfmq8pR5v5GXqd1PvzbMla6KNCOmWDgHfK7rMfpyKI1Xcv6UL7N2ASwswbS4qrKo
fQ4DBH+SruCt8kJ8kbleagcYS/Hm5EnIUovK+Y2pgCxsBsLDqW5P5yiZ3IkyMemS
ZZdr9jMTZuxN4w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:38 2025 by rpki-client