Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft
File: _JNLA3cwXsv-ODshuHR0EGoeTdg.mft (raw, json)
Hash identifier: 1753f2wdH5+izDrpvpQiyZ4aYOxd2sQ1AWix8xixMog=
Subject key identifier: BD:D7:B9:D7:4B:2E:8B:7E:8D:86:52:DE:B1:E2:9B:26:4B:48:E6:A9
Authority key identifier: FC:93:4B:03:77:30:5E:CB:FE:38:3B:21:B8:74:74:10:6A:1E:4D:D8
Certificate issuer: /CN=fc934b0377305ecbfe383b21b87474106a1e4dd8
Certificate serial: 0197B77C46DED1BCCF869253669CB3C39D02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JNLA3cwXsv-ODshuHR0EGoeTdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft
Manifest number: 10F7
Signing time: Sat 28 Jun 2025 17:01:04 +0000
Manifest this update: Sat 28 Jun 2025 17:01:04 +0000
Manifest next update: Sun 29 Jun 2025 17:01:04 +0000
Files and hashes: 1: _JNLA3cwXsv-ODshuHR0EGoeTdg.crl (hash: yD9a2z9fCj0iTYnP7azPg/lze3Z2uOPDQnXEtyvtsJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JNLA3cwXsv-ODshuHR0EGoeTdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:46:de:d1:bc:cf:86:92:53:66:9c:b3:c3:9d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc934b0377305ecbfe383b21b87474106a1e4dd8
Validity
Not Before: Jun 28 17:01:04 2025 GMT
Not After : Jun 29 17:01:04 2025 GMT
Subject: CN=bdd7b9d74b2e8b7e8d8652deb1e29b264b48e6a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2e:ed:d5:57:ab:7d:4b:54:1f:00:99:cd:6b:
4f:4c:fd:d2:65:bf:9a:2a:d5:95:7c:2e:8e:99:12:
0d:9e:8d:5f:c5:87:fe:60:13:5c:39:29:b3:f6:71:
74:a1:6c:75:63:bc:21:86:42:f0:22:1b:d6:f1:af:
20:d7:0b:0d:92:7f:a6:2b:96:60:74:8a:6f:4a:f8:
f9:db:f9:e3:39:13:bc:58:31:7f:0a:eb:1d:db:91:
90:05:75:35:66:bc:16:77:15:67:3b:d8:f0:53:f7:
80:1e:1d:e0:9a:24:4d:ef:24:05:ed:0c:05:da:b7:
c1:5e:fe:8b:92:29:04:4c:66:ab:3a:98:a3:44:0d:
2b:d2:c6:7f:7a:1d:e2:2d:24:d5:cf:d2:73:fe:2d:
f7:5b:11:18:b7:d9:94:22:01:ce:ea:99:94:01:38:
9f:e6:20:08:4a:1d:ef:2f:1c:36:a6:66:7f:5b:85:
3b:f2:79:50:fa:d5:9b:69:4b:9f:23:04:b3:c9:ff:
d9:da:e8:08:35:6b:b0:a6:42:00:4f:9e:37:fe:b3:
92:ed:26:1d:8e:3a:c9:21:cb:7c:19:c1:38:22:75:
e9:ef:e2:87:bf:74:29:6a:01:a0:e4:8f:78:41:21:
8a:2a:c8:b9:a1:72:db:8c:2e:dd:53:d2:de:ff:6a:
ab:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D7:B9:D7:4B:2E:8B:7E:8D:86:52:DE:B1:E2:9B:26:4B:48:E6:A9
X509v3 Authority Key Identifier:
keyid:FC:93:4B:03:77:30:5E:CB:FE:38:3B:21:B8:74:74:10:6A:1E:4D:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JNLA3cwXsv-ODshuHR0EGoeTdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:89:b0:25:5d:56:42:8e:53:b1:e0:a0:2f:f2:e1:46:8a:df:
e4:18:8b:f1:37:15:72:00:63:43:3c:06:64:b5:98:96:6f:b3:
f6:a1:64:17:16:1f:f7:24:1c:d7:a7:b5:bb:8a:3b:6e:ea:45:
28:27:a5:b3:de:6a:3c:9b:52:a2:f9:b3:ea:a1:ba:ce:b5:bd:
67:48:4a:0d:36:0f:46:b5:db:6a:ef:49:cf:73:cc:56:78:2d:
f3:33:76:df:61:2f:16:10:cd:86:85:76:ff:bf:79:14:97:2f:
9c:a5:c2:43:ae:91:4c:67:bc:fa:75:43:2f:ee:81:87:26:db:
4c:3b:b0:26:9e:44:e6:1d:42:4f:35:55:8c:5a:65:22:67:9d:
fd:f4:1d:9b:c7:39:2e:a1:ef:fc:22:b3:81:da:66:45:f7:ec:
6d:e9:81:70:bf:ea:df:70:6f:3a:ab:cf:d2:b6:09:f4:f6:f5:
b3:b9:0d:13:f6:d6:b8:86:25:bf:3e:1f:99:b1:fb:43:6a:b4:
62:80:47:ac:a9:df:f4:42:d4:c8:1a:72:81:5b:5f:ba:45:d1:
b8:7c:f9:53:3c:6b:10:30:cf:c3:89:e5:68:24:8d:0a:72:32:
94:a1:77:89:d6:df:0b:b1:a4:0e:f7:e6:c5:85:d8:81:6c:29:
e5:c8:8d:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fEbe0bzPhpJTZpyzw50CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjOTM0YjAzNzczMDVlY2JmZTM4M2IyMWI4NzQ3NDEwNmEx
ZTRkZDgwHhcNMjUwNjI4MTcwMTA0WhcNMjUwNjI5MTcwMTA0WjAzMTEwLwYDVQQD
EyhiZGQ3YjlkNzRiMmU4YjdlOGQ4NjUyZGViMWUyOWIyNjRiNDhlNmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0i7t1VerfUtUHwCZzWtPTP3SZb+a
KtWVfC6OmRINno1fxYf+YBNcOSmz9nF0oWx1Y7whhkLwIhvW8a8g1wsNkn+mK5Zg
dIpvSvj52/njORO8WDF/Cusd25GQBXU1ZrwWdxVnO9jwU/eAHh3gmiRN7yQF7QwF
2rfBXv6LkikETGarOpijRA0r0sZ/eh3iLSTVz9Jz/i33WxEYt9mUIgHO6pmUATif
5iAISh3vLxw2pmZ/W4U78nlQ+tWbaUufIwSzyf/Z2ugINWuwpkIAT543/rOS7SYd
jjrJIct8GcE4InXp7+KHv3QpagGg5I94QSGKKsi5oXLbjC7dU9Le/2qrHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL3XuddLLot+jYZS3rHimyZLSOapMB8GA1UdIwQY
MBaAFPyTSwN3MF7L/jg7Ibh0dBBqHk3YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0pOTEEzY3dYc3YtT0RzaHVIUjBFR29lVGRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS81ODcwNTEtY2E4NC00MzFhLTk4YmIt
OWRlN2Y5MzVmYzAxLzEvX0pOTEEzY3dYc3YtT0RzaHVIUjBFR29lVGRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS81ODcwNTEtY2E4NC00MzFhLTk4YmItOWRlN2Y5MzVmYzAx
LzEvX0pOTEEzY3dYc3YtT0RzaHVIUjBFR29lVGRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWomwJV1W
Qo5TseCgL/LhRorf5BiL8TcVcgBjQzwGZLWYlm+z9qFkFxYf9yQc16e1u4o7bupF
KCels95qPJtSovmz6qG6zrW9Z0hKDTYPRrXbau9Jz3PMVngt8zN232EvFhDNhoV2
/795FJcvnKXCQ66RTGe8+nVDL+6BhybbTDuwJp5E5h1CTzVVjFplImed/fQdm8c5
LqHv/CKzgdpmRffsbemBcL/q33BvOqvP0rYJ9Pb1s7kNE/bWuIYlvz4fmbH7Q2q0
YoBHrKnf9ELUyBpygVtfukXRuHz5UzxrEDDPw4nlaCSNCnIylKF3idbfC7GkDvfm
xYXYgWwp5ciNtg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:44:30 2025 by rpki-client