Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft
File: J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft (raw, json)
Hash identifier: bvC/zbkzjfz5G53XTAfgciFCMw+iOPGCqQNIcKiToIc=
Subject key identifier: D7:19:F6:DA:77:52:D1:1B:9D:F5:3A:85:DE:A3:DA:FD:63:62:83:18
Authority key identifier: 27:7B:36:83:30:7C:6F:CC:32:BE:D1:77:23:2F:1D:47:45:41:FB:AE
Certificate issuer: /CN=277b3683307c6fcc32bed177232f1d474541fbae
Certificate serial: 0197B5FC59A8B4A3FE4D36917F08EEA469F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J3s2gzB8b8wyvtF3Iy8dR0VB-64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft
Manifest number: 1183
Signing time: Sat 28 Jun 2025 10:01:43 +0000
Manifest this update: Sat 28 Jun 2025 10:01:43 +0000
Manifest next update: Sun 29 Jun 2025 10:01:43 +0000
Files and hashes: 1: J3s2gzB8b8wyvtF3Iy8dR0VB-64.crl (hash: TI+T8Hc4pjp4MTEtywCgC7Abm1N4aaynVdbCRK77jP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft
rsync://rpki.ripe.net/repository/DEFAULT/J3s2gzB8b8wyvtF3Iy8dR0VB-64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:59:a8:b4:a3:fe:4d:36:91:7f:08:ee:a4:69:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=277b3683307c6fcc32bed177232f1d474541fbae
Validity
Not Before: Jun 28 10:01:43 2025 GMT
Not After : Jun 29 10:01:43 2025 GMT
Subject: CN=d719f6da7752d11b9df53a85dea3dafd63628318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c1:8e:ae:7a:be:2f:c1:b3:95:05:98:ea:ea:
90:89:5b:3a:ba:a1:ac:bc:ae:64:3f:23:e7:98:25:
88:15:f1:41:96:f7:6f:cb:a5:de:ab:a3:b7:6d:37:
12:a1:69:8f:f7:ca:04:7c:d6:2a:0c:7e:95:f8:6c:
66:22:93:05:34:f1:2e:39:06:b5:03:0c:bf:7c:7a:
a6:37:e9:d9:66:d2:2d:d4:6e:f9:c9:82:4b:03:ea:
de:86:9e:23:c7:5f:cc:d1:35:1b:0e:a4:38:87:93:
06:bc:8d:f7:38:22:a9:ee:86:14:38:90:c3:61:f1:
62:0c:aa:7f:44:5c:f2:09:61:36:39:aa:18:50:78:
14:9c:57:5f:b2:75:03:c7:de:d2:74:a1:0a:4b:9a:
f6:80:a4:27:34:52:b9:16:15:a6:b9:2d:04:13:18:
50:9e:71:83:25:0f:f7:16:55:92:da:38:ce:6a:11:
a5:17:fa:f8:f9:76:ea:bc:7c:83:0e:43:e2:77:18:
63:04:ad:9d:81:da:5c:a0:1a:db:3d:60:f0:8b:4d:
18:57:fa:ee:b3:05:3b:ed:58:77:95:7d:49:78:5f:
29:38:85:b9:c1:a0:97:4d:e3:c5:bc:65:50:89:2a:
2f:bb:31:28:73:85:87:7a:2a:73:a8:f1:5d:71:0a:
47:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:19:F6:DA:77:52:D1:1B:9D:F5:3A:85:DE:A3:DA:FD:63:62:83:18
X509v3 Authority Key Identifier:
keyid:27:7B:36:83:30:7C:6F:CC:32:BE:D1:77:23:2F:1D:47:45:41:FB:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J3s2gzB8b8wyvtF3Iy8dR0VB-64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:5f:2b:2f:9a:d1:9e:62:64:2a:4a:25:f1:51:65:e2:7f:53:
c5:90:37:23:71:33:35:4f:99:d0:e9:7c:65:4b:f9:ef:87:f7:
e4:07:ee:36:cd:68:43:b9:b2:c6:4f:e6:d4:e8:01:e7:07:94:
e9:77:85:12:57:fa:ca:66:e0:95:3d:d2:09:64:95:93:5e:ba:
3b:7a:07:a3:c6:28:71:98:4a:c9:8e:1d:24:87:04:99:21:ad:
9a:6d:5c:7b:b8:f9:1c:74:46:d4:03:fb:03:e6:80:d6:05:de:
21:f9:7f:49:b4:fe:20:5f:f4:b4:74:a6:c3:a2:7a:a9:2d:3e:
fa:a5:1e:22:81:a9:ca:96:23:c1:18:78:c5:91:50:3d:82:16:
c6:66:3a:47:5a:38:3e:8b:01:ce:29:34:8a:43:ca:90:18:0a:
1a:9c:f5:d9:9f:2a:e7:85:0d:d0:0d:5b:64:6c:e9:35:ec:8d:
6b:18:e5:53:37:59:f2:ea:03:63:5d:46:6a:31:68:3b:e6:13:
e0:47:cb:a7:3b:f6:6a:9d:bb:9e:b8:35:4a:2c:f2:12:0e:1c:
b5:fc:25:84:c3:ae:27:0d:64:50:13:9b:e0:ca:5f:b0:43:bf:
e5:2c:2a:4a:ae:a2:32:6c:4a:96:ed:2b:92:d6:89:ad:34:62:
17:65:e9:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1/FmotKP+TTaRfwjupGn4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3N2IzNjgzMzA3YzZmY2MzMmJlZDE3NzIzMmYxZDQ3NDU0
MWZiYWUwHhcNMjUwNjI4MTAwMTQzWhcNMjUwNjI5MTAwMTQzWjAzMTEwLwYDVQQD
EyhkNzE5ZjZkYTc3NTJkMTFiOWRmNTNhODVkZWEzZGFmZDYzNjI4MzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssGOrnq+L8GzlQWY6uqQiVs6uqGs
vK5kPyPnmCWIFfFBlvdvy6Xeq6O3bTcSoWmP98oEfNYqDH6V+GxmIpMFNPEuOQa1
Awy/fHqmN+nZZtIt1G75yYJLA+rehp4jx1/M0TUbDqQ4h5MGvI33OCKp7oYUOJDD
YfFiDKp/RFzyCWE2OaoYUHgUnFdfsnUDx97SdKEKS5r2gKQnNFK5FhWmuS0EExhQ
nnGDJQ/3FlWS2jjOahGlF/r4+XbqvHyDDkPidxhjBK2dgdpcoBrbPWDwi00YV/ru
swU77Vh3lX1JeF8pOIW5waCXTePFvGVQiSovuzEoc4WHeipzqPFdcQpHAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNcZ9tp3UtEbnfU6hd6j2v1jYoMYMB8GA1UdIwQY
MBaAFCd7NoMwfG/MMr7RdyMvHUdFQfuuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjNzMmd6QjhiOHd5dnRGM0l5OGRSMFZCLTY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85OTlkMDUtZDllMC00YmFlLTliMzkt
YWM1MjJmOTU3NTRmLzEvSjNzMmd6QjhiOHd5dnRGM0l5OGRSMFZCLTY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS85OTlkMDUtZDllMC00YmFlLTliMzktYWM1MjJmOTU3NTRm
LzEvSjNzMmd6QjhiOHd5dnRGM0l5OGRSMFZCLTY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAal8rL5rR
nmJkKkol8VFl4n9TxZA3I3EzNU+Z0Ol8ZUv574f35AfuNs1oQ7myxk/m1OgB5weU
6XeFElf6ymbglT3SCWSVk166O3oHo8YocZhKyY4dJIcEmSGtmm1ce7j5HHRG1AP7
A+aA1gXeIfl/SbT+IF/0tHSmw6J6qS0++qUeIoGpypYjwRh4xZFQPYIWxmY6R1o4
PosBzik0ikPKkBgKGpz12Z8q54UN0A1bZGzpNeyNaxjlUzdZ8uoDY11GajFoO+YT
4EfLpzv2ap27nrg1SizyEg4ctfwlhMOuJw1kUBOb4MpfsEO/5SwqSq6iMmxKlu0r
ktaJrTRiF2Xp4g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:38:45 2025 by rpki-client