Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
File: JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft (raw, json)
Hash identifier: CNSecaZrnIVIWCSDoVlPb3Ti8MvL5Njp5H6NUysTKPw=
Subject key identifier: A2:A0:E2:5D:30:3F:32:E6:9C:56:CD:A4:61:3E:15:61:32:8B:5C:54
Authority key identifier: 24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF
Certificate issuer: /CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf
Certificate serial: 0197B70EDB787AEE254822575838886C209D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 15:01:33 +0000
Manifest this update: Sat 28 Jun 2025 15:01:33 +0000
Manifest next update: Sun 29 Jun 2025 15:01:33 +0000
Files and hashes: 1: JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl (hash: xbZtJ89aJT7U7wREb8DAUXTIhvl9qzbHXmB3L/uPKrs=)
2: TPZkecYVgQWkeVAGvO4nYBYabeU.roa (hash: feVX1nzAeUU2PUv28J5bnSiD1IXG8sT2Z4xCADvwWfo=)
3: iaj7CuNicQ0T6SQ8o74SQIY9VuQ.roa (hash: OoqdlG2QCLim3GZ0mF7OJKrB+NTJ6UDVTxUydioBYjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:db:78:7a:ee:25:48:22:57:58:38:88:6c:20:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf
Validity
Not Before: Jun 28 15:01:33 2025 GMT
Not After : Jun 29 15:01:33 2025 GMT
Subject: CN=a2a0e25d303f32e69c56cda4613e1561328b5c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b1:e6:f0:04:68:24:7d:8c:94:db:25:a1:9a:
ed:56:4c:a3:80:9c:05:55:67:09:e5:f4:db:c5:4c:
a3:ee:7b:f8:8a:c7:c2:74:3b:ab:92:1d:45:ca:3e:
d0:6c:e4:9d:07:4b:20:5e:bf:34:d6:e6:ed:fd:c0:
8e:a5:af:2e:56:75:2c:d8:0e:12:b0:d0:4d:bb:40:
d1:b3:e3:d9:ea:c6:3d:ce:60:1e:4d:96:60:db:76:
ff:0d:d9:31:54:b1:0c:fe:d2:e6:6a:9a:3b:89:0e:
b1:5f:0b:5f:18:47:cf:ef:20:b9:87:17:de:cb:1c:
b4:31:18:30:1b:39:fc:69:05:b7:36:b9:37:89:09:
5f:32:e6:81:15:62:e2:d3:85:1d:37:90:be:0a:d6:
d6:fc:ce:cd:f2:d6:a2:6c:17:24:79:67:b7:04:90:
29:37:a6:0d:8f:df:16:98:ee:6f:91:28:a7:3f:07:
de:d3:0a:37:43:3b:9a:5d:ca:9f:48:7e:a5:d1:a7:
52:7d:a9:42:81:07:15:74:cf:49:22:af:61:a7:6e:
34:d4:5a:3b:51:23:35:c5:17:62:2e:31:c6:13:9f:
ad:35:51:f7:25:c3:91:be:20:45:5b:96:16:5f:c6:
14:60:8f:c2:0f:19:9f:85:fe:46:d2:b3:13:de:fc:
92:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A0:E2:5D:30:3F:32:E6:9C:56:CD:A4:61:3E:15:61:32:8B:5C:54
X509v3 Authority Key Identifier:
keyid:24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ef:2f:47:0c:84:73:c5:2a:c3:03:fb:45:f6:f8:9f:62:a6:
db:2f:67:dc:18:b8:98:fa:48:b7:c2:53:72:3f:fd:33:27:93:
ea:1b:d8:b1:b0:72:f3:c1:b5:76:31:47:c5:21:e9:aa:ed:16:
aa:5e:bf:20:1f:9d:22:0c:11:3d:e5:3c:3d:7a:28:9c:a1:30:
3f:66:93:4a:b9:c6:76:70:91:6b:10:cd:fa:90:b8:4c:e0:6c:
de:06:c9:7a:da:ca:3f:90:de:ee:c9:a1:4c:eb:65:62:8c:de:
ef:7d:c2:2d:df:0e:3d:64:22:6c:07:12:b5:a9:12:35:8d:74:
fa:ff:a7:29:0a:1f:b1:3e:f8:f1:44:d8:4a:cd:b3:53:58:ce:
43:70:52:81:29:b3:2b:76:07:42:cf:d0:82:68:6c:5a:0c:5a:
d8:05:f0:e0:1c:d7:a0:84:2d:49:67:0c:50:80:1a:17:fc:ba:
f5:55:82:41:04:35:d6:a6:60:50:ce:52:a7:16:b3:0a:76:5d:
1e:e0:a9:eb:06:6c:0c:8f:30:3f:ae:d2:ac:b6:39:5d:31:46:
43:df:d2:32:ac:c2:36:2e:0c:96:db:90:3f:ac:6e:92:b5:6f:
b2:1b:c1:50:16:6e:92:cb:58:18:4f:b8:1b:b1:31:14:28:be:
4f:b9:7b:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dtt4eu4lSCJXWDiIbCCdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YTkxOGYxYjEwZWMxZDY2MGIxY2ZjYjFiZmUxOTZjMmZl
YjA2YmYwHhcNMjUwNjI4MTUwMTMzWhcNMjUwNjI5MTUwMTMzWjAzMTEwLwYDVQQD
EyhhMmEwZTI1ZDMwM2YzMmU2OWM1NmNkYTQ2MTNlMTU2MTMyOGI1YzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7Hm8ARoJH2MlNsloZrtVkyjgJwF
VWcJ5fTbxUyj7nv4isfCdDurkh1Fyj7QbOSdB0sgXr801ubt/cCOpa8uVnUs2A4S
sNBNu0DRs+PZ6sY9zmAeTZZg23b/DdkxVLEM/tLmapo7iQ6xXwtfGEfP7yC5hxfe
yxy0MRgwGzn8aQW3Nrk3iQlfMuaBFWLi04UdN5C+CtbW/M7N8taibBckeWe3BJAp
N6YNj98WmO5vkSinPwfe0wo3QzuaXcqfSH6l0adSfalCgQcVdM9JIq9hp2401Fo7
USM1xRdiLjHGE5+tNVH3JcORviBFW5YWX8YUYI/CDxmfhf5G0rMT3vySoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKKg4l0wPzLmnFbNpGE+FWEyi1xUMB8GA1UdIwQY
MBaAFCSpGPGxDsHWYLHPyxv+GWwv6wa/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSktrWThiRU93ZFpnc2NfTEdfNFpiQ19yQnI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xZjVmZWItN2FjZi00YzFkLThlOWYt
MWYyNjJkOWM5YjA3LzEvSktrWThiRU93ZFpnc2NfTEdfNFpiQ19yQnI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8xZjVmZWItN2FjZi00YzFkLThlOWYtMWYyNjJkOWM5YjA3
LzEvSktrWThiRU93ZFpnc2NfTEdfNFpiQ19yQnI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD+8vRwyE
c8UqwwP7Rfb4n2Km2y9n3Bi4mPpIt8JTcj/9MyeT6hvYsbBy88G1djFHxSHpqu0W
ql6/IB+dIgwRPeU8PXoonKEwP2aTSrnGdnCRaxDN+pC4TOBs3gbJetrKP5De7smh
TOtlYoze733CLd8OPWQibAcStakSNY10+v+nKQofsT748UTYSs2zU1jOQ3BSgSmz
K3YHQs/QgmhsWgxa2AXw4BzXoIQtSWcMUIAaF/y69VWCQQQ11qZgUM5SpxazCnZd
HuCp6wZsDI8wP67SrLY5XTFGQ9/SMqzCNi4MltuQP6xukrVvshvBUBZukstYGE+4
G7ExFCi+T7l73A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:37:17 2025 by rpki-client