Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.mft
File: JcUDXdNt8HSfTWKZyPy-1hVcARc.mft (raw, json)
Hash identifier: vIlVaGI04zWtqjoTGLMiZg7FOr2XQvKnQvhONYRtVgs=
Subject key identifier: 35:EA:EE:1D:E2:AA:42:C3:BB:AC:DB:3D:26:BB:DB:9D:93:8F:58:CA
Authority key identifier: 25:C5:03:5D:D3:6D:F0:74:9F:4D:62:99:C8:FC:BE:D6:15:5C:01:17
Certificate issuer: /CN=25c5035dd36df0749f4d6299c8fcbed6155c0117
Certificate serial: 0197B6A13B77647D0340C41A9E0CEE7BFFFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcUDXdNt8HSfTWKZyPy-1hVcARc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 13:01:49 +0000
Manifest this update: Sat 28 Jun 2025 13:01:49 +0000
Manifest next update: Sun 29 Jun 2025 13:01:49 +0000
Files and hashes: 1: JcUDXdNt8HSfTWKZyPy-1hVcARc.crl (hash: VSwQHV3dD7nFqHRitocX2w4adRhnvJmJhx3MZFGVXnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcUDXdNt8HSfTWKZyPy-1hVcARc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:3b:77:64:7d:03:40:c4:1a:9e:0c:ee:7b:ff:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c5035dd36df0749f4d6299c8fcbed6155c0117
Validity
Not Before: Jun 28 13:01:49 2025 GMT
Not After : Jun 29 13:01:49 2025 GMT
Subject: CN=35eaee1de2aa42c3bbacdb3d26bbdb9d938f58ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:02:d7:1a:36:fa:d7:fa:13:5f:40:b3:80:1a:
8c:97:05:84:bc:b0:db:30:d3:9c:59:e6:ca:f9:b1:
7e:5e:83:d4:97:af:70:3a:f8:a9:19:95:15:dd:4d:
eb:b0:92:67:7b:d1:39:98:54:19:5f:97:70:a4:c1:
49:a6:53:57:ae:85:2e:41:e0:61:e1:1b:f2:d6:2b:
7e:16:db:f1:99:b9:1f:a0:3e:2d:82:cb:68:1d:96:
c9:5c:f2:13:dc:94:c6:26:eb:58:bc:01:30:0d:04:
71:79:73:45:7b:bb:a5:47:c2:44:1a:05:75:4f:2d:
64:78:a3:20:45:42:fe:7b:2b:f9:f3:8b:b3:87:5d:
ff:81:38:bf:ae:5c:39:49:f5:7f:de:89:cb:1c:2b:
31:81:cb:1b:f5:39:46:c3:de:58:72:14:3d:f3:ba:
be:a8:4f:61:72:0e:c9:1e:85:79:88:6f:ca:d5:f5:
13:b0:83:2b:c1:e8:44:be:b1:67:4b:38:c7:3a:02:
3e:65:7b:a7:94:d7:3b:72:03:c5:df:42:be:18:a6:
12:d8:6a:ef:89:e4:5c:f7:e7:7b:c3:fb:29:e2:29:
01:c4:a4:86:ee:17:71:b5:e5:ac:e8:c5:dc:3e:93:
d8:48:7a:1c:1e:91:94:6b:eb:8d:59:ef:88:5e:0a:
95:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:EA:EE:1D:E2:AA:42:C3:BB:AC:DB:3D:26:BB:DB:9D:93:8F:58:CA
X509v3 Authority Key Identifier:
keyid:25:C5:03:5D:D3:6D:F0:74:9F:4D:62:99:C8:FC:BE:D6:15:5C:01:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcUDXdNt8HSfTWKZyPy-1hVcARc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ed:23:99:d3:98:2a:75:9b:29:6b:27:05:49:45:f6:4a:17:
93:bc:12:81:a2:27:6c:36:3e:11:5e:01:5a:be:54:88:3d:bd:
d9:43:23:f1:f7:4b:97:1b:bb:84:23:3d:5d:cf:2c:85:25:da:
6e:63:12:5b:b7:13:12:91:71:8e:53:e9:7f:26:02:cf:60:d7:
1b:fb:61:10:e9:35:73:16:81:64:09:b4:c6:46:85:a0:01:93:
0d:ec:03:93:8d:1d:b1:7c:af:17:d9:07:54:0a:ce:52:15:81:
7e:58:22:77:c8:0e:cf:3a:91:06:2c:43:f8:bf:68:7d:78:f5:
79:63:70:f5:05:d1:6f:7f:eb:86:2f:4d:33:21:7a:f8:ea:e9:
02:46:07:71:99:74:14:40:84:aa:68:fb:af:2e:26:99:1a:24:
1f:75:d9:f5:5b:1a:59:c9:c8:3b:6c:5b:41:de:c3:3e:95:92:
7b:23:71:60:bc:6f:02:fe:af:10:1c:61:2a:7e:85:9e:85:71:
6e:8f:bd:23:db:53:50:4b:f7:7c:d6:68:1b:c3:84:55:e9:3c:
6b:32:0e:f4:6a:d3:57:57:74:4a:84:af:ec:25:99:46:76:ea:
05:4b:3f:4c:6a:b7:05:df:73:79:93:3a:f2:a7:d6:0d:10:a6:
20:2f:24:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oTt3ZH0DQMQangzue//8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YzUwMzVkZDM2ZGYwNzQ5ZjRkNjI5OWM4ZmNiZWQ2MTU1
YzAxMTcwHhcNMjUwNjI4MTMwMTQ5WhcNMjUwNjI5MTMwMTQ5WjAzMTEwLwYDVQQD
EygzNWVhZWUxZGUyYWE0MmMzYmJhY2RiM2QyNmJiZGI5ZDkzOGY1OGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnALXGjb61/oTX0CzgBqMlwWEvLDb
MNOcWebK+bF+XoPUl69wOvipGZUV3U3rsJJne9E5mFQZX5dwpMFJplNXroUuQeBh
4Rvy1it+FtvxmbkfoD4tgstoHZbJXPIT3JTGJutYvAEwDQRxeXNFe7ulR8JEGgV1
Ty1keKMgRUL+eyv584uzh13/gTi/rlw5SfV/3onLHCsxgcsb9TlGw95YchQ987q+
qE9hcg7JHoV5iG/K1fUTsIMrwehEvrFnSzjHOgI+ZXunlNc7cgPF30K+GKYS2Grv
ieRc9+d7w/sp4ikBxKSG7hdxteWs6MXcPpPYSHocHpGUa+uNWe+IXgqVVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXq7h3iqkLDu6zbPSa7252Tj1jKMB8GA1UdIwQY
MBaAFCXFA13TbfB0n01imcj8vtYVXAEXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmNVRFhkTnQ4SFNmVFdLWnlQeS0xaFZjQVJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy84MDljZDUtZjIzZi00NzIwLThjNjQt
NTllYjM4NGUwOTY3LzEvSmNVRFhkTnQ4SFNmVFdLWnlQeS0xaFZjQVJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy84MDljZDUtZjIzZi00NzIwLThjNjQtNTllYjM4NGUwOTY3
LzEvSmNVRFhkTnQ4SFNmVFdLWnlQeS0xaFZjQVJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKu0jmdOY
KnWbKWsnBUlF9koXk7wSgaInbDY+EV4BWr5UiD292UMj8fdLlxu7hCM9Xc8shSXa
bmMSW7cTEpFxjlPpfyYCz2DXG/thEOk1cxaBZAm0xkaFoAGTDewDk40dsXyvF9kH
VArOUhWBflgid8gOzzqRBixD+L9ofXj1eWNw9QXRb3/rhi9NMyF6+OrpAkYHcZl0
FECEqmj7ry4mmRokH3XZ9VsaWcnIO2xbQd7DPpWSeyNxYLxvAv6vEBxhKn6FnoVx
bo+9I9tTUEv3fNZoG8OEVek8azIO9GrTV1d0SoSv7CWZRnbqBUs/TGq3Bd9zeZM6
8qfWDRCmIC8kIA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:35 2025 by rpki-client