Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
File: JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft (raw, json)
Hash identifier: tAyIyIKIdSyaoeDmgkLcP1wwSXgn4yIPR6jgyqntY/g=
Subject key identifier: 59:0D:A7:EF:DC:DB:62:0F:AA:19:39:BC:78:6D:CC:F9:B9:60:0F:2F
Authority key identifier: 24:AF:EA:E8:3D:2D:5E:2E:A7:7A:C6:14:7F:75:83:7B:27:F7:43:49
Certificate issuer: /CN=24afeae83d2d5e2ea77ac6147f75837b27f74349
Certificate serial: 0197B6D74596265C8D9FA2B50AC63270F26B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
Manifest number: 0293
Signing time: Sat 28 Jun 2025 14:00:50 +0000
Manifest this update: Sat 28 Jun 2025 14:00:50 +0000
Manifest next update: Sun 29 Jun 2025 14:00:50 +0000
Files and hashes: 1: JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl (hash: rJYX3X9SUq7WkgxcO4hwSzTvVtGHzuVrxdIB+tY3iqY=)
2: Np4SGefOBCZiVQwVOhlw43OZIsc.roa (hash: 4LHgzyDtN1tlOUmbwRr7JMfVVPaWldi7uvsqlFbuzcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:45:96:26:5c:8d:9f:a2:b5:0a:c6:32:70:f2:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24afeae83d2d5e2ea77ac6147f75837b27f74349
Validity
Not Before: Jun 28 14:00:50 2025 GMT
Not After : Jun 29 14:00:50 2025 GMT
Subject: CN=590da7efdcdb620faa1939bc786dccf9b9600f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e0:20:67:08:db:8e:8a:cc:5f:3d:be:d2:d9:
55:5a:d7:0f:06:fc:bc:b1:dc:68:22:7d:96:af:b0:
bc:07:7e:30:7c:1c:51:b9:aa:00:a1:8a:a1:cd:1d:
07:2e:54:63:15:22:61:ef:af:ac:0b:3b:19:09:37:
62:85:eb:61:e7:b9:1d:f9:36:69:6b:3a:0b:01:46:
43:66:ae:b5:54:65:01:74:30:e5:7d:fb:e7:5f:f8:
ab:0f:1c:7c:d9:35:ab:62:9e:86:b1:f1:04:41:70:
a7:9c:d2:ea:0d:ef:b9:e0:12:e7:bd:2c:30:d5:e9:
c4:61:16:e4:e0:34:1c:a0:e0:d6:5d:f9:0c:df:d7:
66:d7:47:86:b2:2b:b1:52:89:a7:fb:0b:e6:d1:d9:
3a:55:45:e5:50:d9:aa:4f:8e:19:b7:89:14:72:33:
eb:4f:8d:10:64:01:5c:86:58:ea:fe:4c:61:17:91:
ca:c0:d8:dc:30:89:c8:1e:f3:d9:c5:da:65:a2:84:
99:d7:f0:dc:1e:a2:0d:84:06:c8:38:3e:85:d4:cc:
88:6d:53:f6:46:26:0e:4d:f1:d5:d3:b7:1e:6c:dc:
08:ab:bf:b4:2b:74:60:b8:89:2d:bd:6c:28:f2:56:
d3:e2:7a:54:09:4e:7d:20:d2:63:1c:e5:d6:52:21:
41:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:0D:A7:EF:DC:DB:62:0F:AA:19:39:BC:78:6D:CC:F9:B9:60:0F:2F
X509v3 Authority Key Identifier:
keyid:24:AF:EA:E8:3D:2D:5E:2E:A7:7A:C6:14:7F:75:83:7B:27:F7:43:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:be:4b:c5:f2:4a:bd:7c:f8:77:0d:63:a6:6a:e7:93:63:fe:
0c:ef:3a:3d:27:ee:c7:f7:b7:7a:bc:69:d5:93:83:1c:25:44:
24:53:80:44:a7:fd:fc:cc:ca:24:f9:de:d5:5f:44:89:ef:34:
12:fc:d0:65:1b:4e:ca:66:35:bf:a8:ee:86:4a:53:65:7c:6f:
8d:b9:49:4f:45:4d:03:b6:bd:16:c4:bd:0f:0a:c1:36:0b:49:
d6:2b:1b:56:f5:ec:4c:f6:63:36:46:21:15:ab:34:bc:9a:b7:
a5:53:b8:80:c5:19:65:f8:48:e3:6d:c3:0c:e0:b5:23:af:49:
fb:e0:b6:9e:e9:e5:e4:57:bb:32:e9:8d:d9:3f:03:48:cd:09:
f3:ae:fc:d0:1e:50:7c:82:0e:bb:f4:2f:51:67:78:41:ef:33:
35:f1:96:6f:c1:4c:ca:61:57:c9:8c:a7:00:61:25:c6:6e:03:
37:1d:85:7d:f9:ac:58:a3:a1:6d:30:2a:78:3b:01:12:ce:1f:
70:d8:38:9b:1a:8e:7c:c3:8d:c9:ad:0b:72:4c:4c:44:c5:1b:
89:3c:82:c1:f9:cd:b9:4a:14:68:2a:8a:fe:86:e3:de:c2:8b:
16:88:6c:66:90:97:9f:3b:44:dc:28:77:7d:df:ef:45:b5:fc:
47:e1:28:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe210WWJlyNn6K1CsYycPJrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YWZlYWU4M2QyZDVlMmVhNzdhYzYxNDdmNzU4MzdiMjdm
NzQzNDkwHhcNMjUwNjI4MTQwMDUwWhcNMjUwNjI5MTQwMDUwWjAzMTEwLwYDVQQD
Eyg1OTBkYTdlZmRjZGI2MjBmYWExOTM5YmM3ODZkY2NmOWI5NjAwZjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+AgZwjbjorMXz2+0tlVWtcPBvy8
sdxoIn2Wr7C8B34wfBxRuaoAoYqhzR0HLlRjFSJh76+sCzsZCTdiheth57kd+TZp
azoLAUZDZq61VGUBdDDlffvnX/irDxx82TWrYp6GsfEEQXCnnNLqDe+54BLnvSww
1enEYRbk4DQcoODWXfkM39dm10eGsiuxUomn+wvm0dk6VUXlUNmqT44Zt4kUcjPr
T40QZAFchljq/kxhF5HKwNjcMInIHvPZxdplooSZ1/DcHqINhAbIOD6F1MyIbVP2
RiYOTfHV07cebNwIq7+0K3RguIktvWwo8lbT4npUCU59INJjHOXWUiFBQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFkNp+/c22IPqhk5vHhtzPm5YA8vMB8GA1UdIwQY
MBaAFCSv6ug9LV4up3rGFH91g3sn90NJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSktfcTZEMHRYaTZuZXNZVWYzV0RleWYzUTBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy83YTk0MGItMzQwYS00ZDA4LWFmZDgt
NTNjNTcyMGNmYmViLzEvSktfcTZEMHRYaTZuZXNZVWYzV0RleWYzUTBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy83YTk0MGItMzQwYS00ZDA4LWFmZDgtNTNjNTcyMGNmYmVi
LzEvSktfcTZEMHRYaTZuZXNZVWYzV0RleWYzUTBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYL5LxfJK
vXz4dw1jpmrnk2P+DO86PSfux/e3erxp1ZODHCVEJFOARKf9/MzKJPne1V9Eie80
EvzQZRtOymY1v6juhkpTZXxvjblJT0VNA7a9FsS9DwrBNgtJ1isbVvXsTPZjNkYh
Fas0vJq3pVO4gMUZZfhI423DDOC1I69J++C2nunl5Fe7MumN2T8DSM0J86780B5Q
fIIOu/QvUWd4Qe8zNfGWb8FMymFXyYynAGElxm4DNx2FffmsWKOhbTAqeDsBEs4f
cNg4mxqOfMONya0LckxMRMUbiTyCwfnNuUoUaCqK/obj3sKLFohsZpCXnztE3Ch3
fd/vRbX8R+Eo6w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:45 2025 by rpki-client