Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft
File: jc5N9oBEmFoXezAy8A_G_iJK2LM.mft (raw, json)
Hash identifier: YARzMrQxF2l486hKPIxOf6r/ZuDnUpsXiUsxvp7qKW4=
Subject key identifier: D0:85:9E:FB:55:59:DA:6A:E6:48:C2:97:93:A8:80:C8:59:2E:97:D0
Authority key identifier: 8D:CE:4D:F6:80:44:98:5A:17:7B:30:32:F0:0F:C6:FE:22:4A:D8:B3
Certificate issuer: /CN=8dce4df68044985a177b3032f00fc6fe224ad8b3
Certificate serial: 0197B8901F4E91BA62A52E29092483F6D3D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jc5N9oBEmFoXezAy8A_G_iJK2LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 22:02:22 +0000
Manifest this update: Sat 28 Jun 2025 22:02:22 +0000
Manifest next update: Sun 29 Jun 2025 22:02:22 +0000
Files and hashes: 1: QH9tbxKSp0iUql0lb1UYZe-9C60.roa (hash: j+EJALijkJNAty5MEqMWdkPqVKhawk2tfizWedc8Uwc=)
2: jc5N9oBEmFoXezAy8A_G_iJK2LM.crl (hash: FDmf9Xcz08keOPP5hHuHCCOs4mqeQt1W/hsjd3KV0oY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jc5N9oBEmFoXezAy8A_G_iJK2LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:1f:4e:91:ba:62:a5:2e:29:09:24:83:f6:d3:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dce4df68044985a177b3032f00fc6fe224ad8b3
Validity
Not Before: Jun 28 22:02:22 2025 GMT
Not After : Jun 29 22:02:22 2025 GMT
Subject: CN=d0859efb5559da6ae648c29793a880c8592e97d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9a:cb:b2:a8:b0:54:80:37:41:88:7f:8b:af:
c1:a3:51:7c:65:91:c6:f8:61:d3:7b:5c:07:5a:c3:
eb:90:c1:7b:a9:5c:98:28:49:74:71:b8:d6:f4:9b:
45:6a:ab:e2:a0:5a:52:6c:22:ba:72:2c:2b:c9:98:
72:0f:4f:66:cb:e1:44:5b:72:a0:12:b8:d1:c9:37:
e5:24:c3:a5:07:4c:38:31:da:74:dc:2f:3e:69:6d:
10:1c:0f:20:50:9f:b3:a3:c7:33:a0:d1:3c:28:9c:
3f:6e:66:f2:52:34:8c:e7:9f:87:b8:6a:ef:2a:73:
20:b6:ba:ce:b8:c0:19:7a:84:e3:67:62:3b:29:c9:
57:72:30:4a:a1:4f:34:66:3c:df:66:50:ca:af:6b:
1a:fb:04:b6:83:86:7c:37:2e:51:ab:7e:89:6c:e1:
1e:29:e2:c0:c6:d3:81:4d:2c:27:6d:65:d8:4d:43:
ba:03:b7:17:cb:70:f8:a8:be:67:28:83:53:1b:fa:
2e:2b:4e:70:9f:2a:4a:9c:19:64:aa:d3:ba:c9:8d:
c7:a4:23:de:0f:26:e1:9f:17:f9:17:9a:52:69:df:
8e:df:1f:24:54:3d:23:db:48:71:6c:f9:b9:cb:55:
46:f0:5f:a0:1c:7a:ec:99:c3:f0:87:8d:63:73:94:
a5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:85:9E:FB:55:59:DA:6A:E6:48:C2:97:93:A8:80:C8:59:2E:97:D0
X509v3 Authority Key Identifier:
keyid:8D:CE:4D:F6:80:44:98:5A:17:7B:30:32:F0:0F:C6:FE:22:4A:D8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jc5N9oBEmFoXezAy8A_G_iJK2LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:9d:89:ae:b5:39:ea:d8:ba:08:0d:fa:48:e5:97:e4:6f:85:
cc:e4:a1:b2:be:60:54:1e:b4:d0:81:2e:46:c2:ad:88:9e:15:
43:22:ce:ad:99:74:84:be:02:a8:34:78:99:22:77:ad:61:2e:
df:6b:60:9a:41:a8:cb:54:0d:e4:79:bf:c4:70:ef:d2:6a:ca:
56:fe:6e:45:9d:12:ff:42:ff:12:04:2c:43:27:00:76:eb:e0:
d2:5d:43:34:e6:88:05:14:8b:5e:0a:96:d3:ea:59:c9:ce:d4:
4c:d2:ee:13:57:98:74:87:b9:de:31:0b:9b:6f:27:0a:99:18:
7b:72:65:9e:8d:4a:86:a0:9b:9c:68:77:e0:64:64:6d:a8:1f:
e8:ed:d0:07:57:4c:5d:6b:7d:62:ad:ae:98:31:33:8e:30:fb:
26:cd:2c:ed:15:a9:b1:fa:55:e5:46:6e:4d:ea:e3:1e:e7:ca:
1f:1c:60:7e:56:df:42:be:bc:a3:fe:59:b2:f1:5c:05:34:39:
8b:86:a7:62:7c:11:26:b5:37:0f:47:ef:ab:65:5d:5a:30:45:
82:ac:d5:65:3d:f9:6f:30:5a:ab:8c:63:6c:f8:cb:6d:2a:e3:
13:ca:8e:48:30:f3:fe:cc:57:91:cc:13:de:eb:e1:41:f1:5d:
13:65:66:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4kB9OkbpipS4pCSSD9tPVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkY2U0ZGY2ODA0NDk4NWExNzdiMzAzMmYwMGZjNmZlMjI0
YWQ4YjMwHhcNMjUwNjI4MjIwMjIyWhcNMjUwNjI5MjIwMjIyWjAzMTEwLwYDVQQD
EyhkMDg1OWVmYjU1NTlkYTZhZTY0OGMyOTc5M2E4ODBjODU5MmU5N2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJrLsqiwVIA3QYh/i6/Bo1F8ZZHG
+GHTe1wHWsPrkMF7qVyYKEl0cbjW9JtFaqvioFpSbCK6ciwryZhyD09my+FEW3Kg
ErjRyTflJMOlB0w4Mdp03C8+aW0QHA8gUJ+zo8czoNE8KJw/bmbyUjSM55+HuGrv
KnMgtrrOuMAZeoTjZ2I7KclXcjBKoU80ZjzfZlDKr2sa+wS2g4Z8Ny5Rq36JbOEe
KeLAxtOBTSwnbWXYTUO6A7cXy3D4qL5nKINTG/ouK05wnypKnBlkqtO6yY3HpCPe
Dybhnxf5F5pSad+O3x8kVD0j20hxbPm5y1VG8F+gHHrsmcPwh41jc5SlNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCFnvtVWdpq5kjCl5OogMhZLpfQMB8GA1UdIwQY
MBaAFI3OTfaARJhaF3swMvAPxv4iStizMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamM1TjlvQkVtRm9YZXpBeThBX0dfaUpLMkxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS81YmRhNTQtZGI3YS00NmQzLTljZjkt
MTZiMWQyZWU4OGE2LzEvamM1TjlvQkVtRm9YZXpBeThBX0dfaUpLMkxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS81YmRhNTQtZGI3YS00NmQzLTljZjktMTZiMWQyZWU4OGE2
LzEvamM1TjlvQkVtRm9YZXpBeThBX0dfaUpLMkxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeZ2JrrU5
6ti6CA36SOWX5G+FzOShsr5gVB600IEuRsKtiJ4VQyLOrZl0hL4CqDR4mSJ3rWEu
32tgmkGoy1QN5Hm/xHDv0mrKVv5uRZ0S/0L/EgQsQycAduvg0l1DNOaIBRSLXgqW
0+pZyc7UTNLuE1eYdIe53jELm28nCpkYe3Jlno1KhqCbnGh34GRkbagf6O3QB1dM
XWt9Yq2umDEzjjD7Js0s7RWpsfpV5UZuTerjHufKHxxgflbfQr68o/5ZsvFcBTQ5
i4anYnwRJrU3D0fvq2VdWjBFgqzVZT35bzBaq4xjbPjLbSrjE8qOSDDz/sxXkcwT
3uvhQfFdE2Vm4g==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:28:21 2025 by rpki-client