Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
File: JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft (raw, json)
Hash identifier: DnWQDH59+Hb2di6smQ+FcSJB2lYiHg2CcsUaEg2YRbw=
Subject key identifier: F7:63:B8:02:A0:42:CF:EB:77:37:BC:53:55:0B:5A:FA:2B:C0:A1:E8
Authority key identifier: 25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
Certificate issuer: /CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Certificate serial: 0197B5FC4CC984B476098CE950CD52D8CF5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 10:01:40 +0000
Manifest this update: Sat 28 Jun 2025 10:01:40 +0000
Manifest next update: Sun 29 Jun 2025 10:01:40 +0000
Files and hashes: 1: 5n1EQkcmRaucyrGX88Dgx7YQ19k.roa (hash: t4Vnu9tnDcftty/GlXBTfwRRN3QnsJxvx0/8WS/aC10=)
2: JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl (hash: KT/JXmzYhpiMd68ICjp6wf2g3x4XPLEyRZXjUPY3pNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:4c:c9:84:b4:76:09:8c:e9:50:cd:52:d8:cf:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Validity
Not Before: Jun 28 10:01:40 2025 GMT
Not After : Jun 29 10:01:40 2025 GMT
Subject: CN=f763b802a042cfeb7737bc53550b5afa2bc0a1e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:13:3a:d7:f1:87:60:2e:ad:a7:79:d6:06:66:
79:bd:35:85:ea:2d:5e:92:33:e5:52:dc:58:89:c7:
1d:b1:75:3c:ba:6e:66:cc:55:94:4a:cb:cc:92:f9:
0e:89:5c:f0:29:e0:0e:e1:8a:87:ad:c6:d8:b0:66:
e7:ff:79:14:e4:02:23:90:50:ec:35:0d:ae:37:4d:
70:3d:64:35:d4:21:0c:80:07:c5:dc:4e:a7:10:91:
25:19:00:61:1a:71:4b:14:c4:80:22:fe:8d:8b:10:
81:0c:11:c0:d6:9a:40:02:80:31:09:6d:da:fe:e0:
00:5d:86:49:46:77:32:ce:47:8a:ce:8b:dd:d4:f3:
fb:fe:19:61:3f:ef:52:59:c8:3f:ed:5c:ca:9b:6a:
23:63:64:4a:02:5c:d9:d3:30:2c:47:cf:48:2f:29:
e4:64:55:ff:ef:7e:42:70:7c:c1:c7:49:08:f7:7a:
2a:c3:04:c5:fd:4d:fa:8c:14:df:06:18:7d:ff:f8:
d5:2d:2f:9f:e0:7c:e7:e6:99:a4:f0:e8:d4:d3:c1:
b3:b3:b1:8a:53:d9:ab:9d:92:d4:96:5b:03:20:74:
c6:43:35:61:cb:bb:9a:2f:e6:dc:f9:6b:c8:44:16:
6d:da:11:ec:43:91:47:af:07:87:71:d2:6a:be:ae:
90:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:63:B8:02:A0:42:CF:EB:77:37:BC:53:55:0B:5A:FA:2B:C0:A1:E8
X509v3 Authority Key Identifier:
keyid:25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:86:39:73:33:eb:9c:5b:a5:a0:14:c5:c6:bc:34:1a:7b:e3:
35:cf:17:8c:c2:70:fa:a0:48:99:f1:c3:39:75:0d:df:46:40:
82:95:ca:6e:cb:f7:84:a8:51:e1:33:f6:8a:b1:b5:94:e7:45:
64:3a:32:c4:02:29:54:64:45:84:f0:0b:ba:a0:f4:ad:74:b7:
52:41:76:b9:ff:2c:98:1d:e9:23:46:b9:a0:dc:9d:e9:63:7b:
30:2f:57:40:8d:ed:fc:27:8a:59:b7:be:c7:59:e4:2a:5d:9e:
7c:c3:09:c5:cf:b2:68:8b:75:db:2a:31:13:12:60:3d:45:51:
8c:27:17:77:e8:ab:06:da:6b:37:cb:12:61:98:7f:be:65:ff:
8e:bf:12:97:a5:f9:2d:22:8f:88:23:31:33:0c:90:4a:7c:dd:
cb:05:a5:46:fd:ab:b0:47:89:b4:95:84:25:54:a7:25:85:96:
dd:a8:fc:1e:d9:47:df:35:1e:61:77:53:9a:6b:47:95:82:df:
3f:5c:d1:64:f6:e7:5f:b4:7a:18:51:e9:61:4a:b6:fb:22:b1:
37:78:6a:c6:f5:48:7a:6e:d0:4f:90:df:d2:06:4f:7a:67:36:
4c:2d:09:79:59:1d:e7:dc:9f:68:4a:5d:41:75:3d:e1:d3:1a:
a6:ff:df:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1/EzJhLR2CYzpUM1S2M9aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MjhiNzFmMWU3Y2E2OTUzMWRkNWRmMjU1OTUxMzU5OGRi
MWM3ZjMwHhcNMjUwNjI4MTAwMTQwWhcNMjUwNjI5MTAwMTQwWjAzMTEwLwYDVQQD
EyhmNzYzYjgwMmEwNDJjZmViNzczN2JjNTM1NTBiNWFmYTJiYzBhMWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBM61/GHYC6tp3nWBmZ5vTWF6i1e
kjPlUtxYiccdsXU8um5mzFWUSsvMkvkOiVzwKeAO4YqHrcbYsGbn/3kU5AIjkFDs
NQ2uN01wPWQ11CEMgAfF3E6nEJElGQBhGnFLFMSAIv6NixCBDBHA1ppAAoAxCW3a
/uAAXYZJRncyzkeKzovd1PP7/hlhP+9SWcg/7VzKm2ojY2RKAlzZ0zAsR89ILynk
ZFX/735CcHzBx0kI93oqwwTF/U36jBTfBhh9//jVLS+f4Hzn5pmk8OjU08Gzs7GK
U9mrnZLUllsDIHTGQzVhy7uaL+bc+WvIRBZt2hHsQ5FHrweHcdJqvq6QhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPdjuAKgQs/rdze8U1ULWvorwKHoMB8GA1UdIwQY
MBaAFCUotx8efKaVMd1d8lWVE1mNscfzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlNpM0h4NThwcFV4M1YzeVZaVVRXWTJ4eF9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8zMGQ2OWUtZjBlNy00NmYzLTk3NTkt
ZWQzMmM1NjEyODQwLzEvSlNpM0h4NThwcFV4M1YzeVZaVVRXWTJ4eF9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8zMGQ2OWUtZjBlNy00NmYzLTk3NTktZWQzMmM1NjEyODQw
LzEvSlNpM0h4NThwcFV4M1YzeVZaVVRXWTJ4eF9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALIY5czPr
nFuloBTFxrw0GnvjNc8XjMJw+qBImfHDOXUN30ZAgpXKbsv3hKhR4TP2irG1lOdF
ZDoyxAIpVGRFhPALuqD0rXS3UkF2uf8smB3pI0a5oNyd6WN7MC9XQI3t/CeKWbe+
x1nkKl2efMMJxc+yaIt12yoxExJgPUVRjCcXd+irBtprN8sSYZh/vmX/jr8Sl6X5
LSKPiCMxMwyQSnzdywWlRv2rsEeJtJWEJVSnJYWW3aj8HtlH3zUeYXdTmmtHlYLf
P1zRZPbnX7R6GFHpYUq2+yKxN3hqxvVIem7QT5Df0gZPemc2TC0JeVkd59yfaEpd
QXU94dMapv/fVA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:50:33 2025 by rpki-client