Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
File: JPS59IVkIInzaxdNlkLcSDf_TSQ.mft (raw, json)
Hash identifier: WPsUCNGBVHCcfJT30wx5VpoMmXi0US9Lp+FPRk9JgJY=
Subject key identifier: B6:FF:54:5D:D0:99:54:66:D8:C0:20:43:08:50:31:1B:F1:A0:F9:24
Authority key identifier: 24:F4:B9:F4:85:64:20:89:F3:6B:17:4D:96:42:DC:48:37:FF:4D:24
Certificate issuer: /CN=24f4b9f485642089f36b174d9642dc4837ff4d24
Certificate serial: 0198D54EA26A089EF38A424BB4244B900FFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
Manifest number: 03D0
Signing time: Sat 23 Aug 2025 05:02:37 +0000
Manifest this update: Sat 23 Aug 2025 05:02:37 +0000
Manifest next update: Sun 24 Aug 2025 05:02:37 +0000
Files and hashes: 1: JPS59IVkIInzaxdNlkLcSDf_TSQ.crl (hash: 2J+vcLnWQuCBUK2zVYgUXUEJzhiyK0/tzebtAtMLft8=)
2: cNr_HYvpiGioRSQRxwB1USCGS48.roa (hash: +noL2GpravnsNJo9M6TMNUj+1J6YWZz/J8eJw0GPGmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:a2:6a:08:9e:f3:8a:42:4b:b4:24:4b:90:0f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24f4b9f485642089f36b174d9642dc4837ff4d24
Validity
Not Before: Aug 23 05:02:37 2025 GMT
Not After : Aug 24 05:02:37 2025 GMT
Subject: CN=b6ff545dd0995466d8c020430850311bf1a0f924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3d:99:f6:bf:23:83:b5:84:35:67:e1:27:5d:
5e:37:9e:97:42:98:dc:ca:cd:ee:d2:b0:08:40:18:
a5:54:73:c4:26:9a:7e:0c:05:85:71:c3:ba:66:36:
6c:d9:ff:53:dc:a8:42:36:11:d8:33:b4:e9:a1:85:
4c:37:ef:1b:69:f1:79:12:41:80:3d:e0:14:37:38:
63:6e:36:ac:7c:a5:63:cf:11:1d:4a:6a:16:21:31:
06:84:3b:c6:f0:c7:96:ac:f7:e9:1f:b7:70:8a:4d:
36:27:48:a8:47:5c:ff:cc:0a:9d:f8:15:13:b8:6b:
24:43:5c:b8:01:95:a4:a3:6c:77:1d:fb:27:68:36:
38:f8:1e:6b:62:97:84:80:d2:8c:6f:64:33:02:2f:
e9:73:d9:58:0b:73:60:19:35:cf:89:bc:8f:35:46:
de:bc:52:8a:7b:10:e5:2a:1f:64:47:13:1e:9c:27:
10:5a:d5:cb:fe:1c:1f:c3:ab:7c:d1:e5:dc:64:d5:
74:b7:71:a6:df:a3:de:b2:85:43:b0:47:df:d3:db:
40:72:ec:16:05:b4:f4:71:87:91:1f:5d:80:30:a8:
b2:12:97:f4:e5:32:b8:fb:ea:2b:fe:45:8d:55:1e:
62:d3:9c:05:81:84:c8:db:87:58:10:e5:b8:47:19:
07:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FF:54:5D:D0:99:54:66:D8:C0:20:43:08:50:31:1B:F1:A0:F9:24
X509v3 Authority Key Identifier:
keyid:24:F4:B9:F4:85:64:20:89:F3:6B:17:4D:96:42:DC:48:37:FF:4D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:25:03:68:bf:1e:f3:c5:e3:58:3b:d9:35:28:a7:93:b9:ca:
84:6f:6f:65:6d:fb:b1:3a:c2:1d:1c:6d:6f:95:9f:bd:6a:b2:
87:8a:f5:f6:01:7a:ed:94:6b:64:fa:61:9e:3a:7c:19:66:5e:
74:44:fc:18:aa:4e:ea:a7:97:84:fc:50:aa:a9:40:98:ed:7a:
51:e6:bd:42:a1:b7:76:2d:63:d0:76:59:05:43:62:17:31:67:
25:b9:5a:3e:f2:ac:a1:89:b9:69:5a:1a:34:62:1f:db:5b:78:
a4:54:99:d4:3f:cd:75:38:12:76:b0:1b:27:5b:b6:92:fb:fe:
0a:5f:73:3a:1b:dd:d9:d1:98:c4:57:69:ba:3b:81:66:cf:73:
86:f7:31:31:59:43:b6:92:51:92:ef:3d:e4:b3:5e:69:2b:2f:
cc:13:fa:5c:eb:b8:88:8f:5a:fb:fb:34:54:6b:aa:32:28:5b:
16:45:2d:e6:67:9c:76:85:56:d3:7a:5c:b0:e8:4e:f6:ac:a0:
f4:16:b3:44:03:57:e6:0f:16:f4:d8:5e:7c:d8:7d:d8:b8:c8:
06:a4:ec:5e:8d:19:e0:46:e8:10:b9:9f:19:6b:b6:f9:bd:69:
f7:ec:98:07:4e:45:c2:60:58:49:44:39:cd:7c:fd:97:4e:e8:
c0:56:3b:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTqJqCJ7zikJLtCRLkA/6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZjRiOWY0ODU2NDIwODlmMzZiMTc0ZDk2NDJkYzQ4Mzdm
ZjRkMjQwHhcNMjUwODIzMDUwMjM3WhcNMjUwODI0MDUwMjM3WjAzMTEwLwYDVQQD
EyhiNmZmNTQ1ZGQwOTk1NDY2ZDhjMDIwNDMwODUwMzExYmYxYTBmOTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1j2Z9r8jg7WENWfhJ11eN56XQpjc
ys3u0rAIQBilVHPEJpp+DAWFccO6ZjZs2f9T3KhCNhHYM7TpoYVMN+8bafF5EkGA
PeAUNzhjbjasfKVjzxEdSmoWITEGhDvG8MeWrPfpH7dwik02J0ioR1z/zAqd+BUT
uGskQ1y4AZWko2x3HfsnaDY4+B5rYpeEgNKMb2QzAi/pc9lYC3NgGTXPibyPNUbe
vFKKexDlKh9kRxMenCcQWtXL/hwfw6t80eXcZNV0t3Gm36PesoVDsEff09tAcuwW
BbT0cYeRH12AMKiyEpf05TK4++or/kWNVR5i05wFgYTI24dYEOW4RxkHuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLb/VF3QmVRm2MAgQwhQMRvxoPkkMB8GA1UdIwQY
MBaAFCT0ufSFZCCJ82sXTZZC3Eg3/00kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlBTNTlJVmtJSW56YXhkTmxrTGNTRGZfVFNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9jNDdlOTAtMGYwOC00NjNiLTg4MTAt
YzA3Yjk4ZjZlNzY1LzEvSlBTNTlJVmtJSW56YXhkTmxrTGNTRGZfVFNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9jNDdlOTAtMGYwOC00NjNiLTg4MTAtYzA3Yjk4ZjZlNzY1
LzEvSlBTNTlJVmtJSW56YXhkTmxrTGNTRGZfVFNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsyUDaL8e
88XjWDvZNSink7nKhG9vZW37sTrCHRxtb5WfvWqyh4r19gF67ZRrZPphnjp8GWZe
dET8GKpO6qeXhPxQqqlAmO16Uea9QqG3di1j0HZZBUNiFzFnJblaPvKsoYm5aVoa
NGIf21t4pFSZ1D/NdTgSdrAbJ1u2kvv+Cl9zOhvd2dGYxFdpujuBZs9zhvcxMVlD
tpJRku895LNeaSsvzBP6XOu4iI9a+/s0VGuqMihbFkUt5mecdoVW03pcsOhO9qyg
9BazRANX5g8W9NhefNh92LjIBqTsXo0Z4EboELmfGWu2+b1p9+yYB05FwmBYSUQ5
zXz9l07owFY77g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:30:41 2025 by rpki-client