Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
File: JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft (raw, json)
Hash identifier: IRMaimq+i2AKfdc/TDh4FkmtlxiD/4G23q7UCOSlWgQ=
Subject key identifier: 49:33:A8:B1:70:E6:16:06:9C:19:0A:E1:EE:AA:F1:0C:AC:10:AE:CD
Authority key identifier: 24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
Certificate issuer: /CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Certificate serial: 0197B632BF0E6FE31ED65420D9F8E75B4213
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
Manifest number: 0CAB
Signing time: Sat 28 Jun 2025 11:01:08 +0000
Manifest this update: Sat 28 Jun 2025 11:01:08 +0000
Manifest next update: Sun 29 Jun 2025 11:01:08 +0000
Files and hashes: 1: JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl (hash: j3XJg3gNq4UPi+JSsTuzocmLyaXMZDd/f6pg3W5bwBo=)
2: VJR7Lo1LB0pD40S4fO2jLPEbihA.roa (hash: RbHjGHvWg7AGicrPJns6EGHLTa9+BO6JRpxrZNUyWo8=)
3: gX6AqUyGzqBuxo0ZWofHdJPozGo.roa (hash: tMyCIpNNOmtDo0tCmm/IacKiCjkSIun6I2dTk3wHLFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:bf:0e:6f:e3:1e:d6:54:20:d9:f8:e7:5b:42:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Validity
Not Before: Jun 28 11:01:08 2025 GMT
Not After : Jun 29 11:01:08 2025 GMT
Subject: CN=4933a8b170e616069c190ae1eeaaf10cac10aecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:82:53:96:8d:e8:51:93:e7:5f:b0:0a:c8:0d:
e7:a4:19:4f:7e:c9:ab:c0:ac:62:31:cc:19:2c:6a:
55:14:23:64:aa:8a:35:70:9a:09:46:6d:40:6c:17:
bd:5f:22:b4:f1:14:15:da:1c:1c:2f:ed:85:47:fd:
a9:1e:b4:84:cb:53:11:be:cb:b6:2c:0c:d8:b6:dc:
02:2c:80:d4:6b:d9:77:3f:9d:af:0e:4c:48:05:44:
de:ee:8a:c2:5f:04:7e:c8:fb:17:d9:34:4d:0d:8f:
4e:d3:31:57:67:a6:1f:27:2b:8d:e6:34:c2:57:b8:
4f:74:57:13:ca:53:2d:1e:16:34:b6:14:87:78:71:
4e:22:2e:a5:e9:4b:37:21:85:bb:39:f1:56:83:48:
0c:dc:4f:f0:ec:72:84:66:d5:d0:47:df:4e:21:72:
17:38:5c:08:1b:97:1b:7c:d1:09:34:1d:52:c7:b6:
d6:c1:54:54:9d:60:54:84:ca:fc:77:bd:66:7e:65:
06:94:3d:67:fc:ea:b7:f7:3d:3a:0f:df:03:2a:b8:
b4:d4:e0:81:de:1a:c6:4f:95:ba:5a:f7:53:9e:76:
d6:30:36:f2:ff:ab:69:5e:84:b8:7b:19:6f:b7:12:
7b:9a:bb:2d:53:62:c7:91:c1:01:bb:27:09:a4:5a:
c0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:33:A8:B1:70:E6:16:06:9C:19:0A:E1:EE:AA:F1:0C:AC:10:AE:CD
X509v3 Authority Key Identifier:
keyid:24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:34:30:ee:84:7e:65:2f:9b:59:15:dd:2c:8b:a0:b4:20:f7:
26:bd:5d:6b:5b:4a:f4:09:f7:1b:1f:83:3b:05:76:d8:ef:89:
03:fe:0e:b6:26:1d:0c:51:99:c4:35:9c:04:67:3e:39:80:1b:
d7:69:09:a6:a4:c5:15:3d:bc:26:5d:3d:c7:42:c5:d4:81:18:
1c:c2:7a:2c:86:23:2c:93:07:0e:5f:6b:3a:70:2d:b1:6b:bf:
56:fd:a3:65:f0:08:14:53:2e:2d:06:37:19:f3:4d:c8:6f:d1:
84:21:21:4e:b9:de:8e:17:6c:b5:f2:ab:fb:c9:92:a0:96:c5:
93:05:75:71:43:2c:93:c1:18:ac:08:65:ad:01:77:04:5b:1a:
65:a3:bd:20:77:f9:f0:c2:82:c5:a3:4e:8a:9b:12:4e:36:35:
7a:34:15:fa:0b:d6:65:b4:1c:ad:1f:b3:3f:fe:73:fd:a5:59:
c7:8b:0d:63:44:16:25:df:3e:b2:2f:b1:a0:4d:01:56:d5:72:
e9:3f:bc:60:ed:f6:cd:b7:bd:f3:0f:df:cd:d2:00:70:27:2b:
d3:a8:71:2d:db:9e:c4:a1:a7:f0:e2:a8:2f:b6:54:b1:a4:2c:
a0:c9:4e:fd:cd:56:a3:fc:bc:c2:5d:6f:18:87:47:ca:a1:14:
26:52:94:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2Mr8Ob+Me1lQg2fjnW0ITMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YTU1YmQ2ODM5NzU2Njg5NWIxNWVjYjk3ZmMxZDY1YzBj
ODc5Y2UwHhcNMjUwNjI4MTEwMTA4WhcNMjUwNjI5MTEwMTA4WjAzMTEwLwYDVQQD
Eyg0OTMzYThiMTcwZTYxNjA2OWMxOTBhZTFlZWFhZjEwY2FjMTBhZWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIJTlo3oUZPnX7AKyA3npBlPfsmr
wKxiMcwZLGpVFCNkqoo1cJoJRm1AbBe9XyK08RQV2hwcL+2FR/2pHrSEy1MRvsu2
LAzYttwCLIDUa9l3P52vDkxIBUTe7orCXwR+yPsX2TRNDY9O0zFXZ6YfJyuN5jTC
V7hPdFcTylMtHhY0thSHeHFOIi6l6Us3IYW7OfFWg0gM3E/w7HKEZtXQR99OIXIX
OFwIG5cbfNEJNB1Sx7bWwVRUnWBUhMr8d71mfmUGlD1n/Oq39z06D98DKri01OCB
3hrGT5W6WvdTnnbWMDby/6tpXoS4exlvtxJ7mrstU2LHkcEBuycJpFrAsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEkzqLFw5hYGnBkK4e6q8QysEK7NMB8GA1UdIwQY
MBaAFCSlW9aDl1ZolbFey5f8HWXAyHnOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSktWYjFvT1hWbWlWc1Y3TGxfd2RaY0RJZWM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wZGU4OTktMjJlMS00NjNjLWE0ZGQt
YzM0ZTkwZDdmOGVhLzEvSktWYjFvT1hWbWlWc1Y3TGxfd2RaY0RJZWM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8wZGU4OTktMjJlMS00NjNjLWE0ZGQtYzM0ZTkwZDdmOGVh
LzEvSktWYjFvT1hWbWlWc1Y3TGxfd2RaY0RJZWM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmjQw7oR+
ZS+bWRXdLIugtCD3Jr1da1tK9An3Gx+DOwV22O+JA/4OtiYdDFGZxDWcBGc+OYAb
12kJpqTFFT28Jl09x0LF1IEYHMJ6LIYjLJMHDl9rOnAtsWu/Vv2jZfAIFFMuLQY3
GfNNyG/RhCEhTrnejhdstfKr+8mSoJbFkwV1cUMsk8EYrAhlrQF3BFsaZaO9IHf5
8MKCxaNOipsSTjY1ejQV+gvWZbQcrR+zP/5z/aVZx4sNY0QWJd8+si+xoE0BVtVy
6T+8YO32zbe98w/fzdIAcCcr06hxLduexKGn8OKoL7ZUsaQsoMlO/c1Wo/y8wl1v
GIdHyqEUJlKUDQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:42 2025 by rpki-client