Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft
File: JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft (raw, json)
Hash identifier: xQzzetKcV4OgHw2glmxUG2MKi/0PCafoOgiIdN+rQyQ=
Subject key identifier: C1:63:2E:C8:AE:1D:F1:4F:4D:78:3D:C0:32:01:1B:09:FB:C3:EF:9F
Authority key identifier: 25:43:51:A8:67:B9:DA:E9:DB:67:64:30:6B:D7:32:05:9F:6D:99:9E
Certificate issuer: /CN=254351a867b9dae9db6764306bd732059f6d999e
Certificate serial: 0197B7EA47AD2AFD25E3BE560818C88F04DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft
Manifest number: 08E2
Signing time: Sat 28 Jun 2025 19:01:13 +0000
Manifest this update: Sat 28 Jun 2025 19:01:13 +0000
Manifest next update: Sun 29 Jun 2025 19:01:13 +0000
Files and hashes: 1: JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.crl (hash: ix1RVfdqGAK82uBCPYrzA+6cQIjkqyiJXg5eebWFilA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:47:ad:2a:fd:25:e3:be:56:08:18:c8:8f:04:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=254351a867b9dae9db6764306bd732059f6d999e
Validity
Not Before: Jun 28 19:01:13 2025 GMT
Not After : Jun 29 19:01:13 2025 GMT
Subject: CN=c1632ec8ae1df14f4d783dc032011b09fbc3ef9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:85:d6:95:a6:57:70:f1:3d:7a:8e:c0:7f:41:
0d:41:20:4f:e1:ce:fb:0f:2e:31:eb:26:c3:db:f6:
4d:27:32:4b:73:66:a2:29:ab:18:62:11:6a:16:be:
02:b5:36:40:03:be:6f:2b:93:9f:33:79:2c:e3:72:
bc:b6:c9:ae:49:a0:c8:e6:46:83:3f:7b:0d:9f:7e:
24:c2:8a:86:bd:28:d5:5c:0b:a3:33:1b:22:80:ec:
d1:b6:e4:c6:47:94:f6:90:99:cb:8b:fe:33:30:2b:
77:e3:1b:6a:9b:4e:c7:d3:e6:30:1f:01:37:50:79:
3d:a3:60:19:50:0d:e2:6d:7f:bf:74:78:65:4a:f9:
ba:cf:89:bb:98:65:dc:1d:7e:a7:69:f4:3b:1b:d2:
1b:5c:b4:9e:af:9e:2e:e6:5b:94:b7:bd:9e:70:91:
3e:89:bc:e0:bf:29:28:95:37:58:6e:23:5c:b7:20:
31:da:ad:29:4c:ec:be:17:c6:75:bb:11:44:f0:e4:
fb:75:71:3f:74:4b:52:f2:87:a4:70:70:5f:c6:94:
b1:a9:b9:80:fe:f7:78:a0:0f:fc:f7:5f:f8:b9:c4:
09:1b:c1:48:95:52:3c:2f:89:0b:36:24:d0:a1:0e:
a5:63:95:f3:d0:9f:d9:e1:ec:eb:65:d7:1c:c5:6d:
3c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:63:2E:C8:AE:1D:F1:4F:4D:78:3D:C0:32:01:1B:09:FB:C3:EF:9F
X509v3 Authority Key Identifier:
keyid:25:43:51:A8:67:B9:DA:E9:DB:67:64:30:6B:D7:32:05:9F:6D:99:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:71:2d:d5:04:36:00:bb:55:a5:5c:ba:83:09:66:3f:3c:26:
c6:7a:86:0f:82:bf:b1:a4:50:17:2a:4b:a3:60:d4:36:0a:53:
3b:e8:bb:6a:a3:2d:00:c1:75:2e:1d:2b:5d:bf:30:c1:80:4b:
be:31:73:0f:5c:b2:d9:67:6d:f7:19:76:ea:15:24:e6:00:a2:
f9:ea:c3:b5:c6:06:a0:98:0e:2b:5a:33:b7:e9:a5:0b:84:8a:
a3:db:97:48:76:8d:ae:55:65:f2:fb:1a:1e:e8:90:a4:f8:57:
a7:a0:43:17:74:30:e5:8c:8e:66:22:90:6b:b0:ec:f1:bb:04:
63:ef:68:b4:9f:25:ef:df:75:25:91:99:9f:aa:d8:c9:5d:e6:
7f:73:5b:5a:a7:b2:e6:77:f3:c9:00:e5:5c:39:da:e0:83:81:
8b:a2:d1:b1:8b:ef:ef:22:43:68:a9:ba:f9:50:0a:dd:1e:1e:
20:82:f0:f6:3a:7c:50:a0:11:3a:76:aa:05:52:8b:e1:2f:01:
07:c3:d0:99:47:8e:fe:c4:d0:78:b3:02:d5:cd:b5:63:ae:aa:
d6:3e:02:60:4e:79:c0:0b:66:3e:eb:c6:d0:07:99:0d:44:f9:
4d:31:5f:5f:8f:b6:24:79:b1:05:e0:74:3e:5e:47:e4:a0:28:
b8:e2:f0:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36ketKv0l475WCBjIjwTbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NDM1MWE4NjdiOWRhZTlkYjY3NjQzMDZiZDczMjA1OWY2
ZDk5OWUwHhcNMjUwNjI4MTkwMTEzWhcNMjUwNjI5MTkwMTEzWjAzMTEwLwYDVQQD
EyhjMTYzMmVjOGFlMWRmMTRmNGQ3ODNkYzAzMjAxMWIwOWZiYzNlZjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYXWlaZXcPE9eo7Af0ENQSBP4c77
Dy4x6ybD2/ZNJzJLc2aiKasYYhFqFr4CtTZAA75vK5OfM3ks43K8tsmuSaDI5kaD
P3sNn34kwoqGvSjVXAujMxsigOzRtuTGR5T2kJnLi/4zMCt34xtqm07H0+YwHwE3
UHk9o2AZUA3ibX+/dHhlSvm6z4m7mGXcHX6nafQ7G9IbXLSer54u5luUt72ecJE+
ibzgvykolTdYbiNctyAx2q0pTOy+F8Z1uxFE8OT7dXE/dEtS8oekcHBfxpSxqbmA
/vd4oA/891/4ucQJG8FIlVI8L4kLNiTQoQ6lY5Xz0J/Z4ezrZdccxW08bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFjLsiuHfFPTXg9wDIBGwn7w++fMB8GA1UdIwQY
MBaAFCVDUahnudrp22dkMGvXMgWfbZmeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlVOUnFHZTUydW5iWjJRd2E5Y3lCWjl0bVo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jNzYxMjEtNzZkNC00YTk4LTkxZTgt
MjA1Y2E2Njg4NTY0LzEvSlVOUnFHZTUydW5iWjJRd2E5Y3lCWjl0bVo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9jNzYxMjEtNzZkNC00YTk4LTkxZTgtMjA1Y2E2Njg4NTY0
LzEvSlVOUnFHZTUydW5iWjJRd2E5Y3lCWjl0bVo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL3Et1QQ2
ALtVpVy6gwlmPzwmxnqGD4K/saRQFypLo2DUNgpTO+i7aqMtAMF1Lh0rXb8wwYBL
vjFzD1yy2Wdt9xl26hUk5gCi+erDtcYGoJgOK1ozt+mlC4SKo9uXSHaNrlVl8vsa
HuiQpPhXp6BDF3Qw5YyOZiKQa7Ds8bsEY+9otJ8l7991JZGZn6rYyV3mf3NbWqey
5nfzyQDlXDna4IOBi6LRsYvv7yJDaKm6+VAK3R4eIILw9jp8UKAROnaqBVKL4S8B
B8PQmUeO/sTQeLMC1c21Y66q1j4CYE55wAtmPuvG0AeZDUT5TTFfX4+2JHmxBeB0
Pl5H5KAouOLw8g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:24 2025 by rpki-client