Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
File: jDzPk_fIB93gQgrVSGrinrXcdfk.mft (raw, json)
Hash identifier: Lerg2yDABL4sSgcYbhcyvd1ViQR6pbrFqJkOKscfZMQ=
Subject key identifier: 39:1D:9A:25:AC:60:E1:70:65:0D:8B:DF:4B:82:C5:C8:92:F0:0E:77
Authority key identifier: 8C:3C:CF:93:F7:C8:07:DD:E0:42:0A:D5:48:6A:E2:9E:B5:DC:75:F9
Certificate issuer: /CN=8c3ccf93f7c807dde0420ad5486ae29eb5dc75f9
Certificate serial: 0197B74522E7B8D0723E2F03C93F6141B80E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 16:00:50 +0000
Manifest this update: Sat 28 Jun 2025 16:00:50 +0000
Manifest next update: Sun 29 Jun 2025 16:00:50 +0000
Files and hashes: 1: jDzPk_fIB93gQgrVSGrinrXcdfk.crl (hash: We0WxLjdndoahUsCaP99VeT0SUDQdTMuw0ufR+ifCyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:22:e7:b8:d0:72:3e:2f:03:c9:3f:61:41:b8:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c3ccf93f7c807dde0420ad5486ae29eb5dc75f9
Validity
Not Before: Jun 28 16:00:50 2025 GMT
Not After : Jun 29 16:00:50 2025 GMT
Subject: CN=391d9a25ac60e170650d8bdf4b82c5c892f00e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b4:db:d0:92:d9:e4:42:6b:96:a0:aa:78:a5:
7b:2d:74:c0:76:8f:b2:c7:af:28:b2:d6:83:30:cd:
7a:ca:0e:0b:66:19:bf:35:0d:64:f9:c4:33:ab:ff:
8b:19:f2:89:48:3a:b0:1a:d7:4f:e6:c4:4b:1a:f3:
5d:1c:f2:72:54:a7:da:93:88:1b:e3:ef:84:bc:a3:
b7:d1:99:5c:9f:7c:71:fa:9e:53:29:32:a2:66:b2:
35:04:1c:06:11:56:af:6d:13:8f:47:d9:c7:dc:6c:
21:22:ab:fd:4f:9b:45:dd:24:77:5e:e5:00:51:1a:
89:14:f5:fe:ec:73:da:1c:1b:9a:e2:da:ea:d5:64:
86:8e:5e:78:f2:eb:8a:58:8c:b5:2b:d1:c5:48:79:
be:e1:4c:c4:74:66:96:e3:b2:06:e2:f4:28:8b:6a:
8e:14:4f:77:4b:56:d2:6c:df:33:5a:f1:1d:ec:f1:
97:ca:74:38:3f:1e:fa:66:c1:8f:dd:77:66:95:15:
62:9c:34:0f:cf:7f:0a:b5:a3:8e:d8:73:e6:87:d6:
69:26:ee:1c:a5:1e:02:43:93:73:d1:84:0b:3e:3f:
1d:25:a1:ea:63:94:e1:ba:88:61:0f:77:32:bb:ac:
15:b4:ca:58:1e:cd:bc:c5:13:b5:8f:a1:a2:07:6d:
ef:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1D:9A:25:AC:60:E1:70:65:0D:8B:DF:4B:82:C5:C8:92:F0:0E:77
X509v3 Authority Key Identifier:
keyid:8C:3C:CF:93:F7:C8:07:DD:E0:42:0A:D5:48:6A:E2:9E:B5:DC:75:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:15:50:0c:e0:d0:b7:78:eb:6b:03:0c:30:fd:d6:c4:d2:8b:
0c:b9:ef:11:09:02:f2:bf:b4:3d:6a:75:15:de:23:d2:b8:6e:
ba:2f:fd:8d:e8:f4:c7:e4:b9:af:e3:22:90:15:31:8d:b0:fb:
f7:bc:76:54:3e:09:1c:c0:77:2c:85:e4:18:a1:20:15:be:77:
66:f2:85:96:21:f2:65:96:6a:f3:30:42:74:2e:6e:72:49:ec:
95:55:a8:34:b8:48:05:96:e0:05:33:2c:c8:ca:e5:bb:3f:9d:
8d:fc:d4:46:02:d1:cc:0f:ff:ab:b6:55:06:dd:5d:1e:67:ae:
23:66:a1:74:32:ae:45:9f:d8:d8:8e:cb:9e:51:6c:e4:bf:4f:
e7:93:78:66:ac:ce:2f:e4:da:31:a6:8a:c6:9b:fe:59:73:d0:
77:48:12:75:b2:ab:60:5c:6a:d3:43:a7:2c:69:18:bf:92:05:
ab:98:c1:55:90:1e:37:82:f8:02:70:55:12:29:c0:bf:f4:6a:
0f:a5:a1:f8:8f:ac:79:bb:74:ec:4d:16:9a:35:1c:2e:9e:3e:
b1:d0:84:cd:46:6a:3b:40:5a:bc:73:01:4b:60:f0:05:14:f3:
61:03:b0:24:29:08:56:33:38:66:c2:a2:b9:eb:e8:a6:af:56:
9a:02:7f:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RSLnuNByPi8DyT9hQbgOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjM2NjZjkzZjdjODA3ZGRlMDQyMGFkNTQ4NmFlMjllYjVk
Yzc1ZjkwHhcNMjUwNjI4MTYwMDUwWhcNMjUwNjI5MTYwMDUwWjAzMTEwLwYDVQQD
EygzOTFkOWEyNWFjNjBlMTcwNjUwZDhiZGY0YjgyYzVjODkyZjAwZTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLTb0JLZ5EJrlqCqeKV7LXTAdo+y
x68ostaDMM16yg4LZhm/NQ1k+cQzq/+LGfKJSDqwGtdP5sRLGvNdHPJyVKfak4gb
4++EvKO30Zlcn3xx+p5TKTKiZrI1BBwGEVavbROPR9nH3GwhIqv9T5tF3SR3XuUA
URqJFPX+7HPaHBua4trq1WSGjl548uuKWIy1K9HFSHm+4UzEdGaW47IG4vQoi2qO
FE93S1bSbN8zWvEd7PGXynQ4Px76ZsGP3XdmlRVinDQPz38KtaOO2HPmh9ZpJu4c
pR4CQ5Nz0YQLPj8dJaHqY5ThuohhD3cyu6wVtMpYHs28xRO1j6GiB23v4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkdmiWsYOFwZQ2L30uCxciS8A53MB8GA1UdIwQY
MBaAFIw8z5P3yAfd4EIK1Uhq4p613HX5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakR6UGtfZklCOTNnUWdyVlNHcmluclhjZGZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xODM0YWMtMjAzMC00NDFmLTgyZTIt
NjgxZGJmZjg1MTVlLzEvakR6UGtfZklCOTNnUWdyVlNHcmluclhjZGZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8xODM0YWMtMjAzMC00NDFmLTgyZTItNjgxZGJmZjg1MTVl
LzEvakR6UGtfZklCOTNnUWdyVlNHcmluclhjZGZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADRVQDODQ
t3jrawMMMP3WxNKLDLnvEQkC8r+0PWp1Fd4j0rhuui/9jej0x+S5r+MikBUxjbD7
97x2VD4JHMB3LIXkGKEgFb53ZvKFliHyZZZq8zBCdC5ucknslVWoNLhIBZbgBTMs
yMrluz+djfzURgLRzA//q7ZVBt1dHmeuI2ahdDKuRZ/Y2I7LnlFs5L9P55N4ZqzO
L+TaMaaKxpv+WXPQd0gSdbKrYFxq00OnLGkYv5IFq5jBVZAeN4L4AnBVEinAv/Rq
D6Wh+I+sebt07E0WmjUcLp4+sdCEzUZqO0BavHMBS2DwBRTzYQOwJCkIVjM4ZsKi
uevopq9WmgJ/vw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:09 2025 by rpki-client