Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
File: JClc5xJHPQ4-bap3fbiQb4AB33A.mft (raw, json)
Hash identifier: GUp9rLueUlaSu4p7SwxQC0RfkTrI2jTexdNnX6g8rZg=
Subject key identifier: FB:FB:20:CE:AB:0C:79:89:96:BD:DE:9D:D6:9E:06:05:37:0A:D3:67
Authority key identifier: 24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
Certificate issuer: /CN=24295ce712473d0e3e6daa777db8906f8001df70
Certificate serial: 0197B7EA8CED06C5F7A5C09D98DFF152E304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
Manifest number: 116D
Signing time: Sat 28 Jun 2025 19:01:31 +0000
Manifest this update: Sat 28 Jun 2025 19:01:31 +0000
Manifest next update: Sun 29 Jun 2025 19:01:31 +0000
Files and hashes: 1: 2f42Ui-pru7wNiS6tvX-43aKjFs.roa (hash: mtpDrlYTTPVwbZc60pOa8NtALeV5Jm4wS3DacId4T/Q=)
2: JClc5xJHPQ4-bap3fbiQb4AB33A.crl (hash: +ipnLTqBwepKJLR5bzA+jXfkPmtd7acmDnadHwH1u7A=)
3: Xhs8fAc0SGAyN4KDD0cOKWAqtow.roa (hash: 0rR/+YP0FGlnVR+donPj6Q3O2XueDV+VyXKsGyjN1KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:8c:ed:06:c5:f7:a5:c0:9d:98:df:f1:52:e3:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24295ce712473d0e3e6daa777db8906f8001df70
Validity
Not Before: Jun 28 19:01:31 2025 GMT
Not After : Jun 29 19:01:31 2025 GMT
Subject: CN=fbfb20ceab0c798996bdde9dd69e0605370ad367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:09:71:ac:b7:66:54:34:aa:77:a2:35:a9:ac:
dc:a4:5d:9c:bd:31:f9:0c:fb:a1:6a:39:2b:67:61:
77:4d:6f:e7:c0:39:bf:2b:ef:3b:cd:f1:54:94:7b:
19:5b:24:0e:1b:b3:ff:22:74:3e:a6:7b:fd:5d:f2:
d9:0b:58:84:ca:21:c7:c5:db:af:6c:9f:43:2e:81:
f6:b3:f3:ca:76:75:5c:ca:77:1f:81:5b:01:35:36:
c4:9b:ae:f8:d6:e4:63:94:82:58:d3:70:fd:03:b6:
9b:a1:92:3f:9a:64:be:a4:2c:a4:7e:3d:26:94:40:
77:f1:9d:2b:41:a6:62:52:22:d4:c6:a6:3e:c1:ea:
66:8f:e8:b6:49:7d:34:db:7b:c0:98:c5:a5:45:f8:
b7:f8:42:8f:14:ff:8a:8c:7d:48:91:ae:19:54:c0:
47:c7:df:1c:47:5a:8e:56:35:fc:f6:70:55:70:d5:
78:d1:7b:a0:bf:88:aa:f0:da:06:0c:2c:a7:69:3f:
71:7b:15:f1:65:4d:cc:cc:48:2b:56:83:c8:c2:80:
87:76:a8:8d:09:1f:da:fd:a7:88:61:6d:5f:0b:47:
e9:b5:c6:fa:f9:65:8d:d4:72:ae:15:f9:2a:0e:34:
b7:20:95:7c:bc:d4:c2:5f:e1:62:da:82:0f:98:1a:
17:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FB:20:CE:AB:0C:79:89:96:BD:DE:9D:D6:9E:06:05:37:0A:D3:67
X509v3 Authority Key Identifier:
keyid:24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ad:9a:bd:65:38:fa:b8:e6:79:35:bd:60:66:be:1e:40:8e:
cc:d0:31:62:1d:d9:92:8c:70:66:4e:6a:2f:d4:0c:ab:4d:2c:
b7:40:47:df:2f:a5:0b:fd:77:d5:dc:df:d2:a3:4f:1b:e2:0b:
94:68:85:71:4c:5a:c3:b5:17:7f:5b:51:1a:e9:87:44:5e:d0:
1f:a0:56:a0:68:c3:ac:da:c9:73:f2:91:4b:d1:8f:c1:a3:f5:
53:e3:c0:7f:94:49:ee:ee:bf:52:8a:c2:41:d6:4e:a5:fd:2b:
ab:2f:2b:4c:e7:8c:5c:13:70:9d:a4:06:65:7d:23:7c:fc:ac:
1c:70:e4:bf:f5:26:e6:5b:6e:79:6b:4b:69:1a:39:ad:cb:ce:
cd:2b:0e:ed:48:40:30:23:a0:a8:d9:c3:74:36:ea:e2:6f:58:
47:e0:b3:bc:3b:3a:64:c5:90:1f:f0:aa:bc:5c:c6:32:dd:e2:
c0:c5:c5:8f:3e:90:34:65:25:30:e4:07:3f:7d:a9:73:35:03:
e0:5c:03:b6:68:a3:82:95:28:9a:c3:79:31:11:15:e2:a9:68:
e4:dd:10:0c:c6:bd:31:15:d8:a5:2e:1b:ac:19:02:ff:74:c1:
57:fb:48:1b:4c:80:4f:8a:89:a2:bd:75:9c:61:37:88:7b:4c:
06:c7:66:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36oztBsX3pcCdmN/xUuMEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0Mjk1Y2U3MTI0NzNkMGUzZTZkYWE3NzdkYjg5MDZmODAw
MWRmNzAwHhcNMjUwNjI4MTkwMTMxWhcNMjUwNjI5MTkwMTMxWjAzMTEwLwYDVQQD
EyhmYmZiMjBjZWFiMGM3OTg5OTZiZGRlOWRkNjllMDYwNTM3MGFkMzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5glxrLdmVDSqd6I1qazcpF2cvTH5
DPuhajkrZ2F3TW/nwDm/K+87zfFUlHsZWyQOG7P/InQ+pnv9XfLZC1iEyiHHxduv
bJ9DLoH2s/PKdnVcyncfgVsBNTbEm6741uRjlIJY03D9A7aboZI/mmS+pCykfj0m
lEB38Z0rQaZiUiLUxqY+wepmj+i2SX0023vAmMWlRfi3+EKPFP+KjH1Ika4ZVMBH
x98cR1qOVjX89nBVcNV40Xugv4iq8NoGDCynaT9xexXxZU3MzEgrVoPIwoCHdqiN
CR/a/aeIYW1fC0fptcb6+WWN1HKuFfkqDjS3IJV8vNTCX+Fi2oIPmBoXQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPv7IM6rDHmJlr3endaeBgU3CtNnMB8GA1UdIwQY
MBaAFCQpXOcSRz0OPm2qd324kG+AAd9wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkNsYzV4SkhQUTQtYmFwM2ZiaVFiNEFCMzNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8xYTBjNmEtMWE1ZS00MjRiLTlhNjkt
OTk1NTMxODYyNDE5LzEvSkNsYzV4SkhQUTQtYmFwM2ZiaVFiNEFCMzNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8xYTBjNmEtMWE1ZS00MjRiLTlhNjktOTk1NTMxODYyNDE5
LzEvSkNsYzV4SkhQUTQtYmFwM2ZiaVFiNEFCMzNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKa2avWU4
+rjmeTW9YGa+HkCOzNAxYh3ZkoxwZk5qL9QMq00st0BH3y+lC/131dzf0qNPG+IL
lGiFcUxaw7UXf1tRGumHRF7QH6BWoGjDrNrJc/KRS9GPwaP1U+PAf5RJ7u6/UorC
QdZOpf0rqy8rTOeMXBNwnaQGZX0jfPysHHDkv/Um5ltueWtLaRo5rcvOzSsO7UhA
MCOgqNnDdDbq4m9YR+CzvDs6ZMWQH/CqvFzGMt3iwMXFjz6QNGUlMOQHP32pczUD
4FwDtmijgpUomsN5MREV4qlo5N0QDMa9MRXYpS4brBkC/3TBV/tIG0yAT4qJor11
nGE3iHtMBsdmfw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:10:05 2025 by rpki-client