Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
File: JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft (raw, json)
Hash identifier: Tw/38GtFozBNlOgw9GJ+WJBETLY8Z4sYW2hxeaGdvpY=
Subject key identifier: 52:DF:9A:B1:7D:63:D5:0A:07:C2:F3:E1:E1:CB:F0:D2:15:13:07:C9
Authority key identifier: 26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F
Certificate issuer: /CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f
Certificate serial: 0197B88FFEA6C3FD9835491EC02F39732DB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
Manifest number: 047C
Signing time: Sat 28 Jun 2025 22:02:13 +0000
Manifest this update: Sat 28 Jun 2025 22:02:13 +0000
Manifest next update: Sun 29 Jun 2025 22:02:13 +0000
Files and hashes: 1: JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl (hash: 2LANxC+wBGCZg24RESS/D2FAvuLazvlwEp0RNvfQdkQ=)
2: hRPI0iSGl2IzeA7QH3Szt11HLAA.roa (hash: PPwH27Sg7uIDGa5QbdK7/mYmLXCSL9d4CnlOhCXOspw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:fe:a6:c3:fd:98:35:49:1e:c0:2f:39:73:2d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f
Validity
Not Before: Jun 28 22:02:13 2025 GMT
Not After : Jun 29 22:02:13 2025 GMT
Subject: CN=52df9ab17d63d50a07c2f3e1e1cbf0d2151307c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:19:4f:29:cf:82:c1:1e:90:1d:6c:2b:ff:bf:
3a:42:7b:a3:dc:2c:e3:ae:d1:a8:4d:7f:53:4e:31:
c9:f8:ac:03:80:bd:ae:2d:71:dc:1b:7d:b0:1d:c3:
0c:ac:ec:9a:9d:02:fd:72:c0:12:3d:b6:56:da:bb:
b6:54:a9:d1:a6:45:d6:0d:23:c3:31:ac:94:e2:1f:
34:12:da:82:94:34:21:e7:5c:a5:35:e1:9a:89:4a:
78:b5:6e:4a:3b:d9:6c:da:4f:f4:6f:0c:b8:59:f1:
57:0b:0c:37:e3:b9:e7:05:4f:b7:44:10:09:7d:2a:
06:70:87:48:53:3b:4d:f7:df:57:96:e0:35:1c:a6:
0d:f7:35:be:64:c8:5c:1c:b7:f7:11:35:39:75:76:
b9:93:8a:72:63:cc:10:80:52:be:3d:df:df:03:5e:
14:61:84:83:ae:1a:84:7c:8d:ee:2e:24:95:e1:34:
36:c6:33:78:56:45:06:19:0c:a8:c4:4f:e7:cb:3c:
57:17:60:a1:d6:53:e8:87:28:d7:d7:c8:87:c5:41:
cc:f9:3c:7f:f0:37:fe:68:99:71:4d:e3:53:e1:99:
ef:c4:c6:ad:25:e1:3e:0f:61:a4:1b:98:52:4d:f9:
54:a8:5b:2b:dd:00:8c:6e:56:f9:2a:7c:b9:7b:af:
0c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:DF:9A:B1:7D:63:D5:0A:07:C2:F3:E1:E1:CB:F0:D2:15:13:07:C9
X509v3 Authority Key Identifier:
keyid:26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:e1:31:81:a3:06:56:f7:37:2c:c1:f1:4f:aa:27:13:d7:bd:
e0:76:fc:a2:5e:c8:10:57:b8:e7:c7:28:99:57:4a:ca:c2:f4:
e3:18:5e:13:2f:65:0f:93:73:7f:bb:78:84:61:c7:e1:38:91:
28:63:13:8d:f0:b1:8d:97:f8:29:8e:a4:e8:80:83:bc:de:92:
b8:34:76:05:89:c8:af:f4:e4:8a:5a:87:a5:c4:44:a4:c6:10:
b1:de:a4:73:ef:ee:58:f3:41:7a:f8:66:ce:35:af:3d:90:47:
24:51:a7:d1:1d:7f:d9:f3:44:3e:67:f8:f9:b7:63:48:b8:71:
32:22:f0:01:63:6e:e7:78:b7:c0:ad:9c:da:d2:6f:f1:49:58:
29:8f:c3:f2:be:2d:38:51:8a:5a:49:49:d7:94:1f:2a:58:29:
ea:88:4b:f2:79:24:59:63:ff:2b:1a:ae:1a:c3:d8:fb:6b:9a:
87:b3:32:5d:3c:e2:69:ce:84:32:24:da:7f:ef:ff:c1:63:b8:
37:a2:9f:e5:89:cb:fb:b7:02:df:7e:4f:5d:1d:9e:09:53:76:
ca:16:93:25:83:d7:64:f4:37:87:f8:ba:41:04:dc:dd:fc:0e:
3f:aa:52:c0:d8:8e:bf:c8:26:0c:e0:7e:28:02:53:29:fb:07:
e0:6e:66:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4j/6mw/2YNUkewC85cy2xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjlkZDJmNGRhODg4YzI3ZDEzMGY5OWU4OGEyZTBjNTkw
YWFkMmYwHhcNMjUwNjI4MjIwMjEzWhcNMjUwNjI5MjIwMjEzWjAzMTEwLwYDVQQD
Eyg1MmRmOWFiMTdkNjNkNTBhMDdjMmYzZTFlMWNiZjBkMjE1MTMwN2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBlPKc+CwR6QHWwr/786Qnuj3Czj
rtGoTX9TTjHJ+KwDgL2uLXHcG32wHcMMrOyanQL9csASPbZW2ru2VKnRpkXWDSPD
MayU4h80EtqClDQh51ylNeGaiUp4tW5KO9ls2k/0bwy4WfFXCww347nnBU+3RBAJ
fSoGcIdIUztN999XluA1HKYN9zW+ZMhcHLf3ETU5dXa5k4pyY8wQgFK+Pd/fA14U
YYSDrhqEfI3uLiSV4TQ2xjN4VkUGGQyoxE/nyzxXF2Ch1lPohyjX18iHxUHM+Tx/
8Df+aJlxTeNT4ZnvxMatJeE+D2GkG5hSTflUqFsr3QCMblb5Kny5e68MpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFLfmrF9Y9UKB8Lz4eHL8NIVEwfJMB8GA1UdIwQY
MBaAFCZp3S9NqIjCfRMPmeiKLgxZCq0vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1uZEwwMm9pTUo5RXctWjZJb3VERmtLclM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jYWI1ODgtMzJmZC00YTZkLWEwZTIt
ZjRkMzBhNzk0M2Y2LzEvSm1uZEwwMm9pTUo5RXctWjZJb3VERmtLclM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9jYWI1ODgtMzJmZC00YTZkLWEwZTItZjRkMzBhNzk0M2Y2
LzEvSm1uZEwwMm9pTUo5RXctWjZJb3VERmtLclM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAieExgaMG
Vvc3LMHxT6onE9e94Hb8ol7IEFe458comVdKysL04xheEy9lD5Nzf7t4hGHH4TiR
KGMTjfCxjZf4KY6k6ICDvN6SuDR2BYnIr/TkilqHpcREpMYQsd6kc+/uWPNBevhm
zjWvPZBHJFGn0R1/2fNEPmf4+bdjSLhxMiLwAWNu53i3wK2c2tJv8UlYKY/D8r4t
OFGKWklJ15QfKlgp6ohL8nkkWWP/KxquGsPY+2uah7MyXTziac6EMiTaf+//wWO4
N6Kf5YnL+7cC335PXR2eCVN2yhaTJYPXZPQ3h/i6QQTc3fwOP6pSwNiOv8gmDOB+
KAJTKfsH4G5mYw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:29:45 2025 by rpki-client