Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.mft
File: J84emmUiYWqzCw8SPgnTBagjBK8.mft (raw, json)
Hash identifier: +httmTi/rkKP6gsCg/ytUmcgUPsdSib3/D48BRFj3LM=
Subject key identifier: 80:25:7A:A4:7F:CD:3B:EF:E9:FF:7B:70:0C:FE:FB:BC:33:12:B6:91
Authority key identifier: 27:CE:1E:9A:65:22:61:6A:B3:0B:0F:12:3E:09:D3:05:A8:23:04:AF
Certificate issuer: /CN=27ce1e9a6522616ab30b0f123e09d305a82304af
Certificate serial: 0197B632F491954B910FC2C8A3D0C82DD6E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J84emmUiYWqzCw8SPgnTBagjBK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.mft
Manifest number: 15BB
Signing time: Sat 28 Jun 2025 11:01:22 +0000
Manifest this update: Sat 28 Jun 2025 11:01:22 +0000
Manifest next update: Sun 29 Jun 2025 11:01:22 +0000
Files and hashes: 1: J84emmUiYWqzCw8SPgnTBagjBK8.crl (hash: 2xcj6n/547p5c81EdSnh5i1P2jbC1PM+H7+Sfo34Bm0=)
2: WgYDhL0i6U8cqNQpr57kES37q38.roa (hash: RKIGt1CKlAHIm7PDdsvYymoW20pcRCPFEmrAdn3vZno=)
3: xfeGCbXD-YF0qFrPXVL_VBgsViY.roa (hash: +QvSz3wl8pHqddA2o6rF3CbvD6JrTHLlFmQPhouhbbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/J84emmUiYWqzCw8SPgnTBagjBK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:f4:91:95:4b:91:0f:c2:c8:a3:d0:c8:2d:d6:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ce1e9a6522616ab30b0f123e09d305a82304af
Validity
Not Before: Jun 28 11:01:22 2025 GMT
Not After : Jun 29 11:01:22 2025 GMT
Subject: CN=80257aa47fcd3befe9ff7b700cfefbbc3312b691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7e:8c:1e:41:59:e6:a1:c9:1a:7c:db:0c:66:
0f:43:5f:82:2d:26:34:fe:53:bf:e1:c1:b8:16:ba:
5d:cd:d8:13:e5:35:e4:42:71:33:cc:fe:e6:fb:e2:
85:11:e9:b7:c4:76:85:c0:0e:bc:27:ab:9b:fd:68:
11:6e:57:09:1f:2f:2a:e3:db:26:a0:7a:55:3f:52:
bb:17:69:21:9f:91:e2:66:21:ad:32:9b:e1:92:09:
aa:19:3b:68:9f:5b:db:6d:e9:0c:d3:cb:1a:8a:61:
09:d3:49:fa:d2:5a:e5:40:55:e9:e1:62:9f:b2:6f:
70:72:14:3c:88:a8:bf:33:19:92:6a:67:9b:fa:7a:
c1:7f:f2:c7:d8:68:bb:32:ec:bc:76:c1:05:06:9a:
82:29:68:a5:e3:56:eb:ec:25:11:73:56:0d:b1:1b:
76:f8:57:5c:8b:d9:8a:47:8b:42:25:90:26:50:22:
4d:69:51:31:79:35:a6:00:4c:81:45:4d:58:94:e2:
27:19:ac:95:30:15:7e:c3:e1:22:ed:d8:07:e2:8e:
59:bf:9c:b2:f8:8a:67:67:9d:ca:9c:48:fe:0a:9a:
49:35:bc:b8:05:09:b1:40:47:40:a2:cf:0a:2f:36:
3c:0a:e7:5e:fc:69:5c:8e:f0:53:3a:29:3c:39:32:
fa:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:25:7A:A4:7F:CD:3B:EF:E9:FF:7B:70:0C:FE:FB:BC:33:12:B6:91
X509v3 Authority Key Identifier:
keyid:27:CE:1E:9A:65:22:61:6A:B3:0B:0F:12:3E:09:D3:05:A8:23:04:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J84emmUiYWqzCw8SPgnTBagjBK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:7b:af:6c:ce:34:a7:08:79:5f:b9:06:24:93:84:cd:a1:81:
3a:b1:e2:31:60:ef:3b:ca:93:68:96:c8:a8:ee:55:f2:bf:bf:
f1:be:85:b0:7c:f5:7b:ab:e2:e9:81:56:80:41:7e:fd:36:d3:
6f:b1:08:65:5d:fd:aa:13:21:99:5c:54:03:15:bb:ae:a9:74:
c2:8a:ba:1a:bd:e4:c9:96:38:09:61:1b:77:ed:43:dd:5d:56:
cb:ca:8f:3c:d5:3f:0b:d0:94:d0:3d:22:e4:22:15:96:56:00:
1a:a0:ca:c9:6c:0b:b5:9e:c6:4d:9a:04:ee:35:9a:78:0a:a6:
37:91:e7:10:55:0f:5d:7a:b3:8c:50:4f:8b:6e:41:38:63:c2:
7f:32:97:4c:78:1d:82:63:4e:a2:a3:2f:ed:5f:1d:55:5a:a7:
5d:6a:33:65:ea:26:19:36:80:17:66:45:63:88:84:47:3e:9f:
35:c0:8c:69:47:38:dc:53:e6:26:e6:a4:ca:52:4f:37:13:bb:
34:fe:c5:33:66:a4:9e:af:3e:60:93:82:1a:b8:4c:ff:36:10:
ad:b8:4e:98:ff:65:ef:4b:36:b8:d3:25:69:10:6e:9c:a7:14:
e5:8d:33:4f:a0:0b:81:41:7c:58:3f:b6:7a:b5:e6:9d:fd:34:
33:60:ba:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2MvSRlUuRD8LIo9DILdboMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3Y2UxZTlhNjUyMjYxNmFiMzBiMGYxMjNlMDlkMzA1YTgy
MzA0YWYwHhcNMjUwNjI4MTEwMTIyWhcNMjUwNjI5MTEwMTIyWjAzMTEwLwYDVQQD
Eyg4MDI1N2FhNDdmY2QzYmVmZTlmZjdiNzAwY2ZlZmJiYzMzMTJiNjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArH6MHkFZ5qHJGnzbDGYPQ1+CLSY0
/lO/4cG4FrpdzdgT5TXkQnEzzP7m++KFEem3xHaFwA68J6ub/WgRblcJHy8q49sm
oHpVP1K7F2khn5HiZiGtMpvhkgmqGTton1vbbekM08saimEJ00n60lrlQFXp4WKf
sm9wchQ8iKi/MxmSameb+nrBf/LH2Gi7Muy8dsEFBpqCKWil41br7CURc1YNsRt2
+Fdci9mKR4tCJZAmUCJNaVExeTWmAEyBRU1YlOInGayVMBV+w+Ei7dgH4o5Zv5yy
+IpnZ53KnEj+CppJNby4BQmxQEdAos8KLzY8Cude/GlcjvBTOik8OTL6nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIAleqR/zTvv6f97cAz++7wzEraRMB8GA1UdIwQY
MBaAFCfOHpplImFqswsPEj4J0wWoIwSvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjg0ZW1tVWlZV3F6Q3c4U1BnblRCYWdqQks4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85ZTIyYTItOTM2NS00OTU2LThlNjYt
Y2U0ZjI1YWNlMjUyLzEvSjg0ZW1tVWlZV3F6Q3c4U1BnblRCYWdqQks4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC85ZTIyYTItOTM2NS00OTU2LThlNjYtY2U0ZjI1YWNlMjUy
LzEvSjg0ZW1tVWlZV3F6Q3c4U1BnblRCYWdqQks4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP3uvbM40
pwh5X7kGJJOEzaGBOrHiMWDvO8qTaJbIqO5V8r+/8b6FsHz1e6vi6YFWgEF+/TbT
b7EIZV39qhMhmVxUAxW7rql0woq6Gr3kyZY4CWEbd+1D3V1Wy8qPPNU/C9CU0D0i
5CIVllYAGqDKyWwLtZ7GTZoE7jWaeAqmN5HnEFUPXXqzjFBPi25BOGPCfzKXTHgd
gmNOoqMv7V8dVVqnXWozZeomGTaAF2ZFY4iERz6fNcCMaUc43FPmJuakylJPNxO7
NP7FM2aknq8+YJOCGrhM/zYQrbhOmP9l70s2uNMlaRBunKcU5Y0zT6ALgUF8WD+2
erXmnf00M2C6ag==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:49:22 2025 by rpki-client