Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
File: JMrM7uNf-HzWeO9qkiYs786Ekt8.mft (raw, json)
Hash identifier: BRmdFXXFzab2bLwfnO4Q/z7kAtlYqhXQLW2loFsKZgg=
Subject key identifier: 74:20:AE:18:93:DE:33:3B:4A:11:07:75:49:58:9E:E9:5E:5F:35:78
Authority key identifier: 24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF
Certificate issuer: /CN=24cacceee35ff87cd678ef6a92262cefce8492df
Certificate serial: 01984966F0AC3C9F6E723FB338774456951D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
Manifest number: 1334
Signing time: Sun 27 Jul 2025 01:02:19 +0000
Manifest this update: Sun 27 Jul 2025 01:02:19 +0000
Manifest next update: Mon 28 Jul 2025 01:02:19 +0000
Files and hashes: 1: JMrM7uNf-HzWeO9qkiYs786Ekt8.crl (hash: 8coqxWoxYJxeVAzQdd2CjcSOa3M8geCPMR3ui/H6QU8=)
2: dc8PgnhayzDZSzqf3yg7QDbNGi8.roa (hash: J+tA+61lQEEvu8m1aPgIRjodULbBtcVS6a22ypCO1hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:f0:ac:3c:9f:6e:72:3f:b3:38:77:44:56:95:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cacceee35ff87cd678ef6a92262cefce8492df
Validity
Not Before: Jul 27 01:02:19 2025 GMT
Not After : Jul 28 01:02:19 2025 GMT
Subject: CN=7420ae1893de333b4a11077549589ee95e5f3578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e0:fe:3d:ad:a5:42:cb:57:dc:79:f3:d4:8e:
09:b5:15:87:21:20:ca:5d:af:82:31:2c:a1:48:e6:
f2:dc:f1:b7:19:d7:09:8f:05:0e:5e:df:e0:de:6e:
77:2e:e2:62:8d:ee:ff:dd:71:9d:fa:ee:23:f4:e0:
60:75:57:b7:35:76:c0:2d:a7:31:49:8a:4e:ae:b2:
bd:c4:8a:18:d2:0e:f0:aa:4e:48:36:a7:21:a8:6c:
0b:5f:5a:58:e1:74:17:db:80:ef:94:85:dd:29:ea:
05:ba:69:85:7e:7c:07:fa:27:da:5a:6a:6e:9d:e2:
af:23:92:f2:0e:5e:b0:95:10:ac:6e:74:04:ee:ec:
19:bc:6d:7a:79:bb:d5:ae:36:e7:01:b2:9a:a4:8a:
d4:92:ca:2d:9f:a0:9d:b1:af:86:4f:9b:8f:ee:7e:
81:20:4d:55:d2:5c:0c:44:4a:54:6f:4e:7b:ff:52:
8a:ac:d6:4c:cd:b9:60:d2:ad:7c:c6:55:75:d0:e5:
50:f3:5f:d9:52:0f:58:9a:cb:d6:de:4e:72:46:0d:
63:bd:b9:61:3b:be:88:00:f5:02:f4:34:02:bd:16:
5d:d1:e9:a6:2e:75:da:64:1f:55:df:2b:6b:c4:e0:
b8:98:83:b7:8b:20:b3:53:80:bf:ff:db:52:28:bc:
74:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:20:AE:18:93:DE:33:3B:4A:11:07:75:49:58:9E:E9:5E:5F:35:78
X509v3 Authority Key Identifier:
keyid:24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:81:44:79:1b:52:6d:42:6e:00:51:5b:e9:99:33:61:f5:8c:
b7:64:52:94:4b:1c:b5:63:8d:d2:9f:b8:3b:dd:08:1e:14:40:
ad:3f:a7:67:aa:89:b5:1a:ba:f2:74:ce:23:6c:0d:b1:e7:5b:
43:5e:07:8a:34:eb:6c:89:1e:53:e9:09:01:f6:be:3d:52:94:
1c:f9:11:c7:71:f4:9d:40:ca:92:d0:9d:28:78:21:6d:b6:39:
eb:c7:af:ad:26:84:97:72:d6:2f:12:9c:ed:92:f1:46:93:b2:
79:5b:9b:95:2b:1b:7f:77:2e:04:47:98:56:91:e1:49:b4:b7:
85:62:fa:64:62:09:b3:23:75:c5:e7:d4:d0:76:3e:51:2a:6e:
a9:26:be:5d:8e:ab:7d:08:1d:1b:48:08:c2:ac:4c:33:f2:3c:
ba:a2:b1:5c:36:5d:39:d8:85:67:8a:6f:88:8e:73:9d:69:f1:
ef:ce:fe:b6:e4:63:92:39:34:d5:05:ad:a7:45:2f:9e:59:14:
41:59:c7:9c:89:55:04:53:06:27:c8:46:81:79:97:8c:82:a2:
68:3c:7f:42:c9:33:87:56:f7:51:10:7e:3c:c6:bc:e2:17:de:
29:36:d2:e8:f8:4e:9d:d7:ff:cd:3b:81:9b:1f:65:a5:fb:b6:
2b:5f:2e:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZvCsPJ9ucj+zOHdEVpUdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0Y2FjY2VlZTM1ZmY4N2NkNjc4ZWY2YTkyMjYyY2VmY2U4
NDkyZGYwHhcNMjUwNzI3MDEwMjE5WhcNMjUwNzI4MDEwMjE5WjAzMTEwLwYDVQQD
Eyg3NDIwYWUxODkzZGUzMzNiNGExMTA3NzU0OTU4OWVlOTVlNWYzNTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOD+Pa2lQstX3Hnz1I4JtRWHISDK
Xa+CMSyhSOby3PG3GdcJjwUOXt/g3m53LuJije7/3XGd+u4j9OBgdVe3NXbALacx
SYpOrrK9xIoY0g7wqk5INqchqGwLX1pY4XQX24DvlIXdKeoFummFfnwH+ifaWmpu
neKvI5LyDl6wlRCsbnQE7uwZvG16ebvVrjbnAbKapIrUksotn6Cdsa+GT5uP7n6B
IE1V0lwMREpUb057/1KKrNZMzblg0q18xlV10OVQ81/ZUg9YmsvW3k5yRg1jvblh
O76IAPUC9DQCvRZd0emmLnXaZB9V3ytrxOC4mIO3iyCzU4C//9tSKLx0HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQgrhiT3jM7ShEHdUlYnuleXzV4MB8GA1UdIwQY
MBaAFCTKzO7jX/h81njvapImLO/OhJLfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk1yTTd1TmYtSHpXZU85cWtpWXM3ODZFa3Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy82NjcwZjktNDE4ZS00Mjc1LTgwMDAt
YTI5ZWIxMzllNzlkLzEvSk1yTTd1TmYtSHpXZU85cWtpWXM3ODZFa3Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy82NjcwZjktNDE4ZS00Mjc1LTgwMDAtYTI5ZWIxMzllNzlk
LzEvSk1yTTd1TmYtSHpXZU85cWtpWXM3ODZFa3Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMYFEeRtS
bUJuAFFb6ZkzYfWMt2RSlEsctWON0p+4O90IHhRArT+nZ6qJtRq68nTOI2wNsedb
Q14HijTrbIkeU+kJAfa+PVKUHPkRx3H0nUDKktCdKHghbbY568evrSaEl3LWLxKc
7ZLxRpOyeVublSsbf3cuBEeYVpHhSbS3hWL6ZGIJsyN1xefU0HY+USpuqSa+XY6r
fQgdG0gIwqxMM/I8uqKxXDZdOdiFZ4pviI5znWnx787+tuRjkjk01QWtp0UvnlkU
QVnHnIlVBFMGJ8hGgXmXjIKiaDx/Qskzh1b3URB+PMa84hfeKTbS6PhOndf/zTuB
mx9lpfu2K18u1g==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:32:35 2025 by rpki-client