Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
File: JQ599DyC0SChPTyGXx8G9JZEseE.mft (raw, json)
Hash identifier: j4lTywI8gkGxO2j6vC6Y9hVYILGCBMO3rFICMkZmj7U=
Subject key identifier: CA:B7:61:22:83:B8:F3:E6:6C:2D:40:9D:9D:16:EB:F1:DC:5A:52:5C
Authority key identifier: 25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1
Certificate issuer: /CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
Certificate serial: 019854566EC4875284F7131E534DA014EFBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
Manifest number: 0DEC
Signing time: Tue 29 Jul 2025 04:00:07 +0000
Manifest this update: Tue 29 Jul 2025 04:00:07 +0000
Manifest next update: Wed 30 Jul 2025 04:00:07 +0000
Files and hashes: 1: JQ599DyC0SChPTyGXx8G9JZEseE.crl (hash: biUoodonpSML55421lcmA9HuwJ+YXIOgvb7Wan/BM80=)
2: NxEFYabQ1De2D9MRDvZOgIu0R4g.roa (hash: lAojMYDzIDb75W7SBnvnLzGQZua9BCv398UHDwqthXo=)
3: uBhMU8FaL6yzEgI8KXo0amRkPt0.roa (hash: rZaJZ+vs9poyZNeTB4YM94eOiwwWluQ2wWx8JrMOGHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 04:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:56:6e:c4:87:52:84:f7:13:1e:53:4d:a0:14:ef:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
Validity
Not Before: Jul 29 04:00:07 2025 GMT
Not After : Jul 30 04:00:07 2025 GMT
Subject: CN=cab7612283b8f3e66c2d409d9d16ebf1dc5a525c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d6:0a:7c:a1:be:54:16:5b:c1:25:ef:37:30:
26:03:b9:31:88:a5:85:d3:5d:25:ce:0f:0e:70:36:
e0:b6:0a:5d:f9:66:b6:66:30:a5:8f:a5:a8:52:26:
c6:de:11:08:a9:a2:5f:19:e4:f9:fe:df:e8:c5:5e:
52:ee:70:db:c7:b9:41:3e:52:ec:c6:97:2e:6e:76:
25:9a:14:bc:b0:9f:76:c9:73:3e:11:48:5f:6f:dc:
9f:3c:1d:c8:1a:ef:e0:42:1f:ed:56:68:3e:1e:a0:
29:b4:08:13:d4:97:92:8e:7c:a9:16:8c:17:7b:e1:
a8:a6:e2:f7:b1:4e:f0:66:b3:f5:f4:be:1a:49:8e:
3f:55:6a:d5:26:09:80:45:17:c8:ed:d1:e8:19:7f:
f1:03:ff:19:a5:00:28:d7:5b:8a:54:1f:3b:3e:48:
54:42:b4:de:a3:32:a2:48:b5:04:eb:47:95:c6:33:
b1:ef:17:b4:d2:ed:5c:25:69:f6:8c:fd:c1:9b:12:
18:10:ad:39:98:08:6d:25:c9:af:a2:15:99:c6:82:
83:5f:a0:e8:b7:a3:70:bf:d6:63:e0:21:8c:69:45:
d4:6c:c5:e4:e9:a1:5d:0a:52:68:43:fd:db:07:af:
4b:34:0e:dd:7c:11:48:8d:36:44:4f:31:7c:2c:57:
4d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B7:61:22:83:B8:F3:E6:6C:2D:40:9D:9D:16:EB:F1:DC:5A:52:5C
X509v3 Authority Key Identifier:
keyid:25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:76:f2:31:6d:d8:cd:7e:44:72:b8:3b:3b:38:9e:54:9e:e7:
aa:b4:3c:6e:4c:8c:a7:dc:e7:16:02:93:21:a6:91:07:73:ee:
95:1a:27:77:4b:ea:aa:d9:6b:27:58:f3:e4:c3:f1:a6:b2:c8:
46:bf:d0:ae:ce:03:62:6e:19:b6:b3:d8:d3:66:3f:c0:a9:b9:
56:9c:40:47:2d:03:96:ff:39:76:73:1d:86:47:98:e9:17:f0:
23:9a:10:67:6a:a6:f6:8c:b5:5f:8b:20:49:87:aa:a3:d8:08:
5d:14:71:f8:79:ac:2c:df:50:4e:85:c9:66:18:b7:d5:a5:d8:
95:01:6a:08:cb:6e:56:d3:24:f5:fb:6b:b4:0b:13:64:97:a2:
43:35:5b:6a:5e:da:05:a5:46:bc:d0:65:06:1f:31:ed:77:b9:
0b:22:38:cd:b4:14:63:9b:92:44:c3:d4:98:61:d3:24:7c:0c:
67:87:ab:5a:a4:ae:38:72:d1:b6:8e:ea:31:51:88:a1:57:3e:
83:98:c8:9c:37:24:35:a8:3f:72:8c:4c:de:e9:a0:7f:c9:2d:
e6:33:3d:bc:75:cf:e5:b7:22:9a:8c:d5:83:51:3e:91:82:c3:
8c:7e:13:ea:3c:a7:27:fa:8e:ec:d3:86:a9:50:87:40:27:59:
e5:9d:34:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhUVm7Eh1KE9xMeU02gFO++MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MGU3ZGY0M2M4MmQxMjBhMTNkM2M4NjVmMWYwNmY0OTY0
NGIxZTEwHhcNMjUwNzI5MDQwMDA3WhcNMjUwNzMwMDQwMDA3WjAzMTEwLwYDVQQD
EyhjYWI3NjEyMjgzYjhmM2U2NmMyZDQwOWQ5ZDE2ZWJmMWRjNWE1MjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdYKfKG+VBZbwSXvNzAmA7kxiKWF
010lzg8OcDbgtgpd+Wa2ZjClj6WoUibG3hEIqaJfGeT5/t/oxV5S7nDbx7lBPlLs
xpcubnYlmhS8sJ92yXM+EUhfb9yfPB3IGu/gQh/tVmg+HqAptAgT1JeSjnypFowX
e+GopuL3sU7wZrP19L4aSY4/VWrVJgmARRfI7dHoGX/xA/8ZpQAo11uKVB87PkhU
QrTeozKiSLUE60eVxjOx7xe00u1cJWn2jP3BmxIYEK05mAhtJcmvohWZxoKDX6Do
t6Nwv9Zj4CGMaUXUbMXk6aFdClJoQ/3bB69LNA7dfBFIjTZETzF8LFdNWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMq3YSKDuPPmbC1AnZ0W6/HcWlJcMB8GA1UdIwQY
MBaAFCUOffQ8gtEgoT08hl8fBvSWRLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlE1OTlEeUMwU0NoUFR5R1h4OEc5SlpFc2VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS83ZDJlNjQtMTBkOS00YTRlLWE0YzYt
NGE5YmIyZmU3MzMxLzEvSlE1OTlEeUMwU0NoUFR5R1h4OEc5SlpFc2VFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS83ZDJlNjQtMTBkOS00YTRlLWE0YzYtNGE5YmIyZmU3MzMx
LzEvSlE1OTlEeUMwU0NoUFR5R1h4OEc5SlpFc2VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHXbyMW3Y
zX5Ecrg7OzieVJ7nqrQ8bkyMp9znFgKTIaaRB3PulRond0vqqtlrJ1jz5MPxprLI
Rr/Qrs4DYm4ZtrPY02Y/wKm5VpxARy0Dlv85dnMdhkeY6RfwI5oQZ2qm9oy1X4sg
SYeqo9gIXRRx+HmsLN9QToXJZhi31aXYlQFqCMtuVtMk9ftrtAsTZJeiQzVbal7a
BaVGvNBlBh8x7Xe5CyI4zbQUY5uSRMPUmGHTJHwMZ4erWqSuOHLRto7qMVGIoVc+
g5jInDckNag/coxM3umgf8kt5jM9vHXP5bcimozVg1E+kYLDjH4T6jynJ/qO7NOG
qVCHQCdZ5Z00qg==
-----END CERTIFICATE-----
Generated at Tue Jul 29 10:52:11 2025 by rpki-client