Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
File: JwKaNvwMyi4KjQRfAi38gxpRcwg.mft (raw, json)
Hash identifier: 5ldObK/nsfpp4XvA9/4GKVRUBhos1mR9PPDKkup7a4c=
Subject key identifier: 34:1D:0C:52:60:AC:A0:38:DE:29:AA:D1:68:F0:AA:7D:47:42:22:88
Authority key identifier: 27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08
Certificate issuer: /CN=27029a36fc0cca2e0a8d045f022dfc831a517308
Certificate serial: 01974D7C376713805D528845F43AE0BC684B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
Manifest number: 14C6
Signing time: Sun 08 Jun 2025 03:01:15 +0000
Manifest this update: Sun 08 Jun 2025 03:01:15 +0000
Manifest next update: Mon 09 Jun 2025 03:01:15 +0000
Files and hashes: 1: JwKaNvwMyi4KjQRfAi38gxpRcwg.crl (hash: TL/C1+HDb8P69zQtsv++r3dnWAR5oWKQ+DgzUtH7+Rs=)
2: gC97AQKQbgiW9Krq-_q2apqCHmc.roa (hash: IvEX/4r+S7SQha7hWBWTDBpux0NlV5BKH8odMNrPeJQ=)
3: g_n97b-ezr2pU8M_arTz7b0GI28.roa (hash: f/1b/CBZ/cmdffSZ/BO1Ow8CLoficDzJ57IxUPZ8+ZA=)
4: zhoAHh4wgcaK6VZRodYWCuN75nI.roa (hash: kV8XnwO8Zz8GVVhAZVUdjX5IeFTvNwptdgYC4YvJ97E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7c:37:67:13:80:5d:52:88:45:f4:3a:e0:bc:68:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27029a36fc0cca2e0a8d045f022dfc831a517308
Validity
Not Before: Jun 8 03:01:15 2025 GMT
Not After : Jun 9 03:01:15 2025 GMT
Subject: CN=341d0c5260aca038de29aad168f0aa7d47422288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ee:7d:d1:17:a0:39:76:28:57:9d:d5:c4:40:
9a:ec:3f:f9:99:71:a3:1a:06:2f:e1:a8:92:e0:ca:
3f:3e:f8:ab:ad:80:5c:18:8e:89:13:a3:cd:2a:fc:
ca:e4:04:b4:95:b3:25:dd:e7:f6:ae:bc:17:52:73:
6f:16:ab:f7:5c:ed:a6:c7:d8:63:c3:5d:01:89:67:
88:cf:1f:f3:40:44:60:f6:b3:af:c5:2b:f2:86:c3:
28:cd:a3:a7:3c:a1:80:a2:99:24:db:30:9f:cd:1d:
93:8b:9c:c5:26:79:ed:45:e2:a6:cd:9e:16:32:ff:
cd:ed:c4:d3:cf:b8:3a:fe:e4:97:ee:52:8e:af:3c:
65:1a:f6:2d:29:c1:53:5a:b3:e8:06:26:ee:0e:6e:
9c:c4:ca:b7:b7:e2:0a:81:17:e6:8e:ab:b7:0a:57:
87:68:23:d6:d0:56:ca:a8:6f:80:7b:ec:79:c4:c9:
62:9c:23:73:72:db:05:e2:94:84:f7:96:50:73:27:
95:79:a4:fd:e2:3f:3f:19:2c:63:05:3b:d7:3e:b5:
3b:7e:aa:bd:67:0f:83:50:30:a9:dd:28:75:2c:24:
de:6b:5e:d6:02:5d:21:a7:e5:75:54:c2:65:93:2b:
b2:f1:92:79:a4:ac:3c:e6:91:91:b5:1b:c3:50:09:
d8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:1D:0C:52:60:AC:A0:38:DE:29:AA:D1:68:F0:AA:7D:47:42:22:88
X509v3 Authority Key Identifier:
keyid:27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:92:0f:e2:f8:8f:e9:67:ce:f4:47:d0:9a:37:0c:b1:63:29:
5b:ea:2f:f4:67:84:78:4b:3c:d6:9f:39:f1:49:04:24:f3:ba:
a9:42:87:03:f3:f6:df:40:43:fb:74:58:88:0b:95:f2:bb:ea:
1f:ed:a1:35:9e:fa:76:58:a5:a8:dc:a5:83:39:fe:95:b5:5a:
62:bc:f0:05:22:7e:13:c7:4a:00:2a:ad:c6:14:d4:0d:2d:90:
90:fc:58:9e:bb:50:a3:16:9f:d6:a7:99:e6:3d:58:13:53:85:
36:2a:44:59:cd:82:11:8b:26:e5:04:38:7b:a4:79:9f:4b:ec:
53:66:08:3e:c6:35:01:3c:1c:08:18:79:5b:8f:bb:4e:68:b1:
a9:0f:57:24:72:da:2d:b7:5d:8e:51:7b:da:7b:a2:f7:ba:ec:
1e:44:ea:5c:dc:d4:4b:6a:87:01:ee:6e:11:06:6d:85:f8:2e:
c2:34:f4:57:0c:b8:b1:b4:45:b5:14:77:cd:a6:41:c5:67:e3:
f4:b7:bb:a3:da:a3:0c:59:77:27:fa:15:5c:1f:73:18:89:77:
89:4c:d0:a4:b2:d2:5e:99:70:fe:55:60:8d:a2:ec:21:a7:70:
e9:b3:72:37:e0:0f:27:f7:6e:07:e2:0d:87:6b:69:de:78:8a:
e1:22:ec:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNfDdnE4BdUohF9DrgvGhLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MDI5YTM2ZmMwY2NhMmUwYThkMDQ1ZjAyMmRmYzgzMWE1
MTczMDgwHhcNMjUwNjA4MDMwMTE1WhcNMjUwNjA5MDMwMTE1WjAzMTEwLwYDVQQD
EygzNDFkMGM1MjYwYWNhMDM4ZGUyOWFhZDE2OGYwYWE3ZDQ3NDIyMjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmO590RegOXYoV53VxECa7D/5mXGj
GgYv4aiS4Mo/PvirrYBcGI6JE6PNKvzK5AS0lbMl3ef2rrwXUnNvFqv3XO2mx9hj
w10BiWeIzx/zQERg9rOvxSvyhsMozaOnPKGAopkk2zCfzR2Ti5zFJnntReKmzZ4W
Mv/N7cTTz7g6/uSX7lKOrzxlGvYtKcFTWrPoBibuDm6cxMq3t+IKgRfmjqu3CleH
aCPW0FbKqG+Ae+x5xMlinCNzctsF4pSE95ZQcyeVeaT94j8/GSxjBTvXPrU7fqq9
Zw+DUDCp3Sh1LCTea17WAl0hp+V1VMJlkyuy8ZJ5pKw85pGRtRvDUAnYaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQdDFJgrKA43imq0Wjwqn1HQiKIMB8GA1UdIwQY
MBaAFCcCmjb8DMouCo0EXwIt/IMaUXMIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSndLYU52d015aTRLalFSZkFpMzhneHBSY3dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS81M2JiMjMtZGZhOC00NzkyLWIzMTct
NTBkMGE1MzIzNjQxLzEvSndLYU52d015aTRLalFSZkFpMzhneHBSY3dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS81M2JiMjMtZGZhOC00NzkyLWIzMTctNTBkMGE1MzIzNjQx
LzEvSndLYU52d015aTRLalFSZkFpMzhneHBSY3dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiZIP4viP
6WfO9EfQmjcMsWMpW+ov9GeEeEs81p858UkEJPO6qUKHA/P230BD+3RYiAuV8rvq
H+2hNZ76dlilqNylgzn+lbVaYrzwBSJ+E8dKACqtxhTUDS2QkPxYnrtQoxaf1qeZ
5j1YE1OFNipEWc2CEYsm5QQ4e6R5n0vsU2YIPsY1ATwcCBh5W4+7TmixqQ9XJHLa
LbddjlF72nui97rsHkTqXNzUS2qHAe5uEQZthfguwjT0Vwy4sbRFtRR3zaZBxWfj
9Le7o9qjDFl3J/oVXB9zGIl3iUzQpLLSXplw/lVgjaLsIadw6bNyN+APJ/duB+IN
h2tp3niK4SLsfA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:48:29 2025 by rpki-client