Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
File: jSgZicO25Y_clTTufrPiYNHYd0k.mft (raw, json)
Hash identifier: EgSmAPxG9F1o98TSgdxFfkhRqr0U77SSk0+buvddAFE=
Subject key identifier: 56:BA:87:16:8A:DB:9C:E4:65:0D:1F:50:E7:FB:CB:86:7F:10:EE:02
Authority key identifier: 8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
Certificate issuer: /CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Certificate serial: 01974A0CD40C1006B352430CCB1733A343A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
Manifest number: 12EA
Signing time: Sat 07 Jun 2025 11:00:44 +0000
Manifest this update: Sat 07 Jun 2025 11:00:44 +0000
Manifest next update: Sun 08 Jun 2025 11:00:44 +0000
Files and hashes: 1: B0VOGqgWvciGn9lsPPPNtDMM_cE.roa (hash: H0LM3F0MCvrmnF+41NjCVulojTYy2eQ3Qd3O1jXQklA=)
2: CC2hAsaTX94OsKPmChtfbXTcFNE.roa (hash: l5IYiZcm9PSDWMsJtwhQfhiyJDNyjG8wrsa+ZBwNb+0=)
3: IKFKCW5Jsufqo1w6BMJo3NVNRtU.roa (hash: rOrP7u2w0rkDr+dN4bu5dl5k+6reLBo13wIVMJJiIoo=)
4: jSgZicO25Y_clTTufrPiYNHYd0k.crl (hash: PE2sxleTpeXbOs1iOJVHx0DX8n3gjd4lqDw7ENh8RNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:d4:0c:10:06:b3:52:43:0c:cb:17:33:a3:43:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Validity
Not Before: Jun 7 11:00:44 2025 GMT
Not After : Jun 8 11:00:44 2025 GMT
Subject: CN=56ba87168adb9ce4650d1f50e7fbcb867f10ee02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e2:f3:46:4c:40:72:6c:eb:64:64:ce:6e:dc:
68:cb:dd:81:73:be:60:86:76:c7:dd:d4:8a:a5:ec:
42:f2:07:8b:e4:72:41:36:f6:9a:82:c0:13:18:17:
3b:3b:0c:41:3c:82:9c:63:28:c4:cf:b2:9a:0e:90:
2c:2f:d7:8e:27:68:5d:f1:4b:71:0c:03:31:11:23:
94:56:11:51:e6:e5:b1:5c:ff:61:1d:eb:7a:6c:00:
a2:02:5a:ac:23:3c:53:38:8f:0e:32:51:67:87:ad:
3e:d1:6e:db:a3:ad:dc:f3:b0:bc:c7:d0:e7:4b:d5:
6e:59:35:49:4c:82:0a:c2:84:1d:9f:6d:27:1a:22:
8f:8c:ab:04:c6:28:75:c3:3f:53:72:3c:fa:9d:de:
7b:2b:7d:f1:34:69:d6:88:0b:2e:20:0c:c3:fc:1a:
c6:a8:3c:38:01:58:d7:28:f3:9d:af:0e:e1:06:9e:
4a:ae:b8:c7:fd:14:72:8c:f0:b1:58:a2:04:78:77:
98:b2:ed:9b:9a:71:32:a1:04:de:8b:32:20:fc:25:
72:b3:84:74:c8:09:54:6d:8a:72:97:73:23:ef:42:
52:78:67:cf:0b:46:41:1d:68:a5:73:10:82:4c:8e:
55:57:db:ba:75:ac:64:22:8c:91:f3:21:ec:ff:06:
46:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BA:87:16:8A:DB:9C:E4:65:0D:1F:50:E7:FB:CB:86:7F:10:EE:02
X509v3 Authority Key Identifier:
keyid:8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ff:66:1b:78:4a:89:07:ef:ca:84:bb:9c:e5:b9:ab:ef:63:
a3:8d:19:03:3c:ec:38:b3:80:95:26:5f:79:fd:85:dc:7c:bc:
0e:1c:62:6d:c3:e9:d0:49:26:97:59:cd:c7:7b:fc:a1:16:07:
3a:18:7a:fb:06:4e:05:04:82:d7:f8:e2:5f:f3:05:1c:2a:2a:
c1:5a:a2:5d:9e:23:5b:ac:f8:c0:ed:cd:76:31:15:75:5f:c8:
28:73:04:52:07:8e:76:be:7f:ee:57:b8:f1:44:cb:56:42:37:
0c:db:5d:24:a1:f6:85:ae:1a:6d:94:22:18:0f:ef:d9:0d:6e:
62:e3:dc:05:a7:df:0a:1b:c5:55:21:0d:ab:91:34:a8:aa:18:
cc:5d:11:5f:91:e4:1a:0a:f2:d5:b4:d6:ad:af:d0:48:7c:69:
6f:fd:20:78:7d:e6:6a:4e:2a:f6:8a:f0:cd:9f:6b:9e:cc:73:
40:16:0d:0f:7b:e9:8c:1b:45:4f:8d:9c:b1:45:6b:5d:b2:0e:
b6:8e:8e:56:03:a1:cb:28:e2:c8:1b:30:17:ff:a5:ee:fd:a4:
5a:e5:50:38:03:c1:7f:50:c0:c0:45:7a:98:49:26:9c:e6:39:
ce:99:6d:13:4e:94:ef:ca:ea:f1:7e:d7:67:20:9a:da:ae:7d:
55:1a:27:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKDNQMEAazUkMMyxczo0OoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMjgxOTg5YzNiNmU1OGZkYzk1MzRlZTdlYjNlMjYwZDFk
ODc3NDkwHhcNMjUwNjA3MTEwMDQ0WhcNMjUwNjA4MTEwMDQ0WjAzMTEwLwYDVQQD
Eyg1NmJhODcxNjhhZGI5Y2U0NjUwZDFmNTBlN2ZiY2I4NjdmMTBlZTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+LzRkxAcmzrZGTObtxoy92Bc75g
hnbH3dSKpexC8geL5HJBNvaagsATGBc7OwxBPIKcYyjEz7KaDpAsL9eOJ2hd8Utx
DAMxESOUVhFR5uWxXP9hHet6bACiAlqsIzxTOI8OMlFnh60+0W7bo63c87C8x9Dn
S9VuWTVJTIIKwoQdn20nGiKPjKsExih1wz9Tcjz6nd57K33xNGnWiAsuIAzD/BrG
qDw4AVjXKPOdrw7hBp5KrrjH/RRyjPCxWKIEeHeYsu2bmnEyoQTeizIg/CVys4R0
yAlUbYpyl3Mj70JSeGfPC0ZBHWilcxCCTI5VV9u6daxkIoyR8yHs/wZGSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFa6hxaK25zkZQ0fUOf7y4Z/EO4CMB8GA1UdIwQY
MBaAFI0oGYnDtuWP3JU07n6z4mDR2HdJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalNnWmljTzI1WV9jbFRUdWZyUGlZTkhZZDBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8zYmFlODYtYThmYy00M2U2LTgwMWEt
YmNhODBlNDdjNTczLzEvalNnWmljTzI1WV9jbFRUdWZyUGlZTkhZZDBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8zYmFlODYtYThmYy00M2U2LTgwMWEtYmNhODBlNDdjNTcz
LzEvalNnWmljTzI1WV9jbFRUdWZyUGlZTkhZZDBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQv9mG3hK
iQfvyoS7nOW5q+9jo40ZAzzsOLOAlSZfef2F3Hy8DhxibcPp0Ekml1nNx3v8oRYH
Ohh6+wZOBQSC1/jiX/MFHCoqwVqiXZ4jW6z4wO3NdjEVdV/IKHMEUgeOdr5/7le4
8UTLVkI3DNtdJKH2ha4abZQiGA/v2Q1uYuPcBaffChvFVSENq5E0qKoYzF0RX5Hk
Ggry1bTWra/QSHxpb/0geH3mak4q9orwzZ9rnsxzQBYND3vpjBtFT42csUVrXbIO
to6OVgOhyyjiyBswF/+l7v2kWuVQOAPBf1DAwEV6mEkmnOY5zpltE06U78rq8X7X
ZyCa2q59VRonqw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:02:57 2025 by rpki-client