Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
File: JFf3O_AvdUseYxfumk8-iGN_Gqc.mft (raw, json)
Hash identifier: +upX6MP/Vy+Vjy/xo3iaf0CzCtIB4vE5n0TLiEe/Cmo=
Subject key identifier: FD:77:B2:DA:C2:2D:57:40:F3:69:9F:9F:13:89:D9:D1:41:B1:D5:CA
Authority key identifier: 24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7
Certificate issuer: /CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7
Certificate serial: 01974BFB25D39C0C22FCFC9FDB9A67295DBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
Manifest number: 03B3
Signing time: Sat 07 Jun 2025 20:00:39 +0000
Manifest this update: Sat 07 Jun 2025 20:00:39 +0000
Manifest next update: Sun 08 Jun 2025 20:00:39 +0000
Files and hashes: 1: JFf3O_AvdUseYxfumk8-iGN_Gqc.crl (hash: CX4JJGmSWX92GDwVjNDasfLfylv9m29YDyBljMltwKI=)
2: cXiQb0zcA0CLvw3qjr3Z14vvqVw.roa (hash: pX6VDAJEOVOavf5pZdZN7fQIN/wzAPZygKeMCqQda9A=)
3: pAkDpXLHJSVq5brO4eRR6jwHtU8.roa (hash: wuv8wzRTFGHFi0hdFLFmbRsgX25lIcuDItaxFFAOXPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:25:d3:9c:0c:22:fc:fc:9f:db:9a:67:29:5d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7
Validity
Not Before: Jun 7 20:00:39 2025 GMT
Not After : Jun 8 20:00:39 2025 GMT
Subject: CN=fd77b2dac22d5740f3699f9f1389d9d141b1d5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f7:0e:fb:8e:7e:2a:93:12:a0:e3:39:48:c9:
c3:c1:06:a7:12:a1:74:8d:c0:55:57:87:15:4f:72:
36:71:70:89:20:e9:e2:d3:32:02:8c:2d:a5:78:e5:
c2:7f:5f:09:79:c7:99:d8:71:36:d4:b6:7c:e4:c6:
87:7f:da:5d:b8:08:c9:b4:ce:d8:e5:a7:76:c1:17:
20:18:45:ae:19:76:2f:10:eb:b5:bb:7f:b4:09:cc:
86:91:dd:25:a2:06:99:e8:10:7c:cf:3c:48:0a:9d:
b8:c3:c7:3f:72:7e:41:60:0d:48:7a:6a:a1:82:28:
10:74:18:2b:b6:4d:13:dd:6a:83:49:0f:0f:b1:ad:
12:81:57:fc:d0:52:ef:b2:8c:ab:af:ac:6e:ad:49:
ca:e7:b4:39:09:09:2c:4d:a4:14:11:a5:9a:89:21:
ae:8d:e7:bd:f4:7f:bd:12:b1:87:20:99:b8:66:6a:
85:b6:9a:87:cc:9a:40:c6:3e:ef:ea:7d:eb:85:3b:
7f:2b:05:69:75:12:43:3c:db:f5:cc:32:32:81:24:
6e:fd:93:e3:66:f5:ca:a3:52:bd:7f:d0:74:9a:22:
9c:4c:a8:c8:5f:99:09:ac:fe:c3:75:78:44:c4:5d:
e7:17:7c:5a:c9:96:ee:2a:26:9f:53:f5:0e:8e:f8:
8e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:77:B2:DA:C2:2D:57:40:F3:69:9F:9F:13:89:D9:D1:41:B1:D5:CA
X509v3 Authority Key Identifier:
keyid:24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e8:23:f4:19:9e:9a:6a:c4:1d:13:f4:03:a5:6a:21:4e:3d:
1b:9b:27:bd:ba:d9:ed:9b:2b:58:75:b1:d4:2f:1e:c8:f9:7f:
c7:91:a3:9b:a2:a0:b8:0b:b4:b6:7c:02:88:59:0c:d9:64:cd:
09:84:78:01:e9:28:b3:f3:01:96:8a:5f:b4:49:e4:14:29:7c:
c1:10:82:6e:36:2e:9c:18:d9:1b:8e:b8:df:4d:1c:28:77:ff:
21:97:fa:3d:73:cb:37:32:65:c5:20:17:87:4d:37:65:cc:05:
6b:ac:76:b3:c8:1a:09:3c:fe:e7:27:9a:c4:d1:46:aa:58:76:
53:94:69:b7:54:ce:ca:77:49:43:99:32:ed:1b:1a:2c:22:5f:
2e:b0:09:a4:78:ee:ab:17:66:24:19:ee:c6:04:8b:e1:89:0b:
37:5b:c3:3b:ab:4d:e9:bb:c0:43:8c:76:7e:5d:33:45:c5:a4:
f6:d3:6a:bf:7f:d1:e2:b1:b7:03:1d:54:5c:26:2a:80:85:b6:
02:c1:b7:4d:87:6b:fb:78:09:c0:e6:e9:b3:d5:22:aa:74:f8:
dd:9a:fd:92:cb:0c:e5:ca:5a:ef:20:34:3a:95:70:ff:a7:2a:
fb:92:25:ec:53:7d:96:91:fc:2a:47:3b:3d:26:be:ed:95:a2:
70:87:93:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdL+yXTnAwi/Pyf25pnKV26MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NTdmNzNiZjAyZjc1NGIxZTYzMTdlZTlhNGYzZTg4NjM3
ZjFhYTcwHhcNMjUwNjA3MjAwMDM5WhcNMjUwNjA4MjAwMDM5WjAzMTEwLwYDVQQD
EyhmZDc3YjJkYWMyMmQ1NzQwZjM2OTlmOWYxMzg5ZDlkMTQxYjFkNWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufcO+45+KpMSoOM5SMnDwQanEqF0
jcBVV4cVT3I2cXCJIOni0zICjC2leOXCf18JeceZ2HE21LZ85MaHf9pduAjJtM7Y
5ad2wRcgGEWuGXYvEOu1u3+0CcyGkd0logaZ6BB8zzxICp24w8c/cn5BYA1Iemqh
gigQdBgrtk0T3WqDSQ8Psa0SgVf80FLvsoyrr6xurUnK57Q5CQksTaQUEaWaiSGu
jee99H+9ErGHIJm4ZmqFtpqHzJpAxj7v6n3rhTt/KwVpdRJDPNv1zDIygSRu/ZPj
ZvXKo1K9f9B0miKcTKjIX5kJrP7DdXhExF3nF3xayZbuKiafU/UOjviOLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP13strCLVdA82mfnxOJ2dFBsdXKMB8GA1UdIwQY
MBaAFCRX9zvwL3VLHmMX7ppPPohjfxqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkZmM09fQXZkVXNlWXhmdW1rOC1pR05fR3FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8wYmE1OWItZmY0Zi00MzhjLTg0MTct
NWZhMzgwNzQ5NDk3LzEvSkZmM09fQXZkVXNlWXhmdW1rOC1pR05fR3FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8wYmE1OWItZmY0Zi00MzhjLTg0MTctNWZhMzgwNzQ5NDk3
LzEvSkZmM09fQXZkVXNlWXhmdW1rOC1pR05fR3FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH+gj9Bme
mmrEHRP0A6VqIU49G5snvbrZ7ZsrWHWx1C8eyPl/x5Gjm6KguAu0tnwCiFkM2WTN
CYR4Aekos/MBlopftEnkFCl8wRCCbjYunBjZG464300cKHf/IZf6PXPLNzJlxSAX
h003ZcwFa6x2s8gaCTz+5yeaxNFGqlh2U5Rpt1TOyndJQ5ky7RsaLCJfLrAJpHju
qxdmJBnuxgSL4YkLN1vDO6tN6bvAQ4x2fl0zRcWk9tNqv3/R4rG3Ax1UXCYqgIW2
AsG3TYdr+3gJwObps9UiqnT43Zr9kssM5cpa7yA0OpVw/6cq+5Il7FN9lpH8Kkc7
PSa+7ZWicIeTug==
-----END CERTIFICATE-----
Generated at Sun Jun 8 02:42:54 2025 by rpki-client