Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
File: jHsYNFo5NBpyYndRMIwc4C9GoLs.mft (raw, json)
Hash identifier: +seLGFntgBGFK4xUhS/qu/pxBOnh+gq96K81WgnDTiU=
Subject key identifier: 2C:DC:8E:82:F1:AE:89:94:3E:36:A0:04:F4:B4:0C:83:EF:5A:19:D2
Authority key identifier: 8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB
Certificate issuer: /CN=8c7b18345a39341a72627751308c1ce02f46a0bb
Certificate serial: 01974A7A95F50A7BF8B22D6B4AA101C1EB7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
Manifest number: 0696
Signing time: Sat 07 Jun 2025 13:00:37 +0000
Manifest this update: Sat 07 Jun 2025 13:00:37 +0000
Manifest next update: Sun 08 Jun 2025 13:00:37 +0000
Files and hashes: 1: jHsYNFo5NBpyYndRMIwc4C9GoLs.crl (hash: d+GQhmCXEO3gAcb7rVl856JYKv9mtxtXyJcbHO0vFac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:95:f5:0a:7b:f8:b2:2d:6b:4a:a1:01:c1:eb:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7b18345a39341a72627751308c1ce02f46a0bb
Validity
Not Before: Jun 7 13:00:37 2025 GMT
Not After : Jun 8 13:00:37 2025 GMT
Subject: CN=2cdc8e82f1ae89943e36a004f4b40c83ef5a19d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:af:36:4c:8f:37:88:86:e1:a7:09:49:6b:27:
d7:9f:e9:4b:b4:b1:0e:b8:8f:35:21:08:4d:d8:99:
72:cf:52:68:f0:37:f4:02:11:34:40:21:44:4e:67:
d7:31:35:9c:eb:3b:b9:f1:67:3e:d0:6f:39:5a:55:
2f:54:b6:56:35:3c:57:a7:e0:62:cc:1a:37:e6:19:
06:7f:99:11:fc:f7:2d:96:22:19:9c:db:39:b7:72:
ab:17:6e:38:b1:e0:c1:9b:d9:e3:c6:60:3e:3e:f2:
33:0c:cb:54:92:eb:d1:8d:96:6a:4d:3c:dd:5a:9d:
33:7b:ea:da:f8:a6:9b:16:be:ae:bd:bd:5b:8e:dd:
db:5f:2d:7b:82:e8:37:ea:d9:f1:88:db:69:32:b4:
be:71:ca:b0:8c:9d:1d:34:4a:96:a1:92:8c:a5:27:
9e:ee:aa:70:52:67:f8:21:d0:ab:49:2a:bb:6b:b5:
3a:17:48:8c:7f:cf:02:96:1e:e0:b2:fd:d6:51:3b:
88:ed:20:b3:24:db:89:7e:03:04:bb:d7:51:ef:f6:
ca:2c:3a:f4:97:a0:a6:e7:31:8f:f1:6b:79:5b:98:
ed:4b:d8:bf:22:22:dc:79:1a:39:da:fb:77:e3:02:
3b:7b:6c:38:ab:fe:d2:84:ef:bb:72:51:78:7a:84:
7d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DC:8E:82:F1:AE:89:94:3E:36:A0:04:F4:B4:0C:83:EF:5A:19:D2
X509v3 Authority Key Identifier:
keyid:8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d3:1f:55:cd:15:6b:5d:48:4d:ae:47:4a:48:80:3e:59:e9:
37:6b:bf:95:c1:24:fd:a0:ae:6d:cd:39:87:6a:0d:cb:a6:44:
dd:91:7b:6e:b8:5e:73:5f:d1:e6:62:78:b3:45:e9:0a:14:1f:
5a:af:bd:dd:90:ff:10:15:7e:1d:22:3e:48:34:4e:79:a8:f2:
21:b4:9e:fe:2c:6a:10:04:34:de:6c:08:c9:86:c5:59:55:24:
7c:3c:2e:39:59:98:f1:da:f6:db:1b:2f:57:ed:81:8a:68:50:
6c:6c:0c:aa:2c:96:b2:fe:f3:91:11:d6:a1:9b:8b:56:cc:a9:
d5:f9:b9:18:33:48:0e:27:59:e5:1d:e4:51:0e:d8:e8:e9:7c:
c4:7a:33:32:f6:ba:36:e7:c9:bb:db:c2:30:21:ea:7e:68:05:
05:f9:3b:cd:ab:3c:15:06:7f:58:5c:b7:06:26:6d:9f:59:f1:
3a:14:27:f7:45:e8:17:0b:fe:37:ec:72:cf:4d:fc:5a:61:30:
3b:ca:40:35:dc:ca:cd:ce:53:74:15:23:d1:51:a6:49:c6:75:
11:11:dd:fb:db:6f:39:c6:a2:8c:db:64:4d:14:95:45:87:30:
2b:94:0b:16:36:c1:98:38:32:e2:bb:47:76:db:d0:4a:30:76:
6c:8f:7e:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKepX1Cnv4si1rSqEBwet+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjN2IxODM0NWEzOTM0MWE3MjYyNzc1MTMwOGMxY2UwMmY0
NmEwYmIwHhcNMjUwNjA3MTMwMDM3WhcNMjUwNjA4MTMwMDM3WjAzMTEwLwYDVQQD
EygyY2RjOGU4MmYxYWU4OTk0M2UzNmEwMDRmNGI0MGM4M2VmNWExOWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuq82TI83iIbhpwlJayfXn+lLtLEO
uI81IQhN2Jlyz1Jo8Df0AhE0QCFETmfXMTWc6zu58Wc+0G85WlUvVLZWNTxXp+Bi
zBo35hkGf5kR/PctliIZnNs5t3KrF244seDBm9njxmA+PvIzDMtUkuvRjZZqTTzd
Wp0ze+ra+KabFr6uvb1bjt3bXy17gug36tnxiNtpMrS+ccqwjJ0dNEqWoZKMpSee
7qpwUmf4IdCrSSq7a7U6F0iMf88Clh7gsv3WUTuI7SCzJNuJfgMEu9dR7/bKLDr0
l6Cm5zGP8Wt5W5jtS9i/IiLceRo52vt34wI7e2w4q/7ShO+7clF4eoR9QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCzcjoLxromUPjagBPS0DIPvWhnSMB8GA1UdIwQY
MBaAFIx7GDRaOTQacmJ3UTCMHOAvRqC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakhzWU5GbzVOQnB5WW5kUk1Jd2M0QzlHb0xzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9mZjRmMTItNTI5MC00MzJkLWIxZGIt
NTNjYTBkNjVkZDVlLzEvakhzWU5GbzVOQnB5WW5kUk1Jd2M0QzlHb0xzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9mZjRmMTItNTI5MC00MzJkLWIxZGItNTNjYTBkNjVkZDVl
LzEvakhzWU5GbzVOQnB5WW5kUk1Jd2M0QzlHb0xzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAINMfVc0V
a11ITa5HSkiAPlnpN2u/lcEk/aCubc05h2oNy6ZE3ZF7brhec1/R5mJ4s0XpChQf
Wq+93ZD/EBV+HSI+SDROeajyIbSe/ixqEAQ03mwIyYbFWVUkfDwuOVmY8dr22xsv
V+2BimhQbGwMqiyWsv7zkRHWoZuLVsyp1fm5GDNIDidZ5R3kUQ7Y6Ol8xHozMva6
NufJu9vCMCHqfmgFBfk7zas8FQZ/WFy3BiZtn1nxOhQn90XoFwv+N+xyz038WmEw
O8pANdzKzc5TdBUj0VGmScZ1ERHd+9tvOcaijNtkTRSVRYcwK5QLFjbBmDgy4rtH
dtvQSjB2bI9+NA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:30:35 2025 by rpki-client