Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
File: JUzEq11IxScNQOn-UOcjlt7sWGk.mft (raw, json)
Hash identifier: W8DzPcYUAHdc/CqPHnST81451wBiw89gcxykv+10WRA=
Subject key identifier: 8A:9D:05:DA:A1:CE:7B:3A:A5:D0:DF:D6:54:88:85:4E:63:F2:F5:05
Authority key identifier: 25:4C:C4:AB:5D:48:C5:27:0D:40:E9:FE:50:E7:23:96:DE:EC:58:69
Certificate issuer: /CN=254cc4ab5d48c5270d40e9fe50e72396deec5869
Certificate serial: 019748FA6D7A4624786994282F60EE7AD2CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
Manifest number: 0B51
Signing time: Sat 07 Jun 2025 06:01:00 +0000
Manifest this update: Sat 07 Jun 2025 06:01:00 +0000
Manifest next update: Sun 08 Jun 2025 06:01:00 +0000
Files and hashes: 1: C2ecozniAHAj0uhFfwHN_H6EGZA.roa (hash: EZUOiLLYsi9hRi0qVE5EwgylGRW0PHLtxyCT19uY13Y=)
2: JUzEq11IxScNQOn-UOcjlt7sWGk.crl (hash: hGEgE4RdiSJnp5lGjpWAMKghGhhxBCadOSA5OmV4WDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:6d:7a:46:24:78:69:94:28:2f:60:ee:7a:d2:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=254cc4ab5d48c5270d40e9fe50e72396deec5869
Validity
Not Before: Jun 7 06:01:00 2025 GMT
Not After : Jun 8 06:01:00 2025 GMT
Subject: CN=8a9d05daa1ce7b3aa5d0dfd65488854e63f2f505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:34:61:db:90:c9:cd:32:75:af:b2:eb:a1:98:
46:3b:02:eb:2d:05:f3:1a:42:3a:26:5a:12:4a:db:
70:40:5e:63:f9:ad:8d:3c:d3:92:78:89:23:72:34:
6d:4a:40:eb:07:25:c8:5b:ec:fe:4e:26:73:a4:07:
89:d3:5c:41:e0:9e:69:40:83:da:7b:d9:1b:b6:08:
c2:2c:1e:69:3c:3a:07:6e:27:05:03:80:22:c7:9a:
8e:b9:98:ab:ec:77:1e:ab:28:1b:5f:ac:ba:52:37:
3d:f3:72:ca:27:ae:42:04:19:8a:d4:1e:5d:f1:fb:
f6:8e:e6:c9:6a:b6:1a:b3:b2:50:80:48:66:20:00:
79:6b:63:72:2c:28:d5:b2:1e:f2:be:d9:48:f5:fb:
f4:e2:73:55:24:1c:3f:20:77:25:f5:52:cd:bc:4e:
72:d0:6d:e2:4a:a0:d1:e0:f8:4f:98:2f:9d:3c:eb:
a9:57:01:7f:34:70:6b:78:e9:b2:bf:1d:c4:3f:a9:
7d:44:6d:a3:8a:80:fd:89:e8:62:32:4d:dd:23:3b:
19:e8:de:53:b5:09:4f:06:2b:b1:b2:82:0e:b9:9a:
72:fd:bd:76:1e:2a:a5:c7:f2:4f:91:b9:5d:4d:80:
24:bf:88:ca:91:ec:a4:5c:02:35:aa:85:c0:83:4b:
36:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9D:05:DA:A1:CE:7B:3A:A5:D0:DF:D6:54:88:85:4E:63:F2:F5:05
X509v3 Authority Key Identifier:
keyid:25:4C:C4:AB:5D:48:C5:27:0D:40:E9:FE:50:E7:23:96:DE:EC:58:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:11:72:26:f3:7d:2d:47:45:97:06:e4:50:cb:27:2a:19:bd:
c8:c5:45:07:fa:66:55:c1:d4:e1:f2:79:5d:4b:e0:78:37:07:
7c:03:0a:05:51:b7:0f:9b:d2:d9:f3:f4:ea:69:ab:3c:a7:51:
05:3c:aa:6c:aa:15:89:bf:6d:39:15:63:81:a0:b8:89:38:59:
28:65:cf:b8:21:90:08:84:45:a4:e2:1d:17:95:07:02:50:b8:
dc:e8:90:33:cb:77:e0:ed:0f:a6:69:72:96:77:6c:4a:d1:6f:
c8:99:62:f7:2a:06:21:59:74:8b:44:2f:ec:b7:4d:90:1f:59:
8a:54:85:c3:49:b4:ac:26:60:0d:db:ab:b2:f2:c4:e0:a5:8e:
c9:6a:82:43:f2:81:25:0c:89:de:0c:5e:f1:1f:c0:30:47:6a:
e5:a7:d0:3b:0e:c1:d5:f2:25:4b:b3:8d:c5:39:d8:4b:e2:f5:
93:af:26:b8:a0:06:20:57:3f:fd:5c:26:fe:08:c2:a2:06:ce:
73:6f:7a:f4:28:76:09:52:da:7b:a4:da:cd:45:5c:e7:97:c3:
6d:0a:21:ae:04:3d:6f:03:3e:06:42:ab:bb:30:3e:37:43:ef:
57:3f:21:52:d5:74:7b:3a:8b:61:fb:67:35:77:12:09:02:45:
93:59:51:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+m16RiR4aZQoL2DuetLNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NGNjNGFiNWQ0OGM1MjcwZDQwZTlmZTUwZTcyMzk2ZGVl
YzU4NjkwHhcNMjUwNjA3MDYwMTAwWhcNMjUwNjA4MDYwMTAwWjAzMTEwLwYDVQQD
Eyg4YTlkMDVkYWExY2U3YjNhYTVkMGRmZDY1NDg4ODU0ZTYzZjJmNTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TRh25DJzTJ1r7LroZhGOwLrLQXz
GkI6JloSSttwQF5j+a2NPNOSeIkjcjRtSkDrByXIW+z+TiZzpAeJ01xB4J5pQIPa
e9kbtgjCLB5pPDoHbicFA4Aix5qOuZir7HceqygbX6y6Ujc983LKJ65CBBmK1B5d
8fv2jubJarYas7JQgEhmIAB5a2NyLCjVsh7yvtlI9fv04nNVJBw/IHcl9VLNvE5y
0G3iSqDR4PhPmC+dPOupVwF/NHBreOmyvx3EP6l9RG2jioD9iehiMk3dIzsZ6N5T
tQlPBiuxsoIOuZpy/b12Hiqlx/JPkbldTYAkv4jKkeykXAI1qoXAg0s2bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqdBdqhzns6pdDf1lSIhU5j8vUFMB8GA1UdIwQY
MBaAFCVMxKtdSMUnDUDp/lDnI5be7FhpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlV6RXExMUl4U2NOUU9uLVVPY2psdDdzV0drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82OWY4ZmMtNTE3NS00ZmIzLWFhYWYt
NjM3Y2ZkNzJiYWYwLzEvSlV6RXExMUl4U2NOUU9uLVVPY2psdDdzV0drLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy82OWY4ZmMtNTE3NS00ZmIzLWFhYWYtNjM3Y2ZkNzJiYWYw
LzEvSlV6RXExMUl4U2NOUU9uLVVPY2psdDdzV0drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaRFyJvN9
LUdFlwbkUMsnKhm9yMVFB/pmVcHU4fJ5XUvgeDcHfAMKBVG3D5vS2fP06mmrPKdR
BTyqbKoVib9tORVjgaC4iThZKGXPuCGQCIRFpOIdF5UHAlC43OiQM8t34O0Ppmly
lndsStFvyJli9yoGIVl0i0Qv7LdNkB9ZilSFw0m0rCZgDdursvLE4KWOyWqCQ/KB
JQyJ3gxe8R/AMEdq5afQOw7B1fIlS7ONxTnYS+L1k68muKAGIFc//Vwm/gjCogbO
c2969Ch2CVLae6TazUVc55fDbQohrgQ9bwM+BkKruzA+N0PvVz8hUtV0ezqLYftn
NXcSCQJFk1lRIw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:56:31 2025 by rpki-client