Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
File: JFjwpFOzL_OiHmajG3T-SdjkajM.mft (raw, json)
Hash identifier: yqbEt8FP4S3oDtZIM5Zk14GG0iBxYltbGK49ftaNKiQ=
Subject key identifier: 23:0C:37:73:E1:01:BB:45:16:D1:51:9C:73:AA:AE:C1:BE:60:A1:DA
Authority key identifier: 24:58:F0:A4:53:B3:2F:F3:A2:1E:66:A3:1B:74:FE:49:D8:E4:6A:33
Certificate issuer: /CN=2458f0a453b32ff3a21e66a31b74fe49d8e46a33
Certificate serial: 01974EC5A4C661512EBC950E77B557143B12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
Manifest number: 10AC
Signing time: Sun 08 Jun 2025 09:01:04 +0000
Manifest this update: Sun 08 Jun 2025 09:01:04 +0000
Manifest next update: Mon 09 Jun 2025 09:01:04 +0000
Files and hashes: 1: JFjwpFOzL_OiHmajG3T-SdjkajM.crl (hash: PmhIsoeKqc8oh1AT4MBEy/tCUjy9irNROWPChRzwrPo=)
2: _d1GEPj08rPnUJ5e0jIgKD6QCFQ.roa (hash: vnr1x2ojeLhbVafxW9oqVV43qotLr8cLQwIIuErWSfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:a4:c6:61:51:2e:bc:95:0e:77:b5:57:14:3b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2458f0a453b32ff3a21e66a31b74fe49d8e46a33
Validity
Not Before: Jun 8 09:01:04 2025 GMT
Not After : Jun 9 09:01:04 2025 GMT
Subject: CN=230c3773e101bb4516d1519c73aaaec1be60a1da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b5:c1:13:a7:6c:c6:00:17:7d:9b:7a:51:49:
68:7b:a0:1e:e4:3e:2b:7a:ae:93:04:a2:37:d4:81:
d9:27:56:b4:30:ff:a7:b8:cc:45:01:0f:a4:6e:dd:
da:54:3c:24:35:58:ee:b5:65:ab:31:2a:5b:5b:96:
ec:3e:69:96:b7:94:7e:9a:49:00:cb:bc:e8:e3:62:
15:ba:fe:b8:b4:c4:3b:82:97:e2:49:e3:de:08:b5:
ed:51:bd:37:58:b5:11:f7:5b:df:c7:86:13:d9:ae:
fa:4d:03:af:a4:0c:2a:dc:d7:dc:6a:c3:3a:81:75:
80:f7:c2:f9:c6:90:86:8e:25:f9:74:4f:ee:f4:42:
28:e2:31:46:e6:a9:5e:54:b9:bd:6f:8b:d4:f0:01:
cb:f4:05:aa:7f:13:63:bf:cc:53:6c:1b:ac:d8:95:
a3:78:0a:ca:f9:16:50:a8:74:47:0a:2c:ce:de:49:
f6:ee:24:0d:ad:cb:17:81:17:df:05:67:64:e4:15:
64:a7:50:86:0a:9e:2e:9d:63:a6:71:73:11:a0:0d:
c6:57:34:c5:9d:93:f3:e0:a4:14:46:6d:2e:2d:e3:
ef:38:f3:df:2c:46:91:bb:22:99:e1:06:3d:60:7b:
ae:82:f9:38:9b:f2:74:2d:d9:ec:ac:3d:55:bc:e2:
7d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:0C:37:73:E1:01:BB:45:16:D1:51:9C:73:AA:AE:C1:BE:60:A1:DA
X509v3 Authority Key Identifier:
keyid:24:58:F0:A4:53:B3:2F:F3:A2:1E:66:A3:1B:74:FE:49:D8:E4:6A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:8f:aa:ce:e1:9d:e7:4c:29:b1:c5:36:f1:db:a9:b1:94:86:
9d:92:25:36:07:d3:41:a1:b5:d4:1b:81:31:23:ff:06:26:ee:
54:b4:c2:d5:43:e1:64:3b:70:ed:b7:96:fa:d1:17:d3:b3:34:
53:f4:c5:a8:7b:dc:68:24:63:5a:81:c2:84:02:ae:4e:2b:e6:
03:af:5a:bb:37:b5:a0:92:79:62:3d:4f:1d:05:60:20:33:ee:
6d:40:27:23:2b:88:7c:8c:61:5a:37:67:04:ab:09:61:4b:4d:
95:0a:d9:79:c6:fb:df:93:b2:07:2a:db:f0:80:7f:b6:0a:76:
af:f7:ef:05:04:2c:59:3d:e5:41:77:dc:ef:33:c4:ad:5d:c0:
fb:94:6c:d3:7f:08:1d:ba:42:88:6f:e0:5b:d3:5f:75:a0:98:
9f:b5:e2:44:f6:5e:dc:7f:60:43:b7:84:93:30:05:a9:4e:db:
45:08:3c:7a:d7:11:f1:0f:e6:9d:58:5b:bf:e4:15:f7:69:f5:
9c:38:5b:91:c6:4a:01:4d:f9:05:ec:38:1c:d6:2b:13:89:7e:
d8:ac:ff:da:0f:d9:5a:80:3a:04:3e:23:10:ef:e8:55:6c:a6:
22:f0:82:42:90:a8:4b:68:48:bd:f3:a7:4f:52:3b:11:46:dd:
6a:c7:e0:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOxaTGYVEuvJUOd7VXFDsSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NThmMGE0NTNiMzJmZjNhMjFlNjZhMzFiNzRmZTQ5ZDhl
NDZhMzMwHhcNMjUwNjA4MDkwMTA0WhcNMjUwNjA5MDkwMTA0WjAzMTEwLwYDVQQD
EygyMzBjMzc3M2UxMDFiYjQ1MTZkMTUxOWM3M2FhYWVjMWJlNjBhMWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbXBE6dsxgAXfZt6UUloe6Ae5D4r
eq6TBKI31IHZJ1a0MP+nuMxFAQ+kbt3aVDwkNVjutWWrMSpbW5bsPmmWt5R+mkkA
y7zo42IVuv64tMQ7gpfiSePeCLXtUb03WLUR91vfx4YT2a76TQOvpAwq3NfcasM6
gXWA98L5xpCGjiX5dE/u9EIo4jFG5qleVLm9b4vU8AHL9AWqfxNjv8xTbBus2JWj
eArK+RZQqHRHCizO3kn27iQNrcsXgRffBWdk5BVkp1CGCp4unWOmcXMRoA3GVzTF
nZPz4KQURm0uLePvOPPfLEaRuyKZ4QY9YHuugvk4m/J0LdnsrD1VvOJ98QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMMN3PhAbtFFtFRnHOqrsG+YKHaMB8GA1UdIwQY
MBaAFCRY8KRTsy/zoh5moxt0/knY5GozMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkZqd3BGT3pMX09pSG1hakczVC1TZGprYWpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8xMTE5MmQtMTc0MC00ZThlLTllMDQt
ZWUzNzk1MThjNjg2LzEvSkZqd3BGT3pMX09pSG1hakczVC1TZGprYWpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8xMTE5MmQtMTc0MC00ZThlLTllMDQtZWUzNzk1MThjNjg2
LzEvSkZqd3BGT3pMX09pSG1hakczVC1TZGprYWpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk4+qzuGd
50wpscU28dupsZSGnZIlNgfTQaG11BuBMSP/BibuVLTC1UPhZDtw7beW+tEX07M0
U/TFqHvcaCRjWoHChAKuTivmA69auze1oJJ5Yj1PHQVgIDPubUAnIyuIfIxhWjdn
BKsJYUtNlQrZecb735OyByrb8IB/tgp2r/fvBQQsWT3lQXfc7zPErV3A+5Rs038I
HbpCiG/gW9NfdaCYn7XiRPZe3H9gQ7eEkzAFqU7bRQg8etcR8Q/mnVhbv+QV92n1
nDhbkcZKAU35Bew4HNYrE4l+2Kz/2g/ZWoA6BD4jEO/oVWymIvCCQpCoS2hIvfOn
T1I7EUbdasfgOQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 19:55:06 2025 by rpki-client