Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
File: jLz5N0OA69GF0hGPVRyFWa4jNUE.mft (raw, json)
Hash identifier: sWU/Wub1+Pz2UwgwY0zAsRjzh/psy7ChUTSww9EXMx8=
Subject key identifier: 72:F4:17:16:A9:18:30:DB:ED:B4:6C:F4:5C:44:CA:93:59:BD:D6:41
Authority key identifier: 8C:BC:F9:37:43:80:EB:D1:85:D2:11:8F:55:1C:85:59:AE:23:35:41
Certificate issuer: /CN=8cbcf9374380ebd185d2118f551c8559ae233541
Certificate serial: 01974A43D93938F3FA836E780197AD487FBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
Manifest number: 0B61
Signing time: Sat 07 Jun 2025 12:00:49 +0000
Manifest this update: Sat 07 Jun 2025 12:00:49 +0000
Manifest next update: Sun 08 Jun 2025 12:00:49 +0000
Files and hashes: 1: LPHVyLxlu99zLZ120cTfoB_tDV0.roa (hash: k/MXZCSTh36/WgnxNvkdeF42fCURyZYfQlnOWMA/duo=)
2: jLz5N0OA69GF0hGPVRyFWa4jNUE.crl (hash: 6vMNALy7uEUN7eBv8o16+i3aDrcyqsy06+09O9VAKLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:d9:39:38:f3:fa:83:6e:78:01:97:ad:48:7f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cbcf9374380ebd185d2118f551c8559ae233541
Validity
Not Before: Jun 7 12:00:49 2025 GMT
Not After : Jun 8 12:00:49 2025 GMT
Subject: CN=72f41716a91830dbedb46cf45c44ca9359bdd641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:17:fc:cd:0c:6b:ca:2b:d8:f5:cf:ba:1d:3f:
da:dd:f5:aa:07:64:0d:d4:94:41:bd:22:91:d8:39:
0e:f0:f9:2e:9f:41:40:b9:19:f5:b2:cc:16:8f:df:
d0:2b:30:a7:c8:f6:0d:9b:3c:19:22:17:30:80:8d:
01:49:a3:79:3d:bc:af:b0:53:4e:ac:0e:f6:8b:ac:
75:24:4a:15:f3:1b:5f:a6:2f:de:ea:f3:26:ac:95:
f1:a1:b1:ca:97:a9:0e:0e:e1:98:74:ec:c3:3e:b1:
18:12:aa:d9:cb:e8:69:ed:b9:c9:dd:b5:06:e0:e1:
7b:59:46:49:5b:6c:d9:db:55:3b:f5:3d:f5:5f:56:
bf:98:d2:3b:71:35:29:ce:ef:da:82:b1:75:eb:8c:
ff:de:91:49:6d:5c:45:5a:9d:f3:dc:ae:24:26:4f:
8e:19:e8:0d:f1:dc:da:e4:cf:f5:a4:47:db:26:1f:
93:88:db:52:d3:d8:da:e4:13:92:c3:70:fd:23:50:
6d:67:75:55:a3:7b:04:21:cf:cb:f0:14:12:72:6c:
d6:62:9e:12:5e:43:ab:20:22:94:95:0d:4e:db:2f:
02:61:00:2f:2e:95:e8:8b:ad:43:a0:c1:45:ac:6a:
bf:19:bf:1f:c5:4e:26:5e:51:08:dd:9a:c0:e6:93:
15:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F4:17:16:A9:18:30:DB:ED:B4:6C:F4:5C:44:CA:93:59:BD:D6:41
X509v3 Authority Key Identifier:
keyid:8C:BC:F9:37:43:80:EB:D1:85:D2:11:8F:55:1C:85:59:AE:23:35:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ca:e0:c9:c1:d9:24:7d:7d:48:45:40:38:93:21:36:78:91:
bd:60:e6:af:93:5b:9c:66:2e:ff:31:b0:21:6b:cb:07:61:0c:
4c:43:33:1f:03:18:ce:83:cf:60:da:22:c4:5a:95:ef:88:2c:
af:da:8c:c9:32:c1:36:cd:b8:c4:4a:8f:0e:6d:1e:f4:ca:91:
de:77:28:23:4a:14:27:3a:cc:80:05:ad:30:b6:ee:7e:b5:8e:
5f:1e:79:0e:39:59:7f:3e:d5:f8:6e:0b:43:38:50:1c:bb:b4:
41:1e:0b:a2:47:11:de:9f:24:77:65:68:a5:8e:8f:ba:92:79:
64:43:27:33:d6:e6:36:db:33:e2:e8:01:c5:7e:37:d4:4e:9d:
b8:06:16:fb:ca:8c:cd:83:29:52:32:77:50:87:68:d1:16:4c:
a3:27:92:6b:5d:0f:e6:12:46:14:a2:0c:31:48:52:36:c4:ec:
da:0d:cc:78:83:d6:27:19:9d:30:9e:6c:d3:7d:28:23:ea:c2:
54:27:05:16:01:ee:22:d2:cc:51:c6:3d:95:ee:40:13:9c:bb:
20:68:12:bf:3f:07:f1:a9:f5:b3:00:07:a2:ff:c1:fc:dc:61:
12:a0:17:ff:64:1c:3c:67:8f:8e:dc:af:19:cd:06:67:bf:c5:
f6:31:00:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKQ9k5OPP6g254AZetSH+8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjYmNmOTM3NDM4MGViZDE4NWQyMTE4ZjU1MWM4NTU5YWUy
MzM1NDEwHhcNMjUwNjA3MTIwMDQ5WhcNMjUwNjA4MTIwMDQ5WjAzMTEwLwYDVQQD
Eyg3MmY0MTcxNmE5MTgzMGRiZWRiNDZjZjQ1YzQ0Y2E5MzU5YmRkNjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRf8zQxryivY9c+6HT/a3fWqB2QN
1JRBvSKR2DkO8Pkun0FAuRn1sswWj9/QKzCnyPYNmzwZIhcwgI0BSaN5PbyvsFNO
rA72i6x1JEoV8xtfpi/e6vMmrJXxobHKl6kODuGYdOzDPrEYEqrZy+hp7bnJ3bUG
4OF7WUZJW2zZ21U79T31X1a/mNI7cTUpzu/agrF164z/3pFJbVxFWp3z3K4kJk+O
GegN8dza5M/1pEfbJh+TiNtS09ja5BOSw3D9I1BtZ3VVo3sEIc/L8BQScmzWYp4S
XkOrICKUlQ1O2y8CYQAvLpXoi61DoMFFrGq/Gb8fxU4mXlEI3ZrA5pMVHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHL0FxapGDDb7bRs9FxEypNZvdZBMB8GA1UdIwQY
MBaAFIy8+TdDgOvRhdIRj1UchVmuIzVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakx6NU4wT0E2OUdGMGhHUFZSeUZXYTRqTlVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC84OWExZjAtNjlkYy00YzEzLWI5N2It
MzUyMDNkNmIwZDU3LzEvakx6NU4wT0E2OUdGMGhHUFZSeUZXYTRqTlVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC84OWExZjAtNjlkYy00YzEzLWI5N2ItMzUyMDNkNmIwZDU3
LzEvakx6NU4wT0E2OUdGMGhHUFZSeUZXYTRqTlVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPMrgycHZ
JH19SEVAOJMhNniRvWDmr5NbnGYu/zGwIWvLB2EMTEMzHwMYzoPPYNoixFqV74gs
r9qMyTLBNs24xEqPDm0e9MqR3ncoI0oUJzrMgAWtMLbufrWOXx55DjlZfz7V+G4L
QzhQHLu0QR4LokcR3p8kd2VopY6PupJ5ZEMnM9bmNtsz4ugBxX431E6duAYW+8qM
zYMpUjJ3UIdo0RZMoyeSa10P5hJGFKIMMUhSNsTs2g3MeIPWJxmdMJ5s030oI+rC
VCcFFgHuItLMUcY9le5AE5y7IGgSvz8H8an1swAHov/B/NxhEqAX/2QcPGePjtyv
Gc0GZ7/F9jEATg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:29:31 2025 by rpki-client