Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
File: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft (raw, json)
Hash identifier: dIsYsvdEVEjbsAMuQ1aDH5sgWcHghji12zzCJXnYwbw=
Subject key identifier: 13:07:A3:B1:6B:F2:22:CC:07:63:40:B5:21:E6:48:6E:21:39:D2:0A
Authority key identifier: 27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
Certificate issuer: /CN=27d8640c305107766a646fbf8ec81db45ce1f249
Certificate serial: 01974A7B17DF846B5D700464F91A8D73159F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
Manifest number: 13D7
Signing time: Sat 07 Jun 2025 13:01:10 +0000
Manifest this update: Sat 07 Jun 2025 13:01:10 +0000
Manifest next update: Sun 08 Jun 2025 13:01:10 +0000
Files and hashes: 1: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl (hash: jO842YpVTPWnFhABayTBMwoC7EXcpEJkHKqlbmB2FbU=)
2: omv1iA0sTwZqywTVYlUXXegJP1Q.roa (hash: lDFIRi5hNHf1aQj7xWQEmMDGw0C4yu9jECeYI1136N4=)
3: yYTpoAfaYghmHruP3VvWvB4Z38E.roa (hash: 9b9Mq3MlvIX2qX8DdTkiCTxQPYb+kWY/IW9meZtFMy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:17:df:84:6b:5d:70:04:64:f9:1a:8d:73:15:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d8640c305107766a646fbf8ec81db45ce1f249
Validity
Not Before: Jun 7 13:01:10 2025 GMT
Not After : Jun 8 13:01:10 2025 GMT
Subject: CN=1307a3b16bf222cc076340b521e6486e2139d20a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2e:93:09:15:ae:36:5b:0e:06:93:f5:50:05:
8e:6b:00:46:25:57:f5:7a:2b:ca:a3:3b:26:44:81:
4c:e8:8b:13:80:ff:e4:5e:87:cc:2a:95:e5:0d:56:
d0:66:f4:8f:43:6e:79:5e:05:29:e6:ff:b3:97:29:
c8:77:5b:3d:0b:01:c2:63:39:0e:64:e7:b2:46:cb:
f9:8f:87:ad:ef:31:6d:de:ec:f7:5c:c9:6c:11:c4:
6b:02:74:7c:cb:4b:55:20:25:49:55:57:d1:86:94:
18:35:54:b3:4a:96:99:a7:6a:11:5f:da:4c:ce:2f:
07:98:b8:39:a5:72:c4:e3:59:3a:b2:51:c0:18:c3:
73:18:1f:7e:60:49:87:eb:d3:bb:5a:f3:3f:28:39:
15:03:ba:92:2a:ea:d3:27:3f:34:9a:8d:33:9f:38:
24:bb:86:7c:ce:3e:81:e8:28:da:89:b7:17:10:e0:
6b:52:7a:53:66:08:22:5b:d6:c8:0e:dd:c0:b7:db:
04:a4:0f:2c:05:ba:2e:69:42:40:c6:c8:3c:38:f2:
59:86:d7:59:f4:33:8c:98:79:7d:37:2f:f6:11:d3:
d2:0d:b8:07:87:01:8f:21:f2:85:fa:b9:64:00:c5:
0c:42:d1:5e:70:f6:96:b1:3f:8c:fa:70:02:72:7b:
c2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:07:A3:B1:6B:F2:22:CC:07:63:40:B5:21:E6:48:6E:21:39:D2:0A
X509v3 Authority Key Identifier:
keyid:27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:3d:91:e2:24:15:f5:a2:6c:59:4f:aa:bc:ca:2d:f7:ef:10:
81:41:9e:e5:d8:85:29:bc:13:85:bb:bb:5b:0c:eb:9b:27:4a:
56:a1:4b:2a:c4:13:01:66:01:a4:2f:5e:98:19:29:f6:a5:80:
c8:fe:65:88:ac:66:0a:02:21:85:e1:3c:88:02:da:06:77:c1:
e2:8a:e9:5a:d5:5e:71:d3:b6:0e:e4:9a:c9:4e:d6:60:05:04:
29:97:03:63:22:35:09:05:0e:20:86:03:f9:4c:12:a0:3f:bf:
90:a2:20:1d:b0:47:20:a8:e5:e9:cf:ac:b7:16:9a:2d:2f:68:
63:0d:46:2b:6c:0a:bf:ce:63:12:9d:b6:6b:d3:79:1c:77:32:
64:dc:33:e0:62:b2:94:9f:69:2e:9f:5b:78:9a:c0:02:21:5d:
9a:71:02:90:8d:5f:d7:4e:a6:c6:18:a7:17:10:24:ee:57:58:
65:59:7e:ed:0c:3d:3a:65:0a:4d:88:d8:d0:4c:0b:32:8d:03:
04:15:34:e5:38:24:7e:33:02:0b:44:62:38:94:a0:62:5b:8d:
f1:f4:5e:32:e8:11:29:0a:75:e1:da:59:3a:c0:2d:df:2c:a2:
a8:fa:51:f5:8c:80:ef:e2:16:f1:96:d9:02:b3:ef:10:83:30:
99:ff:7f:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKexffhGtdcARk+RqNcxWfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZDg2NDBjMzA1MTA3NzY2YTY0NmZiZjhlYzgxZGI0NWNl
MWYyNDkwHhcNMjUwNjA3MTMwMTEwWhcNMjUwNjA4MTMwMTEwWjAzMTEwLwYDVQQD
EygxMzA3YTNiMTZiZjIyMmNjMDc2MzQwYjUyMWU2NDg2ZTIxMzlkMjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuS6TCRWuNlsOBpP1UAWOawBGJVf1
eivKozsmRIFM6IsTgP/kXofMKpXlDVbQZvSPQ255XgUp5v+zlynId1s9CwHCYzkO
ZOeyRsv5j4et7zFt3uz3XMlsEcRrAnR8y0tVICVJVVfRhpQYNVSzSpaZp2oRX9pM
zi8HmLg5pXLE41k6slHAGMNzGB9+YEmH69O7WvM/KDkVA7qSKurTJz80mo0znzgk
u4Z8zj6B6CjaibcXEOBrUnpTZggiW9bIDt3At9sEpA8sBbouaUJAxsg8OPJZhtdZ
9DOMmHl9Ny/2EdPSDbgHhwGPIfKF+rlkAMUMQtFecPaWsT+M+nACcnvCCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMHo7Fr8iLMB2NAtSHmSG4hOdIKMB8GA1UdIwQY
MBaAFCfYZAwwUQd2amRvv47IHbRc4fJJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjloa0REQlJCM1pxWkctX2pzZ2R0RnpoOGtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ODE3NWEtMTJjOC00NTkwLTgyZTAt
M2M2Zjg4YzkxNGIxLzEvSjloa0REQlJCM1pxWkctX2pzZ2R0RnpoOGtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi84ODE3NWEtMTJjOC00NTkwLTgyZTAtM2M2Zjg4YzkxNGIx
LzEvSjloa0REQlJCM1pxWkctX2pzZ2R0RnpoOGtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPj2R4iQV
9aJsWU+qvMot9+8QgUGe5diFKbwThbu7WwzrmydKVqFLKsQTAWYBpC9emBkp9qWA
yP5liKxmCgIhheE8iALaBnfB4orpWtVecdO2DuSayU7WYAUEKZcDYyI1CQUOIIYD
+UwSoD+/kKIgHbBHIKjl6c+stxaaLS9oYw1GK2wKv85jEp22a9N5HHcyZNwz4GKy
lJ9pLp9beJrAAiFdmnECkI1f106mxhinFxAk7ldYZVl+7Qw9OmUKTYjY0EwLMo0D
BBU05TgkfjMCC0RiOJSgYluN8fReMugRKQp14dpZOsAt3yyiqPpR9YyA7+IW8ZbZ
ArPvEIMwmf9/ww==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:33:03 2025 by rpki-client