Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
File: J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft (raw, json)
Hash identifier: 4GTtbvnL3UaT06BNbdjiMwi1R10gG/tQ1UWTUB/QcGo=
Subject key identifier: 85:BA:90:8A:F4:8A:92:B5:46:86:A9:1B:99:02:B7:05:70:BE:8A:9C
Authority key identifier: 27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A
Certificate issuer: /CN=27516d20ebefd12f072d413c4d2606bdb258691a
Certificate serial: 01974B8DC4A7B9133CA461644D768CF808F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
Manifest number: 0A59
Signing time: Sat 07 Jun 2025 18:01:11 +0000
Manifest this update: Sat 07 Jun 2025 18:01:11 +0000
Manifest next update: Sun 08 Jun 2025 18:01:11 +0000
Files and hashes: 1: J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl (hash: jCwCgRiRYRLRFvG+27tujim6jOpv8/9veMYrEc5LYdI=)
2: XfoYu50NheNzs0VtCSRCooYU-SU.roa (hash: jh91aUsS01TW33r2YJfBHj2Cr7ZQFr1/RMMxWf8OtR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:c4:a7:b9:13:3c:a4:61:64:4d:76:8c:f8:08:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27516d20ebefd12f072d413c4d2606bdb258691a
Validity
Not Before: Jun 7 18:01:11 2025 GMT
Not After : Jun 8 18:01:11 2025 GMT
Subject: CN=85ba908af48a92b54686a91b9902b70570be8a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c1:22:ef:da:90:9a:b2:df:26:5b:5d:13:31:
91:2a:02:ed:46:53:1d:c2:2a:8c:12:45:3d:f0:8c:
05:bf:b9:ed:da:6e:03:ef:05:78:a6:39:05:e3:a9:
d8:44:76:7e:49:a8:c4:d6:e1:a0:66:34:b0:8b:6a:
ff:07:a2:0c:b8:d1:1f:e0:ec:cd:2c:58:c8:88:bd:
e8:4d:1c:c0:41:1c:c2:39:ae:8e:05:dd:a1:25:c6:
c1:34:e9:94:a6:db:ec:bd:1d:db:cc:c1:1b:b1:30:
20:60:19:3e:de:88:87:33:38:f7:de:17:d1:1f:30:
9c:13:f6:4b:50:b1:59:4e:5b:9c:1b:04:bc:57:f6:
30:a5:05:9f:5e:0d:f2:58:2e:52:c5:6e:3c:21:4a:
ae:48:4e:ec:da:d2:e7:b9:a0:0c:52:8c:42:ec:b7:
17:36:de:14:4c:ac:c7:10:7a:fa:37:0b:90:8c:94:
dc:77:85:5b:52:21:62:09:cd:a2:fb:27:c7:d7:40:
bd:eb:e2:d5:8b:46:15:24:0e:0e:3b:79:5f:07:31:
01:6a:88:1d:26:08:d5:f5:b3:89:27:a2:76:d8:a8:
11:a5:cb:ed:fc:89:94:b0:e7:64:aa:9c:a1:0f:6b:
09:97:ba:36:d8:60:16:c0:dc:bc:10:6e:f9:89:9e:
43:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BA:90:8A:F4:8A:92:B5:46:86:A9:1B:99:02:B7:05:70:BE:8A:9C
X509v3 Authority Key Identifier:
keyid:27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:80:97:14:ad:d5:32:04:49:2a:62:ef:df:2f:73:b4:a0:b0:
db:43:32:da:c5:b6:9c:3d:90:62:c7:cc:6d:f8:a7:b7:12:18:
06:ea:11:14:0f:d2:25:1a:bf:4b:2b:69:84:3f:61:db:36:54:
55:b8:cc:19:3e:d3:91:78:e1:76:49:d6:31:e6:e4:61:12:dc:
5a:c6:71:aa:e6:74:77:2a:d0:e9:e8:a8:7d:6e:90:e2:42:54:
82:ac:2c:6b:b2:59:99:f1:30:6d:cc:4b:95:78:31:33:e9:f7:
a4:d2:79:86:da:dd:33:5a:03:5e:a5:f3:5c:60:30:0f:fd:dd:
55:a3:2a:43:e2:f0:03:1b:a0:04:fd:86:14:e7:29:d9:4f:db:
42:a8:34:cd:e6:8b:c5:0a:3f:db:8e:dc:f4:a4:36:45:e1:f4:
f2:40:84:64:ed:57:c5:e7:0a:ba:53:51:dd:0a:f0:64:41:12:
9b:2d:9a:05:f0:7d:45:8d:34:f1:ef:43:1d:6a:c2:2d:43:c1:
72:98:97:5c:29:55:3c:e9:60:37:30:21:c9:9a:ec:96:38:7f:
cd:2b:b1:27:55:ef:f3:90:cf:bb:4e:6c:36:48:6a:3d:81:30:
3c:f6:69:4f:ed:b0:a8:41:8a:c4:9d:0b:4e:f9:73:c6:6c:2d:
dd:7c:54:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLjcSnuRM8pGFkTXaM+Aj5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NTE2ZDIwZWJlZmQxMmYwNzJkNDEzYzRkMjYwNmJkYjI1
ODY5MWEwHhcNMjUwNjA3MTgwMTExWhcNMjUwNjA4MTgwMTExWjAzMTEwLwYDVQQD
Eyg4NWJhOTA4YWY0OGE5MmI1NDY4NmE5MWI5OTAyYjcwNTcwYmU4YTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcEi79qQmrLfJltdEzGRKgLtRlMd
wiqMEkU98IwFv7nt2m4D7wV4pjkF46nYRHZ+SajE1uGgZjSwi2r/B6IMuNEf4OzN
LFjIiL3oTRzAQRzCOa6OBd2hJcbBNOmUptvsvR3bzMEbsTAgYBk+3oiHMzj33hfR
HzCcE/ZLULFZTlucGwS8V/YwpQWfXg3yWC5SxW48IUquSE7s2tLnuaAMUoxC7LcX
Nt4UTKzHEHr6NwuQjJTcd4VbUiFiCc2i+yfH10C96+LVi0YVJA4OO3lfBzEBaogd
JgjV9bOJJ6J22KgRpcvt/ImUsOdkqpyhD2sJl7o22GAWwNy8EG75iZ5DZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIW6kIr0ipK1RoapG5kCtwVwvoqcMB8GA1UdIwQY
MBaAFCdRbSDr79EvBy1BPE0mBr2yWGkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjFGdElPdnYwUzhITFVFOFRTWUd2YkpZYVJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy81OWQ4MDgtMTU0Zi00MmFlLWFmOGYt
NzkwMjQ0NTA4ZGY0LzEvSjFGdElPdnYwUzhITFVFOFRTWUd2YkpZYVJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy81OWQ4MDgtMTU0Zi00MmFlLWFmOGYtNzkwMjQ0NTA4ZGY0
LzEvSjFGdElPdnYwUzhITFVFOFRTWUd2YkpZYVJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYoCXFK3V
MgRJKmLv3y9ztKCw20My2sW2nD2QYsfMbfintxIYBuoRFA/SJRq/SytphD9h2zZU
VbjMGT7TkXjhdknWMebkYRLcWsZxquZ0dyrQ6eiofW6Q4kJUgqwsa7JZmfEwbcxL
lXgxM+n3pNJ5htrdM1oDXqXzXGAwD/3dVaMqQ+LwAxugBP2GFOcp2U/bQqg0zeaL
xQo/247c9KQ2ReH08kCEZO1XxecKulNR3QrwZEESmy2aBfB9RY008e9DHWrCLUPB
cpiXXClVPOlgNzAhyZrsljh/zSuxJ1Xv85DPu05sNkhqPYEwPPZpT+2wqEGKxJ0L
Tvlzxmwt3XxU1g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:25:08 2025 by rpki-client