Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
File: jjYRcTX2uG0Knh-mfgS69bzYYWk.mft (raw, json)
Hash identifier: t9jfeNkmaRSW9RjKOTr0e8TxwBVwoNdwGY2yx1VlKc0=
Subject key identifier: BF:2C:3D:FF:CB:19:D7:EF:DF:E4:01:6B:DD:29:B0:22:85:85:07:7D
Authority key identifier: 8E:36:11:71:35:F6:B8:6D:0A:9E:1F:A6:7E:04:BA:F5:BC:D8:61:69
Certificate issuer: /CN=8e36117135f6b86d0a9e1fa67e04baf5bcd86169
Certificate serial: 019749D5BB9D530762415890B94F86F8143E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
Manifest number: 1550
Signing time: Sat 07 Jun 2025 10:00:33 +0000
Manifest this update: Sat 07 Jun 2025 10:00:33 +0000
Manifest next update: Sun 08 Jun 2025 10:00:33 +0000
Files and hashes: 1: Lj7wNt42nDZMFrqwFNzaUflSi14.roa (hash: 7lYXpxe/6x5jvaWmKlwV+88ghkrorZKCs1qdn0iPrpQ=)
2: jjYRcTX2uG0Knh-mfgS69bzYYWk.crl (hash: VSLYyEt7DZP9+7w6FD4MFJSApb6qu+AMsQk4z3OeOfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:bb:9d:53:07:62:41:58:90:b9:4f:86:f8:14:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e36117135f6b86d0a9e1fa67e04baf5bcd86169
Validity
Not Before: Jun 7 10:00:33 2025 GMT
Not After : Jun 8 10:00:33 2025 GMT
Subject: CN=bf2c3dffcb19d7efdfe4016bdd29b0228585077d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:fc:02:a2:ea:0a:cd:1a:bc:6a:34:6e:f0:9c:
5b:47:b1:cc:5e:1b:28:ea:d6:20:f1:11:0f:ba:d4:
43:80:f0:c0:9d:7f:be:fc:ec:51:a1:91:35:39:2f:
5e:ec:89:3b:aa:69:76:63:c0:8c:92:23:7e:4c:ab:
eb:4f:c1:3d:9c:ff:09:c5:4a:dd:ec:a9:92:41:24:
e9:32:08:e7:2d:83:3f:72:42:a7:33:2d:ea:60:73:
84:77:0c:ea:0d:67:4b:4b:39:3b:05:36:b9:83:3c:
ae:ea:f6:5a:38:76:e1:e6:2d:a0:af:9c:e7:80:c1:
04:7d:47:c1:f9:77:1f:79:9a:68:56:98:e9:f0:17:
94:c8:a9:c8:43:75:cf:8b:90:e4:72:73:fd:6c:58:
b2:5c:6b:9f:5b:d7:8e:f4:44:53:c9:2b:b1:7e:1b:
56:45:e8:95:78:bb:ad:df:72:c9:8d:f3:82:11:6a:
af:dd:ba:17:5b:38:89:83:9e:ef:13:96:9b:95:d7:
63:e8:6f:f3:fd:e5:a8:03:76:4a:8d:14:84:53:2e:
16:a4:5a:3c:89:3d:e2:56:48:92:f5:5f:45:5d:6d:
d2:53:67:09:0f:ab:69:46:8c:a1:49:7d:64:a5:ea:
14:e4:97:7a:dc:75:13:d0:a4:26:3f:7d:d2:df:bb:
06:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2C:3D:FF:CB:19:D7:EF:DF:E4:01:6B:DD:29:B0:22:85:85:07:7D
X509v3 Authority Key Identifier:
keyid:8E:36:11:71:35:F6:B8:6D:0A:9E:1F:A6:7E:04:BA:F5:BC:D8:61:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:56:16:84:f1:78:77:e8:d0:e3:b8:c3:ac:04:79:da:52:a4:
91:65:69:f4:fe:c3:12:0d:30:51:0e:56:d9:e4:f9:79:bb:09:
5d:4b:6d:77:cd:e2:14:d0:65:80:d9:30:03:3c:99:a6:10:16:
40:d6:35:b2:4b:23:71:2c:7a:a8:06:ce:65:41:3d:60:fc:1f:
15:c7:1e:1d:44:96:b4:6f:47:ca:20:72:23:7a:e5:23:d4:2e:
e9:f9:bb:21:fa:12:5f:b9:3d:79:8c:ed:2a:cc:d3:c8:55:c2:
55:0e:82:1e:08:54:96:05:eb:3d:88:b0:cf:df:87:e2:57:42:
f6:70:47:42:48:b5:02:bd:e8:72:df:fc:1b:59:7a:25:0d:eb:
d0:a5:33:fe:a1:76:49:72:a4:7c:c1:71:91:97:53:2a:ce:9d:
36:55:bc:e4:f0:48:3c:1a:8a:a9:ec:89:54:47:ed:56:c4:35:
85:d4:c5:89:ab:24:36:0c:eb:b3:92:b9:4b:14:3d:30:f0:ad:
b5:cb:2a:a8:d0:46:29:2c:0f:1d:18:7e:07:f8:9e:35:4f:a3:
fa:1e:30:e7:cc:82:b1:c1:a1:07:67:ad:71:17:e8:8d:ed:eb:
7a:ea:76:cc:36:db:a8:c2:46:07:1e:36:eb:f4:8c:66:c3:ae:
53:9d:f7:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1budUwdiQViQuU+G+BQ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMzYxMTcxMzVmNmI4NmQwYTllMWZhNjdlMDRiYWY1YmNk
ODYxNjkwHhcNMjUwNjA3MTAwMDMzWhcNMjUwNjA4MTAwMDMzWjAzMTEwLwYDVQQD
EyhiZjJjM2RmZmNiMTlkN2VmZGZlNDAxNmJkZDI5YjAyMjg1ODUwNzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7PwCouoKzRq8ajRu8JxbR7HMXhso
6tYg8REPutRDgPDAnX++/OxRoZE1OS9e7Ik7qml2Y8CMkiN+TKvrT8E9nP8JxUrd
7KmSQSTpMgjnLYM/ckKnMy3qYHOEdwzqDWdLSzk7BTa5gzyu6vZaOHbh5i2gr5zn
gMEEfUfB+XcfeZpoVpjp8BeUyKnIQ3XPi5DkcnP9bFiyXGufW9eO9ERTySuxfhtW
ReiVeLut33LJjfOCEWqv3boXWziJg57vE5ablddj6G/z/eWoA3ZKjRSEUy4WpFo8
iT3iVkiS9V9FXW3SU2cJD6tpRoyhSX1kpeoU5Jd63HUT0KQmP33S37sGMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8sPf/LGdfv3+QBa90psCKFhQd9MB8GA1UdIwQY
MBaAFI42EXE19rhtCp4fpn4EuvW82GFpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvampZUmNUWDJ1RzBLbmgtbWZnUzY5YnpZWVdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9lZGI0ZDMtMzNjOC00NWRjLWE0MGUt
Yzg1YjYwZmQ4YzhiLzEvampZUmNUWDJ1RzBLbmgtbWZnUzY5YnpZWVdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9lZGI0ZDMtMzNjOC00NWRjLWE0MGUtYzg1YjYwZmQ4Yzhi
LzEvampZUmNUWDJ1RzBLbmgtbWZnUzY5YnpZWVdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjVYWhPF4
d+jQ47jDrAR52lKkkWVp9P7DEg0wUQ5W2eT5ebsJXUttd83iFNBlgNkwAzyZphAW
QNY1sksjcSx6qAbOZUE9YPwfFcceHUSWtG9HyiByI3rlI9Qu6fm7IfoSX7k9eYzt
KszTyFXCVQ6CHghUlgXrPYiwz9+H4ldC9nBHQki1Ar3oct/8G1l6JQ3r0KUz/qF2
SXKkfMFxkZdTKs6dNlW85PBIPBqKqeyJVEftVsQ1hdTFiaskNgzrs5K5SxQ9MPCt
tcsqqNBGKSwPHRh+B/ieNU+j+h4w58yCscGhB2etcRfoje3reup2zDbbqMJGBx42
6/SMZsOuU533OQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 18:33:25 2025 by rpki-client