Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
File: JgkJ1zonmIPiVxEeSE5_B4teyP0.mft (raw, json)
Hash identifier: p9I5ivTiW7gDjaOUZ/W4XmzbWWRjKem558pMXngvSi8=
Subject key identifier: B7:6C:D0:0F:A5:3E:6D:A5:00:C0:26:C2:37:ED:C4:AF:55:31:3C:B5
Authority key identifier: 26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD
Certificate issuer: /CN=260909d73a279883e257111e484e7f078b5ec8fd
Certificate serial: 01974AE87004E17272DFD026A56A9F2C42C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
Manifest number: 0A2D
Signing time: Sat 07 Jun 2025 15:00:36 +0000
Manifest this update: Sat 07 Jun 2025 15:00:36 +0000
Manifest next update: Sun 08 Jun 2025 15:00:36 +0000
Files and hashes: 1: JgkJ1zonmIPiVxEeSE5_B4teyP0.crl (hash: hLYI0t0vqBo5x9NtGk5KkW68L2d9fIAAtYGkQdBX5Sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:70:04:e1:72:72:df:d0:26:a5:6a:9f:2c:42:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260909d73a279883e257111e484e7f078b5ec8fd
Validity
Not Before: Jun 7 15:00:36 2025 GMT
Not After : Jun 8 15:00:36 2025 GMT
Subject: CN=b76cd00fa53e6da500c026c237edc4af55313cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e4:9c:b9:c2:86:b7:c7:e5:33:ed:54:93:ff:
0c:ce:33:4f:36:d1:67:f3:d1:71:42:78:6a:2e:78:
07:f9:0b:0d:56:57:86:e1:ed:ca:fb:ad:03:71:58:
a3:ab:b8:fb:90:fa:9a:ae:ac:94:1c:40:4c:39:9a:
67:72:0f:8e:4c:33:69:c8:83:0e:7b:73:5b:48:45:
46:cf:e1:13:39:d2:6d:ca:89:5d:15:23:94:f7:27:
a4:d5:75:c0:c7:91:2a:37:a1:85:e4:8c:59:bc:32:
30:c7:09:fa:57:23:f9:84:da:a0:77:ca:6f:89:41:
f5:63:ed:2e:4b:12:78:b8:bb:39:53:83:9d:93:49:
1e:7f:17:3e:fb:af:ae:41:28:92:07:59:82:a7:ba:
9b:ea:20:9d:2f:76:41:71:c0:12:8c:71:52:de:be:
cd:e7:31:64:bb:03:4f:15:57:6c:9c:c0:dc:8f:7b:
cb:ad:ce:bb:52:b0:33:02:1c:d7:cc:41:1d:77:2b:
ce:8e:42:e9:74:49:a9:21:b3:46:4c:ed:8b:66:21:
d7:4f:e6:15:0c:bf:06:36:82:a4:db:ac:93:9c:b8:
65:11:1a:3a:9c:34:df:14:4b:a4:c7:74:b5:71:ef:
01:03:7e:fa:14:13:fe:ba:5f:45:7c:72:e6:76:3d:
6b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6C:D0:0F:A5:3E:6D:A5:00:C0:26:C2:37:ED:C4:AF:55:31:3C:B5
X509v3 Authority Key Identifier:
keyid:26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:30:df:40:23:1c:b6:08:53:8f:65:66:d9:58:2b:bd:25:6e:
0c:e6:d4:1a:74:f1:ef:cd:bc:c6:6c:fa:04:57:c5:ae:d0:71:
d1:b3:66:22:7c:d3:71:b6:88:d3:23:23:5a:a5:9a:ca:69:36:
03:e6:01:ca:36:f0:da:da:5f:57:cb:8c:cd:d7:57:1b:55:ae:
e3:e9:da:31:d0:e3:dd:b8:72:ec:f3:3c:81:81:fd:8a:50:3e:
7c:62:72:e0:78:47:1c:55:0d:b5:6a:ea:58:d2:da:a6:99:c5:
eb:03:5f:3e:49:7e:99:d2:bf:b8:ff:18:38:20:94:f8:e3:fa:
7c:8d:b5:e9:e6:20:81:73:52:79:81:00:9f:04:7f:5b:74:03:
f6:e8:d4:9b:43:40:54:95:70:bf:f6:a6:22:89:c2:a7:3c:3b:
fb:bc:d6:7c:d5:4c:a5:1e:22:b7:ca:52:43:6a:52:c3:59:9c:
31:b8:d0:6e:cd:83:9d:47:16:90:2c:6f:9a:d4:f9:ac:0c:6f:
5d:98:1b:38:27:e1:60:42:19:ae:0a:34:08:5f:68:44:45:3e:
14:5d:c2:fc:34:ce:fd:06:7a:d8:52:fc:fc:60:99:17:2c:a6:
c0:9c:d6:fc:97:fd:41:6c:62:e9:f0:9d:e3:ee:76:b1:06:de:
cb:ff:72:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdK6HAE4XJy39AmpWqfLELEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MDkwOWQ3M2EyNzk4ODNlMjU3MTExZTQ4NGU3ZjA3OGI1
ZWM4ZmQwHhcNMjUwNjA3MTUwMDM2WhcNMjUwNjA4MTUwMDM2WjAzMTEwLwYDVQQD
EyhiNzZjZDAwZmE1M2U2ZGE1MDBjMDI2YzIzN2VkYzRhZjU1MzEzY2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveScucKGt8flM+1Uk/8MzjNPNtFn
89FxQnhqLngH+QsNVleG4e3K+60DcVijq7j7kPqarqyUHEBMOZpncg+OTDNpyIMO
e3NbSEVGz+ETOdJtyoldFSOU9yek1XXAx5EqN6GF5IxZvDIwxwn6VyP5hNqgd8pv
iUH1Y+0uSxJ4uLs5U4Odk0kefxc++6+uQSiSB1mCp7qb6iCdL3ZBccASjHFS3r7N
5zFkuwNPFVdsnMDcj3vLrc67UrAzAhzXzEEddyvOjkLpdEmpIbNGTO2LZiHXT+YV
DL8GNoKk26yTnLhlERo6nDTfFEukx3S1ce8BA376FBP+ul9FfHLmdj1rDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLds0A+lPm2lAMAmwjftxK9VMTy1MB8GA1UdIwQY
MBaAFCYJCdc6J5iD4lcRHkhOfweLXsj9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmdrSjF6b25tSVBpVnhFZVNFNV9CNHRleVAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8wZmE4OGUtYTVkYi00OGU4LWIxNWIt
NjU2MTMxN2NmMjYzLzEvSmdrSjF6b25tSVBpVnhFZVNFNV9CNHRleVAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8wZmE4OGUtYTVkYi00OGU4LWIxNWItNjU2MTMxN2NmMjYz
LzEvSmdrSjF6b25tSVBpVnhFZVNFNV9CNHRleVAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfDDfQCMc
tghTj2Vm2VgrvSVuDObUGnTx7828xmz6BFfFrtBx0bNmInzTcbaI0yMjWqWaymk2
A+YByjbw2tpfV8uMzddXG1Wu4+naMdDj3bhy7PM8gYH9ilA+fGJy4HhHHFUNtWrq
WNLappnF6wNfPkl+mdK/uP8YOCCU+OP6fI216eYggXNSeYEAnwR/W3QD9ujUm0NA
VJVwv/amIonCpzw7+7zWfNVMpR4it8pSQ2pSw1mcMbjQbs2DnUcWkCxvmtT5rAxv
XZgbOCfhYEIZrgo0CF9oREU+FF3C/DTO/QZ62FL8/GCZFyymwJzW/Jf9QWxi6fCd
4+52sQbey/9y0w==
-----END CERTIFICATE-----
Generated at Sat Jun 7 18:32:06 2025 by rpki-client