Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
File: JOzROuAn838DhidJNHBEomICjrA.mft (raw, json)
Hash identifier: 3Gt3KTgbD4tD1z58cc/LISwKEV0Oao80hXC6RA1tzaY=
Subject key identifier: B7:31:D7:21:07:44:55:5F:A0:DA:36:69:AD:80:91:E6:92:C7:E5:24
Authority key identifier: 24:EC:D1:3A:E0:27:F3:7F:03:86:27:49:34:70:44:A2:62:02:8E:B0
Certificate issuer: /CN=24ecd13ae027f37f03862749347044a262028eb0
Certificate serial: 01974D7BC58A44FA2C4A23C7C171BE8C6B72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 03:00:46 +0000
Manifest this update: Sun 08 Jun 2025 03:00:46 +0000
Manifest next update: Mon 09 Jun 2025 03:00:46 +0000
Files and hashes: 1: JOzROuAn838DhidJNHBEomICjrA.crl (hash: tHh0SbCaW3KT0HRtNa/GPcPh+pZ7F6BiCHhpP+S+/2w=)
2: kDftkP-w1YBe-HJAv5LXS10Il0Q.roa (hash: +/EpK+4hyPfZfhLX+mr8yi7klGBJXOB+8POH+U7AuxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7b:c5:8a:44:fa:2c:4a:23:c7:c1:71:be:8c:6b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24ecd13ae027f37f03862749347044a262028eb0
Validity
Not Before: Jun 8 03:00:46 2025 GMT
Not After : Jun 9 03:00:46 2025 GMT
Subject: CN=b731d7210744555fa0da3669ad8091e692c7e524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:94:dd:fe:8c:ad:39:cb:f4:ce:dd:27:09:0a:
3d:8a:0d:1d:06:30:40:ff:3c:54:1d:7e:c3:83:4c:
79:25:d2:e8:6b:7f:e2:cb:98:56:10:31:8a:19:af:
2c:ac:af:b0:e2:f8:98:79:bb:6b:e5:9a:cc:8c:33:
e8:35:35:b3:b7:5e:8f:99:95:32:de:69:6c:cf:38:
53:7c:84:ae:3c:4e:ec:35:2d:22:3b:dc:54:fb:0a:
17:8f:63:8d:64:fa:82:0a:c4:e5:cb:c0:5a:bf:74:
df:25:e5:87:84:4f:10:7c:4b:2e:da:8f:c5:0c:84:
95:66:71:0e:62:2f:02:90:e4:51:52:20:f4:4f:57:
dd:11:f6:fc:6a:c8:00:5b:5c:a8:2c:41:11:01:8f:
98:26:b5:72:2f:62:03:84:2c:2d:06:51:6f:98:8c:
d8:d7:ca:61:0c:cf:d7:f2:4a:74:a0:1e:0d:b3:89:
c4:d5:69:ab:e6:91:62:6c:d0:9d:ec:7e:8d:9d:d4:
b4:cf:b3:3d:78:a8:c6:32:a5:86:0c:6b:11:b2:8b:
e7:45:b7:59:d2:52:97:bc:86:a9:b7:d8:67:98:be:
ea:4f:26:66:f6:86:fc:59:6f:9d:9b:dd:7a:ea:8b:
a0:6a:0d:bd:99:68:72:5c:5d:3c:85:71:09:fa:64:
16:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:31:D7:21:07:44:55:5F:A0:DA:36:69:AD:80:91:E6:92:C7:E5:24
X509v3 Authority Key Identifier:
keyid:24:EC:D1:3A:E0:27:F3:7F:03:86:27:49:34:70:44:A2:62:02:8E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:30:e8:6a:98:7d:84:c3:3d:fb:b1:0e:02:30:5e:b4:c8:3e:
47:0d:87:82:da:46:39:12:35:ec:90:42:b9:41:2f:03:c6:90:
56:e1:fb:9d:11:d9:c5:f5:87:58:9c:e0:f0:dc:6d:44:42:f2:
1d:6b:1c:0d:1a:0a:11:0d:fe:07:e2:6f:ed:61:85:b1:ed:92:
79:17:f0:2b:8d:07:dc:cb:65:75:d2:64:08:3f:6c:19:95:c6:
cc:67:4e:4a:89:0d:37:6b:09:84:54:2b:f6:f6:89:e7:dc:a4:
03:a0:ec:c9:e9:1a:d1:7c:f2:5a:77:68:50:70:59:60:f6:f0:
68:68:d0:01:f8:d7:59:8e:c4:64:7d:c4:ad:a4:5a:df:61:ca:
9e:e9:e4:1f:2f:a0:54:e7:cf:10:07:f0:1e:a2:19:10:d9:5a:
27:de:fc:be:ee:4f:de:51:45:f2:7c:df:a2:0e:e3:c6:99:42:
fa:8c:30:cd:9d:a3:74:ff:bf:df:76:16:d1:38:76:a0:7e:e0:
90:d9:c6:08:b1:b1:3a:e6:33:af:cd:df:31:6b:95:c3:5f:58:
f2:dd:0d:6d:40:74:ce:b9:04:0b:cd:46:41:69:40:11:b1:82:
dc:43:d7:c0:fb:ad:23:a9:f8:4b:db:8e:12:82:de:35:df:74:
dd:8a:73:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNe8WKRPosSiPHwXG+jGtyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZWNkMTNhZTAyN2YzN2YwMzg2Mjc0OTM0NzA0NGEyNjIw
MjhlYjAwHhcNMjUwNjA4MDMwMDQ2WhcNMjUwNjA5MDMwMDQ2WjAzMTEwLwYDVQQD
EyhiNzMxZDcyMTA3NDQ1NTVmYTBkYTM2NjlhZDgwOTFlNjkyYzdlNTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJTd/oytOcv0zt0nCQo9ig0dBjBA
/zxUHX7Dg0x5JdLoa3/iy5hWEDGKGa8srK+w4viYebtr5ZrMjDPoNTWzt16PmZUy
3mlszzhTfISuPE7sNS0iO9xU+woXj2ONZPqCCsTly8Bav3TfJeWHhE8QfEsu2o/F
DISVZnEOYi8CkORRUiD0T1fdEfb8asgAW1yoLEERAY+YJrVyL2IDhCwtBlFvmIzY
18phDM/X8kp0oB4Ns4nE1Wmr5pFibNCd7H6NndS0z7M9eKjGMqWGDGsRsovnRbdZ
0lKXvIapt9hnmL7qTyZm9ob8WW+dm9166ougag29mWhyXF08hXEJ+mQW8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLcx1yEHRFVfoNo2aa2AkeaSx+UkMB8GA1UdIwQY
MBaAFCTs0TrgJ/N/A4YnSTRwRKJiAo6wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk96Uk91QW44MzhEaGlkSk5IQkVvbUlDanJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9mYmNiZjctZmZjMC00MzkyLTgyMDMt
OWMwYTllOGI3OGUxLzEvSk96Uk91QW44MzhEaGlkSk5IQkVvbUlDanJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9mYmNiZjctZmZjMC00MzkyLTgyMDMtOWMwYTllOGI3OGUx
LzEvSk96Uk91QW44MzhEaGlkSk5IQkVvbUlDanJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARDDoaph9
hMM9+7EOAjBetMg+Rw2HgtpGORI17JBCuUEvA8aQVuH7nRHZxfWHWJzg8NxtRELy
HWscDRoKEQ3+B+Jv7WGFse2SeRfwK40H3MtlddJkCD9sGZXGzGdOSokNN2sJhFQr
9vaJ59ykA6Dsyeka0XzyWndoUHBZYPbwaGjQAfjXWY7EZH3EraRa32HKnunkHy+g
VOfPEAfwHqIZENlaJ978vu5P3lFF8nzfog7jxplC+owwzZ2jdP+/33YW0Th2oH7g
kNnGCLGxOuYzr83fMWuVw19Y8t0NbUB0zrkEC81GQWlAEbGC3EPXwPutI6n4S9uO
EoLeNd903Ypz4A==
-----END CERTIFICATE-----
Generated at Sun Jun 8 12:38:11 2025 by rpki-client