Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
File: jcaca76J58BHm2F3RKRCT2ZnSUQ.mft (raw, json)
Hash identifier: h+PFbxX5du4PXEY0eGRucvGH+6IGW0hGmRL7W2GI/OQ=
Subject key identifier: EC:C5:EF:DA:BE:93:AE:F6:05:1C:9D:B4:7B:B6:B8:55:51:64:C2:95
Authority key identifier: 8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
Certificate issuer: /CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Certificate serial: 01974AE91631AB8A89D1B3062A591DE419DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
Manifest number: 083E
Signing time: Sat 07 Jun 2025 15:01:18 +0000
Manifest this update: Sat 07 Jun 2025 15:01:18 +0000
Manifest next update: Sun 08 Jun 2025 15:01:18 +0000
Files and hashes: 1: 7Ubso5FdbE6ZVPGCJdUs8ldLo7U.roa (hash: tWUhwGRkp2Wsw0AlBIbHfFNBO7ZZIwFLWe7kWJVHhhU=)
2: jcaca76J58BHm2F3RKRCT2ZnSUQ.crl (hash: szUm6NFn+La2fyNfTKlkdQgR6QHOo/zUMNyeXcMqaJQ=)
3: xCpTTt1wRZxUJy83ro30pVk-tGs.roa (hash: +pLDEi2uyNtFVpGTsTvFaAzRGQwyt1tEAP+HX+n7b3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e9:16:31:ab:8a:89:d1:b3:06:2a:59:1d:e4:19:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Validity
Not Before: Jun 7 15:01:18 2025 GMT
Not After : Jun 8 15:01:18 2025 GMT
Subject: CN=ecc5efdabe93aef6051c9db47bb6b8555164c295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0c:ae:a7:f7:9a:4f:2b:a9:1d:b9:cb:6e:0e:
c6:5a:3f:09:5e:e0:55:4f:c0:9d:b7:86:d3:da:f3:
a1:48:b2:05:bb:aa:a4:af:9a:0c:84:20:42:aa:e5:
c6:c1:86:c4:33:07:2c:5b:a3:20:2c:0b:d1:c4:1e:
80:30:57:6e:df:81:12:0a:0f:18:44:29:ac:58:17:
04:98:a8:a3:f5:4a:d3:1d:ab:1c:9a:27:86:99:27:
2f:c7:15:f6:54:1c:82:c9:a2:34:db:dc:81:26:e0:
2c:9c:b4:1d:1a:4c:79:d8:95:67:71:7c:61:4c:28:
e4:aa:a1:0d:a8:5d:3c:10:dc:d6:21:c6:23:87:59:
c5:69:2b:2a:32:ed:b8:0a:60:b0:fb:86:16:85:c0:
a1:a4:70:fc:df:0f:da:7a:a5:5a:b9:7b:3f:b7:b4:
4a:a8:83:a1:fe:fd:f7:2b:81:9e:5c:2f:4a:b4:58:
eb:8d:e5:39:4d:5c:df:be:31:63:59:0e:86:20:11:
9e:d6:07:6c:8e:53:2a:1f:ef:00:4a:99:98:53:0a:
a8:07:56:e7:af:c4:1e:05:12:93:94:3a:89:ea:9b:
7c:cb:e1:88:d1:a1:7e:b6:a9:7d:db:24:74:70:bc:
f1:a0:f0:8e:0a:a8:a2:df:3c:b4:8b:1e:1e:56:66:
95:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C5:EF:DA:BE:93:AE:F6:05:1C:9D:B4:7B:B6:B8:55:51:64:C2:95
X509v3 Authority Key Identifier:
keyid:8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:09:8f:99:b7:50:b4:51:78:e1:8a:b5:35:cd:9c:b8:72:18:
68:64:2d:f4:0d:c9:d7:6b:6f:7f:59:75:de:45:a0:9a:bd:3b:
96:0d:ac:b2:59:2b:0d:1e:67:87:69:4a:9e:cd:21:fd:80:49:
55:71:7c:61:46:2e:df:13:89:29:92:99:b6:48:1e:08:a6:70:
83:ef:18:b0:d4:8d:0a:0c:c1:e6:5b:1c:3e:dd:82:bf:52:fc:
a0:1b:24:c7:34:75:7c:b1:66:29:94:90:25:77:b6:8e:63:39:
de:b2:40:64:8a:66:fd:e4:7b:64:e7:c6:a4:16:23:02:b0:71:
57:9e:9c:e0:b4:3d:69:af:98:96:b3:65:f8:64:f6:89:f8:8a:
d7:d0:66:f3:8f:bc:55:33:25:44:e8:02:a1:3c:3d:4e:56:19:
2a:66:7f:48:ac:d9:cf:b5:c0:ba:a8:ed:71:09:52:ab:a9:18:
05:20:7c:ec:ad:a3:a5:cd:3a:df:71:16:00:40:f1:c6:50:f2:
33:8d:1f:16:45:66:4e:b6:82:5e:24:b4:27:41:51:5e:c7:37:
15:16:01:7d:15:63:87:e3:7a:35:0d:e5:5f:66:a1:4b:8c:57:
4c:3b:cc:a7:fc:59:69:7e:0d:e2:ff:58:b1:af:6e:7c:37:4f:
d7:b1:e0:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdK6RYxq4qJ0bMGKlkd5BncMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYzY5YzZiYmU4OWU3YzA0NzliNjE3NzQ0YTQ0MjRmNjY2
NzQ5NDQwHhcNMjUwNjA3MTUwMTE4WhcNMjUwNjA4MTUwMTE4WjAzMTEwLwYDVQQD
EyhlY2M1ZWZkYWJlOTNhZWY2MDUxYzlkYjQ3YmI2Yjg1NTUxNjRjMjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQyup/eaTyupHbnLbg7GWj8JXuBV
T8Cdt4bT2vOhSLIFu6qkr5oMhCBCquXGwYbEMwcsW6MgLAvRxB6AMFdu34ESCg8Y
RCmsWBcEmKij9UrTHascmieGmScvxxX2VByCyaI029yBJuAsnLQdGkx52JVncXxh
TCjkqqENqF08ENzWIcYjh1nFaSsqMu24CmCw+4YWhcChpHD83w/aeqVauXs/t7RK
qIOh/v33K4GeXC9KtFjrjeU5TVzfvjFjWQ6GIBGe1gdsjlMqH+8ASpmYUwqoB1bn
r8QeBRKTlDqJ6pt8y+GI0aF+tql92yR0cLzxoPCOCqii3zy0ix4eVmaV8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzF79q+k672BRydtHu2uFVRZMKVMB8GA1UdIwQY
MBaAFI3GnGu+iefAR5thd0SkQk9mZ0lEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamNhY2E3Nko1OEJIbTJGM1JLUkNUMlpuU1VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8yM2RiNWMtMWExMC00NGM2LTlkNzct
YmI1Y2FhYzJlOTAzLzEvamNhY2E3Nko1OEJIbTJGM1JLUkNUMlpuU1VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8yM2RiNWMtMWExMC00NGM2LTlkNzctYmI1Y2FhYzJlOTAz
LzEvamNhY2E3Nko1OEJIbTJGM1JLUkNUMlpuU1VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiQmPmbdQ
tFF44Yq1Nc2cuHIYaGQt9A3J12tvf1l13kWgmr07lg2sslkrDR5nh2lKns0h/YBJ
VXF8YUYu3xOJKZKZtkgeCKZwg+8YsNSNCgzB5lscPt2Cv1L8oBskxzR1fLFmKZSQ
JXe2jmM53rJAZIpm/eR7ZOfGpBYjArBxV56c4LQ9aa+YlrNl+GT2ifiK19Bm84+8
VTMlROgCoTw9TlYZKmZ/SKzZz7XAuqjtcQlSq6kYBSB87K2jpc0633EWAEDxxlDy
M40fFkVmTraCXiS0J0FRXsc3FRYBfRVjh+N6NQ3lX2ahS4xXTDvMp/xZaX4N4v9Y
sa9ufDdP17HgXQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 18:44:47 2025 by rpki-client