Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
File: jynNHq0DjoW9nTMswYrDCeBiDFE.mft (raw, json)
Hash identifier: 3d+QqttwKpSRHzpLK1Ae0kLYJ28vyup0UI7VL5gX9QI=
Subject key identifier: C3:C8:46:C2:64:F1:DB:91:9A:AF:F8:08:69:37:4E:5F:2D:B1:D4:D3
Authority key identifier: 8F:29:CD:1E:AD:03:8E:85:BD:9D:33:2C:C1:8A:C3:09:E0:62:0C:51
Certificate issuer: /CN=8f29cd1ead038e85bd9d332cc18ac309e0620c51
Certificate serial: 01974C6976A4AE5259E935FEFE021D9FD590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jynNHq0DjoW9nTMswYrDCeBiDFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
Manifest number: 13E8
Signing time: Sat 07 Jun 2025 22:01:09 +0000
Manifest this update: Sat 07 Jun 2025 22:01:09 +0000
Manifest next update: Sun 08 Jun 2025 22:01:09 +0000
Files and hashes: 1: jynNHq0DjoW9nTMswYrDCeBiDFE.crl (hash: 2Lij/aClecFEkdW20tAzMi/12TeEkXr5TQUdt7YvLOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jynNHq0DjoW9nTMswYrDCeBiDFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:76:a4:ae:52:59:e9:35:fe:fe:02:1d:9f:d5:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f29cd1ead038e85bd9d332cc18ac309e0620c51
Validity
Not Before: Jun 7 22:01:09 2025 GMT
Not After : Jun 8 22:01:09 2025 GMT
Subject: CN=c3c846c264f1db919aaff80869374e5f2db1d4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:16:af:ae:aa:6d:fb:64:2c:23:15:87:95:db:
c3:11:87:da:ea:1f:4e:72:bb:2b:ce:9a:dc:a7:37:
ea:f7:32:7c:41:1f:b6:4a:9e:37:a3:12:dc:86:81:
1c:c2:21:8a:8d:05:b9:66:22:2d:89:e7:4e:ac:aa:
fa:06:3c:f2:61:a5:81:36:e1:8a:3f:29:af:08:e8:
43:9b:0f:58:ba:ec:85:38:a9:da:5e:f4:a0:69:b5:
c6:40:31:7f:d0:9a:41:a5:b4:38:20:ce:59:9f:73:
3e:fc:82:88:e9:5f:c7:7e:bc:f1:ff:e6:83:eb:52:
3f:9c:c1:88:4e:be:fc:42:12:3f:fd:36:c1:1f:e4:
6d:90:df:e4:f7:d1:b6:63:c7:e2:96:27:aa:86:00:
cf:7b:d9:43:d5:40:ce:22:73:7b:50:ac:58:67:11:
7b:5a:31:d5:86:cd:55:06:05:48:40:f5:c4:1c:9e:
8a:65:ca:e9:54:68:cd:d4:13:5d:26:8b:7f:ac:99:
94:83:0d:4d:73:16:15:bf:f8:be:4d:f1:d7:bc:08:
47:36:f3:74:c1:9f:72:3a:34:6a:2c:c5:cb:5b:00:
3d:08:a1:ac:d9:91:3a:1f:96:6d:64:12:13:24:43:
cb:b8:6b:27:02:80:f6:58:94:87:93:1f:23:33:48:
94:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C8:46:C2:64:F1:DB:91:9A:AF:F8:08:69:37:4E:5F:2D:B1:D4:D3
X509v3 Authority Key Identifier:
keyid:8F:29:CD:1E:AD:03:8E:85:BD:9D:33:2C:C1:8A:C3:09:E0:62:0C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jynNHq0DjoW9nTMswYrDCeBiDFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:f3:cf:c7:ce:2f:9f:d7:58:54:e5:64:c9:dc:11:52:ec:4f:
51:70:6a:26:b7:82:77:03:bc:75:d9:04:d4:8e:42:5d:e5:f8:
4c:0c:ee:d6:c0:86:5e:ca:57:4a:27:c2:24:12:b8:47:97:37:
ff:14:8e:65:4d:e8:ed:b1:dc:15:15:27:e1:b2:97:76:c3:fb:
ea:ea:b0:d6:2f:eb:a5:e6:c0:73:f1:7f:3c:0d:3b:0f:53:8f:
fb:f3:60:25:7c:b5:72:67:60:a4:ad:74:b2:a8:ee:47:76:dd:
60:db:cc:12:8e:de:b2:fd:11:cb:12:1a:95:e9:dd:df:54:b1:
f7:8e:9b:c0:ad:2f:46:39:5b:62:75:fd:53:6d:91:d5:3b:75:
35:fd:d3:9b:09:30:6d:9c:eb:ce:bd:4c:a7:c9:d1:d1:99:82:
64:f4:f7:3e:bc:d1:d9:df:0b:8e:40:57:f3:e7:b8:0a:de:3b:
f0:00:3b:80:6b:8f:28:c2:69:2f:63:a1:06:73:3d:cd:13:82:
10:fc:0c:ab:24:7b:96:70:3a:22:96:f9:4b:ea:6c:70:02:6e:
6b:7d:3b:19:e9:64:9a:11:b9:8e:19:2b:ce:29:d3:73:cf:86:
99:5e:83:2c:93:19:67:a7:da:8f:6a:dd:8b:73:cd:45:20:f2:
35:2c:19:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMaXakrlJZ6TX+/gIdn9WQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMjljZDFlYWQwMzhlODViZDlkMzMyY2MxOGFjMzA5ZTA2
MjBjNTEwHhcNMjUwNjA3MjIwMTA5WhcNMjUwNjA4MjIwMTA5WjAzMTEwLwYDVQQD
EyhjM2M4NDZjMjY0ZjFkYjkxOWFhZmY4MDg2OTM3NGU1ZjJkYjFkNGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhavrqpt+2QsIxWHldvDEYfa6h9O
crsrzprcpzfq9zJ8QR+2Sp43oxLchoEcwiGKjQW5ZiItiedOrKr6BjzyYaWBNuGK
PymvCOhDmw9YuuyFOKnaXvSgabXGQDF/0JpBpbQ4IM5Zn3M+/IKI6V/Hfrzx/+aD
61I/nMGITr78QhI//TbBH+RtkN/k99G2Y8filieqhgDPe9lD1UDOInN7UKxYZxF7
WjHVhs1VBgVIQPXEHJ6KZcrpVGjN1BNdJot/rJmUgw1NcxYVv/i+TfHXvAhHNvN0
wZ9yOjRqLMXLWwA9CKGs2ZE6H5ZtZBITJEPLuGsnAoD2WJSHkx8jM0iU2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPIRsJk8duRmq/4CGk3Tl8tsdTTMB8GA1UdIwQY
MBaAFI8pzR6tA46FvZ0zLMGKwwngYgxRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanluTkhxMERqb1c5blRNc3dZckRDZUJpREZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC83MGI3MTUtYTRmNy00OGQ0LTljY2Et
NmQwNzU0NmY3YTVhLzEvanluTkhxMERqb1c5blRNc3dZckRDZUJpREZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC83MGI3MTUtYTRmNy00OGQ0LTljY2EtNmQwNzU0NmY3YTVh
LzEvanluTkhxMERqb1c5blRNc3dZckRDZUJpREZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAevPPx84v
n9dYVOVkydwRUuxPUXBqJreCdwO8ddkE1I5CXeX4TAzu1sCGXspXSifCJBK4R5c3
/xSOZU3o7bHcFRUn4bKXdsP76uqw1i/rpebAc/F/PA07D1OP+/NgJXy1cmdgpK10
sqjuR3bdYNvMEo7esv0RyxIalend31Sx946bwK0vRjlbYnX9U22R1Tt1Nf3Tmwkw
bZzrzr1Mp8nR0ZmCZPT3PrzR2d8LjkBX8+e4Ct478AA7gGuPKMJpL2OhBnM9zROC
EPwMqyR7lnA6Ipb5S+pscAJua307GelkmhG5jhkrzinTc8+GmV6DLJMZZ6faj2rd
i3PNRSDyNSwZFQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:29:19 2025 by rpki-client